$ rpki-client -vvf repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.mft File: F075D91933F7B3147C303794D6C498142A2D33C6.mft (raw, json) Hash identifier: 2031qXeWj6EoeN5DRnFQg1G2oRGY8UmU6bm/zVa7zyo= Subject key identifier: 77:D1:C8:18:5F:D4:F8:F8:4C:D2:E3:E0:6F:0D:5A:E0:40:70:D2:34 Authority key identifier: F0:75:D9:19:33:F7:B3:14:7C:30:37:94:D6:C4:98:14:2A:2D:33:C6 Certificate issuer: /CN=F075D91933F7B3147C303794D6C498142A2D33C6 Certificate serial: 7ACF69E3905522A310A988F332F898DACF9E48E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F075D91933F7B3147C303794D6C498142A2D33C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.mft Manifest number: 018C Signing time: Sat 18 Oct 2025 13:01:34 +0000 Manifest this update: Sat 18 Oct 2025 12:56:34 +0000 Manifest next update: Tue 21 Oct 2025 20:26:34 +0000 Files and hashes: 1: 3130332e3235332e3132342e302f32342d3234203d3e203539313432.roa (hash: XUjYjomn+FDHeFP35eIIQvW7MGG7ocItLx8+BF1P+J0=) 2: F075D91933F7B3147C303794D6C498142A2D33C6.crl (hash: rahyKroqcnaCH3GbAoejzRcIHKH5Z75xyR5CtHTmwWM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.crl rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F075D91933F7B3147C303794D6C498142A2D33C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:26:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:cf:69:e3:90:55:22:a3:10:a9:88:f3:32:f8:98:da:cf:9e:48:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F075D91933F7B3147C303794D6C498142A2D33C6 Validity Not Before: Oct 18 12:56:34 2025 GMT Not After : Oct 21 20:26:34 2025 GMT Subject: CN=77D1C8185FD4F8F84CD2E3E06F0D5AE04070D234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:55:b1:eb:d4:af:e3:05:91:76:64:7c:f9:b3: e2:e3:f7:34:44:8d:b0:ab:02:64:1e:c8:4e:4e:da: 59:20:38:92:3a:ed:62:88:dd:fd:51:6b:b1:e7:2d: dd:d7:08:b6:5f:35:e8:0b:66:4d:bf:f7:3f:c6:a9: 9a:34:9f:6e:3e:39:e2:51:05:15:ca:76:b6:02:5e: ec:51:59:19:c8:e8:34:b8:23:eb:16:44:32:00:c0: 7f:a2:8f:56:42:42:2c:f0:f7:2f:d6:d5:c6:19:e1: bc:11:37:0b:02:dc:5d:2a:d9:f4:ba:96:d6:bb:20: fb:4b:99:ad:f4:20:33:52:aa:ee:cc:26:ce:de:19: 5e:4f:5c:13:56:aa:9d:f2:f0:5a:a0:e9:6c:08:f9: d2:d9:cd:35:b1:e8:0c:cb:4d:86:5a:6c:c8:9a:69: be:ac:8e:7e:32:2a:39:cc:06:e0:5d:7f:9d:bb:ae: b5:89:42:69:4e:29:ab:9e:58:fe:27:34:4a:5e:06: 72:e9:58:a5:a0:35:a9:7c:10:4d:00:b5:d1:59:6a: 47:24:80:6a:7e:77:70:a0:27:35:c0:c3:a1:cb:92: d4:1c:16:51:41:e7:db:93:53:32:5c:5d:ec:8f:c9: aa:ac:96:10:18:6e:f7:6c:e1:5c:b1:44:93:70:98: 0e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D1:C8:18:5F:D4:F8:F8:4C:D2:E3:E0:6F:0D:5A:E0:40:70:D2:34 X509v3 Authority Key Identifier: keyid:F0:75:D9:19:33:F7:B3:14:7C:30:37:94:D6:C4:98:14:2A:2D:33:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F075D91933F7B3147C303794D6C498142A2D33C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:fa:78:cb:2b:80:be:a9:f8:7e:ef:a8:ed:41:0d:55:66:56: 08:fa:54:6f:65:b2:f7:65:76:05:39:34:08:6e:f3:06:a2:3c: 75:c3:e7:1f:77:e2:c0:85:f2:0e:cb:df:28:82:81:af:5f:ce: 06:45:8b:55:85:d6:e1:39:6b:c5:6b:12:7b:dc:8b:05:c9:f6: e4:a6:9f:d1:f3:6f:d6:04:97:ff:82:a4:94:05:48:84:57:90: 6a:08:c6:64:f7:d1:65:29:26:fa:48:66:27:de:20:eb:9c:33: 96:32:cb:af:3e:d1:7c:3c:5c:65:ce:ff:f9:0f:55:c6:d7:f3: 24:94:b6:c0:2f:72:ce:8d:4b:74:6d:b7:a6:b5:b5:b5:2b:b8: e0:eb:66:3d:91:5e:6a:99:c1:25:3a:cb:ac:db:38:90:11:9e: 10:15:84:b9:d7:19:f2:e3:97:eb:dc:91:e4:2e:f0:11:4a:6f: 34:6f:77:9b:dd:b4:a3:73:51:d6:32:09:29:7e:2d:00:c5:e1: c2:14:03:fb:0e:53:7b:18:fa:b7:f9:e8:a6:ab:9a:75:a0:ac: 1b:f1:67:7f:15:58:9c:e1:c9:b9:6c:5e:53:a0:d7:27:4b:10: f0:25:f4:1a:9d:ff:d6:aa:d2:e7:94:df:2c:21:8a:52:43:d8: cd:b8:7b:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUes9p45BVIqMQqYjzMviY2s+eSOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA3NUQ5MTkzM0Y3QjMxNDdDMzAzNzk0RDZDNDk4MTQy QTJEMzNDNjAeFw0yNTEwMTgxMjU2MzRaFw0yNTEwMjEyMDI2MzRaMDMxMTAvBgNV BAMTKDc3RDFDODE4NUZENEY4Rjg0Q0QyRTNFMDZGMEQ1QUUwNDA3MEQyMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsVbHr1K/jBZF2ZHz5s+Lj9zRE jbCrAmQeyE5O2lkgOJI67WKI3f1Ra7HnLd3XCLZfNegLZk2/9z/GqZo0n24+OeJR BRXKdrYCXuxRWRnI6DS4I+sWRDIAwH+ij1ZCQizw9y/W1cYZ4bwRNwsC3F0q2fS6 lta7IPtLma30IDNSqu7MJs7eGV5PXBNWqp3y8Fqg6WwI+dLZzTWx6AzLTYZabMia ab6sjn4yKjnMBuBdf527rrWJQmlOKaueWP4nNEpeBnLpWKWgNal8EE0AtdFZakck gGp+d3CgJzXAw6HLktQcFlFB59uTUzJcXeyPyaqslhAYbvds4VyxRJNwmA4vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd9HIGF/U+PhM0uPgbw1a4EBw0jQwHwYDVR0j BBgwFoAU8HXZGTP3sxR8MDeU1sSYFCotM8YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzJjNTEyMS1mNzQ5LTRhNTQtYTllYy1mNmMzNDlmMzQzMTAvMC9GMDc1RDkxOTMz RjdCMzE0N0MzMDM3OTRENkM0OTgxNDJBMkQzM0M2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjA3NUQ5MTkzM0Y3QjMxNDdDMzAzNzk0RDZDNDk4MTQyQTJE MzNDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMyYzUxMjEtZjc0OS00YTU0LWE5 ZWMtZjZjMzQ5ZjM0MzEwLzAvRjA3NUQ5MTkzM0Y3QjMxNDdDMzAzNzk0RDZDNDk4 MTQyQTJEMzNDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHv6eMsrgL6p+H7vqO1BDVVmVgj6VG9lsvdl dgU5NAhu8waiPHXD5x934sCF8g7L3yiCga9fzgZFi1WF1uE5a8VrEnvciwXJ9uSm n9Hzb9YEl/+CpJQFSIRXkGoIxmT30WUpJvpIZifeIOucM5Yyy68+0Xw8XGXO//kP VcbX8ySUtsAvcs6NS3Rtt6a1tbUruODrZj2RXmqZwSU6y6zbOJARnhAVhLnXGfLj l+vckeQu8BFKbzRvd5vdtKNzUdYyCSl+LQDF4cIUA/sOU3sY+rf56KarmnWgrBvx Z38VWJzhyblsXlOg1ydLEPAl9Bqd/9aq0ueU3ywhilJD2M24e0U= -----END CERTIFICATE-----Generated at Mon Oct 20 09:23:42 2025 by rpki-client