$ rpki-client -vvf repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft File: 0433DC81885AA9736198E4B13311013B6539B05D.mft (raw, json) Hash identifier: 82OzFIDc6L5HNemi5MMhTQOsSWqBbVDGdCEdx7PQy+M= Subject key identifier: 73:BD:7D:50:AD:B3:9C:BA:E2:F2:15:20:C2:3A:93:68:2E:D0:D7:8C Authority key identifier: 04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D Certificate issuer: /CN=0433DC81885AA9736198E4B13311013B6539B05D Certificate serial: 4D5C480B87C91F34607EF273ED17F2FBBFB10930 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft Manifest number: 019D Signing time: Wed 29 Oct 2025 09:51:33 +0000 Manifest this update: Wed 29 Oct 2025 09:46:33 +0000 Manifest next update: Sat 01 Nov 2025 12:35:33 +0000 Files and hashes: 1: 3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa (hash: k6AuCQ8Lc9J6Ja31B30aJRSZbO/KYjuOQsr2CPNaQ/Q=) 2: 3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa (hash: JVhrzlpOZdWSbSjvZPb3ZH9GyBIo1oeTGaYsJmG4pDs=) 3: 0433DC81885AA9736198E4B13311013B6539B05D.crl (hash: KU+QvUmoOP39ZVJ0PQ4pDhtv3ELDzuJGc4vSlB6ehsg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 12:35:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:5c:48:0b:87:c9:1f:34:60:7e:f2:73:ed:17:f2:fb:bf:b1:09:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0433DC81885AA9736198E4B13311013B6539B05D Validity Not Before: Oct 29 09:46:33 2025 GMT Not After : Nov 1 12:35:33 2025 GMT Subject: CN=73BD7D50ADB39CBAE2F21520C23A93682ED0D78C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d6:06:10:3b:8a:55:5a:cc:90:d0:95:da:85: ea:82:0e:d5:6a:25:8f:ed:7f:89:80:5d:36:e1:e7: 36:b1:78:fb:e0:83:16:33:a8:38:f3:a1:ed:e6:81: d3:b8:a9:46:9a:8d:b8:e2:1a:db:2d:75:ae:33:20: 7c:05:c7:34:a5:78:f6:67:70:42:d9:b2:db:4d:46: b0:c1:b6:4f:64:1a:2d:bd:ed:6d:67:26:8c:cc:0e: 2a:ff:f5:bd:f7:b3:8a:2c:cf:2c:a3:cd:4a:40:13: 52:8c:a8:56:0b:20:ab:28:6f:32:db:81:c0:8d:e3: 17:dd:31:74:ca:68:93:de:01:30:d4:4c:5a:b7:35: f2:72:53:25:eb:c7:98:63:41:9f:e9:28:5a:cc:82: 29:0e:7a:e5:24:50:fa:41:a2:21:3f:de:55:15:0e: 3c:74:04:4d:33:d9:fa:04:50:f2:61:0f:16:20:16: d1:98:2c:d1:b5:28:f3:b6:5b:9d:35:af:38:30:19: bc:60:3e:d4:fb:28:cc:fb:1e:83:9e:32:02:03:2d: 32:99:c3:36:4e:b0:5d:55:1f:5e:68:84:b8:a4:fb: f3:33:bd:50:d2:16:25:4c:db:f5:40:be:3d:dc:06: 82:a0:d4:13:53:cd:e5:82:8f:64:cf:80:8d:88:42: a4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:BD:7D:50:AD:B3:9C:BA:E2:F2:15:20:C2:3A:93:68:2E:D0:D7:8C X509v3 Authority Key Identifier: keyid:04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:25:f0:65:44:6c:70:f4:8e:96:f7:ff:90:43:10:37:aa:50: 11:1c:1b:d9:60:84:ae:95:c3:4d:68:ec:40:42:69:bd:9c:7d: 58:52:23:83:91:50:b1:5f:16:99:f3:4f:e5:0a:93:7a:45:34: 75:57:e0:10:41:5b:c6:1a:10:4f:fc:23:1f:96:ef:d5:c7:f7: b1:6f:32:46:46:00:02:f9:ad:73:d8:2d:9e:cd:27:56:dd:75: b9:b6:61:ad:09:77:dd:4f:19:63:92:c2:fb:ae:27:30:45:fb: de:47:aa:28:f3:ec:1f:64:a5:2a:00:f4:b7:c5:df:34:34:88: 9a:56:69:59:be:c5:71:73:b5:34:50:97:17:46:80:d5:73:70: ad:d6:8d:7e:0d:d0:fd:b7:07:3b:4a:23:61:e2:af:0d:2c:ec: 09:c2:91:f6:c0:03:69:82:a7:85:39:f6:25:b5:e5:40:a3:29: e9:b7:1f:c7:07:bc:32:55:48:35:5d:51:a7:4b:9b:4b:5f:6b: 4d:a8:e8:c4:ee:2e:9f:11:9c:1a:6a:cd:3d:82:20:16:c0:92: 85:08:16:b2:1d:b0:e3:10:95:2a:27:0b:b3:0d:b4:09:63:df: e9:f4:f5:18:c8:f2:44:e3:c2:9d:24:9b:fd:ad:31:42:65:55: c9:57:87:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTVxIC4fJHzRgfvJz7Rfy+7+xCTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2 NTM5QjA1RDAeFw0yNTEwMjkwOTQ2MzNaFw0yNTExMDExMjM1MzNaMDMxMTAvBgNV BAMTKDczQkQ3RDUwQURCMzlDQkFFMkYyMTUyMEMyM0E5MzY4MkVEMEQ3OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr1gYQO4pVWsyQ0JXaheqCDtVq JY/tf4mAXTbh5zaxePvggxYzqDjzoe3mgdO4qUaajbjiGtstda4zIHwFxzSlePZn cELZsttNRrDBtk9kGi297W1nJozMDir/9b33s4oszyyjzUpAE1KMqFYLIKsobzLb gcCN4xfdMXTKaJPeATDUTFq3NfJyUyXrx5hjQZ/pKFrMgikOeuUkUPpBoiE/3lUV Djx0BE0z2foEUPJhDxYgFtGYLNG1KPO2W501rzgwGbxgPtT7KMz7HoOeMgIDLTKZ wzZOsF1VH15ohLik+/MzvVDSFiVM2/VAvj3cBoKg1BNTzeWCj2TPgI2IQqTJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc719UK2znLri8hUgwjqTaC7Q14wwHwYDVR0j BBgwFoAUBDPcgYhaqXNhmOSxMxEBO2U5sF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjdlZjUxNS04NTY0LTQxZTgtOWQyMC0yZDMzZDQ1Y2NiZDYvMC8wNDMzREM4MTg4 NUFBOTczNjE5OEU0QjEzMzExMDEzQjY1MzlCMDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2NTM5 QjA1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I3ZWY1MTUtODU2NC00MWU4LTlk MjAtMmQzM2Q0NWNjYmQ2LzAvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAx M0I2NTM5QjA1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYl8GVEbHD0jpb3/5BDEDeqUBEcG9lghK6V w01o7EBCab2cfVhSI4ORULFfFpnzT+UKk3pFNHVX4BBBW8YaEE/8Ix+W79XH97Fv MkZGAAL5rXPYLZ7NJ1bddbm2Ya0Jd91PGWOSwvuuJzBF+95Hqijz7B9kpSoA9LfF 3zQ0iJpWaVm+xXFztTRQlxdGgNVzcK3WjX4N0P23BztKI2Hirw0s7AnCkfbAA2mC p4U59iW15UCjKem3H8cHvDJVSDVdUadLm0tfa02o6MTuLp8RnBpqzT2CIBbAkoUI FrIdsOMQlSonC7MNtAlj3+n09RjI8kTjwp0km/2tMUJlVclXhw4= -----END CERTIFICATE-----Generated at Thu Oct 30 14:55:33 2025 by rpki-client