$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft File: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft (raw, json) Hash identifier: VAndLrD+9fKN6bkvG2yTJS3+XvfjFbkknsrhV1HE/QU= Subject key identifier: 94:12:A8:7A:3D:21:90:F5:D9:63:76:D9:65:A9:8F:6A:E5:01:EF:DF Authority key identifier: 7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 Certificate issuer: /CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Certificate serial: 029691C545B89E217B86B2F16B8890DC9C952B01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft Manifest number: 01C3 Signing time: Mon 20 Oct 2025 04:30:05 +0000 Manifest this update: Mon 20 Oct 2025 04:25:05 +0000 Manifest next update: Thu 23 Oct 2025 13:02:05 +0000 Files and hashes: 1: 3130332e34362e342e302f32342d3234203d3e20313530343630.roa (hash: 70RFcRoz1w22nVDdjd8xwvOHx9oaAPRDsiAFJSjZRVk=) 2: 3130332e34362e352e302f32342d3234203d3e20313530343630.roa (hash: OiXuaCFeHNTNKTkxwDwZ/IJjAlYs+aZs7qWhd3mySzg=) 3: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl (hash: +LafjhtpXm4nJYYK90a5nMlYZ4yM4+1owBgmoTbW8H0=) 4: 3130332e34362e342e302f32332d3233203d3e20313530343630.roa (hash: NXHMc5cBUZitTQZ4ST9s7lp3tsPIg2LlkZ5yYQ7KPUA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:96:91:c5:45:b8:9e:21:7b:86:b2:f1:6b:88:90:dc:9c:95:2b:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Validity Not Before: Oct 20 04:25:05 2025 GMT Not After : Oct 23 13:02:05 2025 GMT Subject: CN=9412A87A3D2190F5D96376D965A98F6AE501EFDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8a:44:5d:20:1d:d2:f3:03:d2:ca:34:a9:fd: 1a:85:0b:8c:d8:6e:07:69:c6:d0:1d:fd:b0:fa:76: 5b:15:f4:83:55:0a:db:8d:9c:0d:ce:9e:b2:30:21: 69:9a:fa:a4:c4:d4:30:ac:84:34:02:04:aa:97:c6: 14:ce:4d:92:34:7d:68:91:3a:08:e9:0d:2c:8f:88: ba:28:a1:11:8f:03:2d:29:97:a2:fb:9a:e2:49:d2: 7d:7a:15:23:e8:cd:4e:41:86:75:45:62:2d:69:bc: 69:de:52:e3:6f:19:fb:a5:bb:46:d6:04:fb:44:06: 31:5a:fa:1e:b2:71:b9:59:ff:25:2e:48:dd:87:cf: 6f:4a:2d:ee:eb:a0:5c:c4:0b:de:55:19:28:11:40: 14:fa:ce:f1:5f:0c:c8:ea:84:37:c2:e3:a4:d2:75: 24:6e:f7:0a:ab:33:ac:1a:4a:d2:97:48:72:e0:76: 99:7b:c4:2f:80:0d:be:f1:9a:5d:c8:23:1e:41:40: f7:e0:e2:5a:50:76:8a:ad:78:06:1e:73:34:6e:44: 41:56:2c:db:c5:7a:b7:59:07:64:84:d1:63:ec:70: 84:71:56:b5:9d:f1:b6:b0:34:46:fa:66:49:94:21: a1:75:af:7a:74:fc:88:38:3f:26:65:a5:ee:06:22: bc:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:12:A8:7A:3D:21:90:F5:D9:63:76:D9:65:A9:8F:6A:E5:01:EF:DF X509v3 Authority Key Identifier: keyid:7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:ee:80:7a:c4:96:24:84:86:76:2a:fc:a0:19:94:46:29:ab: 96:49:e2:85:1c:51:08:a9:db:64:b9:12:75:e3:8a:5f:35:b3: a5:f2:73:0c:6f:df:57:df:7f:22:ec:a8:6b:28:d5:03:aa:dd: 59:61:6a:d3:6b:a1:cf:6e:d6:fc:5a:dc:26:f7:e5:b2:f5:99: c0:26:6e:e0:c0:04:81:3f:39:e4:39:3b:f1:ea:12:eb:7a:d1: b4:85:5a:d0:86:2b:f5:1c:43:1b:d0:27:39:de:5b:98:91:e1: 03:dc:7a:52:cc:8e:b3:14:27:6c:2b:e2:65:95:a9:83:21:4b: 64:b7:3b:d9:be:bb:5b:10:4a:a6:96:0a:0b:15:a4:9f:58:13: 3e:a2:85:eb:1f:71:90:e8:38:7c:b6:6d:03:23:cd:a5:00:b5: b6:62:67:08:c8:14:55:bf:1f:7c:5a:9d:1a:09:c4:23:b4:1d: a6:07:74:8a:b2:b1:f9:0c:7d:c6:a3:14:8c:fb:24:4e:9f:44: ca:5f:c9:65:07:11:ea:b8:b4:ee:08:e1:35:57:bd:3e:f6:d7: 33:de:0a:88:8b:09:28:13:e3:a4:7c:3e:ca:2a:25:b4:23:14: 57:f5:ba:03:de:6e:33:f0:2f:23:16:06:f0:0e:63:fc:bc:0a: f9:78:24:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUApaRxUW4niF7hrLxa4iQ3JyVKwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVF OEJFQjk1MzAeFw0yNTEwMjAwNDI1MDVaFw0yNTEwMjMxMzAyMDVaMDMxMTAvBgNV BAMTKDk0MTJBODdBM0QyMTkwRjVEOTYzNzZEOTY1QTk4RjZBRTUwMUVGREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ikRdIB3S8wPSyjSp/RqFC4zY bgdpxtAd/bD6dlsV9INVCtuNnA3OnrIwIWma+qTE1DCshDQCBKqXxhTOTZI0fWiR OgjpDSyPiLoooRGPAy0pl6L7muJJ0n16FSPozU5BhnVFYi1pvGneUuNvGfulu0bW BPtEBjFa+h6ycblZ/yUuSN2Hz29KLe7roFzEC95VGSgRQBT6zvFfDMjqhDfC46TS dSRu9wqrM6waStKXSHLgdpl7xC+ADb7xml3IIx5BQPfg4lpQdoqteAYeczRuREFW LNvFerdZB2SE0WPscIRxVrWd8bawNEb6ZkmUIaF1r3p0/Ig4PyZlpe4GIrxTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlBKoej0hkPXZY3bZZamPauUB798wHwYDVR0j BBgwFoAUfW7f2yG4t+anWpkKe+ythei+uVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM4Y2RhNS0zNDgzLTQyYjAtYjM4NS1mYzA3MDcxNmZiY2MvMC83RDZFREZEQjIx QjhCN0U2QTc1QTk5MEE3QkVDQUQ4NUU4QkVCOTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVFOEJF Qjk1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJjOGNkYTUtMzQ4My00MmIwLWIz ODUtZmMwNzA3MTZmYmNjLzAvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FE ODVFOEJFQjk1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjugHrEliSEhnYq/KAZlEYpq5ZJ4oUcUQip 22S5EnXjil81s6Xycwxv31fffyLsqGso1QOq3VlhatNroc9u1vxa3Cb35bL1mcAm buDABIE/OeQ5O/HqEut60bSFWtCGK/UcQxvQJzneW5iR4QPcelLMjrMUJ2wr4mWV qYMhS2S3O9m+u1sQSqaWCgsVpJ9YEz6ihesfcZDoOHy2bQMjzaUAtbZiZwjIFFW/ H3xanRoJxCO0HaYHdIqysfkMfcajFIz7JE6fRMpfyWUHEeq4tO4I4TVXvT721zPe CoiLCSgT46R8PsoqJbQjFFf1ugPebjPwLyMWBvAOY/y8Cvl4JJU= -----END CERTIFICATE-----Generated at Mon Oct 20 21:03:02 2025 by rpki-client