$ rpki-client -vvf repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft File: C7D4D30314160FDACB9582CF972E90EC10AE206F.mft (raw, json) Hash identifier: zv8Qk3BjUl4cbx6nj2h7Ddsaz3/U8dYril85mWiBRXg= Subject key identifier: 51:20:52:36:50:5E:8F:9F:A0:56:56:3F:BD:6F:A8:65:32:22:31:34 Authority key identifier: C7:D4:D3:03:14:16:0F:DA:CB:95:82:CF:97:2E:90:EC:10:AE:20:6F Certificate issuer: /CN=C7D4D30314160FDACB9582CF972E90EC10AE206F Certificate serial: 400D7F23B4BD9408F380802305A66FB3AB15567F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft Manifest number: 0518 Signing time: Sun 19 Oct 2025 15:41:31 +0000 Manifest this update: Sun 19 Oct 2025 15:36:31 +0000 Manifest next update: Thu 23 Oct 2025 02:37:31 +0000 Files and hashes: 1: C7D4D30314160FDACB9582CF972E90EC10AE206F.crl (hash: LAb+3JLGIh0MMxDaiCtU/Tt8EBibi/LwnZA0CztRb8g=) 2: 3130332e3134342e32322e302f32342d3234203d3e20313333383339.roa (hash: llGSDUYqSL3OD7TtVsp6ArCR8mqRzLPhfJs1tW9L5wg=) 3: 323030313a6466303a333330303a3a2f34382d3438203d3e20313333383339.roa (hash: 4N6LRCptGvt5p5Z3fi0q5sQmHj3OTG0hHztRBZdu+t8=) 4: 3130332e35302e3231382e302f32342d3234203d3e20313333383339.roa (hash: xsM8R50wRfdlN5JweHjZIfTpmduLeILF/fWliK+i37M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.crl rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 02:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:0d:7f:23:b4:bd:94:08:f3:80:80:23:05:a6:6f:b3:ab:15:56:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7D4D30314160FDACB9582CF972E90EC10AE206F Validity Not Before: Oct 19 15:36:31 2025 GMT Not After : Oct 23 02:37:31 2025 GMT Subject: CN=51205236505E8F9FA056563FBD6FA86532223134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a1:b9:9f:95:4a:c4:58:22:d1:90:50:11:2b: 62:05:83:00:8f:df:c2:fa:f7:29:6e:08:67:47:0a: 44:d4:33:94:32:92:75:fd:3b:c0:19:a3:01:4b:53: f7:f2:94:d0:f4:08:25:84:79:1f:2e:c2:13:b1:20: 30:1f:3c:0b:ab:1e:5a:31:c3:36:ea:93:3b:53:0b: e7:54:6e:f9:7c:6d:11:95:27:9f:bb:a0:3a:f2:41: 38:53:48:be:cb:d6:0b:86:ac:a6:28:92:4b:ad:56: a4:63:b7:d8:88:22:5f:64:34:36:26:f8:0c:ff:35: 9a:ed:98:6c:d3:a6:0f:68:30:a0:ca:7f:a5:5d:25: 72:34:50:2c:ae:24:bd:8f:01:5a:0f:32:53:b2:00: 81:50:c1:81:77:af:f1:25:ae:0c:60:b4:34:53:20: 7f:0e:28:bb:3e:28:d3:61:16:95:06:eb:32:72:fb: 5a:41:4e:2c:3f:69:d9:63:f6:a0:c8:f9:40:4a:e3: 13:90:2c:a6:7c:59:19:bf:c7:8a:17:8c:5d:b3:17: c5:cc:41:c1:1b:33:d8:a4:2d:8c:e6:04:ae:ee:c0: 62:34:75:38:d8:f5:b4:27:98:f6:05:e6:c1:9e:dc: d5:a5:32:df:a6:78:93:7e:11:b0:c6:0a:a5:71:71: 21:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:20:52:36:50:5E:8F:9F:A0:56:56:3F:BD:6F:A8:65:32:22:31:34 X509v3 Authority Key