$ rpki-client -vvf repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft File: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft (raw, json) Hash identifier: zF0U843GHQkH9JMrK7Jpt7IGN6kvBougWjDvGtnq0Uo= Subject key identifier: 22:7F:E2:F3:D6:66:30:E1:54:47:44:4D:63:9E:02:9E:44:82:61:1F Authority key identifier: DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C Certificate issuer: /CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C Certificate serial: 7400545301FF85F094F56E725A63E94366E58D44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft Manifest number: 01E1 Signing time: Fri 17 Oct 2025 12:01:37 +0000 Manifest this update: Fri 17 Oct 2025 11:56:37 +0000 Manifest next update: Mon 20 Oct 2025 21:12:37 +0000 Files and hashes: 1: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl (hash: d8a47uvb8GdoCNEqIhIOqfevScYeDFBzwWAjCwE8VEg=) 2: 3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (hash: 2Vms/JsMQPaw+vYfPtEtlm+57xmqH/10AEwVvJR2JV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 21:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:00:54:53:01:ff:85:f0:94:f5:6e:72:5a:63:e9:43:66:e5:8d:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C Validity Not Before: Oct 17 11:56:37 2025 GMT Not After : Oct 20 21:12:37 2025 GMT Subject: CN=227FE2F3D66630E15447444D639E029E4482611F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f0:a0:03:91:db:3f:fa:d2:8f:f0:88:b6:71: 0c:9b:18:3d:57:d7:f5:89:5a:45:aa:72:de:42:d6: 95:9a:9f:c1:97:6a:51:fd:f3:17:29:2f:d9:79:dd: 1a:9a:b1:fc:fc:1c:94:79:7d:ad:8d:15:f0:78:99: ec:58:b9:a9:ea:36:4f:6a:bd:5b:61:7f:ca:04:2b: af:13:70:96:eb:98:af:d0:1e:e7:3a:07:0d:00:d3: 84:85:65:35:02:b1:db:44:ac:5b:a0:90:b3:22:ce: 56:80:2f:5c:b8:15:8c:28:6f:e9:4c:69:92:1f:60: eb:65:ef:1c:2e:a7:a1:37:32:3f:f2:8d:ac:9b:d5: d0:62:19:51:93:dd:7d:ea:f5:fa:0a:6b:1f:21:59: ad:ac:46:66:6a:47:9f:20:86:38:5f:b3:c0:69:ae: bb:c9:4d:4a:36:1b:c6:7e:e2:8e:04:c2:37:c7:9e: 08:71:2a:a5:7e:75:ba:06:db:c0:15:e4:ff:0d:62: e8:38:90:1e:f6:e7:96:38:7c:8b:bf:01:10:a4:98: 60:3c:ab:50:12:06:1a:2b:4c:86:27:60:6f:21:31: b9:3a:9c:b8:34:b2:fd:a6:b2:1b:41:d9:21:7d:db: cf:c7:b7:de:ae:2f:4f:d5:d2:a9:54:3a:3c:6e:9f: 64:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:7F:E2:F3:D6:66:30:E1:54:47:44:4D:63:9E:02:9E:44:82:61:1F X509v3 Authority Key Identifier: keyid:DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:5f:6e:a8:02:b7:ba:6e:7c:78:0d:0d:86:1a:a6:a1:13:30: a1:ec:e6:34:48:51:00:20:a2:83:97:b2:b3:08:cd:27:c8:ce: 84:fe:7c:f2:23:af:b6:7a:a0:b3:0c:0d:5f:7f:ef:d6:81:dd: 80:92:ab:c5:b5:6d:b1:df:6c:00:a8:7e:f8:df:c1:4c:ef:0e: 1c:d6:09:48:ea:d9:8a:21:98:8f:1b:f8:ed:f8:6a:16:61:bb: 1b:15:a3:d1:f9:e4:a8:fa:da:b0:8c:b8:bb:b8:c2:43:90:67: 4f:f0:45:14:de:e9:dc:35:cb:7d:40:58:d8:de:32:01:87:47: c8:6e:37:11:c1:40:a1:95:be:79:b6:b1:0c:6a:3a:1e:ef:6d: 91:bd:9c:44:01:91:2f:95:f1:6e:52:70:a9:73:dd:58:46:d7: d9:a5:c1:d2:2f:56:f1:2b:cf:29:6c:4c:fc:3e:44:b7:21:f3: ad:03:e7:a8:88:50:98:e4:6d:43:1f:0a:9a:bd:a1:d8:82:0c: 7f:98:62:0f:19:c8:97:0a:d6:79:bb:9c:d1:e5:68:08:d2:1f: 5d:a0:d6:21:9e:3e:67:8a:76:f2:ee:52:88:d3:66:42:2e:14: e9:b0:3b:e3:4c:74:20:0f:d6:e6:73:68:f7:f0:95:da:cc:a6: 53:56:f7:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdABUUwH/hfCU9W5yWmPpQ2bljUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2RTBF NDkzNUEzQzAeFw0yNTEwMTcxMTU2MzdaFw0yNTEwMjAyMTEyMzdaMDMxMTAvBgNV BAMTKDIyN0ZFMkYzRDY2NjMwRTE1NDQ3NDQ0RDYzOUUwMjlFNDQ4MjYxMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo8KADkds/+tKP8Ii2cQybGD1X 1/WJWkWqct5C1pWan8GXalH98xcpL9l53Rqasfz8HJR5fa2NFfB4mexYuanqNk9q vVthf8oEK68TcJbrmK/QHuc6Bw0A04SFZTUCsdtErFugkLMizlaAL1y4FYwob+lM aZIfYOtl7xwup6E3Mj/yjayb1dBiGVGT3X3q9foKax8hWa2sRmZqR58ghjhfs8Bp rrvJTUo2G8Z+4o4EwjfHnghxKqV+dboG28AV5P8NYug4kB7255Y4fIu/ARCkmGA8 q1ASBhorTIYnYG8hMbk6nLg0sv2mshtB2SF928/Ht96uL0/V0qlUOjxun2RzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIn/i89ZmMOFUR0RNY54CnkSCYR8wHwYDVR0j BBgwFoAU2xvXhR/RpIewEoP2rktG4OSTWjwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2IyZWU3NC04YzNjLTRiYzMtYjZmYi1mMzViMjAwYTIwZWIvMC9EQjFCRDc4NTFG RDFBNDg3QjAxMjgzRjZBRTRCNDZFMEU0OTM1QTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2RTBFNDkz NUEzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNiMmVlNzQtOGMzYy00YmMzLWI2 ZmItZjM1YjIwMGEyMGViLzAvREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2 RTBFNDkzNUEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZfbqgCt7pufHgNDYYapqETMKHs5jRIUQAg ooOXsrMIzSfIzoT+fPIjr7Z6oLMMDV9/79aB3YCSq8W1bbHfbACofvjfwUzvDhzW CUjq2YohmI8b+O34ahZhuxsVo9H55Kj62rCMuLu4wkOQZ0/wRRTe6dw1y31AWNje MgGHR8huNxHBQKGVvnm2sQxqOh7vbZG9nEQBkS+V8W5ScKlz3VhG19mlwdIvVvEr zylsTPw+RLch860D56iIUJjkbUMfCpq9odiCDH+YYg8ZyJcK1nm7nNHlaAjSH12g 1iGePmeKdvLuUojTZkIuFOmwO+NMdCAP1uZzaPfwldrMplNW9z4= -----END CERTIFICATE-----Generated at Mon Oct 20 01:41:39 2025 by rpki-client