$ rpki-client -vvf repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft File: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft (raw, json) Hash identifier: /qzoK0v2Iz4yVYCZyJbtdpqwBK8zJMnA3i223f1t/oI= Subject key identifier: 74:68:DF:67:E5:BB:AD:93:C4:0B:31:56:08:B9:C9:BE:41:61:C7:54 Authority key identifier: D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF Certificate issuer: /CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF Certificate serial: 3A66D045B1A92080B9FE9765EF79738D5AB08278 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft Manifest number: 0274 Signing time: Sat 18 Oct 2025 09:02:27 +0000 Manifest this update: Sat 18 Oct 2025 08:57:27 +0000 Manifest next update: Tue 21 Oct 2025 14:00:27 +0000 Files and hashes: 1: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl (hash: 7bMW9RWxbPyVql6GCCHmVzTtMxEAPy2VzCJZjuqpeYU=) 2: 3130332e3130322e3137372e302f32342d3234203d3e20313335343634.roa (hash: 5B/tN2XTSVc7IkCa3bkZUZXee71PBWdrKh/L7WGgSKQ=) 3: 3130332e3130322e3136372e302f32342d3234203d3e20313335343634.roa (hash: ceY23gZq7fyvuACT0VzLXjn2OzCRdbTZW+mufK3gDDU=) 4: 3130332e3130322e3137362e302f32342d3234203d3e20313335343634.roa (hash: zAqV6QY/TappIht3b1tctxgtErOisyD+TbFdtRBFjYk=) 5: 3130332e37302e36382e302f32342d3234203d3e20313335343634.roa (hash: l9uygWTtqWMPyZojlz6MhHbKKXqBISgxnKW2QuyQglM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 14:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:66:d0:45:b1:a9:20:80:b9:fe:97:65:ef:79:73:8d:5a:b0:82:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF Validity Not Before: Oct 18 08:57:27 2025 GMT Not After : Oct 21 14:00:27 2025 GMT Subject: CN=7468DF67E5BBAD93C40B315608B9C9BE4161C754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8d:f5:4d:ae:ae:b9:bc:1a:2a:ad:8f:90:19: 21:6e:89:ef:45:d8:0b:fc:aa:70:ed:e7:fb:7a:8c: 89:97:f9:44:22:f7:fd:43:67:de:04:e9:df:92:36: 4f:40:1c:ce:5b:58:60:9f:a4:15:21:90:8b:75:79: e9:89:51:06:19:5d:db:3f:ec:e8:83:92:e2:a3:37: 2c:5c:ad:c4:d8:c6:cf:93:f7:bf:e8:44:53:5b:60: d1:1f:a4:78:bd:c7:43:64:93:7f:7b:9e:bb:95:71: 0b:29:0c:1c:8c:36:58:36:a6:b5:12:68:36:42:2e: c5:1e:78:6c:97:42:8f:75:83:3e:e2:a9:97:dc:05: f8:7b:76:3c:45:28:e9:e4:5c:80:df:63:32:82:42: 48:cf:2c:26:4c:d3:2c:3a:d0:1d:db:e1:c2:18:91: 3e:a6:dd:41:a2:da:4b:43:11:8c:64:ca:20:8f:29: 90:2f:3a:57:c4:c6:9c:2f:f1:60:d7:4c:f7:80:32: 98:66:99:83:2e:b9:75:91:35:e9:4c:5e:76:95:27: 59:9f:1d:c5:ad:29:21:73:b3:c2:19:35:e5:1a:2c: 84:ad:59:9a:49:69:7f:24:ad:35:f8:6e:98:86:ee: e6:f6:d5:84:98:5f:97:0c:a2:ad:a8:27:64:58:e2: 2b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:68:DF:67:E5:BB:AD:93:C4:0B:31:56:08:B9:C9:BE:41:61:C7:54 