$ rpki-client -vvf repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft File: 7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft (raw, json) Hash identifier: s0c6ePSrDh6/2ptOvybXX/E/zte11ARRlf4y6anaUsI= Subject key identifier: A1:0F:AE:2D:71:E0:F7:A8:10:F8:38:A8:F4:56:2B:5F:FE:96:83:1A Authority key identifier: 7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4 Certificate issuer: /CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4 Certificate serial: 4CF8E512D7BA1CB5B4F2AD0EE8F1469C6E5B2269 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft Manifest number: 9A Signing time: Sun 19 Oct 2025 20:22:26 +0000 Manifest this update: Sun 19 Oct 2025 20:17:26 +0000 Manifest next update: Thu 23 Oct 2025 03:55:26 +0000 Files and hashes: 1: 3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa (hash: PKJay4YTUMIamculUnWc/1iHvOFg1R7DDFoaRZ7eMb0=) 2: 3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa (hash: H2vMbusg9cc7KJr3RTfXCg88poNhf1lCs+Xogw0psfI=) 3: 7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl (hash: sIHWeULCvLGC2jYR/x16ITrBo9QlX3t+PpGqQGB9VfA=) 4: 3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa (hash: QdxrdH7DJeQ01d2yPs/0LNDYNMsAKR57bx9AHeSr82o=) 5: 3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa (hash: V4UBKbCeji0pbV7a6XBtcRsd6l6kzHNKhpG08xb4pYs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:f8:e5:12:d7:ba:1c:b5:b4:f2:ad:0e:e8:f1:46:9c:6e:5b:22:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4 Validity Not Before: Oct 19 20:17:26 2025 GMT Not After : Oct 23 03:55:26 2025 GMT Subject: CN=A10FAE2D71E0F7A810F838A8F4562B5FFE96831A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:88:1d:35:c2:6e:b4:28:55:a5:87:fc:93:6a: d2:66:38:0f:c1:66:d9:31:1d:3a:23:7e:2f:69:7a: 2e:9c:dc:71:57:e2:a6:4f:a3:c6:c6:ba:11:bd:a7: 2b:5f:63:04:77:30:6f:f3:bb:a0:5d:20:85:00:0b: dd:48:a1:2a:b7:e0:79:ea:bc:a1:c9:63:de:43:95: 16:7d:b5:be:d2:bc:b3:dc:b8:df:30:37:7e:42:67: 9f:90:ed:f7:6e:c6:e7:4c:34:d8:34:c1:6c:92:fd: 01:60:24:aa:93:7c:b5:8a:b6:18:93:e8:2b:17:a4: 01:66:26:80:16:53:17:a3:e5:bf:08:9b:ca:01:5d: 18:f7:13:ee:a1:72:ea:35:e8:e7:b1:81:57:9a:ff: a7:d8:35:d2:fd:f7:98:f6:e6:6d:6f:84:29:ae:11: 3f:46:6b:92:3a:32:20:e0:be:ea:e5:54:9a:1f:23: 15:b6:4a:08:93:87:fa:db:79:e7:ae:8c:1a:97:e9: 24:71:04:0a:8a:05:0a:40:01:b9:7b:6f:b5:2b:c3: 1e:5d:f9:8b:2c:14:db:bd:9d:e9:70:39:f2:af:37: 42:a6:59:42:2f:d7:05:f6:8c:65:c7:52:ac:30:1a: fa:9b:36:d8:1c:95:71:96:54:61:e2:6b:f7:26:6a: 31:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:0F:AE:2D:71:E0:F7:A8:10:F8:38:A8:F4:56:2B:5F:FE:96:83:1A