$ rpki-client -vvf repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft File: 7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft (raw, json) Hash identifier: gvVFTG4PZzCPBptL9jgNICP6BzHDboyq4C22Cki+TY8= Subject key identifier: 69:FE:2D:1B:00:0D:4B:2B:D8:E4:52:82:1A:5B:1F:3D:60:1B:19:0F Authority key identifier: 7C:7A:73:B6:7F:FC:66:64:BC:CD:30:B2:01:3C:54:FC:CE:0B:62:54 Certificate issuer: /CN=7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254 Certificate serial: 5C92AF14F440AD451F15ABFD63CF499E66FC98AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft Manifest number: 02D1 Signing time: Mon 20 Oct 2025 07:21:11 +0000 Manifest this update: Mon 20 Oct 2025 07:16:11 +0000 Manifest next update: Thu 23 Oct 2025 17:39:11 +0000 Files and hashes: 1: 323030313a6466323a653538303a3a2f34382d3438203d3e20313339393935.roa (hash: co+KBnnYJEQwi8iEhHouifTA/OpTo3Sr/IbcmkaoPho=) 2: 3130332e3134382e3139322e302f32332d3233203d3e20313339393935.roa (hash: 6G5VVeMd9f0T1RPqM5MK5BUBT+YheiE43z/FzXMuOVc=) 3: 7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.crl (hash: 0ksHlwmB8ZyLllCci/sr0dAY4rOWguT8rlrAg3E+DNE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.crl rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 17:39:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:92:af:14:f4:40:ad:45:1f:15:ab:fd:63:cf:49:9e:66:fc:98:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254 Validity Not Before: Oct 20 07:16:11 2025 GMT Not After : Oct 23 17:39:11 2025 GMT Subject: CN=69FE2D1B000D4B2BD8E452821A5B1F3D601B190F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a7:65:c5:13:2b:63:e3:3c:b1:d6:9c:f9:59: 78:f1:40:da:04:9b:2b:5f:a5:3e:ba:1e:3b:3e:fa: 94:c2:ef:54:8b:9e:39:e8:fb:b4:75:6b:ec:2c:f6: 00:72:74:e4:62:ed:14:b6:6e:10:a1:69:ba:ed:f2: f2:c5:57:b7:fc:55:93:c6:b9:b3:b0:1b:23:fc:7a: 23:e4:b4:6a:2b:65:61:54:6f:2b:d0:c3:00:3d:29: c7:ac:82:59:75:53:01:fe:5a:71:b9:68:46:4d:79: b0:21:ca:9c:ad:5b:a0:43:f0:2b:9d:dc:b1:17:6e: 7a:58:94:9f:eb:43:33:69:d4:7e:19:08:42:b8:f5: 65:46:28:5c:8f:2f:b0:d1:82:0a:f9:90:83:c9:1d: 2c:47:6f:8d:8b:f3:5f:8e:84:fd:f3:e2:81:47:09: 7b:92:2d:52:76:32:42:d7:62:09:ce:54:69:0c:75: e5:c1:f8:7b:b0:7d:6a:c7:33:c3:2e:25:2f:68:bc: 6d:d4:fb:c6:1f:a7:3b:6f:67:b5:40:ca:3d:96:34: ea:28:4a:86:23:1a:7b:5b:6f:c3:64:b3:c7:10:13: ea:74:56:d7:53:7f:44:0f:ac:76:21:d4:08:46:e0: 7f:7a:b2:66:2e:f2:ed:2a:d9:e2:f2:d6:19:19:b0: cc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FE:2D:1B:00:0D:4B:2B:D8:E4:52:82:1A:5B:1F:3D:60:1B:19:0F X509v3 Authority Key Identifier: