$ rpki-client -vvf repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft File: 7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft (raw, json) Hash identifier: gTv5C5lOJRnJJb1nSnfjAF/pmSaLEbrlHBlMjGYssRA= Subject key identifier: B1:94:5A:90:04:6C:00:23:E1:24:1C:25:B5:CA:E4:74:DC:FE:4E:8F Authority key identifier: 7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49 Certificate issuer: /CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249 Certificate serial: 4F36FA5858B44277C120BBCB8DF069F9C1930B1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft Manifest number: 0506 Signing time: Sun 19 Oct 2025 11:40:38 +0000 Manifest this update: Sun 19 Oct 2025 11:35:38 +0000 Manifest next update: Wed 22 Oct 2025 15:18:38 +0000 Files and hashes: 1: 7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl (hash: Cl5L46dALAa5EyKavb3B1Y1sLQ60q2yyNEXppAyKi/w=) 2: 3130332e3135302e34342e302f32332d3234203d3e20313430333838.roa (hash: 9wWnuvCPEe0C8U6UVGeFeb9Dd9afvhSHPrMKavtgge8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 15:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:36:fa:58:58:b4:42:77:c1:20:bb:cb:8d:f0:69:f9:c1:93:0b:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249 Validity Not Before: Oct 19 11:35:38 2025 GMT Not After : Oct 22 15:18:38 2025 GMT Subject: CN=B1945A90046C0023E1241C25B5CAE474DCFE4E8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8b:74:bd:4e:6d:ee:0b:8f:18:74:2c:19:bf: 5d:88:c7:1c:10:c2:57:66:c7:b3:27:16:59:46:b5: 98:ff:66:31:99:4c:9b:65:17:d5:e6:44:27:3e:35: a9:55:20:6a:68:e9:b4:32:d8:b2:b9:36:18:78:9c: 8e:f5:e3:1b:4d:42:83:f5:07:bf:f2:2d:c2:e9:39: 47:96:83:3e:74:68:d7:47:e3:f3:a4:b8:ab:42:a1: 1a:c1:c2:e6:30:8b:08:9a:ce:3f:0a:87:cc:3d:11: 47:94:b7:7b:7e:02:3c:b3:e9:94:50:e0:bf:be:21: e8:1c:43:70:ed:37:71:a0:0b:f7:46:d1:d6:f1:de: 71:69:44:1e:8c:0e:4e:24:86:df:e2:c7:33:49:fa: 0e:73:fe:90:aa:16:c1:94:2a:80:a2:7c:70:13:fb: 31:49:b7:89:2e:75:8b:77:11:db:c0:51:12:a1:c6: d0:29:12:5a:22:51:c1:2a:14:39:e4:06:75:16:76: 7e:39:21:a9:05:13:d5:0f:5d:eb:9e:2b:34:06:b8: 88:20:8a:50:01:b7:c3:04:c9:91:48:84:8c:9a:7e: a9:f1:e1:58:93:c9:b0:d9:e5:43:d3:92:6c:ca:74: d5:be:a5:b8:9b:d3:7b:3c:f2:2e:77:16:ee:f8:19: 9a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:94:5A:90:04:6C:00:23:E1:24:1C:25:B5:CA:E4:74:DC:FE:4E:8F X509v3 Authority Key Identifier: keyid:7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:41:7b:56:d8:92:ee:87:0e:86:75:a1:73:96:27:ff:b3:a6: 