$ rpki-client -vvf repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft File: 7ED69B0DB232E419E90D72766374EA03E6F18F73.mft (raw, json) Hash identifier: BKgtn6K0mLiiSS6raiJPk1jzNYY5yckWXXJjy5j6+EA= Subject key identifier: AB:59:14:A7:7E:17:8E:08:03:BA:44:55:03:38:D1:84:23:DD:82:70 Authority key identifier: 7E:D6:9B:0D:B2:32:E4:19:E9:0D:72:76:63:74:EA:03:E6:F1:8F:73 Certificate issuer: /CN=7ED69B0DB232E419E90D72766374EA03E6F18F73 Certificate serial: 56951B85EF6269634E4FEE3A16136874D6701787 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer Subject info access: rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft Manifest number: F0 Signing time: Mon 20 Oct 2025 23:41:23 +0000 Manifest this update: Mon 20 Oct 2025 23:36:23 +0000 Manifest next update: Fri 24 Oct 2025 10:48:23 +0000 Files and hashes: 1: 3135372e32302e39342e302f32342d3234203d3e20313532343039.roa (hash: yeQYlb5D5MRjJOZy3icwpq+Xda5AxDKy2LKlKgiIVJg=) 2: 7ED69B0DB232E419E90D72766374EA03E6F18F73.crl (hash: Q2LJMWqnKY2bixxRNO8JdY/RXAmdgEEBism07ldegQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.crl rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:95:1b:85:ef:62:69:63:4e:4f:ee:3a:16:13:68:74:d6:70:17:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ED69B0DB232E419E90D72766374EA03E6F18F73 Validity Not Before: Oct 20 23:36:23 2025 GMT Not After : Oct 24 10:48:23 2025 GMT Subject: CN=AB5914A77E178E0803BA44550338D18423DD8270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:b2:ed:fa:0b:7e:9c:1f:3b:70:9e:db:a7:9f: df:9d:b7:0d:00:1a:f4:c9:44:76:04:4e:12:05:66: 6c:d8:e6:8d:13:b2:95:9d:c3:47:b3:78:13:cf:71: ba:a0:32:cf:12:29:8c:b0:07:57:2e:30:31:58:44: 97:cd:45:91:13:c6:10:d4:6b:20:55:22:db:ca:6f: 8b:05:9f:df:8f:2c:57:96:de:d2:4a:ac:38:20:bc: a9:6e:38:4d:fb:58:2a:35:dc:86:ac:dd:bb:c4:8f: 87:c4:48:e4:8d:62:5b:3e:2a:31:a0:23:b4:e4:ee: cf:7b:e8:cb:96:90:f4:b2:66:f9:cf:a7:d4:33:bb: c5:6f:f1:93:b0:07:84:53:e6:40:b3:90:ae:85:1d: cb:60:a6:c3:3a:88:42:99:61:80:89:8e:16:5e:4e: fd:1c:bf:f7:2f:2f:b3:dc:57:9d:3d:7f:a6:35:fa: 30:bc:84:fb:56:74:84:1f:5e:40:83:94:da:49:cd: 15:3f:60:f2:f8:7f:e8:95:86:e1:cf:e0:7d:48:f9: 24:f8:9b:d5:be:cf:6f:28:30:46:81:26:cf:3c:1f: 18:bc:40:93:c5:e8:d7:35:df:bf:5f:3d:a2:31:4a: 3f:56:ae:87:22:cb:fa:02:35:b3:3b:0a:ba:a6:df: d3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:59:14:A7:7E:17:8E:08:03:BA:44:55:03:38:D1:84:23:DD:82:70 X509v3 Authority Key Identifier: keyid:7E:D6:9B:0D:B2:32:E4:19:E9:0D:72:76:63:74:EA:03:E6:F1:8F:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:04:26:a6:2a:a2:5f:9c:be:b6:40:4f:3a:79:20:f2:a6:b1: 