$ rpki-client -vvf repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.mft File: 7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.mft (raw, json) Hash identifier: tOcXXntPPV4Vk7vbpyWWN8lJVUJPKj54712jGUndBNY= Subject key identifier: 77:78:81:98:D4:BB:99:CC:E1:6C:59:23:59:8D:E0:B8:8F:C4:44:3C Authority key identifier: 7E:46:C2:EE:50:82:35:4F:14:94:DE:6A:EA:6C:DA:64:27:69:ED:F1 Certificate issuer: /CN=7E46C2EE5082354F1494DE6AEA6CDA642769EDF1 Certificate serial: 1B5DF9A4386A6C0D70485B0C5BEACC4279A17E8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.mft Manifest number: 018A Signing time: Mon 20 Oct 2025 22:22:06 +0000 Manifest this update: Mon 20 Oct 2025 22:17:06 +0000 Manifest next update: Fri 24 Oct 2025 04:04:06 +0000 Files and hashes: 1: 323030313a6466313a393863303a3a2f34382d3438203d3e20313432333836.roa (hash: knqZS2zET5ty4Hn5ENyXOzq+6kdiMgWMs4wKA0jO5Co=) 2: 7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.crl (hash: 4e4qJ4hx7JnkDPUwAZhkU90R01yvM9iPo4nDL81Yz8E=) 3: 3130332e3137322e37302e302f32332d3234203d3e20313432333836.roa (hash: 1/5F/Fe2PkpRkHNw+n97pPHSrmMag78XpgU4CUEJyIA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.crl rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 04:04:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:5d:f9:a4:38:6a:6c:0d:70:48:5b:0c:5b:ea:cc:42:79:a1:7e:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E46C2EE5082354F1494DE6AEA6CDA642769EDF1 Validity Not Before: Oct 20 22:17:06 2025 GMT Not After : Oct 24 04:04:06 2025 GMT Subject: CN=77788198D4BB99CCE16C5923598DE0B88FC4443C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:69:6e:27:91:37:29:9c:86:ab:c5:09:05:b5: bf:fc:e6:f4:89:ad:b3:c9:42:20:aa:b1:fb:93:6a: c3:ea:0e:13:e4:b7:f0:e9:4f:04:61:cf:10:5e:68: 2d:88:fc:f2:cd:30:f7:0e:e2:cc:46:97:a6:fe:17: 8e:08:9c:27:9d:e1:6e:b9:18:82:e8:28:1e:6d:25: 6b:e2:5d:e7:ac:35:08:84:e0:b1:f9:3c:0b:b0:69: 63:4c:a7:3f:e8:b0:eb:a5:d1:b3:ee:ab:75:5b:c9: 15:2a:1e:55:54:8a:d9:83:e4:c5:b7:85:58:30:72: 43:a7:ef:0f:14:e4:f3:d9:8e:d5:aa:ad:48:a8:8d: 07:69:44:1c:68:d6:36:75:4d:e7:03:41:69:61:f1: a9:ef:97:b6:55:f7:84:2e:89:ea:ad:60:b3:ca:26: 5c:e4:d0:1a:e6:c4:a0:b4:69:fd:fe:a9:03:92:16: b3:95:26:4c:0d:bc:01:f7:f7:1e:7a:5b:53:0f:b9: 60:a4:43:bd:c3:5d:c9:df:fe:bf:e7:3c:21:f0:85: 4d:82:62:2f:b6:00:7a:7c:0a:4c:52:29:40:25:05: 28:07:ca:e3:26:2a:13:d1:22:08:5a:e9:95:57:8e: 06:73:ea:f9:7d:5a:a7:12:37:42:54:7a:10:52:2a: 77:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:78:81:98:D4:BB:99:CC:E1:6C:59:23:59:8D:E0:B8:8F:C4:44:3C X509v3 Authority Key Identifier: keyid:7E:46:C2:EE:50:82:35:4F:14:94:DE:6A:EA:6C:DA:64:27:69:ED:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:27:37:90:18:bd:0c:4d:41:af:b4:ff:d5:a0:62:0f:42:34: e1:10:3f:45:81:10:e4:3d:31:e2:c8:b6:e5:51:ff:a1:44:3e: 62:2e:bd:32:ef:63:36:70:04:5a:14:49:9f:aa:d8:52:69:fb: d5:4b:b9:8d:b1:16:4d:a5:29:07:9f:f2:29:5f:64:ba:b5:64: d9:50:1b:78:d6:ee:92:73:e2:fb:76:8e:3e:51:a4:fa:82:a5: 33:7a:4b:a2:98:26:18:5d:65:38:fb:3a:8f:f4:25:48:9c:7d: 84:1b:bb:4b:82:62:fd:28:81:17:0e:d1:bc:7c:06:78:82:c0: 91:9d:ee:42:d0:a8:36:41:d1:50:a5:09:0d:bf:5f:2c:7e:82: 11:5c:b1:a9:ae:82:09:1b:28:a5:ef:c2:b3:79:00:32:b8:6e: 8d:5f:d7:52:f4:2d:0a:2c:7b:3c:fe:f4:d3:37:fd:39:89:23: 20:1b:62:c7:c5:bd:bc:51:40:b7:6a:99:54:19:34:a6:4b:98: e3:75:db:6c:b9:2d:53:14:d2:4c:3d:63:e4:be:d0:37:28:e2: 38:52:a8:00:29:20:d8:b9:68:56:0e:3e:97:98:25:e2:1d:fa: b0:cb:13:6e:0e:0f:89:5c:11:76:77:11:37:0d:c2:3e:35:00: 07:b8:02:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG135pDhqbA1wSFsMW+rMQnmhfo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U0NkMyRUU1MDgyMzU0RjE0OTRERTZBRUE2Q0RBNjQy NzY5RURGMTAeFw0yNTEwMjAyMjE3MDZaFw0yNTEwMjQwNDA0MDZaMDMxMTAvBgNV BAMTKDc3Nzg4MTk4RDRCQjk5Q0NFMTZDNTkyMzU5OERFMEI4OEZDNDQ0M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6aW4nkTcpnIarxQkFtb/85vSJ rbPJQiCqsfuTasPqDhPkt/DpTwRhzxBeaC2I/PLNMPcO4sxGl6b+F44InCed4W65 GILoKB5tJWviXeesNQiE4LH5PAuwaWNMpz/osOul0bPuq3VbyRUqHlVUitmD5MW3 hVgwckOn7w8U5PPZjtWqrUiojQdpRBxo1jZ1TecDQWlh8anvl7ZV94QuieqtYLPK Jlzk0BrmxKC0af3+qQOSFrOVJkwNvAH39x56W1MPuWCkQ73DXcnf/r/nPCHwhU2C Yi+2AHp8CkxSKUAlBSgHyuMmKhPRIgha6ZVXjgZz6vl9WqcSN0JUehBSKnfBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd3iBmNS7mczhbFkjWY3guI/ERDwwHwYDVR0j BBgwFoAUfkbC7lCCNU8UlN5q6mzaZCdp7fEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGZmMDIyYS05YjE2LTRiNGMtOThhMi01MzQ5OTRmNTg5ZDAvMC83RTQ2QzJFRTUw ODIzNTRGMTQ5NERFNkFFQTZDREE2NDI3NjlFREYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U0NkMyRUU1MDgyMzU0RjE0OTRERTZBRUE2Q0RBNjQyNzY5 RURGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBmZjAyMmEtOWIxNi00YjRjLTk4 YTItNTM0OTk0ZjU4OWQwLzAvN0U0NkMyRUU1MDgyMzU0RjE0OTRERTZBRUE2Q0RB NjQyNzY5RURGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0nN5AYvQxNQa+0/9WgYg9CNOEQP0WBEOQ9 MeLItuVR/6FEPmIuvTLvYzZwBFoUSZ+q2FJp+9VLuY2xFk2lKQef8ilfZLq1ZNlQ G3jW7pJz4vt2jj5RpPqCpTN6S6KYJhhdZTj7Oo/0JUicfYQbu0uCYv0ogRcO0bx8 BniCwJGd7kLQqDZB0VClCQ2/Xyx+ghFcsamuggkbKKXvwrN5ADK4bo1f11L0LQos ezz+9NM3/TmJIyAbYsfFvbxRQLdqmVQZNKZLmON122y5LVMU0kw9Y+S+0Dco4jhS qAApINi5aFYOPpeYJeId+rDLE24OD4lcEXZ3ETcNwj41AAe4AlY= -----END CERTIFICATE-----Generated at Tue Oct 21 03:54:31 2025 by rpki-client