X509v3 Authority Key Identifier: keyid:7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:57:57:41:c8:42:5d:0b:1e:6f:6a:54:62:e0:32:9e:ac:0b: 44:5e:6c:7d:1c:3d:a9:dc:0c:0d:32:4c:62:59:a0:bf:6e:25: 88:10:5a:19:28:02:24:75:49:2a:b2:94:dc:7a:f2:19:49:08: 44:3c:ef:66:8b:00:72:33:2a:26:6a:6b:5d:8d:92:96:b8:4a: 42:63:c0:74:43:4d:04:1f:fe:3e:8b:c3:cb:ee:ba:87:fb:ce: 38:ef:5f:7e:92:dd:ea:93:a0:57:74:6d:eb:7e:86:a5:45:49: 23:5c:ee:96:3f:f9:7b:89:4a:c9:81:ec:9f:2a:f9:98:18:0f: 08:56:b1:1e:e1:09:25:49:a8:b7:36:47:f5:90:a9:b0:d0:04: 28:8d:88:e1:c2:c0:0d:f3:9c:1c:6b:bc:4f:bb:7a:1b:04:b6: 96:df:48:b4:12:31:2c:5a:0e:4d:fc:93:6b:ff:46:24:a7:f0: 75:cd:27:1d:97:b5:66:f1:84:3d:a5:8d:9f:84:a1:9c:4d:98: 4b:11:4d:6a:39:d3:cc:64:60:a9:f0:10:4c:af:17:47:5d:11: 72:b3:1f:92:58:cf:a7:4d:1b:ec:d3:c0:bb:3d:16:d8:66:24: 07:14:3f:af:29:52:e7:1e:a2:f4:49:8a:5a:00:09:96:f2:9c: a7:57:d4:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTPjlEte6HLW08q0O6PFGnG5bImkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUx MjY3MDZFNDAeFw0yNTEwMTkyMDE3MjZaFw0yNTEwMjMwMzU1MjZaMDMxMTAvBgNV BAMTKEExMEZBRTJENzFFMEY3QTgxMEY4MzhBOEY0NTYyQjVGRkU5NjgzMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLiB01wm60KFWlh/yTatJmOA/B ZtkxHTojfi9pei6c3HFX4qZPo8bGuhG9pytfYwR3MG/zu6BdIIUAC91IoSq34Hnq vKHJY95DlRZ9tb7SvLPcuN8wN35CZ5+Q7fduxudMNNg0wWyS/QFgJKqTfLWKthiT 6CsXpAFmJoAWUxej5b8Im8oBXRj3E+6hcuo16OexgVea/6fYNdL995j25m1vhCmu ET9Ga5I6MiDgvurlVJofIxW2SgiTh/rbeeeujBqX6SRxBAqKBQpAAbl7b7Urwx5d +YssFNu9nelwOfKvN0KmWUIv1wX2jGXHUqwwGvqbNtgclXGWVGHia/cmajFBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoQ+uLXHg96gQ+Dio9FYrX/6WgxowHwYDVR0j BBgwFoAUfVrghZaNx8sxECP36+C/jhJnBuQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmU2M2NkMi1mYjNjLTQxYjItYjk2Yi1hYjIzNDQyMGEyMTEvMC83RDVBRTA4NTk2 OERDN0NCMzExMDIzRjdFQkUwQkY4RTEyNjcwNkU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUxMjY3 MDZFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZlNjNjZDItZmIzYy00MWIyLWI5 NmItYWIyMzQ0MjBhMjExLzAvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJG OEUxMjY3MDZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxXV0HIQl0LHm9qVGLgMp6sC0RebH0cPanc DA0yTGJZoL9uJYgQWhkoAiR1SSqylNx68hlJCEQ872aLAHIzKiZqa12Nkpa4SkJj wHRDTQQf/j6Lw8vuuof7zjjvX36S3eqToFd0bet+hqVFSSNc7pY/+XuJSsmB7J8q +ZgYDwhWsR7hCSVJqLc2R/WQqbDQBCiNiOHCwA3znBxrvE+7ehsEtpbfSLQSMSxa Dk38k2v/RiSn8HXNJx2XtWbxhD2ljZ+EoZxNmEsRTWo508xkYKnwEEyvF0ddEXKz H5JYz6dNG+zTwLs9FthmJAcUP68pUuceovRJiloACZbynKdX1Ck= -----END CERTIFICATE-----Generated at Mon Oct 20 19:01:51 2025 by rpki-client