$ rpki-client -vvf repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft File: 7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft (raw, json) Hash identifier: bilYSQnX0qSuYZrdTGER8UVE26NiyhrUUcVyDzk5TUQ= Subject key identifier: B7:85:EA:17:79:27:1F:CC:0C:76:07:00:36:7B:D3:B6:CA:91:2E:8B Authority key identifier: 7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38 Certificate issuer: /CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038 Certificate serial: 1E2DF70E5E046D055EE0D8B7B1451086C364690A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft Manifest number: 0396 Signing time: Mon 20 Oct 2025 06:52:03 +0000 Manifest this update: Mon 20 Oct 2025 06:47:03 +0000 Manifest next update: Thu 23 Oct 2025 15:49:03 +0000 Files and hashes: 1: 3130332e3136372e33302e302f32332d3234203d3e203137393935.roa (hash: jJAIyVbfrGhaQ1dlxzFUdHOYskMs8jKydFWI9VuwVq4=) 2: 7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl (hash: PcbJVUEkGK9OMXKuB2Ykd3bAAm4+4l3FxDbrwWEkKGU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:2d:f7:0e:5e:04:6d:05:5e:e0:d8:b7:b1:45:10:86:c3:64:69:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038 Validity Not Before: Oct 20 06:47:03 2025 GMT Not After : Oct 23 15:49:03 2025 GMT Subject: CN=B785EA1779271FCC0C760700367BD3B6CA912E8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:98:22:1e:0b:f4:ac:19:fb:29:fd:58:37:17: bc:f2:f6:1d:40:bc:58:46:c0:a7:49:0e:ea:64:86: 65:b3:74:a9:cf:66:45:e6:d4:9e:e4:4b:c3:2b:63: 55:80:23:59:59:4f:ab:30:cb:c1:f3:bf:36:c4:28: 28:96:4c:d6:0a:8c:51:0a:68:a4:dd:45:f3:53:1e: c8:d0:d9:85:53:bf:de:85:fd:5c:5d:a4:d3:55:bb: 2d:43:e4:e9:9c:7f:f4:fc:1b:ef:0b:6e:b7:2d:ea: 30:b8:86:68:e8:e9:8f:3a:5c:2a:4c:c6:24:e3:a9: cd:f6:df:8f:df:8b:4b:39:32:f3:f3:c5:89:fa:b0: e8:a1:cf:11:6e:b4:6b:9d:d2:c6:73:7e:32:dd:56: f2:2e:db:53:88:8d:5c:20:4f:29:2c:9d:dc:69:7a: 3e:c0:0b:ff:00:3c:93:56:eb:bd:9f:75:94:ac:dc: c0:d3:97:83:62:a0:61:25:e3:9e:a4:01:c5:72:f5: b8:86:27:96:aa:99:7f:a4:71:ec:bb:a8:ba:3e:f4: a0:49:62:08:55:8b:df:62:8d:40:0f:41:6b:81:1f: c1:58:31:5f:14:3b:e9:d6:7c:b5:28:7b:54:ad:a6: 59:bf:db:05:c0:09:8e:1f:68:72:b1:50:32:66:88: 93:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:85:EA:17:79:27:1F:CC:0C:76:07:00:36:7B:D3:B6:CA:91:2E:8B X509v3 Authority Key Identifier: keyid:7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:c9:56:fa:43:da:25:ef:fb:f6:d0:02:a3:4b:30:5c:75:ce: 