$ rpki-client -vvf repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft File: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft (raw, json) Hash identifier: u73DYO/QJjX5xKpaoAEdw2fYLK/GSny93maMrE9EZgA= Subject key identifier: 32:57:25:5F:4E:1F:DB:E7:0B:9F:14:EE:92:94:E1:60:0A:33:DB:2C Authority key identifier: D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 Certificate issuer: /CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7 Certificate serial: 359C1AA8C44C17BC5935EC5923129FA9D31EB02E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft Manifest number: 01F6 Signing time: Fri 17 Oct 2025 16:41:41 +0000 Manifest this update: Fri 17 Oct 2025 16:36:41 +0000 Manifest next update: Mon 20 Oct 2025 18:44:41 +0000 Files and hashes: 1: 3130332e3231312e342e302f32332d3234203d3e2034383030.roa (hash: 59yz865tKQpU8UqeDFR2Q6MBnW99RvQGBX6jv6dW3C0=) 2: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl (hash: MQTeBVgvuq5p4/VomgPmjzWA0FBNliNnY9q5XsL/R4w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:9c:1a:a8:c4:4c:17:bc:59:35:ec:59:23:12:9f:a9:d3:1e:b0:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7 Validity Not Before: Oct 17 16:36:41 2025 GMT Not After : Oct 20 18:44:41 2025 GMT Subject: CN=3257255F4E1FDBE70B9F14EE9294E1600A33DB2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8a:ea:5f:e9:d4:58:38:11:03:44:7c:96:b1: 18:fa:58:6b:3c:60:05:ff:f6:74:24:7d:3b:ab:fc: a5:72:59:82:89:6a:e0:f3:df:bd:55:97:1b:0c:ca: cf:dd:87:74:a6:96:c3:31:89:e3:29:d1:30:53:3c: a2:c3:59:99:27:b5:26:35:33:21:30:6d:80:aa:4e: 63:a7:a9:c4:42:9a:3a:9a:97:ab:01:bd:50:ca:74: c7:99:81:d4:69:33:dd:73:be:24:ee:05:9e:1f:00: b0:a4:65:d7:f4:c1:4e:d6:86:4d:3f:17:a0:3d:07: ae:75:c5:dd:eb:a8:53:a4:f4:c0:13:0d:ae:c6:cb: 12:99:1b:c6:8c:7e:0b:aa:b9:5b:ad:26:e6:0a:1f: d4:ef:b8:fc:09:4d:a7:3a:57:03:01:f7:89:22:ee: 9a:8e:6d:84:8d:28:3b:62:70:77:b5:b4:89:be:23: 99:be:2f:0b:09:e4:99:ea:13:e3:29:54:47:25:24: 96:35:76:17:50:30:7c:c0:e8:80:fb:d2:17:19:7b: 1b:d3:20:5e:bb:05:0f:98:44:45:23:61:a9:66:3f: 31:f0:d6:d5:7f:a8:fc:4c:25:d3:6e:60:6f:2c:fa: 87:ac:28:a4:c3:b1:62:b5:41:dd:0e:0c:d7:2d:bd: c7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:57:25:5F:4E:1F:DB:E7:0B:9F:14:EE:92:94:E1:60:0A:33:DB:2C X509v3 Authority Key Identifier: keyid:D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:39:ee:13:1d:c8:41:17:58:79:4f:19:ef:90:53:88:c4:17: c4:00:48:a0:7d:d6:e2:61:dc:26:38:e2:18:c9:f2:9b:8c:e3: b0:02:4a:2c:26:33:b9:91:47:33:13:aa:25:d1:9c:55:16:10: c6:91:aa:79:0e:99:d9:2f:83:49:c9:e5:dd:fd:18:58:53:23: e1:ac:93:ac:54:a7:55:9c:9c:35:de:53:58:a1:09:53:fd:9a: bd:cd:1c:f7:91:67:5a:c7:76:d3:90:e4:ba:89:38:db:c9:aa: d7:b7:38:a8:23:d2:9f:06:5e:38:10:a5:e9:f2:4e:8c:9b:6d: f4:5b:65:2d:d1:e0:34:3f:8e:74:fa:56:68:d0:60:9f:11:c0: ca:ba:71:76:13:d7:f5:d5:da:cf:7d:6a:76:69:3d:47:48:f1: 6a:16:0b:d6:41:8b:94:76:88:53:7e:d3:6a:47:63:35:58:25: 95:0c:4a:fa:f0:b6:f7:7d:3a:d7:9e:f5:21:79:08:e7:c1:2b: 90:b6:f5:b5:06:5f:13:64:f6:c1:32:79:7b:97:c2:bb:8f:da: f8:1f:30:85:ee:f4:ad:bd:57:26:eb:e0:b6:df:34:22:1b:54: 03:d3:fb:88:81:aa:24:54:95:3c:6d:ec:94:57:c8:0a:7e:a8: 2d:c7:26:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNZwaqMRMF7xZNexZIxKfqdMesC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5MzRC MDIzNUZBNzAeFw0yNTEwMTcxNjM2NDFaFw0yNTEwMjAxODQ0NDFaMDMxMTAvBgNV BAMTKDMyNTcyNTVGNEUxRkRCRTcwQjlGMTRFRTkyOTRFMTYwMEEzM0RCMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5iupf6dRYOBEDRHyWsRj6WGs8 YAX/9nQkfTur/KVyWYKJauDz371VlxsMys/dh3SmlsMxieMp0TBTPKLDWZkntSY1 MyEwbYCqTmOnqcRCmjqal6sBvVDKdMeZgdRpM91zviTuBZ4fALCkZdf0wU7Whk0/ F6A9B651xd3rqFOk9MATDa7GyxKZG8aMfguquVutJuYKH9TvuPwJTac6VwMB94ki 7pqObYSNKDticHe1tIm+I5m+LwsJ5JnqE+MpVEclJJY1dhdQMHzA6ID70hcZexvT IF67BQ+YREUjYalmPzHw1tV/qPxMJdNuYG8s+oesKKTDsWK1Qd0ODNctvcefAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMlclX04f2+cLnxTukpThYAoz2ywwHwYDVR0j BBgwFoAU0EPCorOV5qe8ijLxrmwZNLAjX6cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2FkMzc1Ny05M2EwLTRiMzMtOTEyOC0yNGFhNjEzMDRlZmYvMC9EMDQzQzJBMkIz OTVFNkE3QkM4QTMyRjFBRTZDMTkzNEIwMjM1RkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5MzRCMDIz NUZBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNhZDM3NTctOTNhMC00YjMzLTkx MjgtMjRhYTYxMzA0ZWZmLzAvRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5 MzRCMDIzNUZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHY57hMdyEEXWHlPGe+QU4jEF8QASKB91uJh 3CY44hjJ8puM47ACSiwmM7mRRzMTqiXRnFUWEMaRqnkOmdkvg0nJ5d39GFhTI+Gs k6xUp1WcnDXeU1ihCVP9mr3NHPeRZ1rHdtOQ5LqJONvJqte3OKgj0p8GXjgQpeny ToybbfRbZS3R4DQ/jnT6VmjQYJ8RwMq6cXYT1/XV2s99anZpPUdI8WoWC9ZBi5R2 iFN+02pHYzVYJZUMSvrwtvd9Otee9SF5COfBK5C29bUGXxNk9sEyeXuXwruP2vgf MIXu9K29Vybr4LbfNCIbVAPT+4iBqiRUlTxt7JRXyAp+qC3HJiE= -----END CERTIFICATE-----Generated at Sun Oct 19 05:59:46 2025 by rpki-client