$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft File: 7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft (raw, json) Hash identifier: rIi6O8/DSL67de0Fjzmr+JO12WYj7bD3XtqctiKFMb8= Subject key identifier: E4:8C:2F:FC:A9:1D:D8:4E:14:9B:C7:46:18:79:E0:40:F5:4C:61:84 Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33 Certificate issuer: /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733 Certificate serial: 3E39EF3EBCFDEC57814E3DC62103F8AF7FDBBCD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft Manifest number: 0531 Signing time: Sat 18 Oct 2025 17:32:05 +0000 Manifest this update: Sat 18 Oct 2025 17:27:05 +0000 Manifest next update: Tue 21 Oct 2025 19:21:05 +0000 Files and hashes: 1: 323430333a653063303a3a2f33322d3438203d3e20313338303839.roa (hash: IDS7wT53F/9d+GGxnBDomzis7H+va5MBv/3bGTQques=) 2: 3130332e3132342e3133382e302f32342d3234203d3e20313338303839.roa (hash: J/jPlTXp+kWKv5LyWjv+I0N1cAy55yAD17Rj2NwYkPM=) 3: 3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa (hash: vPo4xg80UOtB6VJUwA4UWFKXU9vTxzV/7Yqjm3eG2dU=) 4: 7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl (hash: WZ4XmZ8XN0+UHMcWjP+YlPVofgUfEzvdeCTRA7gwlPY=) 5: 3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa (hash: UkRWHYHFSXJQvTnbIud8PmlndW+kHrowErEkvw8GIIU=) 6: 323430333a653063303a3a2f34382d3438203d3e20313338303839.roa (hash: 56yoy1pZXhES0/QXKkOUvjrn9k9A+/MhvPggVyF266U=) 7: 3130332e3132342e3133362e302f32322d3234203d3e20313338303839.roa (hash: 0fYEP8T/Nnelfp7GTy05C/LwRW0usrD9PvaWq6iCxUk=) 8: 323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa (hash: NEhivRqvBCnBURZf09iLRn6F9NwBbv/MNUQSDs4qTsQ=) 9: 3130332e3132342e3133362e302f32342d3234203d3e20313338303839.roa (hash: BQTtvc745IuKZaE72oqsQIokxS6D/NEUcrmFIac+agM=) 10: 3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa (hash: KTTSzhJyEe2+3+LNGtWkObwsWEdVtFCSQXuEdew12yU=) 11: 323430333a653063303a313a3a2f34382d3438203d3e20313338303839.roa (hash: H7BZrybLTpX0NJFsDuTjqzH8VF1huH+0BD/mvn2lSto=) 12: 323430333a653063303a323a3a2f34382d3438203d3e20313338303839.roa (hash: 7qX9WcxP/RC8tMcJg/P60OwjJ/UboqeJrbX2Ange7f0=) 13: 3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa (hash: qQ/OJJBLuknzR6dOBM+bTowxaxIwEUGdeh8g4k+xMHc=) 14: 323430333a653063303a3a2f33322d3332203d3e20313338303839.roa (hash: N0fiZGpp7G4AcyGQiECW3/6Q5p0a7A1fAhfbX9FH1ms=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 19:21:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:39:ef:3e:bc:fd:ec:57:81:4e:3d:c6:21:03:f8:af:7f:db:bc:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733 Validity Not Before: Oct 18 17:27:05 2025 GMT Not After : Oct 21 19:21:05 2025 GMT Subject: CN=E48C2FFCA91DD84E149BC7461879E040F54C6184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:e5:31:b8:44:1a:dd:dd:03:ec:b9:1a:30:19: 03:45:bc:b4:c4:12:d7:6a:f2:b2:56:1b:54:aa:63: c5:4b:ef:08:1a:b7:8c:e1:3e:c0:40:46:a9:3a:42: 14:66:49:60:79:60:d7:7d:12:3f:0e:70:ea:53:bc: 7a:61:c6:d6:a5:ba:d9:39:0a:ae:cd:87:1a:5e:7c: 1b:9a:07:1e:b6:1c:2a:b5:16:56:cc:aa:77:fe:09: 1a:6e:a7:13:45:68:f3:d6:1b:1e:52:ce:0e:70:a7: 