Identifier: keyid:C7:D4:D3:03:14:16:0F:DA:CB:95:82:CF:97:2E:90:EC:10:AE:20:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f2:1f:a2:b9:c5:06:1b:9d:d1:89:05:c9:ad:2c:2a:0a:25: a1:20:37:8a:2a:55:55:8c:54:64:a8:eb:86:9f:f7:a7:bd:c2: 14:e8:be:3d:cc:1e:ee:d6:6e:36:76:42:a3:b8:2a:2b:b1:a9: 3d:d1:b0:4f:7e:24:ae:f0:5a:33:ee:89:1d:2a:63:3f:02:80: a2:f8:ea:62:8d:c1:16:48:f4:8c:c5:59:75:71:34:1b:4c:0c: 05:0f:ca:fb:51:76:f6:fb:63:e0:3f:a8:98:fe:92:9c:4e:5f: e7:a9:5d:22:40:a1:1d:26:62:dd:d1:c2:cf:78:9b:3e:f8:ff: 78:0c:fd:25:b0:e7:0e:75:7b:52:34:14:c4:91:42:61:6a:a4: 35:18:45:7a:ac:7e:d4:44:fa:ad:3a:ee:22:a7:e0:99:49:47: 94:d9:cb:42:97:e4:85:36:cc:57:5f:8b:12:f5:49:3f:11:d4: d6:05:31:e3:2d:4a:1f:7e:d2:e2:c4:2d:9f:19:a8:b3:5b:5e: f3:7d:5e:d9:c2:44:a8:2a:fb:73:1a:1c:e2:4a:68:be:4e:12: 46:9f:a1:d7:d8:85:07:6d:60:7d:df:c6:7b:9d:70:90:8e:9f: f6:c8:5a:84:45:a9:f6:06:ff:7b:c7:72:d8:69:9a:a0:8c:82: 72:20:9d:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQA1/I7S9lAjzgIAjBaZvs6sVVn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdENEQzMDMxNDE2MEZEQUNCOTU4MkNGOTcyRTkwRUMx MEFFMjA2RjAeFw0yNTEwMTkxNTM2MzFaFw0yNTEwMjMwMjM3MzFaMDMxMTAvBgNV BAMTKDUxMjA1MjM2NTA1RThGOUZBMDU2NTYzRkJENkZBODY1MzIyMjMxMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDobmflUrEWCLRkFARK2IFgwCP 38L69yluCGdHCkTUM5QyknX9O8AZowFLU/fylND0CCWEeR8uwhOxIDAfPAurHlox wzbqkztTC+dUbvl8bRGVJ5+7oDryQThTSL7L1guGrKYokkutVqRjt9iIIl9kNDYm +Az/NZrtmGzTpg9oMKDKf6VdJXI0UCyuJL2PAVoPMlOyAIFQwYF3r/ElrgxgtDRT IH8OKLs+KNNhFpUG6zJy+1pBTiw/adlj9qDI+UBK4xOQLKZ8WRm/x4oXjF2zF8XM QcEbM9ikLYzmBK7uwGI0dTjY9bQnmPYF5sGe3NWlMt+meJN+EbDGCqVxcSEDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUSBSNlBej5+gVlY/vW+oZTIiMTQwHwYDVR0j BBgwFoAUx9TTAxQWD9rLlYLPly6Q7BCuIG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MThhZDdhNi1jOTA3LTQzNTktYWJhNS1kNTc0OGJhMTYxNzYvMC9DN0Q0RDMwMzE0 MTYwRkRBQ0I5NTgyQ0Y5NzJFOTBFQzEwQUUyMDZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdENEQzMDMxNDE2MEZEQUNCOTU4MkNGOTcyRTkwRUMxMEFF MjA2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTE4YWQ3YTYtYzkwNy00MzU5LWFi YTUtZDU3NDhiYTE2MTc2LzAvQzdENEQzMDMxNDE2MEZEQUNCOTU4MkNGOTcyRTkw RUMxMEFFMjA2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACryH6K5xQYbndGJBcmtLCoKJaEgN4oqVVWM VGSo64af96e9whTovj3MHu7WbjZ2QqO4KiuxqT3RsE9+JK7wWjPuiR0qYz8CgKL4 6mKNwRZI9IzFWXVxNBtMDAUPyvtRdvb7Y+A/qJj+kpxOX+epXSJAoR0mYt3Rws94 mz74/3gM/SWw5w51e1I0FMSRQmFqpDUYRXqsftRE+q067iKn4JlJR5TZy0KX5IU2 zFdfixL1ST8R1NYFMeMtSh9+0uLELZ8ZqLNbXvN9XtnCRKgq+3MaHOJKaL5OEkaf odfYhQdtYH3fxnudcJCOn/bIWoRFqfYG/3vHcthpmqCMgnIgnbI= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:17 2025 by rpki-client