$ rpki-client -vvf repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft File: B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft (raw, json) Hash identifier: CDlF1qb3/fbDtLAVDbz0HiikgcpwqQ47BK7H4X3SGeA= Subject key identifier: 76:22:05:61:8E:64:3E:7E:25:B5:21:F6:A7:C8:18:9E:C5:0D:96:70 Authority key identifier: B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30 Certificate issuer: /CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30 Certificate serial: 673A7A576233DEB0F0BB9A9653816B6B39727D1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft Manifest number: 0129 Signing time: Sat 18 Oct 2025 21:01:16 +0000 Manifest this update: Sat 18 Oct 2025 20:56:16 +0000 Manifest next update: Wed 22 Oct 2025 01:31:16 +0000 Files and hashes: 1: B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl (hash: G3mpO68wEK4Ku+5DSyRmb1axcVycmdkEtnk26n1BkFs=) 2: 3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa (hash: b0fuY1pKKFn/0Zi2JNlIa5wt7XKTYP6sji14ARgrEj0=) 3: 3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa (hash: yI+x3QlccThUEQyL4aGgW81et+4syWgCbrFAnQNyq/g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 01:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:3a:7a:57:62:33:de:b0:f0:bb:9a:96:53:81:6b:6b:39:72:7d:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30 Validity Not Before: Oct 18 20:56:16 2025 GMT Not After : Oct 22 01:31:16 2025 GMT Subject: CN=762205618E643E7E25B521F6A7C8189EC50D9670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:35:5f:3b:06:9c:cc:09:5a:d1:c6:98:44:51: e2:c3:4a:52:dc:56:56:2d:ca:a1:c7:20:96:c1:03: 6f:a8:32:d8:ac:4e:dc:dc:c7:95:af:ed:fa:e7:a5: 3d:9a:91:e4:59:0f:ff:1b:8d:5d:5a:2a:fe:14:80: e3:aa:ee:62:04:3d:4f:95:fe:31:5f:a1:be:90:9a: 22:e9:91:83:54:b0:5f:5b:66:9c:a4:8d:57:1b:95: 6f:28:c2:5d:37:1a:43:fe:c0:65:42:b7:2f:82:f6: 95:92:f7:92:48:00:0a:7f:1f:8f:5b:67:01:14:01: 9a:21:00:85:1f:07:ff:c3:3e:00:56:0d:e3:36:59: 82:c6:07:d9:b3:4d:d1:11:ef:92:53:ff:d3:25:39: df:22:3b:52:6f:5a:2f:94:89:bb:d6:9e:af:d6:a0: 95:0e:da:c2:e1:7d:e3:a2:1f:d1:04:d5:05:21:f6: 9f:9c:99:76:0d:ec:ba:30:e4:d4:15:a5:30:da:d7: 78:55:27:f6:6f:0e:87:6b:27:8c:b5:ca:05:a7:47: 41:55:46:5e:47:cf:9e:4e:fe:e5:b6:d7:db:45:7b: 98:eb:75:be:38:9c:55:7d:79:ea:ac:ef:1f:bf:e0: 8d:da:e2:8b:b4:81:50:b5:51:91:a3:63:66:d1:3d: c5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:22:05:61:8E:64:3E:7E:25:B5:21:F6:A7:C8:18:9E:C5:0D:96:70 X509v3 Authority Key Identifier: keyid:B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:6f:0d:32:0a:05:d1:eb:a3:39:43:d5:6c:5e:14:55:28:13: 39:12:61:48:d9:d6:a9:22:75:57:1c:26:58:13:0f:07:40:4e: 27:b2:a6:1d:63:12:14:04:20:5f:87:7c:c7:55:eb:e2:84:d1: e4:fc:5d:c1:d5:1b:18:a1:98:82:6b:2e:a4:d5:22:fa:1c:ad: d7:30:9d:08:9b:d2:98:7e:66:a5:0c:e2:c7:a6:c8:4f:90:aa: fc:ac:85:45:e7:c1:db:74:78:ad:17:63:25:fd:0b:a2:8e:cb: 67:ba:0d:ba:b8:0d:30:b8:1f:f2:35:2f:a4:24:5a:e7:65:d2: 1d:83:bf:91:db:52:5f:db:f0:41:81:09:a7:a4:d0:06:d1:82: 4e:d4:f5:7c:f7:d7:0a:2d:14:7d:9f:8b:c1:e2:fd:a1:a1:c7: f6:ae:73:b9:ad:5c:d3:30:87:78:7f:c7:04:ec:a6:83:a4:04: 40:56:c2:8b:86:d9:9d:2e:d2:e9:71:9d:a4:5d:5c:35:b9:e9: d0:92:6e:96:f5:2f:6d:e3:cf:31:bd:8b:61:49:50:88:6d:35: 71:3a:cb:f7:e8:b5:b5:d9:7c:ae:24:4b:be:b7:96:d4:8c:ca: 66:b8:77:e5:8e:5a:a9:19:96:64:4e:a5:2c:39:6e:f8:48:bd: c8:f3:21:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZzp6V2Iz3rDwu5qWU4FrazlyfR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2QThG RTZENEMzMDAeFw0yNTEwMTgyMDU2MTZaFw0yNTEwMjIwMTMxMTZaMDMxMTAvBgNV BAMTKDc2MjIwNTYxOEU2NDNFN0UyNUI1MjFGNkE3QzgxODlFQzUwRDk2NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFNV87BpzMCVrRxphEUeLDSlLc VlYtyqHHIJbBA2+oMtisTtzcx5Wv7frnpT2akeRZD/8bjV1aKv4UgOOq7mIEPU+V /jFfob6QmiLpkYNUsF9bZpykjVcblW8owl03GkP+wGVCty+C9pWS95JIAAp/H49b ZwEUAZohAIUfB//DPgBWDeM2WYLGB9mzTdER75JT/9MlOd8iO1JvWi+UibvWnq/W oJUO2sLhfeOiH9EE1QUh9p+cmXYN7Low5NQVpTDa13hVJ/ZvDodrJ4y1ygWnR0FV Rl5Hz55O/uW219tFe5jrdb44nFV9eeqs7x+/4I3a4ou0gVC1UZGjY2bRPcWNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdiIFYY5kPn4ltSH2p8gYnsUNlnAwHwYDVR0j BBgwFoAUt6PeAX+z10CykyLYGNXGqP5tTDAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjE2YzA0ZC1kOWUwLTRjMWYtOGExNC1lMjNiZjI3NDQ1OTIvMC9CN0EzREUwMTdG QjNENzQwQjI5MzIyRDgxOEQ1QzZBOEZFNkQ0QzMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2QThGRTZE NEMzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYxNmMwNGQtZDllMC00YzFmLThh MTQtZTIzYmYyNzQ0NTkyLzAvQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2 QThGRTZENEMzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK9vDTIKBdHrozlD1WxeFFUoEzkSYUjZ1qki dVccJlgTDwdATieyph1jEhQEIF+HfMdV6+KE0eT8XcHVGxihmIJrLqTVIvocrdcw nQib0ph+ZqUM4semyE+QqvyshUXnwdt0eK0XYyX9C6KOy2e6Dbq4DTC4H/I1L6Qk Wudl0h2Dv5HbUl/b8EGBCaek0AbRgk7U9Xz31wotFH2fi8Hi/aGhx/auc7mtXNMw h3h/xwTspoOkBEBWwouG2Z0u0ulxnaRdXDW56dCSbpb1L23jzzG9i2FJUIhtNXE6 y/fotbXZfK4kS763ltSMyma4d+WOWqkZlmROpSw5bvhIvcjzIV0= -----END CERTIFICATE-----Generated at Mon Oct 20 12:55:52 2025 by rpki-client