$ rpki-client -vvf repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft File: DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft (raw, json) Hash identifier: T97AfP3MWk9FFkg75R5m2ZfXBVGQxVHC3NLwJO2g8Kk= Subject key identifier: 9E:22:7C:54:8E:1C:8C:E0:AB:39:36:98:1D:2F:7A:70:00:3D:86:7F Authority key identifier: DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 Certificate issuer: /CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Certificate serial: 12B80B47DEDF11BC4120D28A5E21637B585D67D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft Manifest number: DB Signing time: Thu 21 Aug 2025 12:20:35 +0000 Manifest this update: Thu 21 Aug 2025 12:15:35 +0000 Manifest next update: Sun 24 Aug 2025 16:10:35 +0000 Files and hashes: 1: DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl (hash: Gffp8d7NhYeP5iTPHbkLbr2cjd73yoL/sN09k65omfg=) 2: 3230332e3135332e3231322e302f32322d3234203d3e20313331373238.roa (hash: L+zbwKEiqCDXphQWC6ta3Lw7/a2eLbSVLx5eDneIanA=) 3: 3130332e31322e3131322e302f32322d3234203d3e20313331373238.roa (hash: W6CbDsM0PrN3d4twoSZMp8DZWVfT/4VVEcjlXAnT5RE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 16:10:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:b8:0b:47:de:df:11:bc:41:20:d2:8a:5e:21:63:7b:58:5d:67:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Validity Not Before: Aug 21 12:15:35 2025 GMT Not After : Aug 24 16:10:35 2025 GMT Subject: CN=9E227C548E1C8CE0AB3936981D2F7A70003D867F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:87:b1:9b:22:da:d1:70:a3:27:df:70:c9:ae: c2:96:4f:ef:fb:f9:b0:c4:b3:63:87:a6:48:69:09: 4c:18:df:27:8f:d1:a4:9e:75:cb:e5:6d:13:3c:af: 94:34:7f:39:af:5a:d2:dd:77:ce:52:e0:96:3f:f6: e9:10:d6:09:c4:a1:fe:e9:04:68:16:f9:2a:50:36: ff:b8:d0:ed:4d:aa:78:16:7b:00:53:ae:0e:9c:aa: 03:d5:0c:8f:13:8e:0b:7e:1b:8e:61:85:28:0a:8a: 7d:b0:16:bb:44:d1:46:4c:5f:35:9a:25:1d:cf:33: 0f:b5:80:6b:fc:2d:b3:30:0b:5a:63:18:ca:f0:ad: ca:e5:bb:13:99:46:00:96:a2:73:b5:eb:a4:7c:ad: 97:36:8b:87:59:b9:12:a6:4e:43:16:05:ec:29:b7: 40:ad:de:26:7d:38:b0:a1:31:f7:5c:4c:9d:02:fc: e3:89:98:48:54:68:22:21:75:cd:f5:ba:18:b8:26: 15:bb:a1:2c:f9:4e:d5:23:a0:c8:60:9a:75:26:ba: 97:70:e7:9f:04:40:30:78:8e:20:75:cb:1c:e1:aa: fb:55:6c:43:f0:0b:19:97:1b:bf:06:bf:ab:6e:b1: a6:60:74:15:5c:c3:e2:f6:f5:f7:f0:65:49:5a:4d: 7e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:22:7C:54:8E:1C:8C:E0:AB:39:36:98:1D:2F:7A:70:00:3D:86:7F X509v3 Authority Key Identifier: keyid:DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:33:63:63:b4:6e:13:53:b7:dc:75:25:9f:8a:c9:55:10:32: 15:9e:f0:41:70:11:15:a6:64:14:b5:7c:60:3b:4b:5c:43:f8: 81:2f:a9:f8:8d:cf:5d:38:a8:f0:47:ea:17:8c:52:24:0b:97: 8a:f8:9e:f4:b5:55:6c:eb:34:75:a3:d4:9f:9b:66:cb:26:44: 1e:f2:8b:e6:ec:bb:4d:1a:ac:21:2a:2a:db:6a:aa:70:d9:c7: d4:ca:ad:cf:7d:fa:8a:ea:9e:87:55:b2:83:c2:48:6d:6f:1f: 95:22:1a:8f:2a:b2:6a:0d:91:5d:0d:6e:29:62:f8:12:e6:4e: 2b:76:be:c9:f7:50:af:48:fa:39:98:24:08:d0:f7:c2:2c:c7: 16:80:9d:9b:79:c1:af:28:9c:a4:5b:31:4f:dd:c2:4b:fd:34: ff:f1:3e:55:c2:0b:49:1a:a9:52:d0:fc:8c:b2:79:20:e0:9d: fe:b9:48:83:4a:f1:62:e5:54:8b:c0:0f:76:b2:13:3d:17:f5: e7:26:ff:f1:52:31:3a:7e:ca:2f:4b:ff:89:68:77:16:60:d9: 44:9e:6e:70:2a:94:ee:68:41:a5:b0:7b:79:31:9c:1c:51:5d: a5:54:16:77:9c:30:74:0e:6a:ec:37:b6:0f:c9:59:13:ff:d5: f6:92:28:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUErgLR97fEbxBINKKXiFje1hdZ9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdBMDFC OTU4RTRDNDAeFw0yNTA4MjExMjE1MzVaFw0yNTA4MjQxNjEwMzVaMDMxMTAvBgNV BAMTKDlFMjI3QzU0OEUxQzhDRTBBQjM5MzY5ODFEMkY3QTcwMDAzRDg2N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbh7GbItrRcKMn33DJrsKWT+/7 +bDEs2OHpkhpCUwY3yeP0aSedcvlbRM8r5Q0fzmvWtLdd85S4JY/9ukQ1gnEof7p BGgW+SpQNv+40O1NqngWewBTrg6cqgPVDI8Tjgt+G45hhSgKin2wFrtE0UZMXzWa JR3PMw+1gGv8LbMwC1pjGMrwrcrluxOZRgCWonO166R8rZc2i4dZuRKmTkMWBewp t0Ct3iZ9OLChMfdcTJ0C/OOJmEhUaCIhdc31uhi4JhW7oSz5TtUjoMhgmnUmupdw 558EQDB4jiB1yxzhqvtVbEPwCxmXG78Gv6tusaZgdBVcw+L29ffwZUlaTX6hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUniJ8VI4cjOCrOTaYHS96cAA9hn8wHwYDVR0j BBgwFoAU23JerC3R5it6AsVKYY16AblY5MQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDE1YTg1NS1iMjljLTQ1MDItYWY4MS1jYmI4YjRmN2YwZjcvMC9EQjcyNUVBQzJE RDFFNjJCN0EwMkM1NEE2MThEN0EwMUI5NThFNEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdBMDFCOTU4 RTRDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODAxNWE4NTUtYjI5Yy00NTAyLWFm ODEtY2JiOGI0ZjdmMGY3LzAvREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdB MDFCOTU4RTRDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4zY2O0bhNTt9x1JZ+KyVUQMhWe8EFwERWm ZBS1fGA7S1xD+IEvqfiNz104qPBH6heMUiQLl4r4nvS1VWzrNHWj1J+bZssmRB7y i+bsu00arCEqKttqqnDZx9TKrc99+orqnodVsoPCSG1vH5UiGo8qsmoNkV0Nbili +BLmTit2vsn3UK9I+jmYJAjQ98IsxxaAnZt5wa8onKRbMU/dwkv9NP/xPlXCC0ka qVLQ/IyyeSDgnf65SINK8WLlVIvAD3ayEz0X9ecm//FSMTp+yi9L/4lodxZg2USe bnAqlO5oQaWwe3kxnBxRXaVUFnecMHQOauw3tg/JWRP/1faSKIc= -----END CERTIFICATE-----Generated at Sat Aug 23 13:28:28 2025 by rpki-client