$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft File: 7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft (raw, json) Hash identifier: w0xceBDe+CxBhDw31IfGK06gV2XS+aEKsAGa5Ia96VI= Subject key identifier: 74:49:11:57:28:45:50:6A:51:74:C0:3F:22:03:67:C2:53:CE:C6:43 Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33 Certificate issuer: /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733 Certificate serial: 7ED5932725BF64A7BD3F0F238E2A4E3498DF48F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft Manifest number: 0532 Signing time: Mon 20 Oct 2025 19:22:11 +0000 Manifest this update: Mon 20 Oct 2025 19:17:11 +0000 Manifest next update: Fri 24 Oct 2025 06:40:11 +0000 Files and hashes: 1: 7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl (hash: ZCAAQ/e81RtdWd+wNubplnni9oijqreJanlBvbtBsyA=) 2: 3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa (hash: qQ/OJJBLuknzR6dOBM+bTowxaxIwEUGdeh8g4k+xMHc=) 3: 3130332e3132342e3133362e302f32322d3234203d3e20313338303839.roa (hash: 0fYEP8T/Nnelfp7GTy05C/LwRW0usrD9PvaWq6iCxUk=) 4: 323430333a653063303a3a2f34382d3438203d3e20313338303839.roa (hash: 56yoy1pZXhES0/QXKkOUvjrn9k9A+/MhvPggVyF266U=) 5: 323430333a653063303a3a2f33322d3332203d3e20313338303839.roa (hash: N0fiZGpp7G4AcyGQiECW3/6Q5p0a7A1fAhfbX9FH1ms=) 6: 323430333a653063303a313a3a2f34382d3438203d3e20313338303839.roa (hash: H7BZrybLTpX0NJFsDuTjqzH8VF1huH+0BD/mvn2lSto=) 7: 323430333a653063303a323a3a2f34382d3438203d3e20313338303839.roa (hash: 7qX9WcxP/RC8tMcJg/P60OwjJ/UboqeJrbX2Ange7f0=) 8: 3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa (hash: vPo4xg80UOtB6VJUwA4UWFKXU9vTxzV/7Yqjm3eG2dU=) 9: 323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa (hash: NEhivRqvBCnBURZf09iLRn6F9NwBbv/MNUQSDs4qTsQ=) 10: 3130332e3132342e3133382e302f32342d3234203d3e20313338303839.roa (hash: J/jPlTXp+kWKv5LyWjv+I0N1cAy55yAD17Rj2NwYkPM=) 11: 3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa (hash: KTTSzhJyEe2+3+LNGtWkObwsWEdVtFCSQXuEdew12yU=) 12: 3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa (hash: UkRWHYHFSXJQvTnbIud8PmlndW+kHrowErEkvw8GIIU=) 13: 3130332e3132342e3133362e302f32342d3234203d3e20313338303839.roa (hash: BQTtvc745IuKZaE72oqsQIokxS6D/NEUcrmFIac+agM=) 14: 323430333a653063303a3a2f33322d3438203d3e20313338303839.roa (hash: IDS7wT53F/9d+GGxnBDomzis7H+va5MBv/3bGTQques=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:d5:93:27:25:bf:64:a7:bd:3f:0f:23:8e:2a:4e:34:98:df:48:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733 Validity Not Before: Oct 20 19:17:11 2025 GMT Not After : Oct 24 06:40:11 2025 GMT Subject: CN=744911572845506A5174C03F220367C253CEC643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c9:24:ca:bc:29:7f:9f:ba:0d:ce:46:22:10: 04:99:15:75:89:b0:93:a0:b6:29:8b:30:de:a7:41: 63:b1:da:45:e5:0f:bc:eb:0b:05:44:38:e9:53:d4: e6:76:c6:fd:74:dd:c5:c0:54:60:79:13:e7:8c:73: da:e3:f6:2b:1d:5e:cf:35:22:d6:d9:ab:79:cb:57: de:79:44:51:97:32:27:07:e5:49:34:33:ce:6e:5f: 0d:29:d9:3e:11:92:39:7d:c5:c6:40:5a:ca:63:0d: d4:db:2c:30:1d:a4:97:83:31:8e:ee:72:99:62:fe: 