$ rpki-client -vvf repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft File: 7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft (raw, json) Hash identifier: paWVALvZawMTyw4b41nD/A43mnCmymaXlP21xr+qvpc= Subject key identifier: B6:86:CB:06:8F:83:C7:11:04:C4:6D:0D:70:CB:8F:70:AB:65:BA:7B Authority key identifier: 73:76:92:2C:93:BF:66:7F:FB:BD:AF:07:35:AE:73:D1:45:1B:08:C2 Certificate issuer: /CN=7376922C93BF667FFBBDAF0735AE73D1451B08C2 Certificate serial: 556E5077C30795DE6E9A4E458E2659E00DD2B2B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft Manifest number: 050B Signing time: Sun 19 Oct 2025 12:50:53 +0000 Manifest this update: Sun 19 Oct 2025 12:45:53 +0000 Manifest next update: Wed 22 Oct 2025 14:29:53 +0000 Files and hashes: 1: 3130332e38392e3136342e302f32342d3234203d3e20313333383030.roa (hash: +2SP7VdADvevew0k00TuxJ1WZ3WZFkGqu4JZIMGxgpw=) 2: 3130332e38392e3135342e302f32342d3234203d3e20313333383030.roa (hash: 21L4D1hu21+7UR3Mn3cvc8Jhs/U+RaE8nhEhhkQ5YEA=) 3: 3130332e38392e3136352e302f32342d3234203d3e20313333383030.roa (hash: 0V79HEBuKR1jbK8PkSQwyA4BziEgKvO+/ItR4BkRmQg=) 4: 7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl (hash: RCSKA1n44tk2RDyNXtM8yM+vuTSGlKnnpSbXATTup78=) 5: 3130332e372e3137362e302f32342d3234203d3e20313336303830.roa (hash: pULFJZ+nbfV5jOVZtN4jB+N6TsIyKwD9xJ39aFL57ak=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 14:29:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:6e:50:77:c3:07:95:de:6e:9a:4e:45:8e:26:59:e0:0d:d2:b2:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7376922C93BF667FFBBDAF0735AE73D1451B08C2 Validity Not Before: Oct 19 12:45:53 2025 GMT Not After : Oct 22 14:29:53 2025 GMT Subject: CN=B686CB068F83C71104C46D0D70CB8F70AB65BA7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c4:21:ec:e3:2a:e7:04:75:0d:44:96:e4:0e: 9d:07:75:04:8d:a0:56:ca:2f:92:94:2d:26:7d:fd: d9:72:e7:88:b6:a0:81:f3:28:17:18:63:0e:78:29: f8:e2:a9:7b:62:50:24:57:41:04:f4:9a:03:0e:e5: 82:42:c5:c4:13:ba:43:21:33:c2:fe:35:a9:44:2c: d5:6d:7d:1d:e8:fb:3f:64:e9:e9:ee:fe:b5:1e:c2: 7a:31:c3:6e:17:fe:f7:0c:ac:4c:f9:84:09:95:22: 22:14:7f:dd:7a:81:3a:72:52:e7:2d:09:df:19:b3: 43:0b:c5:b7:4d:79:a5:2e:be:76:cb:6b:47:9b:79: ab:6c:f6:cd:12:07:8a:dc:82:ab:6b:42:a6:c8:f4: d6:2d:e2:96:3f:48:f5:50:8f:c6:54:74:d2:ce:e5: 97:0c:06:90:44:81:e5:e7:d9:66:5f:1c:56:d1:dd: b4:74:1b:76:51:2a:98:02:e3:bc:9f:7f:94:74:5d: 20:aa:2e:01:f6:13:30:5d:fc:2d:35:02:7e:4d:64: 62:47:55:9d:76:5c:c5:0a:74:6e:24:d7:3a:95:d0: 76:86:ec:e3:bb:17:a4:11:b1:61:94:c5:ad:6a:30: 8b:2d:a3:90:f1:a7:db:2b:85:07:ba:3b:d0:47:7b: 28:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:86:CB:06:8F:83:C7:11:04:C4:6D:0D:70:CB:8F:70:AB:65:BA:7B