$ rpki-client -vvf repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft File: 0BB3D1874063172B5374865233070332233FB7B3.mft (raw, json) Hash identifier: XNJUKtVLy9h5dovX4RTeeBF2ZdI/+n8fnMSQHXy6SDY= Subject key identifier: 43:CA:76:C0:E5:81:57:CE:9A:B9:2E:E3:53:90:54:9F:0D:4A:BB:10 Authority key identifier: 0B:B3:D1:87:40:63:17:2B:53:74:86:52:33:07:03:32:23:3F:B7:B3 Certificate issuer: /CN=0BB3D1874063172B5374865233070332233FB7B3 Certificate serial: 3E81A94C20691792C12AB43E17DC127D1FF23E03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft Manifest number: 0514 Signing time: Sat 18 Oct 2025 01:31:26 +0000 Manifest this update: Sat 18 Oct 2025 01:26:26 +0000 Manifest next update: Tue 21 Oct 2025 12:43:26 +0000 Files and hashes: 1: 3131372e3130342e3139322e302f31392d3234203d3e203233363636.roa (hash: zCm8uejNjkpY+DjdGXgrEnekcPvtN86UHanFShqlM6g=) 2: 0BB3D1874063172B5374865233070332233FB7B3.crl (hash: IqsnwfuGkiu283L+jD0s59hsU1q/KyQj8ou71dgBTss=) 3: 3230322e3135332e31362e302f32302d3234203d3e203233363636.roa (hash: 5FOROrvQq+0t+Mk/ACrrEVqg06jInBJCBz0qroNhCeU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.crl rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 12:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:81:a9:4c:20:69:17:92:c1:2a:b4:3e:17:dc:12:7d:1f:f2:3e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BB3D1874063172B5374865233070332233FB7B3 Validity Not Before: Oct 18 01:26:26 2025 GMT Not After : Oct 21 12:43:26 2025 GMT Subject: CN=43CA76C0E58157CE9AB92EE35390549F0D4ABB10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:37:cc:fd:dd:c9:63:ae:8b:3b:54:9a:7c:1c: bb:35:21:c7:d2:ec:24:1a:e8:8a:6c:b2:fd:6a:6c: 0c:40:2d:4b:2f:5b:95:be:ac:8a:c7:be:3b:89:49: 32:3d:7c:82:a8:bb:b9:4b:b5:d3:a9:87:d5:d1:39: f5:a0:a2:4d:65:82:85:f3:9d:a8:27:f3:e5:d1:cc: 13:71:d1:4a:42:5a:fd:15:cf:66:4f:4e:c4:1f:6a: cf:41:6b:4e:e7:bf:32:76:7a:de:bb:31:45:2d:3d: b6:ca:6b:ed:78:55:53:47:7c:df:e2:b7:f7:d8:6b: d5:a1:e6:99:4b:64:32:b8:34:66:57:62:16:09:9d: 9e:11:80:a8:92:e2:f1:f5:c1:de:18:ca:bf:45:d3: eb:52:d8:29:78:00:42:34:3a:be:d2:a8:32:59:9e: 10:0e:38:d9:a3:99:93:f0:e6:cc:32:bf:fa:4a:4c: 62:f2:62:1e:94:6c:6d:a5:ba:49:98:b1:1c:1e:40: fa:37:bc:3e:af:c8:d3:4f:ef:29:05:91:b7:97:b7: b1:6e:64:42:ea:b9:4e:4e:49:0e:9e:fb:d8:d1:fb: 5c:34:14:6f:72:bb:73:f1:35:8c:74:7f:05:36:04: d3:e0:b5:ec:24:28:de:ea:41:06:4f:cd:12:3c:e7: d8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CA:76:C0:E5:81:57:CE:9A:B9:2E:E3:53:90:54:9F:0D:4A:BB:10 X509v3 Authority Key Identifier: