$ rpki-client -vvf repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft File: C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft (raw, json) Hash identifier: IWsdvHniSnCsR5hlOiTlYn/bp6EnRjY+9g2eGCFsG6Q= Subject key identifier: 82:C3:1C:15:FF:AD:C7:96:6A:88:D0:11:E3:D9:DC:DD:D8:4B:23:DC Authority key identifier: C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 Certificate issuer: /CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Certificate serial: 64D7488DA51AD6DB8CAB98DC3FC09EA17E3A1188 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft Manifest number: 02B2 Signing time: Mon 20 Oct 2025 17:11:57 +0000 Manifest this update: Mon 20 Oct 2025 17:06:57 +0000 Manifest next update: Thu 23 Oct 2025 19:02:57 +0000 Files and hashes: 1: C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl (hash: 56BDREpHE1rrSN9eaaAdWHLrbElOkjG3MowgWJOb5nI=) 2: 3130332e3230372e3233362e302f32332d3234203d3e20313334363434.roa (hash: bAg6MsDstetOvzdA+3u3BpUGBWifQkKCKKizemY7LEk=) 3: 3130332e3230372e3233382e302f32342d3234203d3e20313338303936.roa (hash: kqyShD8grMzsW8WAD+q93A9hYlzfgDARjSsqGTZiG54=) 4: 3130332e3230372e3233392e302f32342d3234203d3e20313338303936.roa (hash: bCN0BjFIkGXQoNiGlR2Rw4pyaw/6SRLkI5yDk6Jonrg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:d7:48:8d:a5:1a:d6:db:8c:ab:98:dc:3f:c0:9e:a1:7e:3a:11:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Validity Not Before: Oct 20 17:06:57 2025 GMT Not After : Oct 23 19:02:57 2025 GMT Subject: CN=82C31C15FFADC7966A88D011E3D9DCDDD84B23DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:da:1a:fd:a7:e9:d5:0a:45:bc:69:6f:ec:ab: 41:cb:d2:43:03:c5:00:a8:a5:60:0e:3e:54:d4:db: c0:ab:09:12:91:5f:24:a7:56:a3:85:79:6e:ba:1e: 87:4b:84:09:19:3e:1c:96:94:d8:ce:77:99:27:52: 42:8d:0f:45:04:61:2d:c0:65:84:06:66:64:2b:6b: 72:1b:0d:3f:2d:46:65:d6:01:0c:6f:cd:63:3c:11: 11:40:a6:38:a6:69:1f:6d:29:48:6e:fc:54:c7:14: d3:e2:91:f6:a3:32:31:b3:19:6c:78:ad:18:15:6b: 88:18:bd:8c:58:ba:bd:3c:bb:56:3d:1d:d2:a8:8e: 19:31:d2:c1:a4:5d:c5:34:b8:c8:cf:04:71:81:d8: 7c:6d:77:12:97:39:b1:21:37:c0:1a:bb:b0:1d:ed: 29:84:a2:6b:80:99:3c:3a:0c:92:0d:46:c0:69:41: 85:c3:5e:6b:ec:be:12:c8:9d:af:69:21:89:ff:a2: 0f:c1:ff:9b:36:d3:6b:bf:9b:0c:71:57:bc:fb:de: 60:4d:fa:a3:33:de:6d:a2:dd:ee:bc:ed:6d:9c:1d: ff:9e:b8:1d:03:86:21:a2:13:b0:d2:64:24:b8:ae: 34:f8:4a:9b:70:49:09:96:70:7e:37:5d:74:48:9c: 9a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C3:1C:15:FF:AD:C7:96:6A:88:D0:11:E3:D9:DC:DD:D8:4B:23:DC X509v3 Authority Key Identifier: keyid:C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:3f:65:47:3d:29:70:9c:50:3f:35:a8:d5:98:03:97:1f:10: 73:89:f0:21:fb:a3:4e:77:a2:6e:cc:30:bd:e9:03:42:53:07: 91:01:f2:d2:ca:99:35:0c:bd:77:9a:04:43:b4:64:01:dd:40: 38:a4:72:a4:0c:80:8a:49:f3:0e:3d:ff:ce:33:92:07:c3:7f: 02:e6:e5:a9:3f:67:9c:a5:40:50:57:5b:65:5e:be:7a:c0:80: cb:8e:11:23:31:9c:11:3f:8b:b1:b4:da:8a:8a:a0:02:cc:e3: 60:01:37:19:ca:f0:1a:ba:a7:61:d5:db:0e:78:c1:61:3b:d9: 5f:22:01:05:b7:44:56:7b:a5:be:78:dc:17:a0:36:4e:69:b0: 59:95:7c:cd:9f:81:99:d1:9d:9e:bf:8d:cf:83:b3:f8:3e:e5: 94:80:3f:00:5c:b4:78:d0:57:c8:42:b9:42:e8:4a:fd:a6:da: 02:7f:f7:ee:20:1f:b7:52:a0:71:7f:20:e0:23:9e:dd:93:c9: 88:89:1a:bf:b8:79:c1:c9:a6:4b:00:c9:15:c6:be:62:63:e6: d0:ee:49:bd:72:9f:13:37:3a:32:52:d3:cc:9b:95:28:35:6a: c1:aa:a5:20:b0:77:71:79:4f:38:eb:01:f0:e7:22:01:ad:20: f8:09:6a:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZNdIjaUa1tuMq5jcP8CeoX46EYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5OEFB MTEwQTAxNDAeFw0yNTEwMjAxNzA2NTdaFw0yNTEwMjMxOTAyNTdaMDMxMTAvBgNV BAMTKDgyQzMxQzE1RkZBREM3OTY2QTg4RDAxMUUzRDlEQ0RERDg0QjIzREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC62hr9p+nVCkW8aW/sq0HL0kMD xQCopWAOPlTU28CrCRKRXySnVqOFeW66HodLhAkZPhyWlNjOd5knUkKND0UEYS3A ZYQGZmQra3IbDT8tRmXWAQxvzWM8ERFApjimaR9tKUhu/FTHFNPikfajMjGzGWx4 rRgVa4gYvYxYur08u1Y9HdKojhkx0sGkXcU0uMjPBHGB2HxtdxKXObEhN8Aau7Ad 7SmEomuAmTw6DJINRsBpQYXDXmvsvhLIna9pIYn/og/B/5s202u/mwxxV7z73mBN +qMz3m2i3e687W2cHf+euB0DhiGiE7DSZCS4rjT4SptwSQmWcH43XXRInJqhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgsMcFf+tx5ZqiNAR49nc3dhLI9wwHwYDVR0j BBgwFoAUx/WqctuHDhYbYqypJQrZiqEQoBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjBlN2Y4ZS1jMjlmLTRlNmItYWQwYS05OTU3ZmJkNTY5NTMvMC9DN0Y1QUE3MkRC ODcwRTE2MUI2MkFDQTkyNTBBRDk4QUExMTBBMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5OEFBMTEw QTAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIwZTdmOGUtYzI5Zi00ZTZiLWFk MGEtOTk1N2ZiZDU2OTUzLzAvQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5 OEFBMTEwQTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4/ZUc9KXCcUD81qNWYA5cfEHOJ8CH7o053 om7MML3pA0JTB5EB8tLKmTUMvXeaBEO0ZAHdQDikcqQMgIpJ8w49/84zkgfDfwLm 5ak/Z5ylQFBXW2VevnrAgMuOESMxnBE/i7G02oqKoALM42ABNxnK8Bq6p2HV2w54 wWE72V8iAQW3RFZ7pb543BegNk5psFmVfM2fgZnRnZ6/jc+Ds/g+5ZSAPwBctHjQ V8hCuULoSv2m2gJ/9+4gH7dSoHF/IOAjnt2TyYiJGr+4ecHJpksAyRXGvmJj5tDu Sb1ynxM3OjJS08yblSg1asGqpSCwd3F5TzjrAfDnIgGtIPgJarI= -----END CERTIFICATE-----Generated at Mon Oct 20 20:28:26 2025 by rpki-client