X509v3 Authority Key Identifier: keyid:73:76:92:2C:93:BF:66:7F:FB:BD:AF:07:35:AE:73:D1:45:1B:08:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:56:79:8c:a9:a7:72:74:e6:5d:99:82:2d:e7:8e:cb:a9:88: 70:40:0e:7e:c2:6c:7c:b0:04:0e:08:ce:a8:5f:b6:e9:f2:8e: 82:49:d3:62:a8:4e:14:84:88:d7:d8:f1:1f:c5:00:16:9c:5d: 5c:ae:c5:c8:8b:4e:3c:3c:70:64:9d:cd:f5:3e:ad:d5:f4:d9: 91:d2:c7:ad:64:bb:5a:96:51:21:5a:69:bd:37:52:9d:be:c0: 8c:15:42:51:a7:a4:4c:17:58:11:49:0e:d0:99:95:fb:b6:5e: e8:59:8d:41:d1:6a:83:ee:73:97:8a:75:a4:9f:73:48:b2:1a: f3:a9:3c:54:2b:50:4d:14:14:8d:9b:68:20:7f:f1:3d:ed:0b: 1d:bf:d1:67:e9:90:1e:24:dc:af:f8:86:ae:e3:09:e1:e4:6c: 4f:b0:53:29:2a:3e:35:11:da:a4:43:54:01:eb:b7:ee:51:f7: fc:1d:2c:92:21:c3:a3:34:18:4b:1b:e4:54:48:03:23:71:38: 69:ca:ca:e4:f3:62:3d:67:b6:a6:97:b2:c9:c7:a6:f8:31:ff: c6:cc:93:1e:80:aa:93:06:05:b1:1d:84:48:30:42:c7:ba:de: 55:e4:99:7e:d3:cb:b7:b9:ee:5a:c4:fd:5e:53:74:f0:2b:f2: 9e:75:1a:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVW5Qd8MHld5umk5FjiZZ4A3SsrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTczRDE0 NTFCMDhDMjAeFw0yNTEwMTkxMjQ1NTNaFw0yNTEwMjIxNDI5NTNaMDMxMTAvBgNV BAMTKEI2ODZDQjA2OEY4M0M3MTEwNEM0NkQwRDcwQ0I4RjcwQUI2NUJBN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrxCHs4yrnBHUNRJbkDp0HdQSN oFbKL5KULSZ9/dly54i2oIHzKBcYYw54KfjiqXtiUCRXQQT0mgMO5YJCxcQTukMh M8L+NalELNVtfR3o+z9k6enu/rUewnoxw24X/vcMrEz5hAmVIiIUf916gTpyUuct Cd8Zs0MLxbdNeaUuvnbLa0ebeats9s0SB4rcgqtrQqbI9NYt4pY/SPVQj8ZUdNLO 5ZcMBpBEgeXn2WZfHFbR3bR0G3ZRKpgC47yff5R0XSCqLgH2EzBd/C01An5NZGJH VZ12XMUKdG4k1zqV0HaG7OO7F6QRsWGUxa1qMIsto5Dxp9srhQe6O9BHeyh/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtobLBo+DxxEExG0NcMuPcKtlunswHwYDVR0j BBgwFoAUc3aSLJO/Zn/7va8HNa5z0UUbCMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDE3NmRkZC1hOTgwLTQzZDYtOTRhNy05NWVlZGE1Mzk2NjUvMC83Mzc2OTIyQzkz QkY2NjdGRkJCREFGMDczNUFFNzNEMTQ1MUIwOEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTczRDE0NTFC MDhDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQxNzZkZGQtYTk4MC00M2Q2LTk0 YTctOTVlZWRhNTM5NjY1LzAvNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTcz RDE0NTFCMDhDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9WeYypp3J05l2Zgi3njsupiHBADn7CbHyw BA4IzqhftunyjoJJ02KoThSEiNfY8R/FABacXVyuxciLTjw8cGSdzfU+rdX02ZHS x61ku1qWUSFaab03Up2+wIwVQlGnpEwXWBFJDtCZlfu2XuhZjUHRaoPuc5eKdaSf c0iyGvOpPFQrUE0UFI2baCB/8T3tCx2/0WfpkB4k3K/4hq7jCeHkbE+wUykqPjUR 2qRDVAHrt+5R9/wdLJIhw6M0GEsb5FRIAyNxOGnKyuTzYj1ntqaXssnHpvgx/8bM kx6AqpMGBbEdhEgwQse63lXkmX7Ty7e57lrE/V5TdPAr8p51Ggo= -----END CERTIFICATE-----Generated at Mon Oct 20 12:39:23 2025 by rpki-client