5a:ff:4c:a8:23:d0:1e:7c:51:84:74:74:76:b2:dc: 45:03:6c:96:10:4c:0d:cd:3c:52:1c:89:01:61:3d: 51:b0:c7:3e:66:7a:94:b9:3d:93:4f:15:40:42:c0: 25:04:7c:5f:22:f0:54:b0:a3:1e:d0:d7:27:7c:cb: f6:ef:60:d6:3d:9b:92:7b:69:53:38:48:ab:dc:e9: 1f:2e:16:02:ed:83:d1:ea:85:86:eb:3c:29:6c:35: 1a:58:63:83:8c:a3:41:77:b8:88:41:f1:c2:c6:85: 26:3a:1d:1f:70:ae:ac:3a:1e:61:83:5e:ba:63:a9: 81:40:0b:4a:f5:aa:37:48:d7:31:0f:f5:b7:81:77: 2c:4c:5a:35:d0:48:5c:0e:ce:b6:54:d4:85:f7:73: f2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8C:2F:FC:A9:1D:D8:4E:14:9B:C7:46:18:79:E0:40:F5:4C:61:84 X509v3 Authority Key Identifier: keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:84:94:11:5c:79:34:19:0d:ba:0e:7e:70:70:50:5e:a9:f2: d1:a5:a8:0c:5d:83:96:13:cd:7d:e2:a2:5e:26:bc:15:e0:f1: 7e:ca:5f:c2:4c:05:e1:32:cb:63:01:9d:d1:81:b3:fd:26:8a: d6:36:4c:75:29:d6:72:bf:3d:40:1d:89:c4:44:83:9d:77:a6: b1:9e:3f:df:23:53:45:7d:66:88:44:bf:cc:97:15:6b:34:e0: 17:09:d2:f0:30:19:9c:dd:2d:79:87:bd:05:87:5c:08:62:0d: a4:82:e1:b0:1e:85:8a:9d:96:dc:46:74:27:37:58:28:11:7d: 83:70:fd:50:0a:56:e9:47:eb:26:68:b1:4a:cd:93:bf:9b:a3: c8:9b:fd:5e:27:69:8f:37:ce:9c:57:ff:b8:9f:a9:94:c6:d1: 8a:29:0d:3e:b6:27:d9:b3:ba:95:3f:c4:7a:bd:7c:9c:fd:ed: e8:a6:6a:c2:1b:e2:bf:a9:19:57:1b:20:2c:29:41:97:16:1d: 95:8c:06:57:3d:13:aa:5f:4e:b2:81:04:60:d4:02:4f:d6:73: 00:c3:c3:dc:cb:86:18:e7:bf:0e:cd:f1:21:13:5a:b6:f3:ca: 95:e7:1d:76:22:22:7b:36:2d:da:e2:8c:02:cf:fe:55:6b:44: e0:4c:13:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPjnvPrz97FeBTj3GIQP4r3/bvNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVB RjcwRTczMzAeFw0yNTEwMTgxNzI3MDVaFw0yNTEwMjExOTIxMDVaMDMxMTAvBgNV BAMTKEU0OEMyRkZDQTkxREQ4NEUxNDlCQzc0NjE4NzlFMDQwRjU0QzYxODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD45TG4RBrd3QPsuRowGQNFvLTE Etdq8rJWG1SqY8VL7wgat4zhPsBARqk6QhRmSWB5YNd9Ej8OcOpTvHphxtalutk5 Cq7NhxpefBuaBx62HCq1FlbMqnf+CRpupxNFaPPWGx5Szg5wp1r/TKgj0B58UYR0 dHay3EUDbJYQTA3NPFIciQFhPVGwxz5mepS5PZNPFUBCwCUEfF8i8FSwox7Q1yd8 y/bvYNY9m5J7aVM4SKvc6R8uFgLtg9HqhYbrPClsNRpYY4OMo0F3uIhB8cLGhSY6 HR9wrqw6HmGDXrpjqYFAC0r1qjdI1zEP9beBdyxMWjXQSFwOzrZU1IX3c/J3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Iwv/Kkd2E4Um8dGGHngQPVMYYQwHwYDVR0j BBgwFoAUfU8NAHtgE0mWrDGYueW3Hq9w5zMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWJhNGU1OS1mYjMxLTQxYjUtODhlNy0wYjJjZWQxZjIwMWMvMC83RDRGMEQwMDdC NjAxMzQ5OTZBQzMxOThCOUU1QjcxRUFGNzBFNzMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVBRjcw RTczMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFiYTRlNTktZmIzMS00MWI1LTg4 ZTctMGIyY2VkMWYyMDFjLzAvN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3 MUVBRjcwRTczMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGyElBFceTQZDboOfnBwUF6p8tGlqAxdg5YT zX3iol4mvBXg8X7KX8JMBeEyy2MBndGBs/0mitY2THUp1nK/PUAdicREg513prGe P98jU0V9ZohEv8yXFWs04BcJ0vAwGZzdLXmHvQWHXAhiDaSC4bAehYqdltxGdCc3 WCgRfYNw/VAKVulH6yZosUrNk7+bo8ib/V4naY83zpxX/7ifqZTG0YopDT62J9mz upU/xHq9fJz97eimasIb4r+pGVcbICwpQZcWHZWMBlc9E6pfTrKBBGDUAk/WcwDD w9zLhhjnvw7N8SETWrbzypXnHXYiIns2LdrijALP/lVrROBMEwM= -----END CERTIFICATE-----Generated at Mon Oct 20 18:04:02 2025 by rpki-client