$ rpki-client -vvf repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft File: DB03D7B542C60D3D72565734C86589420DF070A0.mft (raw, json) Hash identifier: rZTpyEwgYXe6RLfF1rv294DtJtBLZfNIHF8SHTyc+54= Subject key identifier: B8:DA:06:BE:FD:C5:EE:00:7C:0E:F0:BC:80:09:43:7D:BC:B9:86:B1 Authority key identifier: DB:03:D7:B5:42:C6:0D:3D:72:56:57:34:C8:65:89:42:0D:F0:70:A0 Certificate issuer: /CN=DB03D7B542C60D3D72565734C86589420DF070A0 Certificate serial: 4E0D572267ED7D1312006B5FFF551EC36340B199 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft Manifest number: 0230 Signing time: Sat 18 Oct 2025 23:32:10 +0000 Manifest this update: Sat 18 Oct 2025 23:27:10 +0000 Manifest next update: Wed 22 Oct 2025 09:38:10 +0000 Files and hashes: 1: 3130332e3138362e3231322e302f32332d3234203d3e20313439373134.roa (hash: qTxbUW36PI+ML7M9h6pieAAtdA4D+wz75UuUpAqL/GM=) 2: DB03D7B542C60D3D72565734C86589420DF070A0.crl (hash: iPl5pSp/60NzAZuAUlADwe22acIttYnSdbYEJxPEm+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.crl rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 09:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:0d:57:22:67:ed:7d:13:12:00:6b:5f:ff:55:1e:c3:63:40:b1:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB03D7B542C60D3D72565734C86589420DF070A0 Validity Not Before: Oct 18 23:27:10 2025 GMT Not After : Oct 22 09:38:10 2025 GMT Subject: CN=B8DA06BEFDC5EE007C0EF0BC8009437DBCB986B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:fb:ca:d2:56:23:60:45:79:2e:30:e5:55:98: 19:c3:23:44:d0:83:49:2c:43:be:6d:15:08:98:b1: 97:48:1c:f3:37:ae:5c:16:0c:d2:b8:c7:97:9a:1a: db:d7:38:fe:3f:4f:36:a6:b7:e5:05:ae:89:10:2b: 4a:4e:f4:d0:b7:69:7c:e7:21:4a:1b:12:c1:c2:f7: b0:a1:eb:cc:83:3a:6b:6a:db:19:3b:da:b7:33:ad: 99:b4:ff:55:2c:f8:e2:d6:12:b9:ed:e6:c3:93:bc: fb:76:f2:93:6b:0a:c8:d3:39:04:11:89:ed:62:9d: 62:d0:98:35:f6:0e:e1:49:c6:c1:83:c2:1e:e1:db: 21:d3:c1:d7:f4:5a:75:85:79:7b:f5:fc:71:f7:98: c7:21:73:fc:74:43:80:08:dc:3e:4a:d5:ed:88:ab: d9:b0:88:42:72:62:ff:f4:06:c0:f1:79:f2:d3:89: 5e:b1:42:15:3f:32:1f:16:5d:5d:a7:2b:3a:b9:1f: fa:45:90:7e:3d:21:0f:27:51:ee:a7:22:fb:89:9a: 36:4f:80:9e:44:3b:e2:a1:f9:e5:f9:d8:3c:c9:30: b4:41:01:59:73:2d:1d:db:af:7f:c9:b9:6b:79:c4: 18:67:0d:89:18:32:b9:60:8b:d2:1b:b6:bb:24:23: c7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DA:06:BE:FD:C5:EE:00:7C:0E:F0:BC:80:09:43:7D:BC:B9:86:B1 X509v3 Authority Key Identifier: keyid:DB:03:D7:B5:42:C6:0D:3D:72:56:57:34:C8:65:89:42:0D:F0:70:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:92:70:f5:9a:c0:29:a1:a5:76:92:ee:bd:8c:2c:9b:c7:fa: 73:ee:1d:5a:96:aa:b2:1a:a4:68:cc:8c:48:ef:89:1d:9a:63: f7:64:4b:5a:3a:f8:05:c6:e4:da:b1:ea:e0:2a:91:69:2c:17: 48:aa:38:88:89:01:6c:a0:d5:01:ed:6a:5c:13:27:7a:f6:03: bc:8f:aa:b7:e3:de:17:6d:6c:bb:ce:ed:23:6d:7e:af:fd:a7: 87:05:21:0e:51:0b:90:e9:85:9c:db:5f:ee:38:99:e4:94:82: 6d:5e:5d:04:6f:45:65:3b:c2:6b:b5:03:1a:0b:85:a1:3d:a0: ba:1b:a9:48:27:a2:ff:e9:65:d3:71:f3:de:1d:40:79:e5:93: 32:16:77:7e:b4:1d:58:04:09:c7:92:ed:52:4c:c5:77:cc:64: 74:17:62:8a:2a:39:13:dd:15:88:6e:02:95:0a:76:f9:f8:39: a1:5a:b8:54:0a:b4:bc:15:74:8e:ef:cd:4e:8b:2e:04:29:0b: 07:2d:af:bb:8f:49:a0:ed:da:7d:9c:39:50:af:be:92:cb:da: 40:22:3e:dd:97:d1:42:43:3f:08:08:54:bb:15:4a:f2:44:85: 5a:9a:95:b0:bb:47:65:67:f5:81:b2:23:42:de:a9:4e:c3:42: 20:22:90:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTg1XImftfRMSAGtf/1Uew2NAsZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5NDIw REYwNzBBMDAeFw0yNTEwMTgyMzI3MTBaFw0yNTEwMjIwOTM4MTBaMDMxMTAvBgNV BAMTKEI4REEwNkJFRkRDNUVFMDA3QzBFRjBCQzgwMDk0MzdEQkNCOTg2QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0+8rSViNgRXkuMOVVmBnDI0TQ g0ksQ75tFQiYsZdIHPM3rlwWDNK4x5eaGtvXOP4/Tzamt+UFrokQK0pO9NC3aXzn IUobEsHC97Ch68yDOmtq2xk72rczrZm0/1Us+OLWErnt5sOTvPt28pNrCsjTOQQR ie1inWLQmDX2DuFJxsGDwh7h2yHTwdf0WnWFeXv1/HH3mMchc/x0Q4AI3D5K1e2I q9mwiEJyYv/0BsDxefLTiV6xQhU/Mh8WXV2nKzq5H/pFkH49IQ8nUe6nIvuJmjZP gJ5EO+Kh+eX52DzJMLRBAVlzLR3br3/JuWt5xBhnDYkYMrlgi9IbtrskI8fdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuNoGvv3F7gB8DvC8gAlDfby5hrEwHwYDVR0j BBgwFoAU2wPXtULGDT1yVlc0yGWJQg3wcKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGYyODIzNS0wYmE4LTRlMTQtOGI4NS0yOWMzYTRhNzZlYWIvMC9EQjAzRDdCNTQy QzYwRDNENzI1NjU3MzRDODY1ODk0MjBERjA3MEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5NDIwREYw NzBBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRmMjgyMzUtMGJhOC00ZTE0LThi ODUtMjljM2E0YTc2ZWFiLzAvREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5 NDIwREYwNzBBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2ScPWawCmhpXaS7r2MLJvH+nPuHVqWqrIa pGjMjEjviR2aY/dkS1o6+AXG5Nqx6uAqkWksF0iqOIiJAWyg1QHtalwTJ3r2A7yP qrfj3hdtbLvO7SNtfq/9p4cFIQ5RC5DphZzbX+44meSUgm1eXQRvRWU7wmu1AxoL haE9oLobqUgnov/pZdNx894dQHnlkzIWd360HVgECceS7VJMxXfMZHQXYooqORPd FYhuApUKdvn4OaFauFQKtLwVdI7vzU6LLgQpCwctr7uPSaDt2n2cOVCvvpLL2kAi Pt2X0UJDPwgIVLsVSvJEhVqalbC7R2Vn9YGyI0LeqU7DQiAikDI= -----END CERTIFICATE-----Generated at Mon Oct 20 09:20:33 2025 by rpki-client