$ rpki-client -vvf repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft File: 7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft (raw, json) Hash identifier: HteIwJib/tAfMhzWDU7uH75jfeiBJhoVs7EEYkHplq0= Subject key identifier: 6D:96:ED:F4:36:AE:64:46:33:7D:65:C1:A1:12:06:E4:9B:0E:59:E1 Authority key identifier: 7E:EB:EF:D1:AE:72:51:99:E4:B0:23:CD:A2:2A:30:05:EF:BF:4D:E8 Certificate issuer: /CN=7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8 Certificate serial: 4873ED07B729D399BE455A4F0F0887A954F2B173 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft Manifest number: 4F Signing time: Sat 18 Oct 2025 23:31:54 +0000 Manifest this update: Sat 18 Oct 2025 23:26:54 +0000 Manifest next update: Wed 22 Oct 2025 03:35:54 +0000 Files and hashes: 1: 7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.crl (hash: RBTZLJv9yJgG6CNSxYsniDbVP0xLb5CHdr5SkzvNQ/s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.crl rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 03:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:73:ed:07:b7:29:d3:99:be:45:5a:4f:0f:08:87:a9:54:f2:b1:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8 Validity Not Before: Oct 18 23:26:54 2025 GMT Not After : Oct 22 03:35:54 2025 GMT Subject: CN=6D96EDF436AE6446337D65C1A11206E49B0E59E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:36:0e:d6:fe:ce:49:b7:44:45:4f:46:d5:46: e4:d9:dd:c2:f6:f0:2c:48:b8:d9:6b:3a:ac:d9:5e: ae:5b:12:b6:4a:4b:e3:04:b1:c0:75:aa:15:c5:d3: 22:69:f2:ea:94:9a:aa:8f:b6:da:94:e4:83:11:10: 7b:69:7d:00:21:ac:64:18:b5:e4:b3:78:ec:a8:f8: c8:b7:67:67:33:42:bf:21:6e:0c:8a:a2:68:94:07: 42:f8:92:54:ae:f2:f1:f2:ac:51:6d:c8:5b:66:9c: f0:1e:03:05:57:fb:45:ca:b9:50:d0:52:dd:ca:d4: 1e:13:de:85:2f:27:35:32:32:83:8c:c5:f4:a4:51: 96:33:07:8f:d1:13:58:db:b3:c7:81:f4:f1:c7:55: 89:05:ba:17:d7:5b:a3:0d:a1:c0:7a:cf:ed:fb:d4: 45:3d:43:f4:4b:30:40:ff:e6:80:0e:f8:48:d9:de: 4d:01:03:b7:38:ae:d4:25:3f:bd:51:2e:11:85:76: a7:ba:6a:95:fb:6e:1a:45:21:ad:96:41:04:6e:f1: 8e:fc:b1:a1:8f:bf:1e:9c:99:65:a6:61:e1:5d:c1: 23:f6:c9:71:f2:1d:ad:61:e7:ff:1c:99:42:65:4f: 55:9c:d6:9c:23:ba:84:dc:fe:bd:8b:d0:26:3d:f4: 29:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:96:ED:F4:36:AE:64:46:33:7D:65:C1:A1:12:06:E4:9B:0E:59:E1 X509v3 Authority Key Identifier: keyid:7E:EB:EF:D1:AE:72:51:99:E4:B0:23:CD:A2:2A:30:05:EF:BF:4D:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f2:b2:cf:64:52:c3:f8:f1:31:95:7c:d0:fd:92:a6:70:3d:56: 