$ rpki-client -vvf repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft File: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft (raw, json) Hash identifier: xOpD/t/EubTZxpIByjh8fYYaGx7TjAwFnV2Nwz9RIy8= Subject key identifier: 51:60:B6:0B:96:89:96:53:AE:AE:3D:48:C3:92:29:79:41:F3:99:4F Authority key identifier: DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B Certificate issuer: /CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Certificate serial: 2D82C34B3ED669E38E85B144C0C8B9E93FB7EDC4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft Manifest number: DE Signing time: Sun 19 Oct 2025 14:01:59 +0000 Manifest this update: Sun 19 Oct 2025 13:56:59 +0000 Manifest next update: Thu 23 Oct 2025 00:30:59 +0000 Files and hashes: 1: 3130332e3136332e3234312e302f32342d3234203d3e20313431383837.roa (hash: 0mKtpX4YHjqhZYuwbm2O+wY91w1T7BNCRQPDyuS9qF8=) 2: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl (hash: ZCzfkUo30EDXAMp5xKPdpTcVeLwPyGlgIYTg1OIAtzE=) 3: 3130332e3136332e3234302e302f32342d3234203d3e20313431383837.roa (hash: +teKINZvaHmO1Q+Kg4FSm38760XvHDKTZ7byNyW4UzY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 00:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:82:c3:4b:3e:d6:69:e3:8e:85:b1:44:c0:c8:b9:e9:3f:b7:ed:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Validity Not Before: Oct 19 13:56:59 2025 GMT Not After : Oct 23 00:30:59 2025 GMT Subject: CN=5160B60B96899653AEAE3D48C392297941F3994F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b3:04:f1:28:93:50:5a:d9:c2:8e:ea:63:49: 53:1f:d4:3b:3d:34:45:54:3d:cb:a7:38:cd:ed:8a: e1:4d:85:fd:75:63:db:01:3d:f3:e1:c3:95:1f:57: 36:16:37:90:61:8a:29:12:14:83:ee:dc:92:5c:af: f5:bf:fe:f5:ff:68:1d:b8:40:34:db:37:9d:17:ad: 0e:41:84:d2:bc:4b:10:bc:24:32:b0:cc:ac:6b:4b: d0:64:5f:4d:c4:85:b4:1f:ef:70:21:0c:c7:7e:fc: 11:c5:4e:5d:2a:0f:29:46:fd:7e:03:b8:3f:2c:f1: bc:e5:79:bd:ea:c9:53:a6:48:71:89:af:1f:10:ee: ac:18:17:10:56:19:18:b8:0f:45:30:68:43:5e:2a: 67:a6:db:02:3d:51:b4:a9:3e:95:e4:f9:cb:d8:13: 91:8d:b2:4f:f4:3e:a5:ac:a7:1e:40:a7:8e:e1:69: e9:4f:ca:cf:9e:66:0d:42:fc:73:7e:a3:6b:49:f3: ab:13:7b:f7:36:a8:71:96:3b:75:de:31:61:e4:53: d2:35:97:ed:f0:3b:52:e6:73:60:79:20:7f:77:c3: 02:05:03:52:ab:8c:b9:aa:0a:9b:41:7b:c6:ab:35: 5f:9a:08:68:e0:d5:d3:a7:6d:7e:81:47:7f:8e:e6: a0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:60:B6:0B:96:89:96:53:AE:AE:3D:48:C3:92:29:79:41:F3:99:4F X509v3 Authority Key Identifier: keyid:DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:46:5f:d1:43:c7:2b:8d:75:e6:6c:85:5c:b9:1c:31:97:03: 69:67:a3:aa:94:5a:13:07:71:78:c8:da:3e:a6:fb:d2:a0:a2: d7:c8:33:47:f7:93:09:48:35:42:f5:c0:28:bb:63:07:bb:2a: 68:e6:25:8d:4d:c1:22:2e:10:2c:8d:9a:6b:3b:1f:4e:9d:58: b8:0c:89:5e:9e:cf:a1:16:bc:19:ef:49:d4:d2:5d:24:b4:9b: 23:26:37:5e:73:57:fe:28:2a:83:d9:64:7d:42:05:28:fc:8f: ab:a6:60:ec:90:94:55:83:45:8d:0b:08:30:9b:b2:bb:32:32: 38:b0:6c:ef:6f:6d:4c:f4:ac:40:1a:05:d7:1b:3f:e3:af:d4: f6:d7:e1:38:e7:0b:78:ba:ce:66:65:5e:46:61:8a:06:29:11: 65:f2:f9:c9:8f:00:2f:48:e6:c7:40:69:6c:64:18:5f:9a:cf: cc:3d:26:fc:d7:20:e1:29:88:7f:b0:7d:2b:97:a2:21:49:84: 97:8d:42:49:a9:59:0a:20:f1:5f:b8:96:bc:90:33:77:e4:42: 2a:de:92:7c:36:5a:3c:78:fe:5b:91:65:56:84:9c:39:89:a9: c8:e7:68:a4:88:50:c1:eb:ac:f8:cb:8b:79:0c:38:c5:92:9a: c5:9e:e7:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULYLDSz7WaeOOhbFEwMi56T+37cQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4 Njk5RkU5QjAeFw0yNTEwMTkxMzU2NTlaFw0yNTEwMjMwMDMwNTlaMDMxMTAvBgNV BAMTKDUxNjBCNjBCOTY4OTk2NTNBRUFFM0Q0OEMzOTIyOTc5NDFGMzk5NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/swTxKJNQWtnCjupjSVMf1Ds9 NEVUPcunOM3tiuFNhf11Y9sBPfPhw5UfVzYWN5BhiikSFIPu3JJcr/W//vX/aB24 QDTbN50XrQ5BhNK8SxC8JDKwzKxrS9BkX03EhbQf73AhDMd+/BHFTl0qDylG/X4D uD8s8bzleb3qyVOmSHGJrx8Q7qwYFxBWGRi4D0UwaENeKmem2wI9UbSpPpXk+cvY E5GNsk/0PqWspx5Ap47haelPys+eZg1C/HN+o2tJ86sTe/c2qHGWO3XeMWHkU9I1 l+3wO1Lmc2B5IH93wwIFA1KrjLmqCptBe8arNV+aCGjg1dOnbX6BR3+O5qArAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUWC2C5aJllOurj1Iw5IpeUHzmU8wHwYDVR0j BBgwFoAU2zcF3qwctyEjk7cCGrZxvYaZ/pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzViNzg1ZC04MzAzLTQ1YzUtOWE1OC1lYzEyODg3NDA4NjYvMC9EQjM3MDVERUFD MUNCNzIxMjM5M0I3MDIxQUI2NzFCRDg2OTlGRTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4Njk5 RkU5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M1Yjc4NWQtODMwMy00NWM1LTlh NTgtZWMxMjg4NzQwODY2LzAvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcx QkQ4Njk5RkU5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFGX9FDxyuNdeZshVy5HDGXA2lno6qUWhMH cXjI2j6m+9KgotfIM0f3kwlINUL1wCi7Ywe7KmjmJY1NwSIuECyNmms7H06dWLgM iV6ez6EWvBnvSdTSXSS0myMmN15zV/4oKoPZZH1CBSj8j6umYOyQlFWDRY0LCDCb srsyMjiwbO9vbUz0rEAaBdcbP+Ov1PbX4TjnC3i6zmZlXkZhigYpEWXy+cmPAC9I 5sdAaWxkGF+az8w9JvzXIOEpiH+wfSuXoiFJhJeNQkmpWQog8V+4lryQM3fkQire knw2Wjx4/luRZVaEnDmJqcjnaKSIUMHrrPjLi3kMOMWSmsWe59s= -----END CERTIFICATE-----Generated at Mon Oct 20 19:12:25 2025 by rpki-client