$ rpki-client -vvf repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft File: 7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft (raw, json) Hash identifier: kBWFAU6W4hddWC3LfKfbhJknUcJ8U7XNP7HIBKWUwlU= Subject key identifier: 33:39:E8:87:F2:B7:34:5C:90:A4:21:EC:07:21:F3:F9:FA:F0:B7:2C Authority key identifier: 7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97 Certificate issuer: /CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897 Certificate serial: 1FF7BD7B1D259D7264127D1FE6E5B6CE1A44AA15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft Manifest number: 01DE Signing time: Sun 19 Oct 2025 22:40:49 +0000 Manifest this update: Sun 19 Oct 2025 22:35:49 +0000 Manifest next update: Thu 23 Oct 2025 08:19:49 +0000 Files and hashes: 1: 7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl (hash: 3rpi7L/d57jk1JtmDnNV84f+sLd4kxzMfwqJr3FkuAo=) 2: 3130332e32372e3139322e302f32332d3233203d3e20313530323632.roa (hash: BnJZN8kM3S7TwdBig6pEraKaEILe1NjioWa2vU9OOYk=) 3: 3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa (hash: DIKWNEryKaLoYGYF33QjHgw88mY9IHI7dTm6jY/RF2g=) 4: 3130332e32372e3139322e302f32342d3234203d3e20313530323632.roa (hash: +MyXIra1tEzUh3Bqp100pCTB+NpiC7GT2NfbRpY5B8s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 08:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:f7:bd:7b:1d:25:9d:72:64:12:7d:1f:e6:e5:b6:ce:1a:44:aa:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897 Validity Not Before: Oct 19 22:35:49 2025 GMT Not After : Oct 23 08:19:49 2025 GMT Subject: CN=3339E887F2B7345C90A421EC0721F3F9FAF0B72C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5f:60:66:a1:7b:a7:df:a2:7c:b7:2d:0a:1d: 06:a4:82:e0:fb:ba:e9:1a:84:cd:99:e1:5b:1b:65: 80:51:56:b8:2a:85:7b:85:7b:30:06:a0:d3:5b:6a: e3:b8:4e:32:5f:2b:e8:29:e3:69:b2:f9:6b:99:9c: 56:06:74:4c:05:16:ae:c9:e4:d9:b9:ef:ce:db:4a: eb:d0:12:52:f7:52:86:b4:ab:91:37:a3:88:b0:ba: 8e:d7:91:a0:55:db:d8:6b:45:d4:5e:28:26:25:61: b4:55:1a:eb:08:3f:d8:d6:23:85:f2:b9:70:43:3c: 15:c7:84:73:e2:30:3e:38:89:29:46:1d:16:7c:52: ad:10:3b:8e:4a:45:98:27:9b:14:33:2e:95:e5:dd: a6:ac:17:50:60:d8:ca:79:07:99:4d:90:64:ab:26: b6:45:b0:f9:f5:db:6a:04:77:01:9b:aa:42:4c:20: db:eb:c3:90:b2:8a:18:22:8e:d7:13:34:d2:81:9f: 49:d5:32:bf:3e:70:7a:f0:b2:ea:22:83:69:30:97: bb:1b:1c:a9:40:8f:cf:fa:d5:f0:8f:00:f2:43:42: 7c:cf:53:a7:5a:c3:5f:84:e2:2a:e6:a4:ea:dc:cf: b9:9e:4c:b9:c7:d6:46:96:8d:6a:d2:59:ac:53:9d: 87:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:39:E8:87:F2:B7:34:5C:90:A4:21:EC:07:21:F3:F9:FA:F0:B7:2C X509v3 