$ rpki-client -vvf repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft File: DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft (raw, json) Hash identifier: Byyy9tRZW8P2TkeiaD+v6yVmfBJWnDCz2R+DE7lxco8= Subject key identifier: 89:07:57:89:80:3C:E1:B5:E6:3F:50:1E:3E:D5:79:DB:40:44:D8:0B Authority key identifier: DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 Certificate issuer: /CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Certificate serial: 3A25E4B22689804F5141610F8C42491D291842AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft Manifest number: FC Signing time: Mon 03 Nov 2025 00:30:35 +0000 Manifest this update: Mon 03 Nov 2025 00:25:35 +0000 Manifest next update: Thu 06 Nov 2025 03:20:35 +0000 Files and hashes: 1: 3130332e31322e3131322e302f32322d3234203d3e20313331373238.roa (hash: W6CbDsM0PrN3d4twoSZMp8DZWVfT/4VVEcjlXAnT5RE=) 2: 3230332e3135332e3231322e302f32322d3234203d3e20313331373238.roa (hash: L+zbwKEiqCDXphQWC6ta3Lw7/a2eLbSVLx5eDneIanA=) 3: DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl (hash: mKQr+0mCd/qUkYQlyD9zPwit6w74gy7Z7nSN8JVXXEU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 03:20:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:25:e4:b2:26:89:80:4f:51:41:61:0f:8c:42:49:1d:29:18:42:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Validity Not Before: Nov 3 00:25:35 2025 GMT Not After : Nov 6 03:20:35 2025 GMT Subject: CN=89075789803CE1B5E63F501E3ED579DB4044D80B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:35:d3:3f:b8:63:6d:99:57:f7:b6:c1:17:4e: 1d:f0:41:76:64:35:d7:0b:9a:55:bf:39:c7:07:36: 0f:71:78:81:af:75:98:66:13:95:85:4a:e4:0b:d0: 09:04:69:20:79:3f:77:67:5d:6b:2d:a1:d3:b4:95: 52:0a:5c:e4:49:5b:b1:e9:9f:cb:f5:5d:b8:07:26: b0:41:5a:dc:83:81:17:54:68:a9:cb:e8:3c:c4:fd: f3:1a:00:95:fb:75:84:90:1e:52:69:01:62:2d:8d: a1:49:e7:86:bd:2d:19:0b:87:f3:e0:6d:fc:4f:6f: b6:1a:1f:79:e6:be:29:19:6a:01:69:b0:b8:e7:e8: d3:e2:ea:6a:11:fd:3b:c6:a7:59:61:a7:29:6e:d5: 78:15:51:3d:8d:f3:47:bd:ff:e7:2a:63:d4:a0:ed: 7a:7d:61:1f:e9:ef:fe:c1:7f:a5:a4:80:37:3a:da: 90:82:1e:6e:21:32:ed:fb:32:30:2f:10:0e:fd:09: 23:25:4b:b5:72:f5:88:8a:91:e2:7e:31:56:8d:8b: ae:fd:d2:fa:65:23:3c:0e:ed:b8:44:55:4d:7c:2c: 2b:a8:5a:9a:05:81:89:a8:57:f5:a9:3f:01:f3:da: 19:09:e9:f1:9c:93:c3:ba:07:6f:2c:9c:3a:16:02: c6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:07:57:89:80:3C:E1:B5:E6:3F:50:1E:3E:D5:79:DB:40:44:D8:0B X509v3 Authority Key Identifier: keyid:DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:97:e2:31:29:6b:1e:eb:5c:76:bd:98:78:bb:45:03:b4:1f: 32:cc:f6:f9:51:c9:6d:bd:9f:e2:3a:ea:14:35:8e:54:4a:c2: f7:c7:98:4f:c5:36:d6:23:f0:f0:38:d1:99:e2:f2:11:ca:83: a9:aa:7a:2c:65:81:48:8f:57:ad:e2:fb:f3:5c:6b:d1:fe:c2: 60:c7:23:af:1d:b5:b6:0a:80:ad:6e:6e:9e:b5:69:f7:d7:5d: 0e:07:06:f3:f9:0b:13:d7:73:de:50:43:26:a2:b3:eb:29:f1: a3:52:06:c5:0d:b6:a6:d3:bf:44:76:65:01:69:46:83:fa:02: 36:8d:71:97:74:e8:28:fe:5b:19:a4:2c:86:c5:64:1c:b7:b3: b1:d0:00:31:40:fc:73:da:d6:90:ed:ea:55:f2:ba:6d:97:eb: 81:5f:7b:e2:51:e4:b3:36:8d:83:94:8b:c8:1e:cc:86:bd:a3: c8:ac:8f:a4:8d:fd:1c:c0:97:a6:64:57:02:d0:df:a1:71:b2: cc:59:45:ff:73:0e:01:47:99:4d:03:23:4a:64:14:4b:56:c4: 21:ff:ed:f8:3e:c4:02:0f:a9:06:09:b3:40:0b:62:38:7e:e8: db:01:d0:03:73:49:79:e0:e9:0b:d6:78:5f:fb:a4:f8:d9:ba: b5:aa:c2:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOiXksiaJgE9RQWEPjEJJHSkYQqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdBMDFC OTU4RTRDNDAeFw0yNTExMDMwMDI1MzVaFw0yNTExMDYwMzIwMzVaMDMxMTAvBgNV BAMTKDg5MDc1Nzg5ODAzQ0UxQjVFNjNGNTAxRTNFRDU3OURCNDA0NEQ4MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuNdM/uGNtmVf3tsEXTh3wQXZk NdcLmlW/OccHNg9xeIGvdZhmE5WFSuQL0AkEaSB5P3dnXWstodO0lVIKXORJW7Hp n8v1XbgHJrBBWtyDgRdUaKnL6DzE/fMaAJX7dYSQHlJpAWItjaFJ54a9LRkLh/Pg bfxPb7YaH3nmvikZagFpsLjn6NPi6moR/TvGp1lhpylu1XgVUT2N80e9/+cqY9Sg 7Xp9YR/p7/7Bf6WkgDc62pCCHm4hMu37MjAvEA79CSMlS7Vy9YiKkeJ+MVaNi679 0vplIzwO7bhEVU18LCuoWpoFgYmoV/WpPwHz2hkJ6fGck8O6B28snDoWAsZVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiQdXiYA84bXmP1AePtV520BE2AswHwYDVR0j BBgwFoAU23JerC3R5it6AsVKYY16AblY5MQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDE1YTg1NS1iMjljLTQ1MDItYWY4MS1jYmI4YjRmN2YwZjcvMC9EQjcyNUVBQzJE RDFFNjJCN0EwMkM1NEE2MThEN0EwMUI5NThFNEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdBMDFCOTU4 RTRDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODAxNWE4NTUtYjI5Yy00NTAyLWFm ODEtY2JiOGI0ZjdmMGY3LzAvREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdB MDFCOTU4RTRDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK6X4jEpax7rXHa9mHi7RQO0HzLM9vlRyW29 n+I66hQ1jlRKwvfHmE/FNtYj8PA40Zni8hHKg6mqeixlgUiPV63i+/Nca9H+wmDH I68dtbYKgK1ubp61affXXQ4HBvP5CxPXc95QQyais+sp8aNSBsUNtqbTv0R2ZQFp RoP6AjaNcZd06Cj+WxmkLIbFZBy3s7HQADFA/HPa1pDt6lXyum2X64Ffe+JR5LM2 jYOUi8gezIa9o8isj6SN/RzAl6ZkVwLQ36FxssxZRf9zDgFHmU0DI0pkFEtWxCH/ 7fg+xAIPqQYJs0ALYjh+6NsB0ANzSXng6QvWeF/7pPjZurWqwvM= -----END CERTIFICATE-----Generated at Tue Nov 4 16:46:43 2025 by rpki-client