0e:a6:f4:14:c5:64:15:47:71:68:00:09:56:88:b0:4b:7c:2d: 26:e6:f8:7e:0f:dd:45:73:c7:e3:c6:ac:dc:42:ad:35:85:60: 10:77:0d:2c:a2:55:7e:c8:72:37:3e:a7:9a:8d:06:e0:03:66: 06:49:3b:22:dd:2b:b0:35:3f:47:2a:53:56:08:44:7a:c6:5d: fd:31:be:a0:97:30:93:fa:d8:24:43:a9:e0:70:21:bf:57:18: 95:f2:8a:29:84:6f:b4:a0:e6:99:d5:55:92:65:c3:07:34:ec: c2:e6:b7:94:b2:fc:89:e3:55:7c:c9:24:8f:88:ba:b9:84:ff: 24:1e:c0:d7:74:14:59:82:8f:aa:1c:fd:69:22:09:90:f3:a9: ca:2e:ad:1a:e8:3a:cd:53:bd:e3:68:03:08:74:ba:b3:93:51: 2e:93:8f:e0:7c:58:0e:8c:ab:50:35:35:bf:64:97:9b:a3:d0: ae:12:25:3e:4c:5f:87:57:34:60:c3:5b:6b:d8:45:97:a9:48: c4:f4:46:15:4d:11:84:60:15:da:8c:53:ed:3a:4e:e3:92:20: 6d:42:2b:8a:bb:e5:35:92:63:2e:a3:83:bb:4a:53:2a:65:d9: be:0f:cd:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSHPtB7cp05m+RVpPDwiHqVTysXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VFQkVGRDFBRTcyNTE5OUU0QjAyM0NEQTIyQTMwMDVF RkJGNERFODAeFw0yNTEwMTgyMzI2NTRaFw0yNTEwMjIwMzM1NTRaMDMxMTAvBgNV BAMTKDZEOTZFREY0MzZBRTY0NDYzMzdENjVDMUExMTIwNkU0OUIwRTU5RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Ng7W/s5Jt0RFT0bVRuTZ3cL2 8CxIuNlrOqzZXq5bErZKS+MEscB1qhXF0yJp8uqUmqqPttqU5IMREHtpfQAhrGQY teSzeOyo+Mi3Z2czQr8hbgyKomiUB0L4klSu8vHyrFFtyFtmnPAeAwVX+0XKuVDQ Ut3K1B4T3oUvJzUyMoOMxfSkUZYzB4/RE1jbs8eB9PHHVYkFuhfXW6MNocB6z+37 1EU9Q/RLMED/5oAO+EjZ3k0BA7c4rtQlP71RLhGFdqe6apX7bhpFIa2WQQRu8Y78 saGPvx6cmWWmYeFdwSP2yXHyHa1h5/8cmUJlT1Wc1pwjuoTc/r2L0CY99CmTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbZbt9DauZEYzfWXBoRIG5JsOWeEwHwYDVR0j BBgwFoAUfuvv0a5yUZnksCPNoiowBe+/TegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTIwZTgwMC0yNWJiLTRjNzgtYThiMy1mMGViMjVjMmU4MmEvMC83RUVCRUZEMUFF NzI1MTk5RTRCMDIzQ0RBMjJBMzAwNUVGQkY0REU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VFQkVGRDFBRTcyNTE5OUU0QjAyM0NEQTIyQTMwMDVFRkJG NERFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWUyMGU4MDAtMjViYi00Yzc4LWE4 YjMtZjBlYjI1YzJlODJhLzAvN0VFQkVGRDFBRTcyNTE5OUU0QjAyM0NEQTIyQTMw MDVFRkJGNERFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAPKyz2RSw/jxMZV80P2SpnA9Vg6m9BTFZBVH cWgACVaIsEt8LSbm+H4P3UVzx+PGrNxCrTWFYBB3DSyiVX7Icjc+p5qNBuADZgZJ OyLdK7A1P0cqU1YIRHrGXf0xvqCXMJP62CRDqeBwIb9XGJXyiimEb7Sg5pnVVZJl wwc07MLmt5Sy/InjVXzJJI+IurmE/yQewNd0FFmCj6oc/WkiCZDzqcourRroOs1T veNoAwh0urOTUS6Tj+B8WA6Mq1A1Nb9kl5uj0K4SJT5MX4dXNGDDW2vYRZepSMT0 RhVNEYRgFdqMU+06TuOSIG1CK4q75TWSYy6jg7tKUypl2b4PzTY= -----END CERTIFICATE-----Generated at Mon Oct 20 18:15:38 2025 by rpki-client