$ rpki-client -vvf repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft File: DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft (raw, json) Hash identifier: BVsQSbhLJwAwbGYzRIhkted2P7ezx1J8xg5HzueCMGE= Subject key identifier: 1D:34:A9:90:6B:BC:7F:92:AA:51:C6:35:15:CB:E1:71:59:C9:51:EB Authority key identifier: DA:73:7E:8B:B9:E3:51:9F:19:E6:08:DC:3E:83:9F:36:0D:2C:46:23 Certificate issuer: /CN=DA737E8BB9E3519F19E608DC3E839F360D2C4623 Certificate serial: 05EC520FE5120636A16E0E3E4D991776EC2B8028 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA737E8BB9E3519F19E608DC3E839F360D2C4623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft Manifest number: CF Signing time: Sat 18 Oct 2025 12:41:50 +0000 Manifest this update: Sat 18 Oct 2025 12:36:50 +0000 Manifest next update: Tue 21 Oct 2025 23:13:50 +0000 Files and hashes: 1: 323030313a6466323a623263303a3a2f34382d3438203d3e20313530393538.roa (hash: BIDljILBNKsrSwzyZxnTSaIaANst4K6p4IMi96hI1tI=) 2: 3130332e38312e3131302e302f32332d3234203d3e20313530393538.roa (hash: yOguTTJn/ofmmFRzNxB5PQD5Wur97XppCIr80azCbnE=) 3: DA737E8BB9E3519F19E608DC3E839F360D2C4623.crl (hash: 6BXQPAZ/OXIKfp0ePIv2CHM3hKXdQjQXo4JGOvZmZek=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.crl rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA737E8BB9E3519F19E608DC3E839F360D2C4623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 23:13:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:ec:52:0f:e5:12:06:36:a1:6e:0e:3e:4d:99:17:76:ec:2b:80:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA737E8BB9E3519F19E608DC3E839F360D2C4623 Validity Not Before: Oct 18 12:36:50 2025 GMT Not After : Oct 21 23:13:50 2025 GMT Subject: CN=1D34A9906BBC7F92AA51C63515CBE17159C951EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2b:d1:65:a1:44:bd:0f:31:50:5f:70:de:ce: 1f:98:c2:1f:44:39:53:5e:78:7a:60:35:e9:35:a8: 4e:24:c9:82:50:75:84:56:b5:a7:f1:27:67:6a:da: 24:09:bb:5b:17:07:a0:02:98:7a:d6:97:0b:d9:10: 47:b1:d7:3f:68:af:82:31:cf:d5:aa:ce:56:6e:17: 88:c7:84:c5:2c:5d:cc:f9:61:6b:36:1e:33:62:a6: 30:1a:38:43:5d:72:81:49:d9:8e:c3:48:63:fc:e2: 05:b6:36:c5:90:67:79:c5:f9:c6:73:84:ca:28:b0: b0:20:17:f0:77:cd:9e:db:59:ec:1f:87:50:f3:9b: 93:34:d2:37:39:22:95:aa:f6:5e:dd:03:9b:f3:46: 0c:b0:8f:e8:3a:6c:19:9f:d0:0f:20:2e:46:c9:80: 1f:ab:0d:15:3f:dc:a8:bf:ff:de:78:09:79:e0:5d: b7:10:a1:fc:b1:17:f7:25:ad:49:03:09:81:0d:54: 22:94:2d:1f:8d:91:94:59:2e:b1:dc:36:6e:4f:0c: 2d:00:14:60:55:95:d2:be:8b:0e:09:16:b2:bd:86: ae:aa:43:90:85:3d:51:11:db:7a:53:ac:f2:0f:96: ae:c3:f3:c4:34:19:82:2e:79:c9:fd:0c:fc:f3:dd: c6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:34:A9:90:6B:BC:7F:92:AA:51:C6:35:15:CB:E1:71:59:C9:51:EB X509v3 Authority Key Identifier: keyid:DA:73:7E:8B:B9:E3:51:9F:19:E6:08:DC:3E:83:9F:36:0D:2C:46:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA737E8BB9E3519F19E608DC3E839F360D2C4623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:24:a4:4c:4d:73:7c:2b:7e:2f:f2:ff:10:5c:e4:07:64:62: 80:7a:f2:e7:29:89:cf:65:33:d8:02:9c:85:14:9c:02:4b:87: c4:05:ed:78:15:87:1f:d7:99:ae:78:05:ba:c9:6d:bc:29:35: bf:fd:96:ba:ab:2d:24:31:0e:b4:1c:05:5a:4c:a9:d3:02:df: c9:1f:62:b5:c7:b1:42:87:80:13:44:20:b2:b2:33:6f:a7:07: ba:86:23:73:77:10:e6:54:7b:23:06:0a:20:9c:2e:0f:4c:29: ab:36:f3:50:58:7b:7b:81:3c:08:0e:99:31:e3:62:07:9f:bc: 58:86:a1:aa:a1:fd:e6:ce:5a:74:1c:72:7e:0a:96:fb:40:84: 03:cc:25:9a:8a:37:79:8d:62:ff:6d:e5:68:e0:f6:8e:cf:45: d7:b3:82:62:9d:9f:63:3f:5b:f2:6e:37:25:66:5a:89:9b:2c: 3a:30:00:80:da:7e:43:b0:20:4e:41:c2:b0:2a:b3:c9:e0:82: 5d:23:ea:71:e5:94:88:ce:04:55:36:21:e7:6b:fb:8d:0a:2e: c0:2f:73:68:4f:44:5c:d0:52:38:c2:04:8c:46:d3:c5:41:04: cb:24:bc:6a:78:bc:a2:6e:04:25:5e:5c:10:bc:0b:d8:55:44: 2c:4e:80:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBexSD+USBjahbg4+TZkXduwrgCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE3MzdFOEJCOUUzNTE5RjE5RTYwOERDM0U4MzlGMzYw RDJDNDYyMzAeFw0yNTEwMTgxMjM2NTBaFw0yNTEwMjEyMzEzNTBaMDMxMTAvBgNV BAMTKDFEMzRBOTkwNkJCQzdGOTJBQTUxQzYzNTE1Q0JFMTcxNTlDOTUxRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEK9FloUS9DzFQX3Dezh+Ywh9E OVNeeHpgNek1qE4kyYJQdYRWtafxJ2dq2iQJu1sXB6ACmHrWlwvZEEex1z9or4Ix z9WqzlZuF4jHhMUsXcz5YWs2HjNipjAaOENdcoFJ2Y7DSGP84gW2NsWQZ3nF+cZz hMoosLAgF/B3zZ7bWewfh1Dzm5M00jc5IpWq9l7dA5vzRgywj+g6bBmf0A8gLkbJ gB+rDRU/3Ki//954CXngXbcQofyxF/clrUkDCYENVCKULR+NkZRZLrHcNm5PDC0A FGBVldK+iw4JFrK9hq6qQ5CFPVER23pTrPIPlq7D88Q0GYIuecn9DPzz3cZbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHTSpkGu8f5KqUcY1FcvhcVnJUeswHwYDVR0j BBgwFoAU2nN+i7njUZ8Z5gjcPoOfNg0sRiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjBiY2RjMy0wZmVhLTQ3NDctOTkwNy02NTY0ODZiYWU4ZGEvMC9EQTczN0U4QkI5 RTM1MTlGMTlFNjA4REMzRTgzOUYzNjBEMkM0NjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE3MzdFOEJCOUUzNTE5RjE5RTYwOERDM0U4MzlGMzYwRDJD NDYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwYmNkYzMtMGZlYS00NzQ3LTk5 MDctNjU2NDg2YmFlOGRhLzAvREE3MzdFOEJCOUUzNTE5RjE5RTYwOERDM0U4MzlG MzYwRDJDNDYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMkkpExNc3wrfi/y/xBc5AdkYoB68ucpic9l M9gCnIUUnAJLh8QF7XgVhx/Xma54BbrJbbwpNb/9lrqrLSQxDrQcBVpMqdMC38kf YrXHsUKHgBNEILKyM2+nB7qGI3N3EOZUeyMGCiCcLg9MKas281BYe3uBPAgOmTHj YgefvFiGoaqh/ebOWnQccn4KlvtAhAPMJZqKN3mNYv9t5Wjg9o7PRdezgmKdn2M/ W/JuNyVmWombLDowAIDafkOwIE5BwrAqs8nggl0j6nHllIjOBFU2Iedr+40KLsAv c2hPRFzQUjjCBIxG08VBBMskvGp4vKJuBCVeXBC8C9hVRCxOgBE= -----END CERTIFICATE-----Generated at Mon Oct 20 12:14:30 2025 by rpki-client