$ rpki-client -vvf repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft File: 7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft (raw, json) Hash identifier: ic9gDjaMRnq0rviBItxAwj/rvPARMprLfi6FR+yJhqU= Subject key identifier: 78:2D:75:5B:1B:BA:98:BA:20:A9:E1:C6:C2:F4:8A:C2:AC:41:7B:1A Authority key identifier: 7E:6A:78:6A:CE:F6:84:F3:77:58:FC:4A:6D:85:17:CA:D1:65:FA:77 Certificate issuer: /CN=7E6A786ACEF684F37758FC4A6D8517CAD165FA77 Certificate serial: 2AA0208F4A4252B3ED78A8119EB83B9544D28DE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft Manifest number: 01CC Signing time: Sat 18 Oct 2025 06:32:01 +0000 Manifest this update: Sat 18 Oct 2025 06:27:01 +0000 Manifest next update: Tue 21 Oct 2025 14:22:01 +0000 Files and hashes: 1: 7E6A786ACEF684F37758FC4A6D8517CAD165FA77.crl (hash: NhsO0t967DGgag8s4djXQ9tFulG1c0MssPN7Ez9ivsQ=) 2: 3130332e3231332e3233312e302f32342d3234203d3e20313431313236.roa (hash: P26CLYaAiMviaHDVXlCPRfno/SeqGYyHaQquQlltu00=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.crl rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 14:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:a0:20:8f:4a:42:52:b3:ed:78:a8:11:9e:b8:3b:95:44:d2:8d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E6A786ACEF684F37758FC4A6D8517CAD165FA77 Validity Not Before: Oct 18 06:27:01 2025 GMT Not After : Oct 21 14:22:01 2025 GMT Subject: CN=782D755B1BBA98BA20A9E1C6C2F48AC2AC417B1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:78:20:e1:73:8b:d5:ec:69:57:f3:34:5b:3e: c0:a2:27:0c:a8:97:72:6b:3b:24:68:7f:f3:91:bb: f5:23:53:bc:78:cc:95:2b:e4:f7:10:4b:d4:2c:f7: 1b:bf:49:29:45:65:4c:b0:c1:2f:b8:f7:a4:56:67: b8:3f:b0:37:34:24:8b:f5:97:3f:48:37:5c:ac:ba: ad:e8:da:51:cd:fd:eb:4a:9e:aa:7f:e3:a7:80:7a: 81:91:ad:b0:37:63:35:ed:ff:e1:9d:6d:a6:ea:94: 69:ed:b3:f7:b9:82:df:9c:63:4a:8d:db:2e:f9:1b: 12:a9:20:b7:1a:9f:b2:d6:1c:2d:ca:91:ce:f3:62: 62:17:f4:0a:68:ef:9b:d4:31:2d:b3:fa:1e:c4:eb: 29:08:2c:81:e9:16:59:de:6f:cb:e7:f6:d7:0d:c0: e5:0f:c1:c3:bb:ef:41:0d:7b:38:34:f6:5e:bf:f1: ef:51:d7:8d:e8:32:3e:7a:2c:2d:88:f7:82:f8:42: 60:c8:ab:1f:5e:59:a6:c8:69:2a:e8:ae:39:cc:52: a6:a0:6c:c0:31:7d:76:64:a9:d0:7c:cd:ea:da:f3: b4:50:60:7d:23:ee:a3:14:28:c3:81:67:33:d1:94: 90:ab:5b:61:0e:a8:75:16:28:fa:94:0e:16:9f:1f: 32:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:2D:75:5B:1B:BA:98:BA:20:A9:E1:C6:C2:F4:8A:C2:AC:41:7B:1A X509v3 Authority Key Identifier: keyid:7E:6A:78:6A:CE:F6:84:F3:77:58:FC:4A:6D:85:17:CA:D1:65:FA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:8e:b3:0d:de:53:59:4a:b9:a9:8a:b8:7d:f7:25:7a:96:d5: 