$ rpki-client -vvf repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft File: F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft (raw, json) Hash identifier: C2bizKfIkZqQeNr3uioAyJcvyJyGgEM1o1M1JM6LkjM= Subject key identifier: 57:7B:39:87:15:C0:E8:37:C1:6A:8C:5F:A9:87:AE:1A:F2:79:4A:31 Authority key identifier: F7:00:7F:FD:A6:6A:99:D7:58:8D:A9:3F:FA:F2:6B:DE:57:B3:CA:64 Certificate issuer: /CN=F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64 Certificate serial: 459AEBD468A95DCA18153D7AE090777BBAB8CD36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft Manifest number: 0236 Signing time: Sun 19 Oct 2025 13:21:19 +0000 Manifest this update: Sun 19 Oct 2025 13:16:19 +0000 Manifest next update: Wed 22 Oct 2025 19:33:19 +0000 Files and hashes: 1: F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl (hash: T5EmSYJZDADABUowvVwM/IiLDH0x4S5jAmzUFYoTjwE=) 2: 3130332e3138362e3230392e302f32342d3234203d3e20313336383733.roa (hash: LoEOvDkV9bQaYXTmNRoMjCJnrRw7dRDwtZgFA/xt/mM=) 3: 3130332e3138362e3230382e302f32342d3234203d3e20313337333331.roa (hash: 7ko0bxN2Z7aHh5HxpPGcoXd3wiTgQprx370mdkriXlU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:9a:eb:d4:68:a9:5d:ca:18:15:3d:7a:e0:90:77:7b:ba:b8:cd:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64 Validity Not Before: Oct 19 13:16:19 2025 GMT Not After : Oct 22 19:33:19 2025 GMT Subject: CN=577B398715C0E837C16A8C5FA987AE1AF2794A31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0b:13:0e:ee:c4:2c:f5:07:10:c2:8d:70:06: 4f:20:3c:72:d8:c7:2f:fb:cf:6c:6f:12:5a:8c:f0: 31:9f:49:9e:df:92:67:16:b4:a9:f7:01:77:55:fe: 1d:5a:74:7c:35:4a:a7:57:70:d7:56:b3:44:e7:f7: 7a:54:7f:d2:88:df:20:08:6c:5f:2c:f5:6a:f6:23: 68:c1:d3:85:2c:f2:0d:73:a0:23:6c:b5:b2:7d:b1: ce:b1:1d:29:6a:1a:32:e5:b8:3e:54:1f:0a:46:8f: cf:03:60:3e:42:a1:57:96:09:48:19:b8:1c:be:8e: 1f:a2:59:0d:a2:68:41:05:93:a1:e8:54:05:1c:02: f6:fb:3e:aa:7a:f2:e6:28:b8:70:52:0c:8e:b3:31: 7f:6e:ae:f8:95:74:42:c1:29:a6:03:16:28:49:33: ce:e9:48:b9:29:3b:e0:e0:3f:6a:00:0f:ae:d7:86: 8c:1e:9f:93:d4:df:7f:db:6d:11:fe:59:77:a9:b4: 68:cd:23:77:1c:68:62:f1:e1:cd:e5:f8:be:83:4e: 59:67:68:3e:33:e0:6b:87:a5:f0:b1:45:ff:e2:76: 12:90:fa:e1:68:48:5b:e9:59:48:79:c2:b9:f1:01: 5c:49:9f:e0:b3:a2:0f:71:92:19:3b:e1:37:a6:ba: d3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7B:39:87:15:C0:E8:37:C1:6A:8C:5F:A9:87:AE:1A:F2:79:4A:31 X509v3 Authority Key Identifier: keyid:F7:00:7F:FD:A6:6A:99:D7:58:8D:A9:3F:FA:F2:6B:DE:57:B3:CA:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:51:3b:2e:3e:70:b5:26:f5:a2:41:11:26:8f:ab:19:bd:07: 08:77:80:fe:5f:c0:6f:dd:7c:c0:39:50:ac:f3:53:44:fc:e9: bc:c9:ec:d8:4a:0f:c0:a6:39:b3:d8:15:2a:1f:25:be:d9:2c: 4f:66:5a:53:62:fa:2b:8e:93:a0:27:93:d5:6f:c6:25:7f:89: 5e:ad:96:f3:2d:9c:16:fd:4c:0b:1b:06:b2:88:c4:e2:fa:f8: 6e:bc:08:cc:c2:2b:2f:78:a4:5e:b8:f8:24:9f:93:47:95:93: 52:fc:e6:dc:dd:ee:d7:68:49:6c:c0:da:c3:53:c4:c1:db:9d: 71:b7:a9:aa:83:ad:5a:70:45:72:1b:ea:f3:e6:ea:b0:5d:cf: 0c:93:1d:94:51:46:0a:c5:3a:09:48:74:45:0e:5f:a6:9e:a9: 09:9e:1e:5f:31:72:f6:d3:4c:8e:7c:e4:6f:33:31:84:2f:cb: fe:27:c5:bd:55:69:b2:a1:22:87:f0:c3:d0:63:41:2c:8c:ff: 3c:2c:6d:81:0d:94:32:9c:79:81:d7:2c:63:84:4e:48:92:09: c2:72:05:74:b7:85:04:56:d0:7f:c8:a3:9a:af:24:1c:ac:a6: c1:cf:c9:29:c7:2e:84:09:48:fc:ff:ae:7b:88:cb:ed:c3:77: e2:4f:4d:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURZrr1GipXcoYFT164JB3e7q4zTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZCREU1 N0IzQ0E2NDAeFw0yNTEwMTkxMzE2MTlaFw0yNTEwMjIxOTMzMTlaMDMxMTAvBgNV BAMTKDU3N0IzOTg3MTVDMEU4MzdDMTZBOEM1RkE5ODdBRTFBRjI3OTRBMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdCxMO7sQs9QcQwo1wBk8gPHLY xy/7z2xvElqM8DGfSZ7fkmcWtKn3AXdV/h1adHw1SqdXcNdWs0Tn93pUf9KI3yAI bF8s9Wr2I2jB04Us8g1zoCNstbJ9sc6xHSlqGjLluD5UHwpGj88DYD5CoVeWCUgZ uBy+jh+iWQ2iaEEFk6HoVAUcAvb7Pqp68uYouHBSDI6zMX9urviVdELBKaYDFihJ M87pSLkpO+DgP2oAD67Xhowen5PU33/bbRH+WXeptGjNI3ccaGLx4c3l+L6DTlln aD4z4GuHpfCxRf/idhKQ+uFoSFvpWUh5wrnxAVxJn+Czog9xkhk74TemutOpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV3s5hxXA6DfBaoxfqYeuGvJ5SjEwHwYDVR0j BBgwFoAU9wB//aZqmddYjak/+vJr3lezymQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OWE5ZTgzNS1mM2ExLTRjMzYtYjQ3ZC02ZjJmNzFlYjhhYTQvMC9GNzAwN0ZGREE2 NkE5OUQ3NTg4REE5M0ZGQUYyNkJERTU3QjNDQTY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZCREU1N0Iz Q0E2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDlhOWU4MzUtZjNhMS00YzM2LWI0 N2QtNmYyZjcxZWI4YWE0LzAvRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZC REU1N0IzQ0E2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJROy4+cLUm9aJBESaPqxm9Bwh3gP5fwG/d fMA5UKzzU0T86bzJ7NhKD8CmObPYFSofJb7ZLE9mWlNi+iuOk6Ank9VvxiV/iV6t lvMtnBb9TAsbBrKIxOL6+G68CMzCKy94pF64+CSfk0eVk1L85tzd7tdoSWzA2sNT xMHbnXG3qaqDrVpwRXIb6vPm6rBdzwyTHZRRRgrFOglIdEUOX6aeqQmeHl8xcvbT TI585G8zMYQvy/4nxb1VabKhIofww9BjQSyM/zwsbYENlDKceYHXLGOETkiSCcJy BXS3hQRW0H/Io5qvJByspsHPySnHLoQJSPz/rnuIy+3Dd+JPTRo= -----END CERTIFICATE-----Generated at Mon Oct 20 12:26:13 2025 by rpki-client