8c:4c:02:c7:92:05:3a:9b:e1:1c:6b:a6:8a:cd:73:c3:3f:47: f1:ca:46:fc:69:b2:bf:3f:af:ad:49:79:a4:4d:ff:e5:69:6f: b1:b8:9d:5d:21:d6:32:d3:90:80:a5:46:48:0a:4a:3f:07:69: d5:c8:08:e4:49:c0:7d:5e:17:00:78:99:5b:cb:89:e2:1f:bf: c1:83:27:76:20:df:1a:f4:10:09:fc:ad:52:2b:2f:d6:52:e2: 9e:22:d8:e1:45:65:21:44:f3:c7:f4:79:02:10:fd:cf:5f:ad: 2a:ef:a4:e4:85:d9:d3:17:e7:20:6d:c5:e5:4c:ad:60:06:eb: bf:c1:34:5c:9c:d1:25:b1:9f:b5:49:79:0d:19:b5:59:73:9b: d3:86:d7:82:f8:68:f3:b2:c7:92:28:54:5d:ad:5e:ba:be:d9: 31:60:ce:b3:ce:00:54:7c:11:90:34:e5:08:0a:95:65:58:b0: 7d:54:31:25:55:8c:f0:5d:8c:e5:ab:f3:fa:0f:be:38:2a:86: 60:36:74:4e:92:26:6a:ed:a4:fe:db:71:be:24:98:1e:de:6c: a7:28:fe:06:1b:da:bb:b9:cd:8c:a1:70:1e:ec:a0:6c:96:89: 18:97:d5:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVpUbhe9iaWNOT+46FhNodNZwF4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VENjlCMERCMjMyRTQxOUU5MEQ3Mjc2NjM3NEVBMDNF NkYxOEY3MzAeFw0yNTEwMjAyMzM2MjNaFw0yNTEwMjQxMDQ4MjNaMDMxMTAvBgNV BAMTKEFCNTkxNEE3N0UxNzhFMDgwM0JBNDQ1NTAzMzhEMTg0MjNERDgyNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2su36C36cHztwntunn9+dtw0A GvTJRHYEThIFZmzY5o0TspWdw0ezeBPPcbqgMs8SKYywB1cuMDFYRJfNRZETxhDU ayBVItvKb4sFn9+PLFeW3tJKrDggvKluOE37WCo13Ias3bvEj4fESOSNYls+KjGg I7Tk7s976MuWkPSyZvnPp9Qzu8Vv8ZOwB4RT5kCzkK6FHctgpsM6iEKZYYCJjhZe Tv0cv/cvL7PcV509f6Y1+jC8hPtWdIQfXkCDlNpJzRU/YPL4f+iVhuHP4H1I+ST4 m9W+z28oMEaBJs88Hxi8QJPF6Nc1379fPaIxSj9Wrociy/oCNbM7Crqm39M1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq1kUp34XjggDukRVAzjRhCPdgnAwHwYDVR0j BBgwFoAUftabDbIy5BnpDXJ2Y3TqA+bxj3MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzJkMTc1Mi00ODUzLTRjNzQtYjU3NC05OTRkM2IxMjQwOTAvMC83RUQ2OUIwREIy MzJFNDE5RTkwRDcyNzY2Mzc0RUEwM0U2RjE4RjczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0VENjlCMERCMjMyRTQxOUU5MEQ3Mjc2NjM3NEVBMDNFNkYx OEY3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTcyZDE3NTItNDg1My00Yzc0LWI1 NzQtOTk0ZDNiMTI0MDkwLzAvN0VENjlCMERCMjMyRTQxOUU5MEQ3Mjc2NjM3NEVB MDNFNkYxOEY3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANgEJqYqol+cvrZATzp5IPKmsYxMAseSBTqb 4RxrporNc8M/R/HKRvxpsr8/r61JeaRN/+Vpb7G4nV0h1jLTkIClRkgKSj8HadXI CORJwH1eFwB4mVvLieIfv8GDJ3Yg3xr0EAn8rVIrL9ZS4p4i2OFFZSFE88f0eQIQ /c9frSrvpOSF2dMX5yBtxeVMrWAG67/BNFyc0SWxn7VJeQ0ZtVlzm9OG14L4aPOy x5IoVF2tXrq+2TFgzrPOAFR8EZA05QgKlWVYsH1UMSVVjPBdjOWr8/oPvjgqhmA2 dE6SJmrtpP7bcb4kmB7ebKco/gYb2ru5zYyhcB7soGyWiRiX1Vc= -----END CERTIFICATE-----Generated at Tue Oct 21 09:56:26 2025 by rpki-client