38:d1:f8:fe:2b:0c:99:f6:42:31:c6:ec:0e:7e:aa:97:61:98: de:ce:d3:3f:01:3e:0b:58:83:79:6f:5a:af:2d:7c:57:8b:2f: 93:2f:d2:11:1b:7d:a0:cf:f2:01:95:66:eb:74:2f:b4:4d:ef: e6:8d:93:72:bf:9f:32:e9:4a:e5:ab:78:f3:56:48:04:42:cd: 60:8c:a8:06:a8:52:bd:a8:df:a1:f6:a4:84:f3:a9:3d:9b:8a: 80:29:14:63:e7:07:bc:13:e6:23:a8:a8:b3:35:ff:38:c6:c8: 12:04:c8:18:d0:ef:37:61:90:42:4d:f4:64:c0:13:0d:2a:7d: a8:82:84:6d:0a:42:04:d2:14:60:ba:ba:56:c7:f1:18:14:f9: a8:9e:87:ef:39:05:7a:50:f1:c4:b7:62:7f:48:3d:bc:28:d0: 96:50:ea:b6:a8:83:7d:e1:ed:d6:c3:fe:de:f3:ac:d2:d4:3b: 08:56:85:05:42:8b:85:7a:d1:47:1a:0d:96:62:dd:5e:b3:87: 66:9e:25:6c:0f:d5:33:28:69:44:4b:c0:05:c7:07:cf:06:da: f9:86:db:ca:ae:09:de:03:8f:ca:a5:5e:f6:ad:22:81:6d:fd: f6:e5:11:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKqAgj0pCUrPteKgRnrg7lUTSjeYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U2QTc4NkFDRUY2ODRGMzc3NThGQzRBNkQ4NTE3Q0FE MTY1RkE3NzAeFw0yNTEwMTgwNjI3MDFaFw0yNTEwMjExNDIyMDFaMDMxMTAvBgNV BAMTKDc4MkQ3NTVCMUJCQTk4QkEyMEE5RTFDNkMyRjQ4QUMyQUM0MTdCMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1eCDhc4vV7GlX8zRbPsCiJwyo l3JrOyRof/ORu/UjU7x4zJUr5PcQS9Qs9xu/SSlFZUywwS+496RWZ7g/sDc0JIv1 lz9IN1ysuq3o2lHN/etKnqp/46eAeoGRrbA3YzXt/+GdbabqlGnts/e5gt+cY0qN 2y75GxKpILcan7LWHC3Kkc7zYmIX9Apo75vUMS2z+h7E6ykILIHpFlneb8vn9tcN wOUPwcO770ENezg09l6/8e9R143oMj56LC2I94L4QmDIqx9eWabIaSrorjnMUqag bMAxfXZkqdB8zera87RQYH0j7qMUKMOBZzPRlJCrW2EOqHUWKPqUDhafHzLFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeC11Wxu6mLogqeHGwvSKwqxBexowHwYDVR0j BBgwFoAUfmp4as72hPN3WPxKbYUXytFl+ncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjI5MmJhOC1hZDFhLTQxMzktOGMyMC01YjUyNmRhOTcwYmQvMC83RTZBNzg2QUNF RjY4NEYzNzc1OEZDNEE2RDg1MTdDQUQxNjVGQTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U2QTc4NkFDRUY2ODRGMzc3NThGQzRBNkQ4NTE3Q0FEMTY1 RkE3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTIyOTJiYTgtYWQxYS00MTM5LThj MjAtNWI1MjZkYTk3MGJkLzAvN0U2QTc4NkFDRUY2ODRGMzc3NThGQzRBNkQ4NTE3 Q0FEMTY1RkE3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCOsw3eU1lKuamKuH33JXqW1TjR+P4rDJn2 QjHG7A5+qpdhmN7O0z8BPgtYg3lvWq8tfFeLL5Mv0hEbfaDP8gGVZut0L7RN7+aN k3K/nzLpSuWrePNWSARCzWCMqAaoUr2o36H2pITzqT2bioApFGPnB7wT5iOoqLM1 /zjGyBIEyBjQ7zdhkEJN9GTAEw0qfaiChG0KQgTSFGC6ulbH8RgU+aieh+85BXpQ 8cS3Yn9IPbwo0JZQ6raog33h7dbD/t7zrNLUOwhWhQVCi4V60UcaDZZi3V6zh2ae JWwP1TMoaURLwAXHB88G2vmG28quCd4Dj8qlXvatIoFt/fblEV4= -----END CERTIFICATE-----Generated at Mon Oct 20 14:39:11 2025 by rpki-client