keyid:0B:B3:D1:87:40:63:17:2B:53:74:86:52:33:07:03:32:23:3F:B7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:77:91:61:ed:96:4b:dc:1a:38:99:e6:88:b5:0a:83:01:a8: bf:61:c7:72:68:78:bd:a6:6d:49:07:6a:d1:6d:58:d5:e1:71: c4:47:a7:5c:c5:89:07:96:37:17:32:66:19:20:df:ce:a0:88: 1c:46:9b:a9:dc:1f:93:ab:36:01:7b:50:78:52:58:fb:3c:c4: 6a:c1:22:8e:90:f6:63:dd:82:bb:c7:a1:2c:14:0e:94:23:e6: c3:12:1d:fc:b8:bd:1a:a4:07:1d:18:86:f1:d1:7a:20:8e:c2: 2c:d6:e8:90:b8:40:0c:3f:4e:de:c4:c7:65:07:90:14:50:ba: 50:63:66:19:41:e6:2e:10:34:79:3a:67:11:fa:fc:3e:ca:11: 39:01:8f:6c:d3:63:16:26:56:41:bf:77:07:4a:b8:c6:29:ed: b0:a5:11:cd:87:19:61:49:82:90:67:68:f6:21:b6:dd:f0:64: 32:6b:22:a4:6d:83:f1:3b:1c:27:33:4d:69:e3:d1:ff:d1:b1: ae:72:32:64:52:b0:d2:a4:d5:cb:e6:cc:d7:2b:79:fe:37:7a: 4d:97:b3:24:7e:fa:ad:ac:ff:cf:93:fe:51:bb:45:67:f3:06: a4:55:5d:0d:e6:a3:9e:a4:17:36:ba:04:52:83:5d:b1:f7:ba: 75:d5:6a:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPoGpTCBpF5LBKrQ+F9wSfR/yPgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJCM0QxODc0MDYzMTcyQjUzNzQ4NjUyMzMwNzAzMzIy MzNGQjdCMzAeFw0yNTEwMTgwMTI2MjZaFw0yNTEwMjExMjQzMjZaMDMxMTAvBgNV BAMTKDQzQ0E3NkMwRTU4MTU3Q0U5QUI5MkVFMzUzOTA1NDlGMEQ0QUJCMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeN8z93cljros7VJp8HLs1IcfS 7CQa6Ipssv1qbAxALUsvW5W+rIrHvjuJSTI9fIKou7lLtdOph9XROfWgok1lgoXz nagn8+XRzBNx0UpCWv0Vz2ZPTsQfas9Ba07nvzJ2et67MUUtPbbKa+14VVNHfN/i t/fYa9Wh5plLZDK4NGZXYhYJnZ4RgKiS4vH1wd4Yyr9F0+tS2Cl4AEI0Or7SqDJZ nhAOONmjmZPw5swyv/pKTGLyYh6UbG2lukmYsRweQPo3vD6vyNNP7ykFkbeXt7Fu ZELquU5OSQ6e+9jR+1w0FG9yu3PxNYx0fwU2BNPgtewkKN7qQQZPzRI859g7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ8p2wOWBV86auS7jU5BUnw1KuxAwHwYDVR0j BBgwFoAUC7PRh0BjFytTdIZSMwcDMiM/t7MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTkwOGI4My03ZjQ0LTQ2ZTAtODUzNS02ZmI4NGI1OWQ1OGEvMC8wQkIzRDE4NzQw NjMxNzJCNTM3NDg2NTIzMzA3MDMzMjIzM0ZCN0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEJCM0QxODc0MDYzMTcyQjUzNzQ4NjUyMzMwNzAzMzIyMzNG QjdCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU5MDhiODMtN2Y0NC00NmUwLTg1 MzUtNmZiODRiNTlkNThhLzAvMEJCM0QxODc0MDYzMTcyQjUzNzQ4NjUyMzMwNzAz MzIyMzNGQjdCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACl3kWHtlkvcGjiZ5oi1CoMBqL9hx3JoeL2m bUkHatFtWNXhccRHp1zFiQeWNxcyZhkg386giBxGm6ncH5OrNgF7UHhSWPs8xGrB Io6Q9mPdgrvHoSwUDpQj5sMSHfy4vRqkBx0YhvHReiCOwizW6JC4QAw/Tt7Ex2UH kBRQulBjZhlB5i4QNHk6ZxH6/D7KETkBj2zTYxYmVkG/dwdKuMYp7bClEc2HGWFJ gpBnaPYhtt3wZDJrIqRtg/E7HCczTWnj0f/Rsa5yMmRSsNKk1cvmzNcref43ek2X syR++q2s/8+T/lG7RWfzBqRVXQ3mo56kFza6BFKDXbH3unXVaq4= -----END CERTIFICATE-----Generated at Mon Oct 20 04:17:26 2025 by rpki-client