$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft File: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft (raw, json) Hash identifier: je7ZLdo9oXCjq0VI9MEr6JwvKAPrgg6OPWJzU1SEoUc= Subject key identifier: 7C:61:BD:D6:36:22:7D:D0:B8:E5:2E:4B:2C:B8:C9:0D:B2:BD:F6:7B Authority key identifier: 7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 Certificate issuer: /CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Certificate serial: 511BBCAFD350E08700C85ED3959E1D92CFB13BDD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft Manifest number: C3 Signing time: Sat 18 Oct 2025 11:12:02 +0000 Manifest this update: Sat 18 Oct 2025 11:07:02 +0000 Manifest next update: Tue 21 Oct 2025 19:37:02 +0000 Files and hashes: 1: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl (hash: vIe9CHocBjyCILGWyzD44meVgOab3gmOyj+tf0kTo9U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 19:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:1b:bc:af:d3:50:e0:87:00:c8:5e:d3:95:9e:1d:92:cf:b1:3b:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Validity Not Before: Oct 18 11:07:02 2025 GMT Not After : Oct 21 19:37:02 2025 GMT Subject: CN=7C61BDD636227DD0B8E52E4B2CB8C90DB2BDF67B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c2:24:55:41:a5:6a:80:87:b0:e7:00:99:28: f6:b7:2c:e1:48:bb:16:5b:96:34:c3:0f:bb:dd:fd: 36:ac:c7:b9:c4:81:e0:15:e0:70:12:78:ad:bb:23: 5c:e4:3b:3f:c3:79:02:2e:9d:ad:1d:c5:97:8f:e5: 69:22:e5:60:46:82:fd:cb:e5:88:b1:31:45:a0:53: 41:bd:28:da:4a:5a:49:2c:dc:ef:be:1f:3d:b1:53: 94:8f:09:5b:ad:7a:7a:c3:f3:9b:e4:a8:db:de:17: 68:d5:3a:13:9d:47:57:8c:f9:82:4e:9d:ff:fe:f7: 9c:d2:72:96:55:3b:9f:12:79:5c:7d:bc:16:fd:cf: b8:8a:fd:f3:8e:75:87:f7:d5:0b:1b:1b:b8:0f:18: 50:71:81:40:df:42:aa:26:ce:85:08:42:91:9c:2e: 77:14:0a:7f:0d:34:52:95:4a:be:47:fc:43:2f:07: e6:34:c8:1f:3a:b8:ad:0f:a2:bb:f5:f9:84:7f:b7: 51:59:ea:ab:d6:fe:ef:de:3b:10:56:f8:e3:16:b3: 32:1e:1e:8e:dc:8b:ab:2d:ec:94:5a:02:20:d0:55: 2e:d9:3f:73:5c:c9:a2:eb:92:81:98:f5:61:c1:af: e5:a1:90:a4:1a:70:38:59:f2:1b:42:53:68:7e:bc: 90:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:61:BD:D6:36:22:7D:D0:B8:E5:2E:4B:2C:B8:C9:0D:B2:BD:F6:7B X509v3 Authority Key Identifier: keyid:7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:5b:ce:ea:5c:25:0d:31:ab:c8:92:03:dc:13:c3:5c:6b:9b: 1d:11:4c:ce:9a:36:3d:18:71:45:25:3e:11:69:df:af:28:c8: da:90:e3:8b:21:0b:6c:c0:57:dc:c1:31:54:74:25:cb:de:ad: 2d:e2:64:8c:a7:a3:8d:94:25:98:ef:8b:78:40:c5:62:bc:a6: b7:48:80:6c:0f:e5:7d:08:f0:89:92:1e:ce:bb:9c:4c:56:76: 7b:64:6d:0f:f7:63:d8:b0:05:7b:d2:38:11:21:ef:07:3f:09: c4:04:6c:2e:0d:70:28:aa:5e:06:44:8c:76:dc:bd:5c:74:18: a8:a8:f4:c4:6d:c8:1d:eb:72:06:6f:76:76:17:8c:88:d3:b6: f4:4a:11:ff:c3:78:7e:c1:5e:e4:f7:02:7b:ed:82:9e:85:31: a1:40:ed:74:d1:40:aa:61:8e:99:ea:e4:0d:8d:2a:2b:7b:c0: fb:dd:6e:9c:7c:c9:0c:81:c2:67:b1:f0:37:ec:af:9d:08:e4: 32:56:95:e8:6e:7c:61:43:08:92:55:0b:72:ec:50:d2:4a:ec: 9c:81:85:0b:30:0f:55:d1:ea:70:04:87:84:94:00:46:a4:9b: ad:37:ca:c1:1a:05:dc:31:8f:53:03:68:7b:94:72:5f:1a:64: 43:a6:2e:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUURu8r9NQ4IcAyF7TlZ4dks+xO90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2 QUM0RkMzMTAeFw0yNTEwMTgxMTA3MDJaFw0yNTEwMjExOTM3MDJaMDMxMTAvBgNV BAMTKDdDNjFCREQ2MzYyMjdERDBCOEU1MkU0QjJDQjhDOTBEQjJCREY2N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2wiRVQaVqgIew5wCZKPa3LOFI uxZbljTDD7vd/Tasx7nEgeAV4HASeK27I1zkOz/DeQIuna0dxZeP5Wki5WBGgv3L 5YixMUWgU0G9KNpKWkks3O++Hz2xU5SPCVutenrD85vkqNveF2jVOhOdR1eM+YJO nf/+95zScpZVO58SeVx9vBb9z7iK/fOOdYf31QsbG7gPGFBxgUDfQqomzoUIQpGc LncUCn8NNFKVSr5H/EMvB+Y0yB86uK0Porv1+YR/t1FZ6qvW/u/eOxBW+OMWszIe Ho7ci6st7JRaAiDQVS7ZP3NcyaLrkoGY9WHBr+WhkKQacDhZ8htCU2h+vJAdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfGG91jYifdC45S5LLLjJDbK99nswHwYDVR0j BBgwFoAUfVCLIlNQsNIE8ZQ/T1PU2GrE/DEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjNiMjMwYS1mZmYxLTQ3ZjAtYmY5MS03Y2ViOGQzNjA5NmUvMC83RDUwOEIyMjUz NTBCMEQyMDRGMTk0M0Y0RjUzRDREODZBQzRGQzMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2QUM0 RkMzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzYjIzMGEtZmZmMS00N2YwLWJm OTEtN2NlYjhkMzYwOTZlLzAvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0 RDg2QUM0RkMzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExbzupcJQ0xq8iSA9wTw1xrmx0RTM6aNj0Y cUUlPhFp368oyNqQ44shC2zAV9zBMVR0JcverS3iZIyno42UJZjvi3hAxWK8prdI gGwP5X0I8ImSHs67nExWdntkbQ/3Y9iwBXvSOBEh7wc/CcQEbC4NcCiqXgZEjHbc vVx0GKio9MRtyB3rcgZvdnYXjIjTtvRKEf/DeH7BXuT3Anvtgp6FMaFA7XTRQKph jpnq5A2NKit7wPvdbpx8yQyBwmex8Dfsr50I5DJWlehufGFDCJJVC3LsUNJK7JyB hQswD1XR6nAEh4SUAEakm603ysEaBdwxj1MDaHuUcl8aZEOmLrs= -----END CERTIFICATE-----Generated at Mon Oct 20 06:58:56 2025 by rpki-client