$ rpki-client -vvf repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft File: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft (raw, json) Hash identifier: QSdAGjcMhvrtRFgXgbeoq0oQwDe5oWLCmA+7cVaUO8Q= Subject key identifier: FE:EF:06:6B:69:62:FB:D0:88:9A:DB:C3:4A:B1:DB:22:AE:38:FA:76 Authority key identifier: D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 Certificate issuer: /CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7 Certificate serial: 3B617692DD8A306576239EDA7B63108CBB48571A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft Manifest number: 01FD Signing time: Sun 02 Nov 2025 07:41:44 +0000 Manifest this update: Sun 02 Nov 2025 07:36:44 +0000 Manifest next update: Wed 05 Nov 2025 12:25:44 +0000 Files and hashes: 1: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl (hash: Aq5UN0Oo6duxNqq38ZI+OcC2PbZ7Fs81XBuATXQDwTg=) 2: 3130332e3231312e342e302f32332d3234203d3e2034383030.roa (hash: 59yz865tKQpU8UqeDFR2Q6MBnW99RvQGBX6jv6dW3C0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 12:25:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:61:76:92:dd:8a:30:65:76:23:9e:da:7b:63:10:8c:bb:48:57:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7 Validity Not Before: Nov 2 07:36:44 2025 GMT Not After : Nov 5 12:25:44 2025 GMT Subject: CN=FEEF066B6962FBD0889ADBC34AB1DB22AE38FA76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b4:64:f3:03:64:08:b0:a1:17:c4:35:26:ee: 8f:cd:e3:e9:18:95:02:e0:9d:f3:e0:0d:e2:c6:87: 51:1c:51:35:45:7a:06:95:4d:ba:2b:13:24:5a:80: eb:10:e2:65:4d:05:86:70:9e:50:17:30:23:6e:0b: e4:d4:2b:83:98:6e:84:64:28:fe:0c:f3:2f:fc:8d: 43:2d:3e:c5:dc:9b:74:7e:e5:04:42:c8:38:e3:41: 51:50:53:04:de:0f:38:5d:57:b7:e3:d4:38:1a:8a: 1e:be:d1:fe:64:85:c7:ac:d9:a8:ee:3f:ee:e3:d1: 9a:52:a6:fa:b4:58:81:3b:5c:f2:93:32:57:f8:a3: be:88:92:a1:47:04:eb:5f:70:43:9a:c2:1c:f5:bb: 63:68:13:23:e4:7b:b5:bb:fc:d5:2b:2b:72:5c:6b: ed:35:03:08:37:54:97:8a:86:5c:c7:b9:8f:86:ce: 50:f3:8c:34:dc:25:01:9f:42:c1:2b:86:40:a6:13: 41:85:7d:c2:76:99:e1:04:ac:a7:30:7a:95:43:26: 29:df:19:c0:fc:cb:ce:78:18:9d:0f:6b:93:54:cc: ac:98:be:f8:8a:01:c8:39:f1:d3:df:03:e8:bf:08: 71:d0:04:90:5f:29:c0:00:6c:18:f2:34:63:96:1e: 2b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:EF:06:6B:69:62:FB:D0:88:9A:DB:C3:4A:B1:DB:22:AE:38:FA:76 X509v3 Authority Key Identifier: keyid:D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:9b:b0:0d:ed:39:61:17:97:25:92:86:de:2b:8a:d2:d4:d4: da:a1:ff:94:53:f1:8d:e6:5e:c7:93:eb:39:b8:24:6c:71:ff: 77:be:fd:e3:11:c7:bf:aa:89:8d:e6:3e:c3:5d:f8:b3:cc:e4: 96:8a:3d:49:56:3c:56:f2:fa:96:8b:8a:ce:55:52:4e:c2:5d: 91:49:6c:42:f1:47:c6:c4:69:0f:04:f3:65:8c:7d:4e:5f:f0: bf:38:01:bd:a1:1a:37:dd:16:aa:8f:4a:60:fb:32:44:95:af: 40:f0:8c:da:ee:e1:3d:df:8d:b7:bd:39:fe:fe:7c:78:31:43: 56:25:83:5a:8b:37:3b:9d:58:78:bb:d4:a4:cd:a9:4c:bb:f8: f9:af:91:36:79:43:94:08:71:17:79:cc:20:11:21:30:49:d1: ce:82:f9:54:ac:b4:f9:d2:3c:37:cc:ad:0e:62:99:30:fb:8e: 5e:fc:d9:e0:c6:96:82:b1:b3:f8:49:4e:43:8b:25:4a:79:8e: 22:8c:f9:c3:65:91:e2:bb:c7:8e:0e:23:b8:0b:66:ef:c5:bb: c1:db:19:1a:77:38:62:13:f9:f2:d4:35:b8:8d:c8:ec:b8:1e: 23:ca:ef:25:be:cd:68:92:70:eb:f7:9f:f2:73:95:70:56:fe: 09:ac:2f:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO2F2kt2KMGV2I57ae2MQjLtIVxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5MzRC MDIzNUZBNzAeFw0yNTExMDIwNzM2NDRaFw0yNTExMDUxMjI1NDRaMDMxMTAvBgNV BAMTKEZFRUYwNjZCNjk2MkZCRDA4ODlBREJDMzRBQjFEQjIyQUUzOEZBNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCntGTzA2QIsKEXxDUm7o/N4+kY lQLgnfPgDeLGh1EcUTVFegaVTborEyRagOsQ4mVNBYZwnlAXMCNuC+TUK4OYboRk KP4M8y/8jUMtPsXcm3R+5QRCyDjjQVFQUwTeDzhdV7fj1Dgaih6+0f5khces2aju P+7j0ZpSpvq0WIE7XPKTMlf4o76IkqFHBOtfcEOawhz1u2NoEyPke7W7/NUrK3Jc a+01Awg3VJeKhlzHuY+GzlDzjDTcJQGfQsErhkCmE0GFfcJ2meEErKcwepVDJinf GcD8y854GJ0Pa5NUzKyYvviKAcg58dPfA+i/CHHQBJBfKcAAbBjyNGOWHiv9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/u8Ga2li+9CImtvDSrHbIq44+nYwHwYDVR0j BBgwFoAU0EPCorOV5qe8ijLxrmwZNLAjX6cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2FkMzc1Ny05M2EwLTRiMzMtOTEyOC0yNGFhNjEzMDRlZmYvMC9EMDQzQzJBMkIz OTVFNkE3QkM4QTMyRjFBRTZDMTkzNEIwMjM1RkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5MzRCMDIz NUZBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNhZDM3NTctOTNhMC00YjMzLTkx MjgtMjRhYTYxMzA0ZWZmLzAvRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5 MzRCMDIzNUZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6bsA3tOWEXlyWSht4ritLU1Nqh/5RT8Y3m XseT6zm4JGxx/3e+/eMRx7+qiY3mPsNd+LPM5JaKPUlWPFby+paLis5VUk7CXZFJ bELxR8bEaQ8E82WMfU5f8L84Ab2hGjfdFqqPSmD7MkSVr0DwjNru4T3fjbe9Of7+ fHgxQ1Ylg1qLNzudWHi71KTNqUy7+PmvkTZ5Q5QIcRd5zCARITBJ0c6C+VSstPnS PDfMrQ5imTD7jl782eDGloKxs/hJTkOLJUp5jiKM+cNlkeK7x44OI7gLZu/Fu8Hb GRp3OGIT+fLUNbiNyOy4HiPK7yW+zWiScOv3n/JzlXBW/gmsL38= -----END CERTIFICATE-----Generated at Tue Nov 4 08:21:21 2025 by rpki-client