$ rpki-client -vvf repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft File: DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft (raw, json) Hash identifier: 0RQ4FDXOhnA1YebTRkLQ2s429vyOSPMdRXlCoEAgwEA= Subject key identifier: FC:1E:C3:8C:93:C3:59:2B:87:37:F9:FD:A5:2A:2C:49:EF:7E:CD:D4 Authority key identifier: DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 Certificate issuer: /CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Certificate serial: 3BEA0E93A0C0E72101B49A967F840E9A4910DFF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft Manifest number: E2 Signing time: Sat 06 Sep 2025 02:10:34 +0000 Manifest this update: Sat 06 Sep 2025 02:05:34 +0000 Manifest next update: Tue 09 Sep 2025 04:12:34 +0000 Files and hashes: 1: DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl (hash: nQ63rNTN3th+I2suCm4XedMZhZfRqk5cr/EHCexMA5A=) 2: 3230332e3135332e3231322e302f32322d3234203d3e20313331373238.roa (hash: L+zbwKEiqCDXphQWC6ta3Lw7/a2eLbSVLx5eDneIanA=) 3: 3130332e31322e3131322e302f32322d3234203d3e20313331373238.roa (hash: W6CbDsM0PrN3d4twoSZMp8DZWVfT/4VVEcjlXAnT5RE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 04:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ea:0e:93:a0:c0:e7:21:01:b4:9a:96:7f:84:0e:9a:49:10:df:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Validity Not Before: Sep 6 02:05:34 2025 GMT Not After : Sep 9 04:12:34 2025 GMT Subject: CN=FC1EC38C93C3592B8737F9FDA52A2C49EF7ECDD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cc:4d:30:7f:8d:13:78:ed:90:5b:0f:e1:be: a7:9f:52:d7:81:b3:27:09:dd:64:d7:aa:5e:e7:eb: df:38:81:8f:72:6a:bd:3f:35:2a:67:05:c3:d0:b8: 50:cb:24:17:9c:ec:bc:29:b0:20:a0:6a:3a:85:bc: cd:67:74:44:2a:81:7f:0f:e2:64:74:43:a2:8e:9a: 48:dc:56:25:78:d9:9d:c8:ab:68:ba:da:77:6e:08: 18:37:f1:2a:ff:df:75:25:e8:be:35:19:be:52:ad: e5:c0:5a:61:f0:56:e6:f9:1f:39:d8:ae:72:76:57: 2c:18:02:16:0c:96:dd:5c:6e:30:66:6c:08:18:f6: 1e:a1:bb:f8:95:9e:b5:d3:46:17:ea:8f:01:a8:ea: b9:f2:7d:4c:28:d6:b8:36:eb:44:fb:54:0a:b3:38: 4b:99:06:d5:5f:b1:4c:a4:b2:74:86:ac:5a:09:2d: 03:56:90:0d:4b:1b:93:04:2a:27:d9:77:1b:2a:f3: c5:e9:3e:9f:b6:49:2d:8d:a0:1e:29:85:5e:56:1f: 18:18:65:69:7a:0d:9e:93:62:09:77:7e:d7:21:cc: 26:0f:79:5f:8c:62:22:d4:df:30:2d:51:02:f0:df: 3c:78:16:e6:66:64:b3:2e:d3:7e:3c:80:0b:d5:ba: 26:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:1E:C3:8C:93:C3:59:2B:87:37:F9:FD:A5:2A:2C:49:EF:7E:CD:D4 X509v3 Authority Key Identifier: keyid:DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:1f:ec:99:a9:df:8a:53:8e:56:1b:68:66:16:a4:df:de:d5: fe:36:af:d0:22:7e:44:d1:7b:77:5b:b3:3c:0e:1c:7d:37:2a: 52:b2:1b:aa:88:08:79:06:ac:ce:ee:b2:c9:a5:8e:7f:c6:28: 75:fa:b0:28:d6:40:f5:33:2e:03:ee:ad:88:de:29:6c:55:1a: 31:aa:53:50:6e:8a:10:57:24:8a:ba:8f:9f:1e:af:d5:cd:83: 20:54:68:1e:47:e4:18:ae:0c:76:c6:9d:11:c3:ed:16:6c:25: 1a:8d:2c:06:28:bd:7e:e6:90:41:c7:d5:bb:b9:77:e4:db:76: 26:94:ce:27:23:53:ab:a8:58:31:9d:59:3c:da:16:11:40:ab: 69:cc:ac:d1:47:f4:6e:b4:67:8d:9d:03:7b:78:24:26:a5:bc: d5:e6:41:d4:23:c4:62:4b:8e:bb:f9:ea:3d:67:e8:1c:2c:7f: cb:a1:04:3a:7d:5c:0f:c7:11:74:57:bc:ad:d6:d2:cc:52:38: d6:36:66:f0:11:c5:b1:19:06:ba:3f:fa:e6:9c:92:44:0f:8f: 7e:77:ed:69:50:6e:44:14:2e:87:81:39:0b:13:e7:87:d0:f6: 1f:a9:4b:ea:b8:af:af:17:d3:92:51:67:31:8b:e2:48:18:0d: 6b:61:f1:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO+oOk6DA5yEBtJqWf4QOmkkQ3/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdBMDFC OTU4RTRDNDAeFw0yNTA5MDYwMjA1MzRaFw0yNTA5MDkwNDEyMzRaMDMxMTAvBgNV BAMTKEZDMUVDMzhDOTNDMzU5MkI4NzM3RjlGREE1MkEyQzQ5RUY3RUNERDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgzE0wf40TeO2QWw/hvqefUteB sycJ3WTXql7n6984gY9yar0/NSpnBcPQuFDLJBec7LwpsCCgajqFvM1ndEQqgX8P 4mR0Q6KOmkjcViV42Z3Iq2i62nduCBg38Sr/33Ul6L41Gb5SreXAWmHwVub5HznY rnJ2VywYAhYMlt1cbjBmbAgY9h6hu/iVnrXTRhfqjwGo6rnyfUwo1rg260T7VAqz OEuZBtVfsUyksnSGrFoJLQNWkA1LG5MEKifZdxsq88XpPp+2SS2NoB4phV5WHxgY ZWl6DZ6TYgl3ftchzCYPeV+MYiLU3zAtUQLw3zx4FuZmZLMu0348gAvVuiY1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/B7DjJPDWSuHN/n9pSosSe9+zdQwHwYDVR0j BBgwFoAU23JerC3R5it6AsVKYY16AblY5MQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDE1YTg1NS1iMjljLTQ1MDItYWY4MS1jYmI4YjRmN2YwZjcvMC9EQjcyNUVBQzJE RDFFNjJCN0EwMkM1NEE2MThEN0EwMUI5NThFNEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdBMDFCOTU4 RTRDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODAxNWE4NTUtYjI5Yy00NTAyLWFm ODEtY2JiOGI0ZjdmMGY3LzAvREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdB MDFCOTU4RTRDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIf7Jmp34pTjlYbaGYWpN/e1f42r9AifkTR e3dbszwOHH03KlKyG6qICHkGrM7ussmljn/GKHX6sCjWQPUzLgPurYjeKWxVGjGq U1BuihBXJIq6j58er9XNgyBUaB5H5BiuDHbGnRHD7RZsJRqNLAYovX7mkEHH1bu5 d+TbdiaUzicjU6uoWDGdWTzaFhFAq2nMrNFH9G60Z42dA3t4JCalvNXmQdQjxGJL jrv56j1n6Bwsf8uhBDp9XA/HEXRXvK3W0sxSONY2ZvARxbEZBro/+uackkQPj353 7WlQbkQULoeBOQsT54fQ9h+pS+q4r68X05JRZzGL4kgYDWth8QQ= -----END CERTIFICATE-----Generated at Sun Sep 7 15:13:25 2025 by rpki-client