7a:48:f3:87:bd:31:6c:db:97:d2:e8:da:98:1e:2d: cd:14:c6:2b:12:d0:1b:c7:d6:bb:8a:b2:d9:02:44: 3a:59:0e:51:69:09:f5:a1:5b:26:9e:ca:0b:c9:2c: a5:7b:46:d0:6b:0b:b0:2b:bc:18:02:d8:59:85:34: 01:98:a2:20:e7:f6:a4:7b:45:b3:ed:17:4c:c9:d2: b9:d6:de:0b:d0:f3:bd:c2:82:c1:f3:8e:c8:4e:1a: a9:f2:f5:4a:2e:07:6e:02:87:62:9e:6b:7c:c7:cc: 43:9b:e4:c8:84:39:da:2f:d7:17:9e:ed:cf:19:41: 3a:f4:ab:03:ae:e1:2e:f2:0c:54:50:36:30:2e:8d: 7e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:49:11:57:28:45:50:6A:51:74:C0:3F:22:03:67:C2:53:CE:C6:43 X509v3 Authority Key Identifier: keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:d1:80:8d:e0:fe:a5:e3:bf:73:22:17:e9:77:12:17:4e:26: 2d:2e:67:86:8d:ad:cf:f6:33:63:1d:ed:57:53:68:5e:6f:85: 40:91:ba:98:f4:06:da:ae:16:06:78:44:38:40:f7:f1:cc:bb: 72:21:a2:bc:2c:d9:9c:26:70:fe:09:83:dd:8c:fe:95:6c:32: 4d:5e:b6:2c:40:ce:b1:22:17:e9:73:0f:30:c9:d2:16:f2:cc: 92:d8:5f:63:60:9a:9f:80:fa:5a:52:c9:af:c9:90:b8:8b:a5: 8d:89:e2:5c:3d:f3:db:9f:46:40:56:cd:cf:a8:04:20:73:de: 11:39:1c:8c:62:26:2e:90:bb:75:3f:33:a2:a8:78:17:cd:ec: e3:00:b5:76:76:82:fc:b4:92:c9:f6:8d:13:ba:b5:34:0a:08: 91:fe:28:ee:cc:a5:0c:bd:b0:95:3f:0a:fc:52:95:c7:a6:da: 5a:1b:13:40:c1:52:e1:e2:ca:1c:17:dd:00:94:b8:34:e5:c3: 42:39:d2:18:c2:1f:da:00:76:a3:e3:20:e6:fa:c9:55:ac:1a: 6d:f2:06:81:04:f2:f6:66:f6:f0:89:ad:f7:ca:5f:d0:40:c8: 25:b8:af:94:eb:2d:9c:e9:16:94:6b:c9:c0:d2:26:cf:c9:93: 06:46:82:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUftWTJyW/ZKe9Pw8jjipONJjfSPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVB RjcwRTczMzAeFw0yNTEwMjAxOTE3MTFaFw0yNTEwMjQwNjQwMTFaMDMxMTAvBgNV BAMTKDc0NDkxMTU3Mjg0NTUwNkE1MTc0QzAzRjIyMDM2N0MyNTNDRUM2NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtySTKvCl/n7oNzkYiEASZFXWJ sJOgtimLMN6nQWOx2kXlD7zrCwVEOOlT1OZ2xv103cXAVGB5E+eMc9rj9isdXs81 ItbZq3nLV955RFGXMicH5Uk0M85uXw0p2T4Rkjl9xcZAWspjDdTbLDAdpJeDMY7u cpli/npI84e9MWzbl9Lo2pgeLc0UxisS0BvH1ruKstkCRDpZDlFpCfWhWyaeygvJ LKV7RtBrC7ArvBgC2FmFNAGYoiDn9qR7RbPtF0zJ0rnW3gvQ873CgsHzjshOGqny 9UouB24Ch2Kea3zHzEOb5MiEOdov1xee7c8ZQTr0qwOu4S7yDFRQNjAujX6vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdEkRVyhFUGpRdMA/IgNnwlPOxkMwHwYDVR0j BBgwFoAUfU8NAHtgE0mWrDGYueW3Hq9w5zMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWJhNGU1OS1mYjMxLTQxYjUtODhlNy0wYjJjZWQxZjIwMWMvMC83RDRGMEQwMDdC NjAxMzQ5OTZBQzMxOThCOUU1QjcxRUFGNzBFNzMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVBRjcw RTczMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFiYTRlNTktZmIzMS00MWI1LTg4 ZTctMGIyY2VkMWYyMDFjLzAvN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3 MUVBRjcwRTczMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHRgI3g/qXjv3MiF+l3EhdOJi0uZ4aNrc/2 M2Md7VdTaF5vhUCRupj0BtquFgZ4RDhA9/HMu3Ihorws2ZwmcP4Jg92M/pVsMk1e tixAzrEiF+lzDzDJ0hbyzJLYX2Ngmp+A+lpSya/JkLiLpY2J4lw989ufRkBWzc+o BCBz3hE5HIxiJi6Qu3U/M6KoeBfN7OMAtXZ2gvy0ksn2jRO6tTQKCJH+KO7MpQy9 sJU/CvxSlcem2lobE0DBUuHiyhwX3QCUuDTlw0I50hjCH9oAdqPjIOb6yVWsGm3y BoEE8vZm9vCJrffKX9BAyCW4r5TrLZzpFpRrycDSJs/JkwZGggI= -----END CERTIFICATE-----Generated at Mon Oct 20 21:31:41 2025 by rpki-client