$ rpki-client -vvf repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft File: DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft (raw, json) Hash identifier: Lj680DQ4/z1CziyPIHkwfSmQoW833QHYOepf1hq+cTg= Subject key identifier: A2:BD:7C:5F:4F:17:F3:45:15:34:F0:08:B7:8F:5E:9B:78:A7:78:B7 Authority key identifier: DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 Certificate issuer: /CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Certificate serial: 4EC7476E2A146BEA43CEA0702F659C0E100EA71E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft Manifest number: D4 Signing time: Tue 05 Aug 2025 18:10:34 +0000 Manifest this update: Tue 05 Aug 2025 18:05:34 +0000 Manifest next update: Fri 08 Aug 2025 23:34:34 +0000 Files and hashes: 1: 3130332e31322e3131322e302f32322d3234203d3e20313331373238.roa (hash: W6CbDsM0PrN3d4twoSZMp8DZWVfT/4VVEcjlXAnT5RE=) 2: 3230332e3135332e3231322e302f32322d3234203d3e20313331373238.roa (hash: L+zbwKEiqCDXphQWC6ta3Lw7/a2eLbSVLx5eDneIanA=) 3: DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl (hash: oeqPmCguMVD169l5FkV/2uCMsHjDHghD827fSzeVbE0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 23:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:c7:47:6e:2a:14:6b:ea:43:ce:a0:70:2f:65:9c:0e:10:0e:a7:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Validity Not Before: Aug 5 18:05:34 2025 GMT Not After : Aug 8 23:34:34 2025 GMT Subject: CN=A2BD7C5F4F17F3451534F008B78F5E9B78A778B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2e:b6:dc:b2:bb:3b:a9:66:7d:51:a6:f2:55: c5:ab:b6:f6:74:89:aa:58:38:f8:54:92:5e:c6:4e: 0c:d5:64:34:54:ce:e9:35:3d:3c:66:47:a2:bd:f1: b2:75:a6:68:78:83:23:ff:ce:cf:9e:0a:a1:96:13: 2e:cf:25:ff:39:e6:5a:61:9d:03:69:d6:be:0e:d9: 35:94:fd:3d:19:83:98:f0:9a:1e:5e:7b:69:1c:d3: d9:61:73:01:01:96:37:05:bd:3b:5e:52:a7:f0:19: d8:31:ab:3d:18:c9:e1:63:d9:71:86:d6:eb:32:ba: 97:53:28:fc:f8:8e:7c:a4:af:00:ca:b8:1b:26:33: 35:7d:70:06:36:41:c0:be:0c:70:a3:05:de:be:26: f8:56:c0:2a:34:59:7a:bc:8b:60:e5:f1:6a:f1:79: 31:8f:49:58:4d:c5:7d:00:d2:6b:8e:60:d8:21:c4: 22:f6:f8:04:fa:c0:05:26:50:58:1e:b0:67:d9:c4: 6e:ea:7c:9e:fb:71:c5:11:c2:ed:cd:d4:8b:5a:90: 5c:7e:85:ef:2c:93:ff:be:73:3b:89:6b:63:15:65: 85:50:fe:c0:82:81:69:17:aa:cb:53:3b:17:ca:d1: cc:67:2d:65:36:f3:d1:86:1a:3e:fc:21:58:7d:a6: fb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:BD:7C:5F:4F:17:F3:45:15:34:F0:08:B7:8F:5E:9B:78:A7:78:B7 X509v3 Authority Key Identifier: keyid:DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:7b:c9:14:26:e5:c5:5e:03:30:0f:a3:c3:53:a3:34:0c:aa: e8:c3:6d:3a:fc:95:e8:ed:1d:e9:36:d5:c0:83:71:c4:38:e5: d8:89:3d:f0:31:7a:47:8b:ba:30:8e:a4:b6:9b:d2:54:30:0c: 03:30:91:34:9f:3e:86:f8:e7:57:7d:07:20:2c:d0:58:6b:45: 33:ce:1d:c8:26:11:6e:ec:dc:0f:1c:91:b0:4a:84:e2:6d:b9: 0a:88:cf:6c:18:db:46:9b:33:6b:2c:96:74:ce:82:e6:d8:7c: f2:af:1b:d8:db:c3:d0:07:cb:8b:53:4b:59:29:36:e5:ea:04: 06:5e:93:53:4c:fe:8e:2a:9c:78:ea:3d:f0:7f:32:69:6a:7d: 54:92:a6:5a:9c:fa:a7:87:2e:03:05:18:2c:2e:71:89:44:f7: 48:a5:2d:7c:69:39:de:8f:46:8d:d0:41:17:b3:94:82:1d:50: cd:d1:5a:44:cd:e5:80:26:8a:af:d7:6e:fa:4d:2d:2c:a0:f3: 7f:07:4f:0a:3c:96:ea:66:49:1a:12:d3:b5:96:ba:7e:85:f0: 49:10:f7:9f:c7:a2:92:83:bf:1b:b7:7c:de:a0:97:d9:2c:20: d6:ad:1a:d8:20:41:ae:21:d3:93:4c:47:e9:5b:01:78:ba:bb: da:84:8a:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTsdHbioUa+pDzqBwL2WcDhAOpx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdBMDFC OTU4RTRDNDAeFw0yNTA4MDUxODA1MzRaFw0yNTA4MDgyMzM0MzRaMDMxMTAvBgNV BAMTKEEyQkQ3QzVGNEYxN0YzNDUxNTM0RjAwOEI3OEY1RTlCNzhBNzc4QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Lrbcsrs7qWZ9UabyVcWrtvZ0 iapYOPhUkl7GTgzVZDRUzuk1PTxmR6K98bJ1pmh4gyP/zs+eCqGWEy7PJf855lph nQNp1r4O2TWU/T0Zg5jwmh5ee2kc09lhcwEBljcFvTteUqfwGdgxqz0YyeFj2XGG 1usyupdTKPz4jnykrwDKuBsmMzV9cAY2QcC+DHCjBd6+JvhWwCo0WXq8i2Dl8Wrx eTGPSVhNxX0A0muOYNghxCL2+AT6wAUmUFgesGfZxG7qfJ77ccURwu3N1ItakFx+ he8sk/++czuJa2MVZYVQ/sCCgWkXqstTOxfK0cxnLWU289GGGj78IVh9pvtVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUor18X08X80UVNPAIt49em3ineLcwHwYDVR0j BBgwFoAU23JerC3R5it6AsVKYY16AblY5MQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDE1YTg1NS1iMjljLTQ1MDItYWY4MS1jYmI4YjRmN2YwZjcvMC9EQjcyNUVBQzJE RDFFNjJCN0EwMkM1NEE2MThEN0EwMUI5NThFNEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdBMDFCOTU4 RTRDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODAxNWE4NTUtYjI5Yy00NTAyLWFm ODEtY2JiOGI0ZjdmMGY3LzAvREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdB MDFCOTU4RTRDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZ7yRQm5cVeAzAPo8NTozQMqujDbTr8lejt Hek21cCDccQ45diJPfAxekeLujCOpLab0lQwDAMwkTSfPob451d9ByAs0FhrRTPO HcgmEW7s3A8ckbBKhOJtuQqIz2wY20abM2sslnTOgubYfPKvG9jbw9AHy4tTS1kp NuXqBAZek1NM/o4qnHjqPfB/MmlqfVSSplqc+qeHLgMFGCwucYlE90ilLXxpOd6P Ro3QQRezlIIdUM3RWkTN5YAmiq/XbvpNLSyg838HTwo8lupmSRoS07WWun6F8EkQ 95/HopKDvxu3fN6gl9ksINatGtggQa4h05NMR+lbAXi6u9qEivE= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:04 2025 by rpki-client