$ rpki-client -vvf repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft File: 407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft (raw, json) Hash identifier: 4vjOnEMwbmvYJBARVM24Yfo/c133CLg0kuAvxascYXs= Subject key identifier: AA:A4:53:A2:98:7E:FC:34:12:5C:95:85:12:3F:E9:E0:94:82:1F:4B Authority key identifier: 40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 Certificate issuer: /CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Certificate serial: 67461F760C5CEC38E9CE3E417AEB14D0D5099859 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft Manifest number: C8 Signing time: Sat 18 Oct 2025 22:32:21 +0000 Manifest this update: Sat 18 Oct 2025 22:27:21 +0000 Manifest next update: Wed 22 Oct 2025 07:47:21 +0000 Files and hashes: 1: 3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa (hash: NqmMORtYspcubuoIhO/lJNy3KlFyaaaNEdp/IXvq0Ng=) 2: 3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa (hash: Gj+dL3k6BLOV8ougeJn8Z24XkFylft6ZOL9dKAW0YtU=) 3: 323030313a6466313a366263303a3a2f34382d3438203d3e20313431363036.roa (hash: LnoUiVTC+YkZ5Y/4/Q1S1mXaeabC5U6lsaInD923/gY=) 4: 407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl (hash: EK5SqbfIILqnjbvWQIZFWGI4SUGC/dfldmm30ijGiOM=) 5: 3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa (hash: gOnGfuRTcZIR+30ZYAMikHYwYT1lMfTYagdIRfIVS+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 07:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:46:1f:76:0c:5c:ec:38:e9:ce:3e:41:7a:eb:14:d0:d5:09:98:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Validity Not Before: Oct 18 22:27:21 2025 GMT Not After : Oct 22 07:47:21 2025 GMT Subject: CN=AAA453A2987EFC34125C9585123FE9E094821F4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1c:da:43:91:70:a2:5d:e5:c4:df:00:c7:52: ad:79:0b:4e:c9:8c:99:a5:58:5c:46:55:a0:96:be: c1:a2:d9:53:85:7c:7d:c4:5f:ea:4a:99:63:b7:53: e3:4f:44:ed:28:81:73:6c:d4:76:e3:34:82:41:3d: 8e:33:b1:21:c7:27:3e:6d:53:b0:17:f7:d0:a9:86: 0d:de:e8:28:c7:25:b2:e8:c6:64:b2:4d:d4:ba:06: d7:07:dd:36:1f:4e:00:62:58:7d:d2:c4:10:25:dd: 32:c4:c0:38:aa:4f:ac:90:c2:fd:27:dc:37:e7:80: 01:cb:c4:ec:81:5d:f7:67:94:11:a5:a5:89:6e:4e: f4:8c:7c:81:4d:cc:12:56:72:b1:f4:4e:97:ef:1d: b4:ff:a4:37:55:09:e2:c9:59:3f:06:ad:51:72:bd: fd:6e:1c:d2:e8:44:7a:57:fe:31:a0:1d:72:b5:80: aa:5f:b1:76:5b:4c:8a:b3:81:2d:31:c6:9d:48:7b: fd:76:90:fd:ab:d4:67:df:29:29:f2:9b:5f:80:d6: 03:31:c0:86:4b:98:06:4e:1e:27:e9:fe:46:c4:93: c8:da:80:60:36:fc:f3:e5:ec:60:33:ee:e4:2e:0a: 12:34:35:81:07:e1:77:19:7a:a2:c5:38:90:30:97: ee:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A4:53:A2:98:7E:FC:34:12:5C:95:85:12:3F:E9:E0:94:82:1F:4B