X509v3 Authority Key Identifier: keyid:D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:de:9b:6e:be:2b:da:c1:ac:09:d8:39:8e:20:4f:15:97:82: 08:e9:f2:c3:8f:6d:90:2d:1c:b1:e4:83:8e:24:17:ea:8f:b1: 9d:35:72:13:7f:68:0f:2e:6c:62:a0:57:73:cc:06:2f:7e:86: 77:c8:98:8b:cd:49:21:4e:0e:a1:a5:27:16:38:9c:81:e3:be: bf:c5:eb:9f:a8:62:f0:9c:71:ba:56:e0:87:e3:dd:9c:4d:86: db:1a:8c:2a:f7:72:be:92:5e:76:40:99:49:1c:63:90:d2:e2: 04:f1:51:b3:c3:45:c1:98:bd:0b:c9:4e:b5:24:c9:ee:c3:20: a7:52:95:0d:8e:22:66:41:85:38:61:6d:38:21:50:48:0a:26: 8a:7b:e9:e8:c0:39:a0:90:20:6a:8f:0d:12:2a:60:79:26:a3: 1d:0a:e2:9a:7e:bd:0d:f9:e0:22:06:e5:c9:29:84:c4:79:28: eb:19:e3:25:06:32:d8:46:0c:8a:41:99:f7:35:5f:b8:f3:a6: 4b:43:9b:bd:7a:8b:3e:54:08:e2:f2:3b:e2:05:f3:0a:c1:c1: 14:fe:32:c7:a7:62:6e:89:33:9b:87:db:e7:04:8f:45:62:87: 42:6e:f3:30:fa:5f:a7:ad:62:f9:e9:43:ed:28:01:1c:6a:2a: 96:be:05:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOmbQRbGpIIC5/pdl73lzjVqwgngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFCMDQz NkMzOUZBRjAeFw0yNTEwMTgwODU3MjdaFw0yNTEwMjExNDAwMjdaMDMxMTAvBgNV BAMTKDc0NjhERjY3RTVCQkFEOTNDNDBCMzE1NjA4QjlDOUJFNDE2MUM3NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJjfVNrq65vBoqrY+QGSFuie9F 2Av8qnDt5/t6jImX+UQi9/1DZ94E6d+SNk9AHM5bWGCfpBUhkIt1eemJUQYZXds/ 7OiDkuKjNyxcrcTYxs+T97/oRFNbYNEfpHi9x0Nkk397nruVcQspDByMNlg2prUS aDZCLsUeeGyXQo91gz7iqZfcBfh7djxFKOnkXIDfYzKCQkjPLCZM0yw60B3b4cIY kT6m3UGi2ktDEYxkyiCPKZAvOlfExpwv8WDXTPeAMphmmYMuuXWRNelMXnaVJ1mf HcWtKSFzs8IZNeUaLIStWZpJaX8krTX4bpiG7ub21YSYX5cMoq2oJ2RY4ithAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdGjfZ+W7rZPECzFWCLnJvkFhx1QwHwYDVR0j BBgwFoAU18fG5TPEHDbZI83Fn/wbBDbDn68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTlhODUzOC1kYTQzLTQxNTgtYWJjMi04ZTYzYThlNDA4OTkvMC9EN0M3QzZFNTMz QzQxQzM2RDkyM0NEQzU5RkZDMUIwNDM2QzM5RkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFCMDQzNkMz OUZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5YTg1MzgtZGE0My00MTU4LWFi YzItOGU2M2E4ZTQwODk5LzAvRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFC MDQzNkMzOUZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHem26+K9rBrAnYOY4gTxWXggjp8sOPbZAt HLHkg44kF+qPsZ01chN/aA8ubGKgV3PMBi9+hnfImIvNSSFODqGlJxY4nIHjvr/F 65+oYvCccbpW4Ifj3ZxNhtsajCr3cr6SXnZAmUkcY5DS4gTxUbPDRcGYvQvJTrUk ye7DIKdSlQ2OImZBhThhbTghUEgKJop76ejAOaCQIGqPDRIqYHkmox0K4pp+vQ35 4CIG5ckphMR5KOsZ4yUGMthGDIpBmfc1X7jzpktDm716iz5UCOLyO+IF8wrBwRT+ MsenYm6JM5uH2+cEj0Vih0Ju8zD6X6etYvnpQ+0oARxqKpa+Bb4= -----END CERTIFICATE-----Generated at Mon Oct 20 13:58:16 2025 by rpki-client