$ rpki-client -vvf repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft File: 7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft (raw, json) Hash identifier: bwkJrwr1KyOTGpF0/YlG1471d9Eu25t29QUd8utZscs= Subject key identifier: E6:77:BE:C4:A8:B5:53:DE:50:90:2F:9A:5A:07:48:B9:A0:46:69:49 Authority key identifier: 71:36:38:25:78:BA:0A:CB:DD:5E:EA:C6:87:FF:32:34:D0:46:14:B1 Certificate issuer: /CN=7136382578BA0ACBDD5EEAC687FF3234D04614B1 Certificate serial: 243344775753560FB7C1A6F45ABA498053588110 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft Manifest number: 0395 Signing time: Sat 18 Oct 2025 05:31:56 +0000 Manifest this update: Sat 18 Oct 2025 05:26:56 +0000 Manifest next update: Tue 21 Oct 2025 15:15:56 +0000 Files and hashes: 1: 7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl (hash: qxNcBKfmWwcKTyvr2KfHUJEVMf2L2CS3CWRoIXmK5wA=) 2: 3130332e3136392e3230372e302f32342d3234203d3e203435333235.roa (hash: af3wLczo6S1Ff2cHv7BLC7ZKbE+GaXVBqYVonmsEaYA=) 3: 3130332e3136392e3230362e302f32342d3234203d3e203435333235.roa (hash: /3CGvY//H1css9zYuxxW/Bez/32hDDiVLYL7tvwgxws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:15:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:33:44:77:57:53:56:0f:b7:c1:a6:f4:5a:ba:49:80:53:58:81:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7136382578BA0ACBDD5EEAC687FF3234D04614B1 Validity Not Before: Oct 18 05:26:56 2025 GMT Not After : Oct 21 15:15:56 2025 GMT Subject: CN=E677BEC4A8B553DE50902F9A5A0748B9A0466949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c0:dc:64:6e:f3:cf:df:19:0e:4e:70:40:eb: 2e:41:2a:4b:ed:ae:f2:1e:cd:44:ec:60:e2:69:20: 0c:63:84:db:99:ee:c2:80:b9:f7:15:6f:73:24:4c: 40:4e:91:8a:59:a1:80:c9:dd:78:02:99:c4:05:7f: 20:bd:ac:a2:6b:0b:93:5d:d5:fd:49:39:c1:c9:c0: 1a:44:b4:8b:04:0a:ff:95:82:5f:fa:b0:31:d2:c2: c8:cf:16:d5:7b:3d:06:47:13:45:b3:cb:9e:ba:f5: 77:b2:dc:7b:99:75:60:fa:73:28:6a:f5:c5:0f:39: f0:d3:35:e6:91:67:f6:46:11:c1:5c:f3:e4:82:41: 0f:78:07:bb:62:e8:20:7e:6e:5f:21:bc:67:54:ea: 68:44:1b:6e:bf:12:e0:5c:23:6c:ba:a7:22:76:d2: a7:b6:59:fb:9b:c9:4d:a6:5e:f1:5b:03:26:ad:9d: 79:69:64:d8:8d:6f:69:ce:d7:55:37:ec:eb:ce:79: ea:56:19:55:3b:fc:58:df:b6:85:b8:6e:b6:b5:20: b1:e1:df:cd:3e:26:f9:6d:1f:ff:b3:2a:f1:60:3d: 84:94:be:f5:78:b9:e1:bb:a6:2b:9e:d8:89:77:26: 27:ec:99:67:9c:db:23:17:47:dc:ea:17:ff:b8:b2: 8b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:77:BE:C4:A8:B5:53:DE:50:90:2F:9A:5A:07:48:B9:A0:46:69:49 X509v3 Authority Key Identifier: keyid:71:36:38:25:78:BA:0A:CB:DD:5E:EA:C6:87:FF:32:34:D0:46:14:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:d6:32:86:90:81:8b:d8:45:23:8f:9d:08:6d:56:94:20:b9: dd:55:97:75:8a:c8:48:fb:95:14:ad:ce:9a:a0:d7:57:e0:39: 8c:49:72:e3:37:79:bf:1d:5b:60:14:89:80:fe:8f:fc:ed:cd: c0:55:8d:a4:98:c9:78:99:a0:8a:2f:44:69:08:19:4b:d8:b0: f0:6d:22:fc:8d:d7:b6:f4:f7:13:8e:24:5d:fa:fd:f2:89:7c: 41:fa:08:6f:33:a8:c5:a6:83:31:43:b9:43:70:3c:c8:eb:25: 44:5b:cc:db:b1:c7:db:e6:4b:c4:6e:f7:27:9d:fa:9b:8c:fc: 41:99:42:fb:93:ae:cc:f8:a3:d8:0c:f2:6c:ed:07:ab:da:ec: af:c3:4d:c9:57:93:7a:b2:a7:5f:e1:53:b2:6a:36:21:63:62: de:5c:1a:ae:67:67:16:d7:1b:94:0e:7f:5a:35:ee:bd:5d:56: 6f:31:d0:b9:8d:2a:91:6b:f2:a1:92:20:20:7d:16:91:72:aa: 5b:b6:71:0d:0a:2c:42:b2:18:c1:f2:56:87:6b:c6:e9:33:18: d8:60:21:c3:0a:d2:9d:fb:ab:20:cf:45:5c:bf:b2:47:27:48: b9:c8:75:fd:15:22:88:54:d5:f1:e2:1a:f6:90:b3:07:69:3e: 6b:00:58:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJDNEd1dTVg+3wab0WrpJgFNYgRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzEzNjM4MjU3OEJBMEFDQkRENUVFQUM2ODdGRjMyMzRE MDQ2MTRCMTAeFw0yNTEwMTgwNTI2NTZaFw0yNTEwMjExNTE1NTZaMDMxMTAvBgNV BAMTKEU2NzdCRUM0QThCNTUzREU1MDkwMkY5QTVBMDc0OEI5QTA0NjY5NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQwNxkbvPP3xkOTnBA6y5BKkvt rvIezUTsYOJpIAxjhNuZ7sKAufcVb3MkTEBOkYpZoYDJ3XgCmcQFfyC9rKJrC5Nd 1f1JOcHJwBpEtIsECv+Vgl/6sDHSwsjPFtV7PQZHE0Wzy5669Xey3HuZdWD6cyhq 9cUPOfDTNeaRZ/ZGEcFc8+SCQQ94B7ti6CB+bl8hvGdU6mhEG26/EuBcI2y6pyJ2 0qe2WfubyU2mXvFbAyatnXlpZNiNb2nO11U37OvOeepWGVU7/FjftoW4bra1ILHh 380+JvltH/+zKvFgPYSUvvV4ueG7piue2Il3JifsmWec2yMXR9zqF/+4sotnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5ne+xKi1U95QkC+aWgdIuaBGaUkwHwYDVR0j BBgwFoAUcTY4JXi6CsvdXurGh/8yNNBGFLEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2Y3Mzc4MC0wOTI1LTRiNGEtYmNhNy1hMWU3ZWQzZmY0MmEvMC83MTM2MzgyNTc4 QkEwQUNCREQ1RUVBQzY4N0ZGMzIzNEQwNDYxNEIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzEzNjM4MjU3OEJBMEFDQkRENUVFQUM2ODdGRjMyMzREMDQ2 MTRCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdmNzM3ODAtMDkyNS00YjRhLWJj YTctYTFlN2VkM2ZmNDJhLzAvNzEzNjM4MjU3OEJBMEFDQkRENUVFQUM2ODdGRjMy MzREMDQ2MTRCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDWMoaQgYvYRSOPnQhtVpQgud1Vl3WKyEj7 lRStzpqg11fgOYxJcuM3eb8dW2AUiYD+j/ztzcBVjaSYyXiZoIovRGkIGUvYsPBt IvyN17b09xOOJF36/fKJfEH6CG8zqMWmgzFDuUNwPMjrJURbzNuxx9vmS8Ru9yed +puM/EGZQvuTrsz4o9gM8mztB6va7K/DTclXk3qyp1/hU7JqNiFjYt5cGq5nZxbX G5QOf1o17r1dVm8x0LmNKpFr8qGSICB9FpFyqlu2cQ0KLEKyGMHyVodrxukzGNhg IcMK0p37qyDPRVy/skcnSLnIdf0VIohU1fHiGvaQswdpPmsAWLw= -----END CERTIFICATE-----Generated at Mon Oct 20 14:36:13 2025 by rpki-client