X509v3 Authority Key Identifier: keyid:40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ab:f7:4e:d4:58:1d:8f:76:cf:ce:c1:d7:2e:cb:0f:71:31: 39:d8:e1:15:c4:58:4e:40:25:19:97:a2:46:31:e3:05:8b:10: 13:43:a3:0f:eb:2d:ec:25:7e:fc:b1:df:ad:1f:da:d7:0c:e3: 17:39:25:e2:6a:3e:8f:09:dc:00:d1:30:56:26:07:07:f0:01: 54:56:4e:2f:7d:f1:36:39:f3:20:01:91:98:9a:12:30:04:ed: 0b:ea:99:4b:40:81:50:a6:fc:b4:dc:1b:75:c0:3a:72:c7:82: af:5e:20:6c:cc:f0:a7:14:ea:dc:1d:ba:71:47:76:8e:10:15: 71:86:8a:c6:7c:96:c0:bc:1e:86:bc:e7:7a:66:94:cb:44:c1: 3c:8f:9c:05:0f:29:9e:8f:ba:c0:73:f6:43:24:d9:6c:7a:1c: aa:13:bf:6e:fa:40:cd:33:23:15:05:28:0b:ab:c2:7a:76:19: be:6e:c1:ed:30:43:4d:69:1f:51:89:0d:98:01:43:68:45:69: 99:54:5e:92:22:b1:dc:3f:0b:ff:6d:74:b4:60:b8:46:80:b3: 2a:ea:d2:33:35:38:95:e3:a9:8d:48:ea:c7:ca:a6:f0:d0:08: de:51:b3:6f:3b:99:e4:46:ae:87:cb:f3:df:01:ea:ab:ed:d5: 8e:62:c6:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ0Yfdgxc7Djpzj5BeusU0NUJmFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNF NDg2NTNDODAeFw0yNTEwMTgyMjI3MjFaFw0yNTEwMjIwNzQ3MjFaMDMxMTAvBgNV BAMTKEFBQTQ1M0EyOTg3RUZDMzQxMjVDOTU4NTEyM0ZFOUUwOTQ4MjFGNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDHNpDkXCiXeXE3wDHUq15C07J jJmlWFxGVaCWvsGi2VOFfH3EX+pKmWO3U+NPRO0ogXNs1HbjNIJBPY4zsSHHJz5t U7AX99Cphg3e6CjHJbLoxmSyTdS6BtcH3TYfTgBiWH3SxBAl3TLEwDiqT6yQwv0n 3DfngAHLxOyBXfdnlBGlpYluTvSMfIFNzBJWcrH0TpfvHbT/pDdVCeLJWT8GrVFy vf1uHNLoRHpX/jGgHXK1gKpfsXZbTIqzgS0xxp1Ie/12kP2r1GffKSnym1+A1gMx wIZLmAZOHifp/kbEk8jagGA2/PPl7GAz7uQuChI0NYEH4XcZeqLFOJAwl+4BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqqRToph+/DQSXJWFEj/p4JSCH0swHwYDVR0j BBgwFoAUQHt8fuCe26oKNSXiCf+Ok+SGU8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDY0YmY2YS00MzAyLTQ2MGYtOTY2OS0wOWE1MGE3M2FmMWEvMC80MDdCN0M3RUUw OUVEQkFBMEEzNTI1RTIwOUZGOEU5M0U0ODY1M0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNFNDg2 NTNDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ2NGJmNmEtNDMwMi00NjBmLTk2 NjktMDlhNTBhNzNhZjFhLzAvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhF OTNFNDg2NTNDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJar907UWB2Pds/Owdcuyw9xMTnY4RXEWE5A JRmXokYx4wWLEBNDow/rLewlfvyx360f2tcM4xc5JeJqPo8J3ADRMFYmBwfwAVRW Ti998TY58yABkZiaEjAE7QvqmUtAgVCm/LTcG3XAOnLHgq9eIGzM8KcU6twdunFH do4QFXGGisZ8lsC8Hoa853pmlMtEwTyPnAUPKZ6PusBz9kMk2Wx6HKoTv276QM0z IxUFKAurwnp2Gb5uwe0wQ01pH1GJDZgBQ2hFaZlUXpIisdw/C/9tdLRguEaAsyrq 0jM1OJXjqY1I6sfKpvDQCN5Rs287meRGrofL898B6qvt1Y5ixkw= -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:32 2025 by rpki-client