$ rpki-client -vvf repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft File: DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft (raw, json) Hash identifier: QfXHK2FIcJ2IQ+aTs6wonKDJ0F/w75mRfq+t1NoGvEw= Subject key identifier: 0B:C3:82:D6:64:90:02:20:4C:82:F3:E2:E9:3D:EC:A2:1B:F3:0C:F6 Authority key identifier: DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 Certificate issuer: /CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Certificate serial: 4F31A8110BCAF6B9A8362E6F7F37365ED9EF8600 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft Manifest number: F5 Signing time: Sat 18 Oct 2025 13:20:36 +0000 Manifest this update: Sat 18 Oct 2025 13:15:36 +0000 Manifest next update: Tue 21 Oct 2025 13:46:36 +0000 Files and hashes: 1: 3130332e31322e3131322e302f32322d3234203d3e20313331373238.roa (hash: W6CbDsM0PrN3d4twoSZMp8DZWVfT/4VVEcjlXAnT5RE=) 2: 3230332e3135332e3231322e302f32322d3234203d3e20313331373238.roa (hash: L+zbwKEiqCDXphQWC6ta3Lw7/a2eLbSVLx5eDneIanA=) 3: DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl (hash: wxUHa167I2kXjEt2jbAp/r+zkSsx9w6iZGWYz3H9fdc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 13:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:31:a8:11:0b:ca:f6:b9:a8:36:2e:6f:7f:37:36:5e:d9:ef:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Validity Not Before: Oct 18 13:15:36 2025 GMT Not After : Oct 21 13:46:36 2025 GMT Subject: CN=0BC382D6649002204C82F3E2E93DECA21BF30CF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c4:e2:54:0d:8f:30:03:30:8c:7c:c5:4c:77: b5:a6:f9:1e:af:5a:78:47:ab:86:ae:5f:9d:1d:a5: 1f:59:d5:bc:95:ce:21:57:6e:cb:bb:81:36:c0:55: 24:af:d6:03:1d:2d:29:a9:43:1b:03:c2:e1:01:b9: 14:6e:37:80:b2:54:39:fe:af:4c:77:79:96:65:1e: 0d:03:35:a2:3e:31:7c:23:a0:f0:72:d6:aa:82:54: 01:4a:17:dc:af:b3:bc:6f:7e:98:1a:f5:86:9b:2f: 10:16:02:65:70:a8:d4:bc:82:9b:40:d3:9f:a0:66: a8:04:37:f0:ad:e9:88:62:27:af:a9:51:bf:33:f3: 04:7a:17:b7:d2:17:a0:a4:bf:1c:55:79:9d:9c:5c: 5a:da:6d:94:d9:0f:26:88:de:bb:71:fc:5c:6c:e7: 57:a1:d7:5f:06:a3:7e:3e:29:51:be:ee:70:f0:d8: c1:1f:03:82:76:78:4a:5e:91:b0:4a:37:56:db:0c: c9:f8:83:c5:32:49:45:09:85:a0:6a:43:83:5b:b6: 4e:ce:5d:25:3f:77:8d:4c:5e:16:04:6a:10:bb:db: 4a:89:74:41:a8:19:0f:3c:7b:7f:4f:ca:a1:a1:4d: e0:de:47:01:18:7b:38:a0:32:47:0e:ad:69:3c:29: 2d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C3:82:D6:64:90:02:20:4C:82:F3:E2:E9:3D:EC:A2:1B:F3:0C:F6 X509v3 Authority Key Identifier: keyid:DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:ee:18:a0:f5:f3:0b:d6:45:c3:02:80:4e:d1:65:54:67:ea: d7:20:b2:d9:93:57:7e:89:6e:1d:b0:07:f2:c3:ef:7b:75:ea: 49:3c:16:eb:3c:be:02:f3:19:3e:c9:2a:2d:25:47:9c:fd:e4: b8:e4:37:c4:50:c8:08:81:9e:a1:4a:0b:cf:69:dd:3a:d2:f6: 32:54:e2:ea:d8:a9:5a:ff:ec:ba:ac:c5:3c:db:a8:49:a9:2c: 9a:d1:6f:91:ee:c4:ef:44:2b:26:85:8e:e9:e7:24:f5:76:d2: fe:95:90:3d:22:f2:01:93:76:b7:0b:19:a9:12:a7:13:c1:1c: a6:ea:4d:e1:68:70:5d:8c:62:bb:d8:ac:3f:6f:7e:08:a0:8c: e5:7d:a3:6e:80:fb:d7:06:1d:05:d9:62:e2:b2:9f:37:8a:d3: 26:b4:bb:97:8d:58:14:b5:f1:41:4b:cf:52:f4:da:bd:21:19: c1:4a:ee:be:9e:39:78:b2:7f:93:cd:cc:f6:39:cf:bb:64:28: 5b:22:a3:c5:a6:7f:66:26:8f:fb:42:d5:8c:e9:30:5e:40:b6: 75:f5:cd:29:60:4f:ea:1a:5d:5e:f8:ca:f4:f8:14:35:d7:fd: b6:b4:ba:ed:40:c6:92:c9:dd:37:09:65:f3:18:a0:04:b8:d0: 1b:c3:f6:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTzGoEQvK9rmoNi5vfzc2XtnvhgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdBMDFC OTU4RTRDNDAeFw0yNTEwMTgxMzE1MzZaFw0yNTEwMjExMzQ2MzZaMDMxMTAvBgNV BAMTKDBCQzM4MkQ2NjQ5MDAyMjA0QzgyRjNFMkU5M0RFQ0EyMUJGMzBDRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+xOJUDY8wAzCMfMVMd7Wm+R6v WnhHq4auX50dpR9Z1byVziFXbsu7gTbAVSSv1gMdLSmpQxsDwuEBuRRuN4CyVDn+ r0x3eZZlHg0DNaI+MXwjoPBy1qqCVAFKF9yvs7xvfpga9YabLxAWAmVwqNS8gptA 05+gZqgEN/Ct6YhiJ6+pUb8z8wR6F7fSF6CkvxxVeZ2cXFrabZTZDyaI3rtx/Fxs 51eh118Go34+KVG+7nDw2MEfA4J2eEpekbBKN1bbDMn4g8UySUUJhaBqQ4Nbtk7O XSU/d41MXhYEahC720qJdEGoGQ88e39PyqGhTeDeRwEYezigMkcOrWk8KS1JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC8OC1mSQAiBMgvPi6T3sohvzDPYwHwYDVR0j BBgwFoAU23JerC3R5it6AsVKYY16AblY5MQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDE1YTg1NS1iMjljLTQ1MDItYWY4MS1jYmI4YjRmN2YwZjcvMC9EQjcyNUVBQzJE RDFFNjJCN0EwMkM1NEE2MThEN0EwMUI5NThFNEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdBMDFCOTU4 RTRDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODAxNWE4NTUtYjI5Yy00NTAyLWFm ODEtY2JiOGI0ZjdmMGY3LzAvREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdB MDFCOTU4RTRDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALTuGKD18wvWRcMCgE7RZVRn6tcgstmTV36J bh2wB/LD73t16kk8Fus8vgLzGT7JKi0lR5z95LjkN8RQyAiBnqFKC89p3TrS9jJU 4urYqVr/7LqsxTzbqEmpLJrRb5HuxO9EKyaFjunnJPV20v6VkD0i8gGTdrcLGakS pxPBHKbqTeFocF2MYrvYrD9vfgigjOV9o26A+9cGHQXZYuKynzeK0ya0u5eNWBS1 8UFLz1L02r0hGcFK7r6eOXiyf5PNzPY5z7tkKFsio8Wmf2Ymj/tC1YzpMF5AtnX1 zSlgT+oaXV74yvT4FDXX/ba0uu1AxpLJ3TcJZfMYoAS40BvD9u8= -----END CERTIFICATE-----Generated at Mon Oct 20 12:26:29 2025 by rpki-client