$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft File: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft (raw, json) Hash identifier: kkVHS9mFXYsDX/U1Z6DFknoP1sjBURozSYPhZnzXZSs= Subject key identifier: 2D:14:63:F2:8B:E3:EB:6C:48:83:08:D8:37:2F:85:0F:F0:46:40:8C Authority key identifier: 7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 Certificate issuer: /CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Certificate serial: 0E3C2E05DC6BAB7EFCB6B793E89960AE79581644 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft Manifest number: 8F Signing time: Sun 19 Oct 2025 01:41:01 +0000 Manifest this update: Sun 19 Oct 2025 01:36:01 +0000 Manifest next update: Wed 22 Oct 2025 03:21:01 +0000 Files and hashes: 1: 323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa (hash: TtLF2mCHfSEfxKosRTbgY2pYRo+Ox0NN2gzHDI6VY/0=) 2: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl (hash: HfTwMqfubp2CA18K+Cb0TWFs/iF4gRqykYBPvxr1sTA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 03:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:3c:2e:05:dc:6b:ab:7e:fc:b6:b7:93:e8:99:60:ae:79:58:16:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Validity Not Before: Oct 19 01:36:01 2025 GMT Not After : Oct 22 03:21:01 2025 GMT Subject: CN=2D1463F28BE3EB6C488308D8372F850FF046408C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:98:25:2f:34:52:53:5d:64:34:c1:7d:4f:09: fd:df:48:ef:84:d8:c5:f6:20:df:df:32:49:b6:d2: 24:31:59:f2:f4:8e:01:a2:2a:8f:08:6c:ca:31:e5: d7:56:3c:ae:62:20:43:21:0d:d1:84:58:9c:6f:1b: 8b:d8:67:55:c8:cb:27:bb:b9:6b:d8:54:33:a4:7a: db:52:95:e2:bc:ca:5c:c0:5a:59:eb:3d:2d:f3:bc: 11:58:30:c2:ec:f3:ba:16:d6:9e:69:cc:8f:b3:99: 5d:40:93:d3:ad:62:a0:7b:99:6a:06:fa:a6:1a:2d: 44:46:55:7b:1c:30:bb:e3:6f:83:91:47:f9:b2:ef: 1d:02:a7:dc:91:06:6e:8b:e8:38:43:aa:ba:29:9d: 58:c1:d7:9b:f3:a0:43:50:28:95:b6:d9:21:57:b2: 9f:03:4e:14:e9:96:f8:90:93:34:fd:e5:76:a4:22: c8:8c:7c:23:06:20:85:81:7a:76:f5:e9:d4:7a:02: 4e:fa:50:81:cc:c4:7f:00:0e:0f:8c:ca:be:45:86: de:ef:83:59:44:97:89:e7:12:7a:3a:4b:b1:30:ea: 4b:e4:79:2d:98:38:49:35:37:36:d4:67:e1:ef:fc: 6c:ad:64:6d:62:41:fc:bf:81:c2:fd:a9:25:60:64: b2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:14:63:F2:8B:E3:EB:6C:48:83:08:D8:37:2F:85:0F:F0:46:40:8C X509v3 Authority Key Identifier: keyid:7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:77:a3:76:c6:42:c4:72:a0:31:4c:82:94:a9:e0:98:a1:a2: 94:13:ad:a0:ea:4b:53:8a:cc:d8:fc:7f:86:10:e9:3d:c9:87: 7c:73:32:63:cc:5f:91:32:d5:5b:e5:45:b4:8d:d2:5f:80:16: 66:7e:08:be:32:c4:97:98:c0:03:12:ec:6c:02:b6:4d:bf:68: 8d:6d:69:a4:80:83:ac:62:3f:f1:fa:91:f0:d7:b8:1e:1e:77: 2b:03:c0:e3:65:38:0e:c6:58:6d:24:2e:e2:44:d5:bf:ff:0f: 1d:ce:12:7b:95:f0:c9:4f:c6:44:1b:ff:6e:f0:2a:4a:88:35: 25:73:00:f3:dd:10:26:e1:6a:b7:40:45:40:ae:e0:5a:4e:f7: 8d:31:3b:6d:55:5e:b3:95:52:77:30:ab:c2:50:a6:4f:44:13: b5:86:55:11:25:d4:38:1d:c6:b3:37:a4:a0:84:ad:e2:b0:ab: d8:32:f3:64:1f:8f:da:c1:20:bc:f2:77:80:8f:93:92:6f:ac: d3:f2:81:ec:6f:fd:c4:24:16:66:75:cf:f9:57:22:54:83:a9: 98:30:74:9f:1f:0f:15:4e:a4:15:af:dc:92:ab:a7:06:92:cf: 20:d9:65:a5:e0:ef:f9:50:e8:4f:43:b3:09:bb:47:47:c5:96: bf:d7:cc:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDjwuBdxrq378treT6JlgrnlYFkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3 RkRGNUYyNDAeFw0yNTEwMTkwMTM2MDFaFw0yNTEwMjIwMzIxMDFaMDMxMTAvBgNV BAMTKDJEMTQ2M0YyOEJFM0VCNkM0ODgzMDhEODM3MkY4NTBGRjA0NjQwOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpmCUvNFJTXWQ0wX1PCf3fSO+E 2MX2IN/fMkm20iQxWfL0jgGiKo8IbMox5ddWPK5iIEMhDdGEWJxvG4vYZ1XIyye7 uWvYVDOkettSleK8ylzAWlnrPS3zvBFYMMLs87oW1p5pzI+zmV1Ak9OtYqB7mWoG +qYaLURGVXscMLvjb4ORR/my7x0Cp9yRBm6L6DhDqropnVjB15vzoENQKJW22SFX sp8DThTplviQkzT95XakIsiMfCMGIIWBenb16dR6Ak76UIHMxH8ADg+Myr5Fht7v g1lEl4nnEno6S7Ew6kvkeS2YOEk1NzbUZ+Hv/GytZG1iQfy/gcL9qSVgZLL3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULRRj8ovj62xIgwjYNy+FD/BGQIwwHwYDVR0j BBgwFoAUfo3hVJ6J1LSAtVZpXKvpzn/fXyQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMS83RThERTE1NDlF ODlENEI0ODBCNTU2Njk1Q0FCRTlDRTdGREY1RjI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3RkRG NUYyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzEvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5 Q0U3RkRGNUYyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAh3o3bGQsRyoDFMgpSp4JihopQTraDqS1OK zNj8f4YQ6T3Jh3xzMmPMX5Ey1VvlRbSN0l+AFmZ+CL4yxJeYwAMS7GwCtk2/aI1t aaSAg6xiP/H6kfDXuB4edysDwONlOA7GWG0kLuJE1b//Dx3OEnuV8MlPxkQb/27w KkqINSVzAPPdECbhardARUCu4FpO940xO21VXrOVUncwq8JQpk9EE7WGVREl1Dgd xrM3pKCEreKwq9gy82Qfj9rBILzyd4CPk5JvrNPygexv/cQkFmZ1z/lXIlSDqZgw dJ8fDxVOpBWv3JKrpwaSzyDZZaXg7/lQ6E9Dswm7R0fFlr/XzNA= -----END CERTIFICATE-----Generated at Mon Oct 20 20:32:16 2025 by rpki-client