$ rpki-client -vvf repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft File: C7840142ADE3E1876CB50EA3A410454EB3889153.mft (raw, json) Hash identifier: 2nhTSs0lFhii0HTk0JETwbcUeR4lZGAezczXrjMoSAQ= Subject key identifier: 68:3F:F1:9A:F8:5A:05:0A:10:13:A5:D2:42:38:CF:2A:A7:A8:41:D9 Authority key identifier: C7:84:01:42:AD:E3:E1:87:6C:B5:0E:A3:A4:10:45:4E:B3:88:91:53 Certificate issuer: /CN=C7840142ADE3E1876CB50EA3A410454EB3889153 Certificate serial: 4CB64FECC2D16DDF5E5F0857538B0E6EAE82DD02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft Manifest number: D4 Signing time: Mon 20 Oct 2025 15:10:02 +0000 Manifest this update: Mon 20 Oct 2025 15:05:02 +0000 Manifest next update: Thu 23 Oct 2025 21:55:02 +0000 Files and hashes: 1: 323030313a6466323a633963303a3a2f34382d3438203d3e20313531353338.roa (hash: IoIyP//hrQlYB+aIBKE8acsqetTnMXLdLd08/ax7yKA=) 2: C7840142ADE3E1876CB50EA3A410454EB3889153.crl (hash: ngR8P5XLva8DpXSS7OHLVrmZ2boUEpVL2+Vp1JZeNQA=) 3: 3130332e3234382e382e302f32332d3234203d3e20313531353338.roa (hash: H6s77RONQxfYVUNz4YRn/C2zSuIhVFg1GTTCJsiiK0o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.crl rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:b6:4f:ec:c2:d1:6d:df:5e:5f:08:57:53:8b:0e:6e:ae:82:dd:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7840142ADE3E1876CB50EA3A410454EB3889153 Validity Not Before: Oct 20 15:05:02 2025 GMT Not After : Oct 23 21:55:02 2025 GMT Subject: CN=683FF19AF85A050A1013A5D24238CF2AA7A841D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a7:cf:7d:6c:30:ff:99:8d:29:5a:23:0d:0b: 6d:53:97:6f:f7:70:d9:ce:ac:f0:bd:08:8f:2d:d7: e4:7f:a8:3d:50:2c:a5:8d:05:21:41:6a:3a:be:ec: 56:50:c9:06:6f:22:b0:71:9f:64:b8:83:e1:94:2a: 57:91:9e:7e:93:c6:2d:0e:ee:a6:0c:bd:1c:85:09: 6a:6b:5e:8a:75:a0:57:b7:b4:ee:0a:18:35:c6:0a: dd:72:ff:9b:de:54:e2:ec:09:6b:4b:b6:30:63:00: c8:ab:44:bc:49:b2:60:82:b1:8b:66:ee:6e:3b:12: 30:e0:60:56:f5:e8:5e:a7:d5:02:34:50:fa:ab:dd: 3c:a5:fe:53:dd:e0:44:3b:1e:25:1f:e9:17:a1:9d: 87:c7:ec:b8:36:07:9e:90:ca:58:ab:3c:5d:a4:b0: 48:f5:8c:1d:7f:9e:4a:dd:5e:1c:07:7e:4d:72:fa: 75:1e:a2:95:a9:8d:84:aa:52:44:a7:6a:3c:d4:31: a9:10:01:c6:7f:d1:a1:f9:8a:e9:6e:a3:ff:c5:d0: 6c:3d:7c:3f:5a:32:dd:08:fc:4e:17:8e:57:e6:9b: 46:65:0c:05:c4:3d:56:2c:f9:72:1b:a3:6b:81:2e: 7c:da:34:d3:14:56:dc:a1:4c:5c:99:0e:12:95:68: 42:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:3F:F1:9A:F8:5A:05:0A:10:13:A5:D2:42:38:CF:2A:A7:A8:41:D9 X509v3 Authority Key Identifier: keyid:C7:84:01:42:AD:E3:E1:87:6C:B5:0E:A3:A4:10:45:4E:B3:88:91:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:fa:ba:80:5a:45:2a:14:55:a8:96:ef:34:d5:23:4f:21:34: 67:a3:be:dc:7f:07:c4:ef:d1:e1:0c:11:09:d4:6e:ab:09:4d: ba:a9:18:fa:74:b1:8b:10:7e:44:0b:37:cb:3d:d2:42:a6:5a: 9f:5e:44:c4:4b:72:d6:41:78:04:bb:a5:25:70:2d:d2:43:82: cf:68:1b:51:40:0c:b5:25:20:19:d9:5f:c7:23:00:5b:92:5a: 24:aa:15:92:60:2d:f6:09:53:c4:05:33:6b:16:d8:40:90:72: a0:dc:6b:ae:b3:c5:eb:df:bd:8e:ab:45:c1:45:83:90:22:a7: 03:0f:74:6b:2f:73:8c:3b:ef:25:cc:6d:bc:1a:dc:7a:02:fc: 2d:04:f3:d2:95:ce:05:bd:83:2f:12:1f:63:d6:b4:ca:6f:08: 9f:31:ab:b8:ac:32:be:44:7f:4c:81:3a:0c:a3:2e:24:b9:45: ff:c4:af:b4:86:7c:b6:19:4c:b8:9e:92:a9:ca:ed:f4:0e:8e: f9:37:0c:75:17:37:ae:a1:1c:b4:97:f1:ba:03:1f:31:28:3a: 21:ac:76:03:fd:dc:33:b2:3e:e9:ce:89:8f:77:66:b9:d0:3c: 10:09:a4:1b:08:3e:aa:b9:cd:c9:84:b5:15:f0:87:bf:ec:4d: b3:df:7c:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTLZP7MLRbd9eXwhXU4sObq6C3QIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4NDAxNDJBREUzRTE4NzZDQjUwRUEzQTQxMDQ1NEVC Mzg4OTE1MzAeFw0yNTEwMjAxNTA1MDJaFw0yNTEwMjMyMTU1MDJaMDMxMTAvBgNV BAMTKDY4M0ZGMTlBRjg1QTA1MEExMDEzQTVEMjQyMzhDRjJBQTdBODQxRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqp899bDD/mY0pWiMNC21Tl2/3 cNnOrPC9CI8t1+R/qD1QLKWNBSFBajq+7FZQyQZvIrBxn2S4g+GUKleRnn6Txi0O 7qYMvRyFCWprXop1oFe3tO4KGDXGCt1y/5veVOLsCWtLtjBjAMirRLxJsmCCsYtm 7m47EjDgYFb16F6n1QI0UPqr3Tyl/lPd4EQ7HiUf6RehnYfH7Lg2B56QylirPF2k sEj1jB1/nkrdXhwHfk1y+nUeopWpjYSqUkSnajzUMakQAcZ/0aH5iuluo//F0Gw9 fD9aMt0I/E4Xjlfmm0ZlDAXEPVYs+XIbo2uBLnzaNNMUVtyhTFyZDhKVaEITAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaD/xmvhaBQoQE6XSQjjPKqeoQdkwHwYDVR0j BBgwFoAUx4QBQq3j4YdstQ6jpBBFTrOIkVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGY1YmE1ZS0xZjVjLTQyODQtOWExNi0wMTM1YTlmZDRlMjgvMC9DNzg0MDE0MkFE RTNFMTg3NkNCNTBFQTNBNDEwNDU0RUIzODg5MTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc4NDAxNDJBREUzRTE4NzZDQjUwRUEzQTQxMDQ1NEVCMzg4 OTE1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhmNWJhNWUtMWY1Yy00Mjg0LTlh MTYtMDEzNWE5ZmQ0ZTI4LzAvQzc4NDAxNDJBREUzRTE4NzZDQjUwRUEzQTQxMDQ1 NEVCMzg4OTE1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA76uoBaRSoUVaiW7zTVI08hNGejvtx/B8Tv 0eEMEQnUbqsJTbqpGPp0sYsQfkQLN8s90kKmWp9eRMRLctZBeAS7pSVwLdJDgs9o G1FADLUlIBnZX8cjAFuSWiSqFZJgLfYJU8QFM2sW2ECQcqDca66zxevfvY6rRcFF g5AipwMPdGsvc4w77yXMbbwa3HoC/C0E89KVzgW9gy8SH2PWtMpvCJ8xq7isMr5E f0yBOgyjLiS5Rf/Er7SGfLYZTLiekqnK7fQOjvk3DHUXN66hHLSX8boDHzEoOiGs dgP93DOyPunOiY93ZrnQPBAJpBsIPqq5zcmEtRXwh7/sTbPffIA= -----END CERTIFICATE-----Generated at Mon Oct 20 22:47:46 2025 by rpki-client