$ rpki-client -vvf repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft File: 0433DC81885AA9736198E4B13311013B6539B05D.mft (raw, json) Hash identifier: lMiPMmxQTYzdPHyK24wAqNolpnQUpwYPkBnrI1nlbyc= Subject key identifier: D1:84:71:7E:3D:E7:06:21:81:C7:1F:00:CB:39:55:7C:8A:C0:D3:15 Authority key identifier: 04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D Certificate issuer: /CN=0433DC81885AA9736198E4B13311013B6539B05D Certificate serial: 110A17A1872EAAC45C63897016EAF1EA65C50F09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft Manifest number: 01A0 Signing time: Tue 04 Nov 2025 17:31:33 +0000 Manifest this update: Tue 04 Nov 2025 17:26:33 +0000 Manifest next update: Fri 07 Nov 2025 22:27:33 +0000 Files and hashes: 1: 3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa (hash: JVhrzlpOZdWSbSjvZPb3ZH9GyBIo1oeTGaYsJmG4pDs=) 2: 3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa (hash: k6AuCQ8Lc9J6Ja31B30aJRSZbO/KYjuOQsr2CPNaQ/Q=) 3: 0433DC81885AA9736198E4B13311013B6539B05D.crl (hash: 4b99fwbwV+jLJ/7c5MC9JKcfDyX1BE9cErcj1wwGbJA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 22:27:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:0a:17:a1:87:2e:aa:c4:5c:63:89:70:16:ea:f1:ea:65:c5:0f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0433DC81885AA9736198E4B13311013B6539B05D Validity Not Before: Nov 4 17:26:33 2025 GMT Not After : Nov 7 22:27:33 2025 GMT Subject: CN=D184717E3DE7062181C71F00CB39557C8AC0D315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0c:96:a7:87:ac:6d:76:4d:ab:d0:f4:38:09: de:fa:8e:94:97:89:e0:7d:2d:b3:3b:03:1f:af:4a: c8:fc:56:fd:21:a0:16:04:aa:1f:9e:de:35:4d:c6: 6d:4c:51:9e:98:49:01:cb:b9:17:7b:95:88:fc:c2: 7c:d3:e5:b4:85:af:90:b5:4b:8d:06:ae:8a:00:9e: e2:c8:92:b9:99:7e:77:62:d6:7f:72:fd:54:a4:70: 35:cb:77:2b:ad:c7:5d:72:91:b3:78:34:ba:4b:09: 0f:d1:cb:83:c4:0c:cc:2c:1c:86:17:9d:a2:da:2b: 83:36:2f:3d:90:3e:a7:7b:09:2e:d1:e7:36:81:fb: 49:d8:4f:ac:12:42:e4:73:6a:c9:48:c4:f5:54:aa: 38:76:40:ea:a5:29:ef:a1:ff:d6:c7:f8:80:73:9a: c9:f4:6b:74:8a:32:ab:d8:0f:b4:17:ab:96:12:ea: 1e:70:ac:6c:b2:3c:5b:43:ab:c7:b0:b8:05:5e:89: eb:c2:41:45:e7:7e:14:4a:8c:4a:01:a4:1f:69:ec: da:a1:62:37:7a:0a:95:0a:aa:58:a8:57:f1:aa:3c: 49:d5:a0:19:55:06:7a:60:7b:0a:2e:5f:f7:aa:d1: 1d:ca:69:0a:6a:e2:69:33:0a:13:7e:66:63:93:b3: 21:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:84:71:7E:3D:E7:06:21:81:C7:1F:00:CB:39:55:7C:8A:C0:D3:15 X509v3 Authority Key Identifier: keyid:04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:da:58:e4:e7:ac:a0:97:ba:dd:7b:eb:13:ad:82:fd:3f:04: dd:d1:ec:2e:18:11:a6:3c:d1:1f:64:e0:42:2f:c3:a5:0b:f2: cb:96:ed:ae:82:41:64:25:55:7f:48:15:fb:da:c7:58:78:86: 39:b5:b5:d5:a9:5d:d4:85:94:93:fe:62:61:07:f2:23:0d:c4: 25:98:c1:19:db:62:6f:30:07:a3:37:89:25:1f:82:82:eb:e1: 78:89:31:19:c0:93:93:eb:7b:c3:ba:93:cc:04:69:dc:35:ff: 4c:59:db:11:fe:33:45:31:b5:f7:1b:89:7c:ae:d0:ce:8d:83: 0d:41:e4:84:91:27:1a:af:71:75:b7:d4:f0:40:e3:7d:02:65: b1:c4:8d:be:e5:20:43:2e:5e:ce:33:3f:76:07:33:da:f3:be: ac:9d:56:c3:6e:c2:a2:5f:67:44:1b:b2:79:ca:cd:9b:12:2c: 3e:7a:02:b3:ef:a4:6d:66:2a:1d:47:bc:55:e3:05:ca:35:36: 5d:86:f0:b5:15:af:29:b5:89:c7:36:7f:db:13:c3:c8:6a:a2: a0:f8:cd:5a:09:ee:87:15:12:90:ec:c2:15:bf:16:6e:cd:f4: 22:e7:22:20:50:d7:71:49:53:78:fa:18:21:02:74:57:dc:40: 3b:7a:39:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEQoXoYcuqsRcY4lwFurx6mXFDwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2 NTM5QjA1RDAeFw0yNTExMDQxNzI2MzNaFw0yNTExMDcyMjI3MzNaMDMxMTAvBgNV BAMTKEQxODQ3MTdFM0RFNzA2MjE4MUM3MUYwMENCMzk1NTdDOEFDMEQzMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNDJanh6xtdk2r0PQ4Cd76jpSX ieB9LbM7Ax+vSsj8Vv0hoBYEqh+e3jVNxm1MUZ6YSQHLuRd7lYj8wnzT5bSFr5C1 S40GrooAnuLIkrmZfndi1n9y/VSkcDXLdyutx11ykbN4NLpLCQ/Ry4PEDMwsHIYX naLaK4M2Lz2QPqd7CS7R5zaB+0nYT6wSQuRzaslIxPVUqjh2QOqlKe+h/9bH+IBz msn0a3SKMqvYD7QXq5YS6h5wrGyyPFtDq8ewuAVeievCQUXnfhRKjEoBpB9p7Nqh Yjd6CpUKqlioV/GqPEnVoBlVBnpgewouX/eq0R3KaQpq4mkzChN+ZmOTsyGhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0YRxfj3nBiGBxx8AyzlVfIrA0xUwHwYDVR0j BBgwFoAUBDPcgYhaqXNhmOSxMxEBO2U5sF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjdlZjUxNS04NTY0LTQxZTgtOWQyMC0yZDMzZDQ1Y2NiZDYvMC8wNDMzREM4MTg4 NUFBOTczNjE5OEU0QjEzMzExMDEzQjY1MzlCMDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2NTM5 QjA1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I3ZWY1MTUtODU2NC00MWU4LTlk MjAtMmQzM2Q0NWNjYmQ2LzAvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAx M0I2NTM5QjA1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXaWOTnrKCXut176xOtgv0/BN3R7C4YEaY8 0R9k4EIvw6UL8suW7a6CQWQlVX9IFfvax1h4hjm1tdWpXdSFlJP+YmEH8iMNxCWY wRnbYm8wB6M3iSUfgoLr4XiJMRnAk5Pre8O6k8wEadw1/0xZ2xH+M0UxtfcbiXyu 0M6Ngw1B5ISRJxqvcXW31PBA430CZbHEjb7lIEMuXs4zP3YHM9rzvqydVsNuwqJf Z0QbsnnKzZsSLD56ArPvpG1mKh1HvFXjBco1Nl2G8LUVrym1icc2f9sTw8hqoqD4 zVoJ7ocVEpDswhW/Fm7N9CLnIiBQ13FJU3j6GCECdFfcQDt6Oac= -----END CERTIFICATE-----Generated at Wed Nov 5 04:31:02 2025 by rpki-client