$ rpki-client -vvf repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft File: D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft (raw, json) Hash identifier: BHZus2PK3F5nQnyRsZeJr3Y/nE9WfHOykg465d8r9Ro= Subject key identifier: 43:FC:51:24:04:21:EE:E8:50:9E:6D:2D:01:3C:D3:C2:C2:A7:A9:B6 Authority key identifier: D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 Certificate issuer: /CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Certificate serial: 6E6511192F3DE6A6FDC48A578BBE29AD48AEF348 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft Manifest number: 022B Signing time: Sun 19 Oct 2025 22:40:45 +0000 Manifest this update: Sun 19 Oct 2025 22:35:45 +0000 Manifest next update: Thu 23 Oct 2025 05:22:45 +0000 Files and hashes: 1: D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl (hash: Me2PzjOguDhcYJ4rHjopP2ur5aCJq78rBSp716tpf1o=) 2: 3130332e3138352e34332e302f32342d3234203d3e20313333333630.roa (hash: pZz62m1gD3j25rkNtr+ZrpUFopI0lVMRASTdO0j7bx0=) 3: 3130332e3138352e34322e302f32342d3234203d3e20313439363733.roa (hash: dkX3mi6UtP2EclKtk4Ns5Our6XJ4lNIlC+WY5pkrMVA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 05:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:65:11:19:2f:3d:e6:a6:fd:c4:8a:57:8b:be:29:ad:48:ae:f3:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Validity Not Before: Oct 19 22:35:45 2025 GMT Not After : Oct 23 05:22:45 2025 GMT Subject: CN=43FC51240421EEE8509E6D2D013CD3C2C2A7A9B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:17:91:f4:74:89:5d:cf:19:f4:20:50:38:42: a1:f0:1e:55:49:be:9f:17:f4:0b:29:e3:24:e6:d1: c7:84:21:91:40:2e:3e:4c:fe:44:4f:9d:03:19:53: c6:dc:d6:db:cc:65:fd:c4:e7:b8:33:d5:12:24:48: 27:c1:1a:f1:e0:01:f4:30:1d:df:0a:2e:a5:9b:51: f8:4e:cb:a1:0a:ea:7b:66:2c:ec:38:ec:62:6c:ad: 0a:55:d4:7b:22:e3:da:51:31:c5:cc:da:75:c0:4b: 00:3a:d7:35:8e:79:99:e5:48:a7:3a:70:5f:28:94: e2:d4:a0:cd:26:1b:bd:54:f3:de:a1:d3:91:6a:79: b4:29:5e:47:70:91:c8:41:18:94:87:0e:80:47:36: 95:1e:47:1e:21:17:57:e1:40:7e:ac:08:14:43:1c: d1:76:3d:b6:df:83:35:eb:11:f1:e7:d3:46:c1:a3: 71:f4:5f:ae:a6:0b:2d:08:38:6d:60:1a:19:dc:12: b7:7a:76:e9:71:e0:a6:1b:62:6f:70:c1:39:2c:ea: 23:77:97:59:31:17:fa:9e:37:ca:2f:1d:15:86:03: 2c:d5:fc:85:be:11:34:43:b8:48:ca:5e:80:4f:07: 96:ae:80:8c:ad:d7:0b:95:5d:ca:93:1d:bf:37:ca: 4e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FC:51:24:04:21:EE:E8:50:9E:6D:2D:01:3C:D3:C2:C2:A7:A9:B6 X509v3 Authority Key Identifier: keyid:D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:de:ca:21:a5:e9:80:ba:3d:4c:6d:3f:ba:57:d6:26:f4:0a: 6d:9c:4a:a4:80:c0:be:d4:32:1f:bf:ae:66:35:fc:7d:7e:ac: 3d:68:a1:c0:83:e8:41:fc:ad:f3:3f:fd:60:5f:b3:4b:57:84: d3:2d:d2:48:c1:a1:3a:ee:58:6f:9a:2f:98:77:82:19:ef:51: b3:68:b2:f3:a9:e1:53:50:56:12:8f:e1:cd:50:2a:01:6d:df: 32:73:60:42:cf:f9:1a:19:83:84:0b:37:4d:c3:bb:31:48:62: e2:a5:55:09:a4:69:3a:6c:0b:08:2e:0d:f4:23:60:11:59:95: dc:8f:7b:88:26:79:0e:eb:92:d8:74:3f:6e:ed:d9:6d:11:30: e7:06:a6:2b:82:8c:9f:d8:a3:09:80:91:b0:11:f8:fa:f9:1c: 2c:01:8f:95:81:dc:86:d0:03:c4:88:ff:7f:97:70:0d:30:60: 31:f0:c8:16:7f:ec:41:a0:2f:93:9a:ae:52:ff:cc:ca:85:45: f1:ac:c2:6f:db:a4:8d:55:8c:a3:ca:ff:c2:b8:49:b9:b3:02: 62:a4:0f:ea:b9:03:fb:39:f1:21:c1:78:ce:1d:20:c1:98:75: 56:a4:5b:ab:a0:c3:cb:8a:0d:88:55:0f:f3:91:07:da:1f:98: a1:39:85:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbmURGS895qb9xIpXi74prUiu80gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4 NTgyQkFDNDAeFw0yNTEwMTkyMjM1NDVaFw0yNTEwMjMwNTIyNDVaMDMxMTAvBgNV BAMTKDQzRkM1MTI0MDQyMUVFRTg1MDlFNkQyRDAxM0NEM0MyQzJBN0E5QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWF5H0dIldzxn0IFA4QqHwHlVJ vp8X9Asp4yTm0ceEIZFALj5M/kRPnQMZU8bc1tvMZf3E57gz1RIkSCfBGvHgAfQw Hd8KLqWbUfhOy6EK6ntmLOw47GJsrQpV1Hsi49pRMcXM2nXASwA61zWOeZnlSKc6 cF8olOLUoM0mG71U896h05FqebQpXkdwkchBGJSHDoBHNpUeRx4hF1fhQH6sCBRD HNF2PbbfgzXrEfHn00bBo3H0X66mCy0IOG1gGhncErd6dulx4KYbYm9wwTks6iN3 l1kxF/qeN8ovHRWGAyzV/IW+ETRDuEjKXoBPB5augIyt1wuVXcqTHb83yk7nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ/xRJAQh7uhQnm0tATzTwsKnqbYwHwYDVR0j BBgwFoAU18dhIkJkkbgfhOWoJOSr64WCusQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDUwZGNjMy04NGRkLTQ1OTUtYmEyYy1iYzY5OTg5NjkyZjEvMC9EN0M3NjEyMjQy NjQ5MUI4MUY4NEU1QTgyNEU0QUJFQjg1ODJCQUM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4NTgy QkFDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA1MGRjYzMtODRkZC00NTk1LWJh MmMtYmM2OTk4OTY5MmYxLzAvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFC RUI4NTgyQkFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIPeyiGl6YC6PUxtP7pX1ib0Cm2cSqSAwL7U Mh+/rmY1/H1+rD1oocCD6EH8rfM//WBfs0tXhNMt0kjBoTruWG+aL5h3ghnvUbNo svOp4VNQVhKP4c1QKgFt3zJzYELP+RoZg4QLN03DuzFIYuKlVQmkaTpsCwguDfQj YBFZldyPe4gmeQ7rkth0P27t2W0RMOcGpiuCjJ/YowmAkbAR+Pr5HCwBj5WB3IbQ A8SI/3+XcA0wYDHwyBZ/7EGgL5OarlL/zMqFRfGswm/bpI1VjKPK/8K4SbmzAmKk D+q5A/s58SHBeM4dIMGYdVakW6ugw8uKDYhVD/ORB9ofmKE5hRU= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:31 2025 by rpki-client