$ rpki-client -vvf repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.mft File: 8762A545785B5A6352FB7DA20689CECA8A47432E.mft (raw, json) Hash identifier: Y0A/aVmkbODbjWe0lbo/9+uVzXsCPorXnTX6Ow2gU3E= Subject key identifier: 1D:40:A8:42:38:55:72:DF:12:FD:6D:3B:B5:70:3D:0F:6B:50:77:AA Authority key identifier: 87:62:A5:45:78:5B:5A:63:52:FB:7D:A2:06:89:CE:CA:8A:47:43:2E Certificate issuer: /CN=8762A545785B5A6352FB7DA20689CECA8A47432E Certificate serial: 4CBCDA43B9F2C2F73DF7B31D8DA682E35BED5EB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8762A545785B5A6352FB7DA20689CECA8A47432E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.mft Manifest number: 0126 Signing time: Mon 20 Oct 2025 09:42:22 +0000 Manifest this update: Mon 20 Oct 2025 09:37:22 +0000 Manifest next update: Thu 23 Oct 2025 20:26:22 +0000 Files and hashes: 1: 8762A545785B5A6352FB7DA20689CECA8A47432E.crl (hash: AtX38wZJYNrcHnb3w9vtz3lV7wbnCMCCTuSTtB4L+tw=) 2: 3131332e3139322e302e302f32332d3233203d3e20313532303630.roa (hash: 4RpzWO2+21rLjO+oWBeOo/H9H+KppI82T9nIyJDFZDI=) 3: 3131332e3139322e302e302f32342d3234203d3e20313532303630.roa (hash: QXl0cqQS/4SuO2ouoaV9qpvotcMaHaX/8Ve/TSlnoOs=) 4: 3131332e3139322e312e302f32342d3234203d3e20313532303630.roa (hash: oj9chbs5OVG53Fer0emzdLkJa1HgsbB46XHGonJX/no=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.crl rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8762A545785B5A6352FB7DA20689CECA8A47432E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:bc:da:43:b9:f2:c2:f7:3d:f7:b3:1d:8d:a6:82:e3:5b:ed:5e:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8762A545785B5A6352FB7DA20689CECA8A47432E Validity Not Before: Oct 20 09:37:22 2025 GMT Not After : Oct 23 20:26:22 2025 GMT Subject: CN=1D40A842385572DF12FD6D3BB5703D0F6B5077AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d7:39:aa:6d:43:3a:dd:5a:42:15:f2:a3:ad: 1e:0f:b4:4a:a7:86:e9:14:ab:6c:39:1a:2d:75:63: 37:29:95:23:9a:55:06:f9:0d:2a:44:2d:da:75:f3: 44:97:8e:bf:86:70:6f:6f:a7:d2:34:f6:65:72:5f: 9f:c8:20:1c:05:97:5d:41:c5:16:fa:7b:0b:08:c9: 44:3c:a7:ee:b5:42:56:90:42:2e:d6:55:87:21:18: a6:37:b3:c7:c6:9d:19:8e:a1:89:3e:1e:5d:d8:00: b0:5d:d0:4a:bc:12:52:99:02:e5:02:cc:56:36:07: 98:8a:b2:0b:e6:7d:a8:07:29:ed:cf:b5:45:98:14: ec:cc:22:f2:29:ac:e9:b2:17:99:32:cf:11:b7:b0: c5:12:ff:59:ac:4a:cf:87:10:9f:9b:78:27:2b:e6: ff:da:0a:46:5d:39:02:fb:74:19:cd:6a:5d:92:83: c5:e3:c2:1b:6a:79:39:5a:4d:df:f4:1a:cf:da:e0: ab:61:88:29:a3:a0:08:8a:8d:5a:16:c5:c2:42:41: e4:f4:80:b6:4f:c8:bb:b9:d1:94:6d:cb:42:3b:e9: bd:81:8c:a5:e3:8a:06:96:3c:7e:a4:61:47:87:71: d0:2f:f5:2e:6c:74:1d:0e:d1:fc:71:88:f3:b7:6d: c1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:40:A8:42:38:55:72:DF:12:FD:6D:3B:B5:70:3D:0F:6B:50:77:AA X509v3 