1e:57:23:14:72:68:c5:9c:48:46:c5:c4:fa:cf:b4:41:fd:52: be:96:90:69:49:36:fe:9d:44:69:27:11:6a:bd:9c:88:3f:d1: 11:2e:05:6a:ed:b7:51:63:1a:c5:5f:55:81:10:94:ef:16:e6: 7d:eb:62:13:c8:1b:f9:a6:c2:ed:d2:19:cb:4a:9a:26:01:6e: f9:0a:87:69:6a:7b:dd:dc:9b:a6:fd:44:1c:e9:c1:c6:3c:9f: 73:d3:73:61:81:a4:c4:1f:9d:48:63:a1:47:5e:b5:fe:ed:28: a2:74:55:5b:80:98:70:f3:c1:38:b9:c7:34:2e:6a:6a:6d:7b: 2c:85:ee:49:10:3f:57:f5:87:22:39:f0:5b:7f:95:de:1f:5d: db:7f:67:09:dc:0c:8c:ac:e3:e3:8b:80:1c:df:20:0f:5c:dc: 4c:6d:d4:53:ca:ae:75:17:f7:2d:f2:45:8a:e5:bf:ee:ae:98: 71:bc:3a:f4:96:87:76:1f:c7:6b:ba:36:b7:27:d6:71:c8:20: f0:0e:66:7c:b9:0c:b0:a3:d8:4a:4e:d3:3d:58:4b:a1:f8:91: ff:eb:1f:de:cf:51:5b:b7:14:97:56:fe:cb:d1:a6:a2:e3:6a: fe:6b:ac:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHi33Dl4EbQVe4Ni3sUUQhsNkaQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlGODdC QUEwRTAzODAeFw0yNTEwMjAwNjQ3MDNaFw0yNTEwMjMxNTQ5MDNaMDMxMTAvBgNV BAMTKEI3ODVFQTE3NzkyNzFGQ0MwQzc2MDcwMDM2N0JEM0I2Q0E5MTJFOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBmCIeC/SsGfsp/Vg3F7zy9h1A vFhGwKdJDupkhmWzdKnPZkXm1J7kS8MrY1WAI1lZT6swy8HzvzbEKCiWTNYKjFEK aKTdRfNTHsjQ2YVTv96F/VxdpNNVuy1D5Omcf/T8G+8Lbrct6jC4hmjo6Y86XCpM xiTjqc3234/fi0s5MvPzxYn6sOihzxFutGud0sZzfjLdVvIu21OIjVwgTyksndxp ej7AC/8APJNW672fdZSs3MDTl4NioGEl456kAcVy9biGJ5aqmX+kcey7qLo+9KBJ YghVi99ijUAPQWuBH8FYMV8UO+nWfLUoe1Stplm/2wXACY4faHKxUDJmiJOdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt4XqF3knH8wMdgcANnvTtsqRLoswHwYDVR0j BBgwFoAUe5RZdKeejHfLAvlElbqfh7qg4DgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzYzNWNlOS0wZWE1LTQ3ZDgtOWZjYy1jYWQxYzlmMDZmYmUvMC83Qjk0NTk3NEE3 OUU4Qzc3Q0IwMkY5NDQ5NUJBOUY4N0JBQTBFMDM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlGODdCQUEw RTAzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M2MzVjZTktMGVhNS00N2Q4LTlm Y2MtY2FkMWM5ZjA2ZmJlLzAvN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlG ODdCQUEwRTAzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALDJVvpD2iXv+/bQAqNLMFx1zh5XIxRyaMWc SEbFxPrPtEH9Ur6WkGlJNv6dRGknEWq9nIg/0REuBWrtt1FjGsVfVYEQlO8W5n3r YhPIG/mmwu3SGctKmiYBbvkKh2lqe93cm6b9RBzpwcY8n3PTc2GBpMQfnUhjoUde tf7tKKJ0VVuAmHDzwTi5xzQuampteyyF7kkQP1f1hyI58Ft/ld4fXdt/ZwncDIys 4+OLgBzfIA9c3Ext1FPKrnUX9y3yRYrlv+6umHG8OvSWh3Yfx2u6Nrcn1nHIIPAO Zny5DLCj2EpO0z1YS6H4kf/rH97PUVu3FJdW/svRpqLjav5rrHg= -----END CERTIFICATE-----Generated at Mon Oct 20 09:45:53 2025 by rpki-client