$ rpki-client -vvf repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft File: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft (raw, json) Hash identifier: Nb6W8NfnMtj0KOOktGSCbFrhGNMRiSvjocryRTn+Hmo= Subject key identifier: 3F:EC:27:19:80:EF:EA:FC:29:5A:31:12:89:11:F0:5A:31:86:6D:15 Authority key identifier: 7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC Certificate issuer: /CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Certificate serial: 5DE047C05015EDDCC5D5A5EC3DA2F1E966376874 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft Manifest number: A0 Signing time: Sun 19 Oct 2025 21:31:13 +0000 Manifest this update: Sun 19 Oct 2025 21:26:13 +0000 Manifest next update: Thu 23 Oct 2025 09:12:13 +0000 Files and hashes: 1: 3136302e3138372e3133372e302f32342d3234203d3e20313533313233.roa (hash: lAtUfGS13GDkvr/Pm9PSGFkJR4Rstob6+L+fcyUN72Q=) 2: 3136302e3138372e3133362e302f32342d3234203d3e20313533313233.roa (hash: HJdK4DRAmRrZWLjILXhoJkILfMyC0BwC4uGRxH8TEAM=) 3: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl (hash: 9wCg52o2GdJeceLwE3tms45IcY91+Z4IeOrVKktnteU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e0:47:c0:50:15:ed:dc:c5:d5:a5:ec:3d:a2:f1:e9:66:37:68:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Validity Not Before: Oct 19 21:26:13 2025 GMT Not After : Oct 23 09:12:13 2025 GMT Subject: CN=3FEC271980EFEAFC295A31128911F05A31866D15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:86:13:4d:c0:4c:d2:c5:0e:e8:9d:46:a3:8f: 51:b3:7f:d8:38:f0:04:86:89:cc:0c:6a:09:bf:95: 69:ca:b4:6f:0e:2b:e0:f9:d5:7a:38:10:b1:96:55: 25:93:d4:12:f0:d3:6a:83:9b:b5:e8:2d:6b:81:03: 21:80:e1:32:6f:87:9a:60:47:13:74:3b:a4:7b:94: 22:54:49:7a:6a:97:2b:df:b4:89:8e:fa:6e:3f:8e: dd:b9:cf:1a:ed:0d:35:2f:36:81:a0:a0:a5:5f:08: a4:77:a6:8b:6b:9a:4c:fd:05:90:8c:c0:7f:74:a5: 40:af:39:ed:1c:e6:4f:38:96:bb:41:d2:c0:21:12: 19:b1:6e:34:c6:7e:06:7f:89:50:ab:dd:13:4e:e5: d3:00:fe:27:32:9d:a3:53:a6:18:c6:6b:26:f8:5d: 7f:c0:f2:88:a4:69:87:13:3a:32:a1:bb:06:15:dd: 3e:3d:f0:4b:6f:83:f3:be:9d:63:64:03:e7:b8:ac: 34:75:26:11:5b:72:c7:55:c4:67:19:de:ce:7f:83: f1:a0:89:f0:80:0b:3a:0d:ef:8d:78:7c:c5:2d:0c: 9a:fa:59:0e:5a:b7:4a:15:a8:d3:47:02:98:4d:13: f7:59:dd:05:e0:bc:b4:d2:81:e0:40:b8:2f:b9:c8: 08:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EC:27:19:80:EF:EA:FC:29:5A:31:12:89:11:F0:5A:31:86:6D:15 X509v3 Authority Key Identifier: keyid:7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:3c:81:c4:e8:13:0b:ba:55:c4:bc:1f:10:5b:bc:1c:80:95: 90:f4:2a:10:83:19:59:c9:e8:55:ef:b2:4d:46:00:d3:e3:f3: 07:a8:d1:84:d4:22:5e:95:7f:21:11:a4:3f:05:e7:89:5f:76: eb:b4:15:5b:c8:7b:af:56:20:fb:e4:ac:6e:b4:4b:cf:e3:b1: 0d:a3:66:73:df:ae:ba:78:f4:c7:f2:9f:fb:e5:1e:bc:bd:a8: 3f:85:19:66:a9:2d:18:43:fc:77:dc:9c:b5:17:4a:0f:7e:6e: e2:9c:11:03:cc:1c:95:8a:0f:ba:24:cf:c6:22:47:18:99:b3: 1e:b5:e8:93:99:32:6e:9d:20:67:fc:d9:b5:9a:e9:1f:1d:25: 4b:d8:d9:4b:1b:77:94:55:2f:59:b7:fa:03:78:e5:e9:4e:ad: 5e:60:3d:f4:96:ea:d5:12:eb:dc:c4:c6:5e:ab:a6:7b:f6:f6: 64:8b:dc:79:21:97:4c:a1:b9:cf:81:50:6b:13:75:7c:0b:02: 69:02:dd:74:09:a3:19:f3:ee:02:81:53:6a:95:9e:93:11:79: 25:6e:c3:c7:82:24:f3:ab:18:17:2b:cb:a0:aa:b6:6a:9c:66: dc:0e:4d:e6:1a:9b:5c:e2:86:fe:ae:45:ea:28:78:ed:7e:73: 76:44:51:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXeBHwFAV7dzF1aXsPaLx6WY3aHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5RkE4 NDM5NDhEQzAeFw0yNTEwMTkyMTI2MTNaFw0yNTEwMjMwOTEyMTNaMDMxMTAvBgNV BAMTKDNGRUMyNzE5ODBFRkVBRkMyOTVBMzExMjg5MTFGMDVBMzE4NjZEMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3hhNNwEzSxQ7onUajj1Gzf9g4 8ASGicwMagm/lWnKtG8OK+D51Xo4ELGWVSWT1BLw02qDm7XoLWuBAyGA4TJvh5pg RxN0O6R7lCJUSXpqlyvftImO+m4/jt25zxrtDTUvNoGgoKVfCKR3potrmkz9BZCM wH90pUCvOe0c5k84lrtB0sAhEhmxbjTGfgZ/iVCr3RNO5dMA/icynaNTphjGayb4 XX/A8oikaYcTOjKhuwYV3T498Etvg/O+nWNkA+e4rDR1JhFbcsdVxGcZ3s5/g/Gg ifCACzoN7414fMUtDJr6WQ5at0oVqNNHAphNE/dZ3QXgvLTSgeBAuC+5yAgVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP+wnGYDv6vwpWjESiRHwWjGGbRUwHwYDVR0j BBgwFoAUfE39eJFNwfZhMPJWrmnZ+oQ5SNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTkyMzM5Ny04Y2Y4LTRjZWYtODg1Ni0wZDI2OGQ3M2VkYjEvMC83QzRERkQ3ODkx NERDMUY2NjEzMEYyNTZBRTY5RDlGQTg0Mzk0OERDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5RkE4NDM5 NDhEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzAvN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5 RkE4NDM5NDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAU8gcToEwu6VcS8HxBbvByAlZD0KhCDGVnJ 6FXvsk1GANPj8weo0YTUIl6VfyERpD8F54lfduu0FVvIe69WIPvkrG60S8/jsQ2j ZnPfrrp49Mfyn/vlHry9qD+FGWapLRhD/HfcnLUXSg9+buKcEQPMHJWKD7okz8Yi RxiZsx616JOZMm6dIGf82bWa6R8dJUvY2Usbd5RVL1m3+gN45elOrV5gPfSW6tUS 69zExl6rpnv29mSL3Hkhl0yhuc+BUGsTdXwLAmkC3XQJoxnz7gKBU2qVnpMReSVu w8eCJPOrGBcry6CqtmqcZtwOTeYam1zihv6uReooeO1+c3ZEUT8= -----END CERTIFICATE-----Generated at Mon Oct 20 21:14:56 2025 by rpki-client