Authority Key Identifier: keyid:87:62:A5:45:78:5B:5A:63:52:FB:7D:A2:06:89:CE:CA:8A:47:43:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8762A545785B5A6352FB7DA20689CECA8A47432E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e6:31:ec:4f:6b:50:49:1b:da:19:b5:80:6a:01:b3:6d:43:c8: c7:eb:76:80:50:7e:7d:73:6b:41:bd:f7:2b:77:f9:0e:dd:6d: e2:3b:ab:a2:c2:34:33:f7:c0:c6:83:71:6f:fc:66:cf:a2:fe: 83:2e:ad:74:81:c8:35:91:d2:46:8f:51:9e:b7:f0:22:10:38: 24:f0:83:ff:4f:70:41:59:40:e9:3f:56:52:14:db:b7:a6:d0: fd:e2:2a:4d:71:c1:63:bb:62:a5:c6:ab:a3:58:53:fa:7d:37: 2a:8c:01:8e:8f:c4:63:54:d1:5b:d5:33:6f:d0:98:22:e8:d5: 56:da:b8:67:61:5f:2f:1d:48:a7:02:f3:f7:5f:7e:48:06:e2: 3d:a8:6b:64:c6:0a:11:ae:63:85:f8:a0:66:17:bc:3b:03:10: 2c:86:47:43:6d:b6:09:9c:ed:1f:d6:b9:ce:22:72:ed:b1:c5: 80:67:c3:c5:38:83:89:7e:7a:cb:48:f7:c1:0e:96:36:ce:17: 45:90:e1:da:17:a0:2c:1f:2c:e7:72:e2:91:69:97:12:30:fd: 1a:a6:96:51:69:4b:33:22:4b:4a:d9:be:70:17:c0:14:4b:ea: b3:88:58:13:86:07:c1:f1:93:1a:fc:7b:1a:81:bb:a4:30:05: 92:dc:f1:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTLzaQ7nywvc997MdjaaC41vtXrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc2MkE1NDU3ODVCNUE2MzUyRkI3REEyMDY4OUNFQ0E4 QTQ3NDMyRTAeFw0yNTEwMjAwOTM3MjJaFw0yNTEwMjMyMDI2MjJaMDMxMTAvBgNV BAMTKDFENDBBODQyMzg1NTcyREYxMkZENkQzQkI1NzAzRDBGNkI1MDc3QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw1zmqbUM63VpCFfKjrR4PtEqn hukUq2w5Gi11YzcplSOaVQb5DSpELdp180SXjr+GcG9vp9I09mVyX5/IIBwFl11B xRb6ewsIyUQ8p+61QlaQQi7WVYchGKY3s8fGnRmOoYk+Hl3YALBd0Eq8ElKZAuUC zFY2B5iKsgvmfagHKe3PtUWYFOzMIvIprOmyF5kyzxG3sMUS/1msSs+HEJ+beCcr 5v/aCkZdOQL7dBnNal2Sg8XjwhtqeTlaTd/0Gs/a4KthiCmjoAiKjVoWxcJCQeT0 gLZPyLu50ZRty0I76b2BjKXjigaWPH6kYUeHcdAv9S5sdB0O0fxxiPO3bcHBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHUCoQjhVct8S/W07tXA9D2tQd6owHwYDVR0j BBgwFoAUh2KlRXhbWmNS+32iBonOyopHQy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzI4YjQ3Ni02MjI0LTRlMDEtYjE4Ni04MGJjZWM5YmMwZTMvMC84NzYyQTU0NTc4 NUI1QTYzNTJGQjdEQTIwNjg5Q0VDQThBNDc0MzJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc2MkE1NDU3ODVCNUE2MzUyRkI3REEyMDY4OUNFQ0E4QTQ3 NDMyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMyOGI0NzYtNjIyNC00ZTAxLWIx ODYtODBiY2VjOWJjMGUzLzAvODc2MkE1NDU3ODVCNUE2MzUyRkI3REEyMDY4OUNF Q0E4QTQ3NDMyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOYx7E9rUEkb2hm1gGoBs21DyMfrdoBQfn1z a0G99yt3+Q7dbeI7q6LCNDP3wMaDcW/8Zs+i/oMurXSByDWR0kaPUZ638CIQOCTw g/9PcEFZQOk/VlIU27em0P3iKk1xwWO7YqXGq6NYU/p9NyqMAY6PxGNU0VvVM2/Q mCLo1VbauGdhXy8dSKcC8/dffkgG4j2oa2TGChGuY4X4oGYXvDsDECyGR0Nttgmc 7R/Wuc4icu2xxYBnw8U4g4l+estI98EOljbOF0WQ4doXoCwfLOdy4pFplxIw/Rqm llFpSzMiS0rZvnAXwBRL6rOIWBOGB8Hxkxr8exqBu6QwBZLc8Sg= -----END CERTIFICATE-----Generated at Mon Oct 20 17:54:16 2025 by rpki-client