Authority Key Identifier: keyid:7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:13:ed:0e:6c:c3:08:c0:ed:f7:33:85:c5:36:a3:cd:ce:a4: 78:6a:0b:8f:6a:4c:07:b6:c1:1f:9d:b7:ea:b4:74:d6:18:75: d2:5d:a7:10:25:be:dc:8a:a7:e9:80:10:8f:fb:29:2a:6e:21: 1c:37:6f:b7:bb:f3:10:9b:bc:62:b0:b9:31:98:69:96:c5:2c: 50:18:86:12:e9:d3:e3:e3:5f:81:d7:ad:c2:96:f7:66:d7:c6: ea:e3:10:a9:25:ca:b8:8f:28:0f:c5:c8:bc:d7:aa:6c:be:d5: f2:fa:49:0e:f1:05:62:e5:0e:90:ea:d5:7d:62:d9:22:08:d8: 2e:a7:6f:95:8f:3d:99:40:f7:e3:05:55:ef:56:9f:e8:2d:56: 07:38:48:18:66:43:2c:4b:94:ef:4d:cc:1d:4e:3c:97:92:58: 61:0f:25:f2:9e:b8:59:a5:ce:5d:16:9c:1b:33:45:d0:cc:69: 8c:25:49:ac:1a:a7:6a:10:bb:36:d3:99:6c:bb:09:73:a1:0e: 23:b1:d7:ab:a4:f7:69:71:1a:eb:5d:40:e8:cd:aa:25:5d:f7: 60:98:b3:42:84:7e:68:f2:87:26:43:87:60:df:a1:b9:2b:e5: 24:b7:db:06:7d:45:61:fe:02:0e:99:e9:6e:d7:dc:ee:17:c7: ab:dc:f1:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH/e9ex0lnXJkEn0f5uW2zhpEqhUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5NjcwM0RG NzBCRDg5NzAeFw0yNTEwMTkyMjM1NDlaFw0yNTEwMjMwODE5NDlaMDMxMTAvBgNV BAMTKDMzMzlFODg3RjJCNzM0NUM5MEE0MjFFQzA3MjFGM0Y5RkFGMEI3MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0X2BmoXun36J8ty0KHQakguD7 uukahM2Z4VsbZYBRVrgqhXuFezAGoNNbauO4TjJfK+gp42my+WuZnFYGdEwFFq7J 5Nm5787bSuvQElL3Uoa0q5E3o4iwuo7XkaBV29hrRdReKCYlYbRVGusIP9jWI4Xy uXBDPBXHhHPiMD44iSlGHRZ8Uq0QO45KRZgnmxQzLpXl3aasF1Bg2Mp5B5lNkGSr JrZFsPn122oEdwGbqkJMINvrw5CyihgijtcTNNKBn0nVMr8+cHrwsuoig2kwl7sb HKlAj8/61fCPAPJDQnzPU6daw1+E4irmpOrcz7meTLnH1kaWjWrSWaxTnYcBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMznoh/K3NFyQpCHsByHz+frwtywwHwYDVR0j BBgwFoAUfaX3tCkx7jpBS5pbeZZwPfcL2JcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjI3YjE3Ni00YzE3LTQyNDQtYmFkZi1mNDk2YmNiMTVlMjAvMC83REE1RjdCNDI5 MzFFRTNBNDE0QjlBNUI3OTk2NzAzREY3MEJEODk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5NjcwM0RGNzBC RDg5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIyN2IxNzYtNGMxNy00MjQ0LWJh ZGYtZjQ5NmJjYjE1ZTIwLzAvN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5Njcw M0RGNzBCRDg5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACMT7Q5swwjA7fczhcU2o83OpHhqC49qTAe2 wR+dt+q0dNYYddJdpxAlvtyKp+mAEI/7KSpuIRw3b7e78xCbvGKwuTGYaZbFLFAY hhLp0+PjX4HXrcKW92bXxurjEKklyriPKA/FyLzXqmy+1fL6SQ7xBWLlDpDq1X1i 2SII2C6nb5WPPZlA9+MFVe9Wn+gtVgc4SBhmQyxLlO9NzB1OPJeSWGEPJfKeuFml zl0WnBszRdDMaYwlSawap2oQuzbTmWy7CXOhDiOx16uk92lxGutdQOjNqiVd92CY s0KEfmjyhyZDh2Dfobkr5SS32wZ9RWH+Ag6Z6W7X3O4Xx6vc8c8= -----END CERTIFICATE-----Generated at Mon Oct 20 12:02:44 2025 by rpki-client