$ rpki-client -vvf repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft File: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft (raw, json) Hash identifier: q55ZA6HC8s4OYk1zIbgPgI1mdB6S540RXkW+bIss/cc= Subject key identifier: B0:48:03:91:10:E7:CB:2A:10:AE:7D:29:7F:0B:76:F5:48:D6:6F:B5 Authority key identifier: DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C Certificate issuer: /CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C Certificate serial: 31730591802B331B474A92F4D449FB8727ED5B38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft Manifest number: 01E2 Signing time: Sun 19 Oct 2025 21:21:36 +0000 Manifest this update: Sun 19 Oct 2025 21:16:36 +0000 Manifest next update: Wed 22 Oct 2025 23:14:36 +0000 Files and hashes: 1: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl (hash: 40zV0t3L1nXvjpmmIc+QgILDLwiUutsGGOyXcSEUTUY=) 2: 3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (hash: 2Vms/JsMQPaw+vYfPtEtlm+57xmqH/10AEwVvJR2JV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 23:14:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:73:05:91:80:2b:33:1b:47:4a:92:f4:d4:49:fb:87:27:ed:5b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C Validity Not Before: Oct 19 21:16:36 2025 GMT Not After : Oct 22 23:14:36 2025 GMT Subject: CN=B048039110E7CB2A10AE7D297F0B76F548D66FB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d7:9d:80:ce:c5:a7:e7:30:de:49:bb:c2:e9: 54:b8:39:50:45:c9:a6:82:fb:da:60:36:1c:19:1b: d2:82:ea:1b:69:6e:c4:8b:f9:2d:1f:bd:b9:cd:fa: 80:50:dc:b6:f2:a3:f3:41:0c:4b:61:2e:f8:f7:a4: d8:13:0e:ed:47:86:38:6f:1b:f5:94:38:0d:3e:7a: f1:d2:b9:83:bd:8d:11:7e:02:93:40:57:59:d7:f8: 5b:20:4b:c2:19:4c:57:e3:58:cb:33:76:ed:f8:96: 3b:9b:59:e1:45:14:c4:03:6f:12:ae:f4:16:8c:7c: 37:80:fd:cd:17:a0:16:07:03:ec:b0:f9:da:e6:0d: 56:47:3a:64:e0:cd:47:cd:a1:7b:1e:b6:4e:d5:c1: a5:2b:f1:23:20:13:cb:8a:4a:a8:6f:1f:20:ad:da: 9b:f5:c9:af:e0:f0:7b:60:8d:9e:a5:d8:80:4c:22: 49:e5:13:46:39:88:2b:76:e3:b0:d0:df:11:6d:2d: ce:d4:bc:e5:84:61:ee:1a:6b:0d:0c:a4:62:1a:2b: 47:85:0b:f1:8c:8b:4b:e6:56:42:0d:0c:2d:86:d5: ca:09:d9:08:06:bb:0c:a7:10:6f:74:d3:8f:7a:5d: 06:d1:93:22:2b:e5:9e:dc:9c:8a:f3:42:79:67:56: f1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:48:03:91:10:E7:CB:2A:10:AE:7D:29:7F:0B:76:F5:48:D6:6F:B5 X509v3 Authority Key Identifier: keyid:DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:00:88:2b:8f:3c:5a:fb:a9:f0:3a:9a:ed:ba:48:6e:2b:b0: 81:64:31:63:7d:2e:71:06:54:73:68:f8:ef:30:b1:ff:ab:8f: 1e:16:45:02:60:4c:80:de:8f:b5:f6:b9:75:cf:a3:5d:8a:70: 98:b9:86:cc:d5:b4:28:06:d8:df:f0:33:2f:cd:55:be:9a:6d: 43:37:f4:fa:74:b6:c5:ea:34:6f:e8:a0:68:fc:9d:30:ce:67: e3:05:b2:1e:6c:4a:a6:88:ab:15:58:68:19:7a:0b:d8:90:06: c4:86:37:3b:b5:5b:25:6d:f8:54:59:e9:6a:14:5b:19:5f:60: 5f:60:9f:fe:98:1a:27:f3:fa:87:7c:36:40:e8:64:53:b8:a2: 56:81:8d:27:5b:97:53:3e:a3:54:d0:a6:b0:1f:8b:39:30:8a: 02:22:0c:cc:86:3f:7c:b1:36:f2:9d:11:0a:a4:da:ae:c1:eb: cd:d1:37:f4:96:1b:d9:82:63:3b:c6:c4:22:92:2f:4b:6b:13: f8:ab:e6:33:c4:af:e6:96:4c:6b:62:6d:49:cd:1f:f0:0c:ce: a0:ee:e7:16:5e:8a:48:b5:b3:c6:f3:7b:b3:df:22:ea:52:84: d7:ed:40:0a:01:49:c6:d1:93:f2:e8:9b:26:a5:04:01:d3:c7: 04:00:d5:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMXMFkYArMxtHSpL01En7hyftWzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2RTBF NDkzNUEzQzAeFw0yNTEwMTkyMTE2MzZaFw0yNTEwMjIyMzE0MzZaMDMxMTAvBgNV BAMTKEIwNDgwMzkxMTBFN0NCMkExMEFFN0QyOTdGMEI3NkY1NDhENjZGQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6152AzsWn5zDeSbvC6VS4OVBF yaaC+9pgNhwZG9KC6htpbsSL+S0fvbnN+oBQ3Lbyo/NBDEthLvj3pNgTDu1Hhjhv G/WUOA0+evHSuYO9jRF+ApNAV1nX+FsgS8IZTFfjWMszdu34ljubWeFFFMQDbxKu 9BaMfDeA/c0XoBYHA+yw+drmDVZHOmTgzUfNoXsetk7VwaUr8SMgE8uKSqhvHyCt 2pv1ya/g8HtgjZ6l2IBMIknlE0Y5iCt247DQ3xFtLc7UvOWEYe4aaw0MpGIaK0eF C/GMi0vmVkINDC2G1coJ2QgGuwynEG900496XQbRkyIr5Z7cnIrzQnlnVvEjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsEgDkRDnyyoQrn0pfwt29UjWb7UwHwYDVR0j BBgwFoAU2xvXhR/RpIewEoP2rktG4OSTWjwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2IyZWU3NC04YzNjLTRiYzMtYjZmYi1mMzViMjAwYTIwZWIvMC9EQjFCRDc4NTFG RDFBNDg3QjAxMjgzRjZBRTRCNDZFMEU0OTM1QTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2RTBFNDkz NUEzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNiMmVlNzQtOGMzYy00YmMzLWI2 ZmItZjM1YjIwMGEyMGViLzAvREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2 RTBFNDkzNUEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAAiCuPPFr7qfA6mu26SG4rsIFkMWN9LnEG VHNo+O8wsf+rjx4WRQJgTIDej7X2uXXPo12KcJi5hszVtCgG2N/wMy/NVb6abUM3 9Pp0tsXqNG/ooGj8nTDOZ+MFsh5sSqaIqxVYaBl6C9iQBsSGNzu1WyVt+FRZ6WoU WxlfYF9gn/6YGifz+od8NkDoZFO4olaBjSdbl1M+o1TQprAfizkwigIiDMyGP3yx NvKdEQqk2q7B683RN/SWG9mCYzvGxCKSL0trE/ir5jPEr+aWTGtibUnNH/AMzqDu 5xZeiki1s8bze7PfIupShNftQAoBScbRk/LomyalBAHTxwQA1RI= -----END CERTIFICATE-----Generated at Mon Oct 20 12:08:40 2025 by rpki-client