$ rpki-client -vvf repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft File: 7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft (raw, json) Hash identifier: m36yKpEf0xJfjJbGfZAmmPPjbzi3mYVTSbhY1E10ovk= Subject key identifier: A9:40:FD:DC:30:83:8E:AE:04:4F:8E:15:9E:4F:AB:82:20:41:A8:14 Authority key identifier: 7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 Certificate issuer: /CN=7DA308A66EF705BEE42CA04631A0E3901DAF88D8 Certificate serial: 4907ADE50CDE68744B1835242EF9C90A1BE96A0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft Manifest number: 0171 Signing time: Mon 20 Oct 2025 05:02:21 +0000 Manifest this update: Mon 20 Oct 2025 04:57:21 +0000 Manifest next update: Thu 23 Oct 2025 05:32:21 +0000 Files and hashes: 1: 7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl (hash: BrEjfc99AZFOpPpLlKRNka05CT0GRK4VwJ8BnCxBKkM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 05:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:07:ad:e5:0c:de:68:74:4b:18:35:24:2e:f9:c9:0a:1b:e9:6a:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DA308A66EF705BEE42CA04631A0E3901DAF88D8 Validity Not Before: Oct 20 04:57:21 2025 GMT Not After : Oct 23 05:32:21 2025 GMT Subject: CN=A940FDDC30838EAE044F8E159E4FAB822041A814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3f:58:c1:9c:c1:7d:e5:a8:d9:30:ce:ad:9f: a8:9e:51:43:81:32:1c:29:77:2c:2e:1f:a4:64:43: 41:b6:64:03:db:d3:8c:66:06:d2:35:e0:eb:2c:ba: 78:46:d8:4b:9e:13:3a:c7:e4:82:cf:39:25:68:bc: 4f:0c:2f:c2:28:70:a0:a4:12:f1:c4:e6:fe:40:8e: 98:b7:f6:f0:46:8c:57:82:8d:3c:f4:5b:fc:ec:88: 75:94:23:4e:af:b7:3d:44:3e:a5:56:ac:74:53:29: df:7c:25:52:ef:6c:71:cd:4d:7d:35:7c:9a:cf:31: ba:24:c8:4f:e4:43:0c:4b:44:fc:34:4a:83:ab:43: 28:32:15:39:60:50:ce:92:8c:62:70:28:9e:7d:69: 15:b3:d3:40:5e:c9:09:b5:f9:dd:9d:89:1e:96:f1: 94:cf:02:f2:90:b4:a7:c6:01:cf:ef:8c:24:3f:e2: 66:d3:d4:61:e0:b6:e2:67:db:ef:b8:d1:90:cb:28: ea:b6:cc:50:c5:52:04:9c:9c:7a:8a:95:c9:df:79: f5:51:65:71:c1:a3:a5:ce:13:3a:4e:bd:31:6d:0c: 30:f6:90:b2:bd:12:d1:d3:3f:35:99:9a:bc:a9:d1: ac:58:a0:97:e6:c1:f0:58:8c:ac:88:04:93:e1:c2: d3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:40:FD:DC:30:83:8E:AE:04:4F:8E:15:9E:4F:AB:82:20:41:A8:14 X509v3 Authority Key Identifier: keyid:7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:92:74:3b:23:45:79:5e:fc:da:ee:41:69:29:ec:83:40:dd: 0f:6c:44:dd:21:6f:8f:14:b3:bf:0f:d6:bf:11:77:d5:41:f0: dd:d0:e8:0c:de:84:a3:64:37:58:6a:e4:5f:65:ce:d1:e4:e6: 9c:91:aa:f4:2d:56:9f:e3:3b:d8:a2:0b:e9:37:99:53:9b:48: 32:96:4f:2f:f3:e8:13:b8:63:27:64:dd:aa:f5:aa:a9:3a:95: 9f:f2:8a:35:3a:af:7c:2e:a4:7b:5f:55:4b:5d:fc:da:73:0f: 17:d0:a0:02:36:b1:f5:85:fa:ff:e8:fe:4b:0c:68:3d:76:41: 52:38:69:3f:ed:ca:43:2e:52:e7:ad:de:d3:98:06:ce:8e:68: b1:af:aa:35:b2:0c:59:c3:df:7c:28:2d:e1:53:bc:0d:90:99: 00:9a:7a:7f:66:42:67:b5:03:64:8c:fe:1f:90:b5:0e:47:f1: 08:d5:2e:4f:14:f8:ad:d8:a1:15:3f:45:76:42:ee:e0:c5:eb: 2c:40:a9:43:62:99:0d:59:49:f3:93:15:4c:fe:7e:f9:90:f1: 52:58:86:ca:b3:ca:da:9a:33:fc:91:d2:f5:ba:5d:f0:78:70: f8:e5:9b:75:2e:d5:0e:4f:b8:6f:76:1f:d6:ae:2f:97:45:bf: 4b:5c:42:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSQet5QzeaHRLGDUkLvnJChvpagowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUzOTAx REFGODhEODAeFw0yNTEwMjAwNDU3MjFaFw0yNTEwMjMwNTMyMjFaMDMxMTAvBgNV BAMTKEE5NDBGRERDMzA4MzhFQUUwNDRGOEUxNTlFNEZBQjgyMjA0MUE4MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/P1jBnMF95ajZMM6tn6ieUUOB MhwpdywuH6RkQ0G2ZAPb04xmBtI14OssunhG2EueEzrH5ILPOSVovE8ML8IocKCk EvHE5v5Ajpi39vBGjFeCjTz0W/zsiHWUI06vtz1EPqVWrHRTKd98JVLvbHHNTX01 fJrPMbokyE/kQwxLRPw0SoOrQygyFTlgUM6SjGJwKJ59aRWz00BeyQm1+d2diR6W 8ZTPAvKQtKfGAc/vjCQ/4mbT1GHgtuJn2++40ZDLKOq2zFDFUgScnHqKlcnfefVR ZXHBo6XOEzpOvTFtDDD2kLK9EtHTPzWZmryp0axYoJfmwfBYjKyIBJPhwtNjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqUD93DCDjq4ET44Vnk+rgiBBqBQwHwYDVR0j BBgwFoAUfaMIpm73Bb7kLKBGMaDjkB2viNgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmI1ZmYzNy0zOTRhLTRlYmEtYTQ3MC0xMGFmMzdjZjc1ZGMvMC83REEzMDhBNjZF RjcwNUJFRTQyQ0EwNDYzMUEwRTM5MDFEQUY4OEQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUzOTAxREFG ODhEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZiNWZmMzctMzk0YS00ZWJhLWE0 NzAtMTBhZjM3Y2Y3NWRjLzAvN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUz OTAxREFGODhEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKSdDsjRXle/NruQWkp7INA3Q9sRN0hb48U s78P1r8Rd9VB8N3Q6AzehKNkN1hq5F9lztHk5pyRqvQtVp/jO9iiC+k3mVObSDKW Ty/z6BO4Yydk3ar1qqk6lZ/yijU6r3wupHtfVUtd/NpzDxfQoAI2sfWF+v/o/ksM aD12QVI4aT/tykMuUuet3tOYBs6OaLGvqjWyDFnD33woLeFTvA2QmQCaen9mQme1 A2SM/h+QtQ5H8QjVLk8U+K3YoRU/RXZC7uDF6yxAqUNimQ1ZSfOTFUz+fvmQ8VJY hsqzytqaM/yR0vW6XfB4cPjlm3Uu1Q5PuG92H9auL5dFv0tcQkA= -----END CERTIFICATE-----Generated at Mon Oct 20 13:12:25 2025 by rpki-client