keyid:7C:7A:73:B6:7F:FC:66:64:BC:CD:30:B2:01:3C:54:FC:CE:0B:62:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:9c:6b:e9:18:01:d5:51:1f:c3:59:46:1f:87:4a:a8:db:3b: 39:05:eb:a5:b5:e4:e6:f0:39:8e:ce:e6:1c:38:f5:31:a1:4d: af:b7:d4:31:99:96:08:b9:58:dd:ec:8a:b1:16:98:ed:36:c0: 32:aa:3d:e7:ca:a9:04:1b:91:0d:d1:92:af:a0:e0:75:1a:0d: 2b:6f:68:7e:fa:04:c5:04:cc:97:3d:6c:1f:31:bf:6a:25:50: 67:74:c6:44:52:ee:33:7e:5d:6d:2b:b9:36:b6:04:48:f4:f7: 18:4b:6a:16:47:de:5d:aa:7e:9c:bd:c7:c5:96:ad:4e:2e:93: f6:ab:8b:78:19:f0:6b:9e:d5:5d:2f:4f:f3:25:2f:22:67:5c: 85:46:63:12:51:f7:7d:7e:d3:eb:ca:e8:58:49:9d:3d:f4:70: 0d:ca:59:3d:ae:f3:c8:07:8e:1d:53:a5:16:f7:32:61:0d:48: 4b:2f:d3:ce:ba:4c:aa:ca:6c:95:b2:3b:b3:42:8b:ef:22:10: 30:68:7d:5b:fa:ed:d9:7a:a9:74:b3:dd:fa:00:3f:68:f1:bd: 51:ac:55:d1:2b:40:db:24:ab:3b:cf:6a:09:04:da:f7:30:07: 42:25:19:99:84:20:1b:6b:75:35:10:de:78:46:cf:a4:a4:40: a9:c8:51:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXJKvFPRArUUfFav9Y89Jnmb8mKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M3QTczQjY3RkZDNjY2NEJDQ0QzMEIyMDEzQzU0RkND RTBCNjI1NDAeFw0yNTEwMjAwNzE2MTFaFw0yNTEwMjMxNzM5MTFaMDMxMTAvBgNV BAMTKDY5RkUyRDFCMDAwRDRCMkJEOEU0NTI4MjFBNUIxRjNENjAxQjE5MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdp2XFEytj4zyx1pz5WXjxQNoE mytfpT66Hjs++pTC71SLnjno+7R1a+ws9gBydORi7RS2bhChabrt8vLFV7f8VZPG ubOwGyP8eiPktGorZWFUbyvQwwA9Kcesgll1UwH+WnG5aEZNebAhypytW6BD8Cud 3LEXbnpYlJ/rQzNp1H4ZCEK49WVGKFyPL7DRggr5kIPJHSxHb42L81+OhP3z4oFH CXuSLVJ2MkLXYgnOVGkMdeXB+HuwfWrHM8MuJS9ovG3U+8YfpztvZ7VAyj2WNOoo SoYjGntbb8Nks8cQE+p0VtdTf0QPrHYh1AhG4H96smYu8u0q2eLy1hkZsMyVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaf4tGwANSyvY5FKCGlsfPWAbGQ8wHwYDVR0j BBgwFoAUfHpztn/8ZmS8zTCyATxU/M4LYlQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGI1OTBlOC00Zjg5LTQ3ODUtYWU3OS0yYmZmZmEyYzUyYzkvMC83QzdBNzNCNjdG RkM2NjY0QkNDRDMwQjIwMTNDNTRGQ0NFMEI2MjU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0M3QTczQjY3RkZDNjY2NEJDQ0QzMEIyMDEzQzU0RkNDRTBC NjI1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBiNTkwZTgtNGY4OS00Nzg1LWFl NzktMmJmZmZhMmM1MmM5LzAvN0M3QTczQjY3RkZDNjY2NEJDQ0QzMEIyMDEzQzU0 RkNDRTBCNjI1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWca+kYAdVRH8NZRh+HSqjbOzkF66W15Obw OY7O5hw49TGhTa+31DGZlgi5WN3sirEWmO02wDKqPefKqQQbkQ3Rkq+g4HUaDStv aH76BMUEzJc9bB8xv2olUGd0xkRS7jN+XW0ruTa2BEj09xhLahZH3l2qfpy9x8WW rU4uk/ari3gZ8Gue1V0vT/MlLyJnXIVGYxJR931+0+vK6FhJnT30cA3KWT2u88gH jh1TpRb3MmENSEsv0866TKrKbJWyO7NCi+8iEDBofVv67dl6qXSz3foAP2jxvVGs VdErQNskqzvPagkE2vcwB0IlGZmEIBtrdTUQ3nhGz6SkQKnIUfU= -----END CERTIFICATE-----Generated at Tue Oct 21 07:20:58 2025 by rpki-client