$ rpki-client -vvf repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft File: 0433DC81885AA9736198E4B13311013B6539B05D.mft (raw, json) Hash identifier: Nwrr4txKbPTVQWTI9NINR/LrBkd+wYG9GMvWvnmGmug= Subject key identifier: 53:85:9D:89:C7:89:44:B9:E3:07:10:40:79:E1:55:9E:07:BB:3E:ED Authority key identifier: 04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D Certificate issuer: /CN=0433DC81885AA9736198E4B13311013B6539B05D Certificate serial: 62A1EF6B0F983FD4F0F26FA0D5339A167B225A34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft Manifest number: 0198 Signing time: Sat 18 Oct 2025 06:21:33 +0000 Manifest this update: Sat 18 Oct 2025 06:16:33 +0000 Manifest next update: Tue 21 Oct 2025 12:38:33 +0000 Files and hashes: 1: 3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa (hash: JVhrzlpOZdWSbSjvZPb3ZH9GyBIo1oeTGaYsJmG4pDs=) 2: 3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa (hash: k6AuCQ8Lc9J6Ja31B30aJRSZbO/KYjuOQsr2CPNaQ/Q=) 3: 0433DC81885AA9736198E4B13311013B6539B05D.crl (hash: DP1jmJ95u4lcyTRPndR3lNzN4Q1MUJB42Hpkq6hxX5o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 12:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:a1:ef:6b:0f:98:3f:d4:f0:f2:6f:a0:d5:33:9a:16:7b:22:5a:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0433DC81885AA9736198E4B13311013B6539B05D Validity Not Before: Oct 18 06:16:33 2025 GMT Not After : Oct 21 12:38:33 2025 GMT Subject: CN=53859D89C78944B9E307104079E1559E07BB3EED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:68:74:ab:b5:07:73:fe:e7:54:78:d3:8d:56: 39:15:18:bf:3e:1f:85:b2:46:c3:29:0e:27:a9:74: ba:5e:ee:bd:aa:82:13:97:35:c5:71:aa:00:a7:2f: 71:65:53:80:46:08:6b:97:ec:00:5b:cd:e7:ee:4b: c1:f3:8f:27:7b:fa:41:c4:1b:c2:cd:73:c1:ad:97: a6:84:eb:85:f9:a5:67:69:3a:f8:c7:bd:85:eb:da: 78:83:fe:b9:24:8d:7e:73:a0:f2:37:ed:39:5e:70: 0e:34:dc:de:a0:78:40:eb:c9:ce:92:1c:76:ca:06: 69:0c:f3:52:39:ad:13:e5:ac:b0:27:f6:7d:c3:4a: e7:29:47:59:74:4c:23:af:99:d1:44:02:e8:a2:30: 60:b8:1e:24:5f:30:4c:15:33:2d:1e:0c:b4:1b:28: 84:00:e1:84:f5:91:6c:e9:92:4d:cd:9c:34:9c:16: 8d:f7:35:a6:e2:90:1d:c0:11:30:21:b8:c0:ce:a8: 0c:d5:d9:d2:f0:be:d2:7e:d5:7f:2c:7b:85:50:90: e2:44:fb:d4:19:d6:2e:1e:1c:bd:23:4e:05:bc:67: ff:de:53:5a:c3:fc:06:b4:47:62:35:19:36:85:54: 60:1c:e8:01:75:bb:0d:dc:24:b5:70:0f:dc:80:65: 45:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:85:9D:89:C7:89:44:B9:E3:07:10:40:79:E1:55:9E:07:BB:3E:ED X509v3 Authority Key Identifier: keyid:04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:a6:3a:f2:c3:69:37:23:d2:3e:3c:12:21:fd:9b:d9:dd:d5: 91:54:5b:75:f7:4b:46:23:5f:41:55:e6:b9:ae:91:7d:df:c1: 41:83:9f:0a:01:96:f3:74:6c:15:e2:0b:a9:a6:ef:8a:66:f7: 71:50:6f:dd:36:2d:86:cf:65:36:b9:11:fb:c4:2b:78:88:e2: ef:69:c4:35:85:3e:c0:e5:23:3c:62:94:8b:d1:34:98:c3:77: e6:1a:fb:ba:c1:55:b6:8a:71:54:2b:18:1c:4e:94:b2:31:af: fd:2d:ad:d5:52:3f:a7:81:72:da:3e:c4:01:d5:f9:6d:46:03: a6:32:de:85:28:67:29:f5:a2:ef:1b:81:49:0d:8c:46:f7:e6: fd:d7:78:1a:e7:ad:3c:7e:e9:4d:91:c2:81:60:e0:b4:6f:e7: 3a:3e:a7:c5:e5:99:ba:ed:65:bd:20:b6:9e:02:cd:40:ca:e0: 66:ea:6e:17:87:bd:6a:9b:fc:52:6f:84:8a:11:66:03:63:73: 8e:6a:2e:e1:52:bb:64:cd:ae:cb:96:bd:82:a6:8b:40:10:87: 55:f7:a1:42:e8:db:a7:f8:f5:74:f8:23:15:63:a3:6e:86:e6: 49:13:fc:30:78:0a:7a:2e:09:e5:f9:aa:2a:f1:85:8f:b6:90: 0f:66:62:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYqHvaw+YP9Tw8m+g1TOaFnsiWjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2 NTM5QjA1RDAeFw0yNTEwMTgwNjE2MzNaFw0yNTEwMjExMjM4MzNaMDMxMTAvBgNV BAMTKDUzODU5RDg5Qzc4OTQ0QjlFMzA3MTA0MDc5RTE1NTlFMDdCQjNFRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsaHSrtQdz/udUeNONVjkVGL8+ H4WyRsMpDiepdLpe7r2qghOXNcVxqgCnL3FlU4BGCGuX7ABbzefuS8Hzjyd7+kHE G8LNc8Gtl6aE64X5pWdpOvjHvYXr2niD/rkkjX5zoPI37TlecA403N6geEDryc6S HHbKBmkM81I5rRPlrLAn9n3DSucpR1l0TCOvmdFEAuiiMGC4HiRfMEwVMy0eDLQb KIQA4YT1kWzpkk3NnDScFo33NabikB3AETAhuMDOqAzV2dLwvtJ+1X8se4VQkOJE +9QZ1i4eHL0jTgW8Z//eU1rD/Aa0R2I1GTaFVGAc6AF1uw3cJLVwD9yAZUVFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU4WdiceJRLnjBxBAeeFVnge7Pu0wHwYDVR0j BBgwFoAUBDPcgYhaqXNhmOSxMxEBO2U5sF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjdlZjUxNS04NTY0LTQxZTgtOWQyMC0yZDMzZDQ1Y2NiZDYvMC8wNDMzREM4MTg4 NUFBOTczNjE5OEU0QjEzMzExMDEzQjY1MzlCMDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2NTM5 QjA1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I3ZWY1MTUtODU2NC00MWU4LTlk MjAtMmQzM2Q0NWNjYmQ2LzAvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAx M0I2NTM5QjA1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGmOvLDaTcj0j48EiH9m9nd1ZFUW3X3S0Yj X0FV5rmukX3fwUGDnwoBlvN0bBXiC6mm74pm93FQb902LYbPZTa5EfvEK3iI4u9p xDWFPsDlIzxilIvRNJjDd+Ya+7rBVbaKcVQrGBxOlLIxr/0trdVSP6eBcto+xAHV +W1GA6Yy3oUoZyn1ou8bgUkNjEb35v3XeBrnrTx+6U2RwoFg4LRv5zo+p8Xlmbrt Zb0gtp4CzUDK4GbqbheHvWqb/FJvhIoRZgNjc45qLuFSu2TNrsuWvYKmi0AQh1X3 oULo26f49XT4IxVjo26G5kkT/DB4CnouCeX5qirxhY+2kA9mYps= -----END CERTIFICATE-----Generated at Mon Oct 20 09:45:18 2025 by rpki-client