4f:25:72:a3:92:20:8e:fc:c1:13:61:1d:05:f4:59:50:60:8f: 23:41:b0:19:19:0b:a2:49:b9:ee:1b:57:a3:b1:c5:57:96:b0: 65:b2:53:fb:25:80:85:3a:69:57:c0:ee:d3:06:0f:7b:62:b8: 31:c2:e8:6a:1a:1c:c5:87:10:2a:13:cb:c2:b0:0a:a7:c8:8a: 82:ea:43:e4:d7:1d:1c:7a:69:bd:cb:a6:d9:db:65:54:be:b8: 74:43:dd:a0:a0:8b:89:5a:e1:7b:e1:99:03:2c:be:6c:5b:70: 49:98:92:d8:69:81:6e:33:f8:9a:d9:dc:a8:c3:97:e4:b6:ae: 5f:83:e4:8b:79:1b:85:fe:3a:30:d1:fa:b5:4a:7f:05:64:4b: 93:6a:4d:eb:d2:08:fc:79:2c:94:74:9b:ca:cc:dc:79:8f:26: 83:22:7d:46:8f:c4:e1:95:61:68:1b:ea:c4:8d:45:f0:81:92: f4:36:71:b6:02:74:78:e2:5d:4c:03:c3:25:db:2e:9a:1f:8e: c6:c0:d6:95:65:3d:61:78:9d:96:0d:88:87:d2:a3:c8:06:70: 05:e7:f6:4e:74:42:ed:a6:b4:ce:17:d6:17:ab:a0:21:9b:c7: 59:54:67:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTzb6WFi0QnfBILvLjfBp+cGTCx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlFREU1 QThDRjI0OTAeFw0yNTEwMTkxMTM1MzhaFw0yNTEwMjIxNTE4MzhaMDMxMTAvBgNV BAMTKEIxOTQ1QTkwMDQ2QzAwMjNFMTI0MUMyNUI1Q0FFNDc0RENGRTRFOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/i3S9Tm3uC48YdCwZv12IxxwQ wldmx7MnFllGtZj/ZjGZTJtlF9XmRCc+NalVIGpo6bQy2LK5Nhh4nI714xtNQoP1 B7/yLcLpOUeWgz50aNdH4/OkuKtCoRrBwuYwiwiazj8Kh8w9EUeUt3t+Ajyz6ZRQ 4L++IegcQ3DtN3GgC/dG0dbx3nFpRB6MDk4kht/ixzNJ+g5z/pCqFsGUKoCifHAT +zFJt4kudYt3EdvAURKhxtApEloiUcEqFDnkBnUWdn45IakFE9UPXeueKzQGuIgg ilABt8MEyZFIhIyafqnx4ViTybDZ5UPTkmzKdNW+pbib03s88i53Fu74GZpFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsZRakARsACPhJBwltcrkdNz+To8wHwYDVR0j BBgwFoAUfNUkBSRn8i3Y5X4Cocme3lqM8kkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGViNmVkZC1mMTNiLTQ5ZjAtYWQ4Ny02YjhlZTYxNGRjOGYvMC83Q0Q1MjQwNTI0 NjdGMjJERDhFNTdFMDJBMUM5OUVERTVBOENGMjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlFREU1QThD RjI0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDRlYjZlZGQtZjEzYi00OWYwLWFk ODctNmI4ZWU2MTRkYzhmLzAvN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlF REU1QThDRjI0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJBe1bYku6HDoZ1oXOWJ/+zpk8lcqOSII78 wRNhHQX0WVBgjyNBsBkZC6JJue4bV6OxxVeWsGWyU/slgIU6aVfA7tMGD3tiuDHC 6GoaHMWHECoTy8KwCqfIioLqQ+TXHRx6ab3LptnbZVS+uHRD3aCgi4la4XvhmQMs vmxbcEmYkthpgW4z+JrZ3KjDl+S2rl+D5It5G4X+OjDR+rVKfwVkS5NqTevSCPx5 LJR0m8rM3HmPJoMifUaPxOGVYWgb6sSNRfCBkvQ2cbYCdHjiXUwDwyXbLpofjsbA 1pVlPWF4nZYNiIfSo8gGcAXn9k50Qu2mtM4X1heroCGbx1lUZ5c= -----END CERTIFICATE-----Generated at Mon Oct 20 12:04:38 2025 by rpki-client