$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.mft File: 7ED240749DF73AB541823D94017C578425D757A6.mft (raw, json) Hash identifier: VApI5+kmQZCzkueO3vEAhfYgZvuOt4OfgJoRwEQJHGM= Subject key identifier: 63:56:86:D3:88:92:AD:D0:2F:71:FB:33:BA:AB:ED:90:9D:36:61:23 Authority key identifier: 7E:D2:40:74:9D:F7:3A:B5:41:82:3D:94:01:7C:57:84:25:D7:57:A6 Certificate issuer: /CN=7ED240749DF73AB541823D94017C578425D757A6 Certificate serial: 4D3EA563F8B8162606642C96F47BACD8A9E1555E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7ED240749DF73AB541823D94017C578425D757A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.mft Manifest number: 04C4 Signing time: Sat 18 Oct 2025 16:11:03 +0000 Manifest this update: Sat 18 Oct 2025 16:06:03 +0000 Manifest next update: Wed 22 Oct 2025 00:21:03 +0000 Files and hashes: 1: 3130332e3133372e33322e302f32332d3234203d3e20313338383131.roa (hash: yGNy/2jPC7cv3chzLah5sv/C4LaKirTYr+d6U9mSoAc=) 2: 7ED240749DF73AB541823D94017C578425D757A6.crl (hash: +rbFEAWVNx4NI+0aizTpAMgCNndes62F1X6M0Jfhsa8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.crl rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7ED240749DF73AB541823D94017C578425D757A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 00:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:3e:a5:63:f8:b8:16:26:06:64:2c:96:f4:7b:ac:d8:a9:e1:55:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ED240749DF73AB541823D94017C578425D757A6 Validity Not Before: Oct 18 16:06:03 2025 GMT Not After : Oct 22 00:21:03 2025 GMT Subject: CN=635686D38892ADD02F71FB33BAABED909D366123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d4:e6:d2:39:d8:d9:0b:d0:93:27:39:b9:3d: 2b:eb:2c:b7:42:29:2f:90:fe:17:eb:4a:76:8b:12: c6:da:e8:d7:28:ca:16:0f:5a:c5:5a:ca:fc:c4:f3: 0e:3f:0c:2b:40:8e:d1:44:4f:db:87:0b:8d:72:bb: 25:70:2d:7c:68:1b:80:5d:f8:71:72:fa:a5:e9:c6: b4:d2:6f:9a:0c:35:49:43:8d:b5:23:bc:05:e1:1e: a8:93:16:72:1c:71:e0:24:f9:f7:73:ee:4e:e4:b2: 28:2f:ad:48:59:77:6f:d1:fa:9f:3f:67:c9:f9:81: 99:fe:c8:1f:66:fc:89:ff:e4:7c:eb:e1:da:c6:15: 8e:16:5d:d5:00:5c:52:60:87:e9:5a:2d:a6:0b:2c: 9f:32:78:cf:c0:d0:c0:fc:e1:76:02:f8:ab:7a:76: a1:4b:32:da:71:7d:90:1d:41:50:91:7f:17:aa:fc: aa:5a:17:3a:92:b0:91:f6:31:38:0b:8a:e8:bb:56: 82:95:7d:cb:21:4d:3c:62:7c:c8:04:8f:e5:57:55: e9:87:8c:47:6c:57:c6:7f:60:98:cf:a7:45:0e:4b: 2e:c4:be:04:c9:d3:2d:e9:6c:92:a3:bf:cd:81:37: 6a:42:74:f9:13:94:cf:fd:a5:60:af:a8:8e:42:5e: f5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:56:86:D3:88:92:AD:D0:2F:71:FB:33:BA:AB:ED:90:9D:36:61:23 X509v3 Authority Key Identifier: keyid:7E:D2:40:74:9D:F7:3A:B5:41:82:3D:94:01:7C:57:84:25:D7:57:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7ED240749DF73AB541823D94017C578425D757A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:93:1f:9e:69:f6:25:4b:22:8e:3f:cb:4b:60:85:60:78:91: 57:b8:32:01:c4:c3:61:f5:a8:a3:9b:07:10:ef:77:e2:23:b0: 6f:63:13:92:06:c7:08:08:82:93:10:7d:e6:53:e0:68:1f:a3: e1:cc:67:f4:ae:77:1d:93:b8:ad:80:c5:10:f4:7c:62:c8:d8: d1:32:34:21:bb:a7:c5:1d:65:e3:31:b2:7e:ca:46:2e:ca:27: 35:43:0b:e3:58:a7:01:b5:b9:01:0a:48:08:ed:27:7d:d5:f8: b2:66:2a:6b:9a:37:08:1d:73:19:39:65:0e:fa:82:31:bd:30: 4e:00:1b:c0:22:65:0f:86:e5:fe:01:51:07:81:1b:e4:0f:fe: fa:ca:cf:4c:21:8b:ff:e0:f7:0c:13:51:01:2f:8d:86:de:be: 8b:b2:ac:3d:9a:df:9a:84:35:07:0f:e4:f6:36:47:e6:ee:5a: ec:26:58:14:16:7f:54:80:99:85:3a:50:f5:32:7e:6e:42:6e: f5:54:63:99:33:d8:e0:24:a4:00:ec:22:20:a8:1e:7a:f1:59: 02:cb:b3:cd:c6:f3:77:38:d4:e0:22:ba:07:37:d9:e5:4a:71: f7:7b:bc:6c:f5:3b:69:3a:45:23:25:71:42:d3:d6:3f:87:50: b0:4c:6b:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTT6lY/i4FiYGZCyW9Hus2KnhVV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VEMjQwNzQ5REY3M0FCNTQxODIzRDk0MDE3QzU3ODQy NUQ3NTdBNjAeFw0yNTEwMTgxNjA2MDNaFw0yNTEwMjIwMDIxMDNaMDMxMTAvBgNV BAMTKDYzNTY4NkQzODg5MkFERDAyRjcxRkIzM0JBQUJFRDkwOUQzNjYxMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV1ObSOdjZC9CTJzm5PSvrLLdC KS+Q/hfrSnaLEsba6NcoyhYPWsVayvzE8w4/DCtAjtFET9uHC41yuyVwLXxoG4Bd +HFy+qXpxrTSb5oMNUlDjbUjvAXhHqiTFnIcceAk+fdz7k7ksigvrUhZd2/R+p8/ Z8n5gZn+yB9m/In/5Hzr4drGFY4WXdUAXFJgh+laLaYLLJ8yeM/A0MD84XYC+Kt6 dqFLMtpxfZAdQVCRfxeq/KpaFzqSsJH2MTgLiui7VoKVfcshTTxifMgEj+VXVemH jEdsV8Z/YJjPp0UOSy7EvgTJ0y3pbJKjv82BN2pCdPkTlM/9pWCvqI5CXvWLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY1aG04iSrdAvcfszuqvtkJ02YSMwHwYDVR0j BBgwFoAUftJAdJ33OrVBgj2UAXxXhCXXV6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDRhYTdlZi02ZDk1LTRlYmEtYTM1NC1mZDQxODU4YzFiYTcvMC83RUQyNDA3NDlE RjczQUI1NDE4MjNEOTQwMTdDNTc4NDI1RDc1N0E2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VEMjQwNzQ5REY3M0FCNTQxODIzRDk0MDE3QzU3ODQyNUQ3 NTdBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ0YWE3ZWYtNmQ5NS00ZWJhLWEz NTQtZmQ0MTg1OGMxYmE3LzAvN0VEMjQwNzQ5REY3M0FCNTQxODIzRDk0MDE3QzU3 ODQyNUQ3NTdBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6TH55p9iVLIo4/y0tghWB4kVe4MgHEw2H1 qKObBxDvd+IjsG9jE5IGxwgIgpMQfeZT4Ggfo+HMZ/Sudx2TuK2AxRD0fGLI2NEy NCG7p8UdZeMxsn7KRi7KJzVDC+NYpwG1uQEKSAjtJ33V+LJmKmuaNwgdcxk5ZQ76 gjG9ME4AG8AiZQ+G5f4BUQeBG+QP/vrKz0whi//g9wwTUQEvjYbevouyrD2a35qE NQcP5PY2R+buWuwmWBQWf1SAmYU6UPUyfm5CbvVUY5kz2OAkpADsIiCoHnrxWQLL s83G83c41OAiugc32eVKcfd7vGz1O2k6RSMlcULT1j+HULBMa38= -----END CERTIFICATE-----Generated at Mon Oct 20 12:56:17 2025 by rpki-client