$ rpki-client -vvf repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft File: 7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft (raw, json) Hash identifier: a61yqVaQ9YOLdHUgPWEm1hUN2hRektVn3Nu5l3z4a38= Subject key identifier: B2:FD:9C:04:55:9A:C0:A0:A5:A3:C6:72:6D:D9:BA:FC:CC:6A:29:7E Authority key identifier: 7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7 Certificate issuer: /CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7 Certificate serial: 4102D299C0C316913A88AC9E8F11504F6755011A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft Manifest number: C3 Signing time: Sat 18 Oct 2025 20:10:00 +0000 Manifest this update: Sat 18 Oct 2025 20:05:00 +0000 Manifest next update: Tue 21 Oct 2025 23:16:00 +0000 Files and hashes: 1: 7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl (hash: YaG5OpGAl4+Lb9RX2Ab56p871AUsGGk+yUnCdO+maBw=) 2: 3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa (hash: 4oT7xZVHG5/E0DX/QQMWoNUATmrhrxxUsrgCZ3ThGY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 23:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:02:d2:99:c0:c3:16:91:3a:88:ac:9e:8f:11:50:4f:67:55:01:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7 Validity Not Before: Oct 18 20:05:00 2025 GMT Not After : Oct 21 23:16:00 2025 GMT Subject: CN=B2FD9C04559AC0A0A5A3C6726DD9BAFCCC6A297E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c7:c4:e0:55:05:b3:b0:8a:c6:2d:9c:d9:e3: ea:01:ce:b2:e0:5e:93:d1:13:76:2c:51:88:8d:cc: 44:5b:c4:9c:91:29:10:9c:a8:9a:6a:8f:1c:3b:70: 8f:eb:ce:23:fe:2f:2b:d2:5f:37:3f:1d:d0:89:01: ad:99:20:73:a0:70:db:97:fd:23:18:e3:7a:a0:62: 72:af:2e:23:29:9c:6a:3c:70:a0:35:5a:54:23:41: 46:b1:31:10:fb:c9:46:f3:6a:a6:a9:df:19:9a:92: fe:58:4b:1b:ec:9f:07:a9:f5:8a:46:fd:0b:c5:28: 96:0c:8a:17:29:7a:ed:22:59:0b:24:0d:98:a2:6a: 80:e7:17:4d:5a:80:51:0d:90:ed:f3:f8:c6:3a:5f: a7:47:49:0b:8e:23:54:0f:5a:af:1d:25:15:31:fd: 37:5e:a0:28:6a:b7:4f:9a:a5:86:61:ee:d8:72:d0: f5:7a:3d:35:d3:57:54:52:7e:8b:43:a8:d3:07:6d: 3b:11:da:a4:1b:3d:4f:ff:e4:a5:6a:85:e3:c1:50: 69:9b:c4:dc:e3:03:f9:7c:77:3b:2c:da:05:09:14: e1:61:4a:86:48:0e:49:83:ad:5e:33:4f:34:af:20: fe:d6:f2:39:97:36:98:3b:9b:69:4e:2e:6b:31:65: a5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FD:9C:04:55:9A:C0:A0:A5:A3:C6:72:6D:D9:BA:FC:CC:6A:29:7E X509v3 Authority Key Identifier: keyid:7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:9b:dc:a2:db:ec:58:78:6a:f1:f1:a7:9a:03:05:14:71:41: 93:7f:d3:f9:26:d3:be:27:f4:f4:73:dc:ef:18:ae:7f:c1:68: 1a:37:db:e0:91:54:b2:9c:90:d0:11:ae:aa:c0:aa:ce:05:8c: 89:60:ce:ee:c8:63:66:b6:9f:12:66:d9:f5:8f:9c:f6:d2:aa: c6:c1:c7:58:c0:41:48:b2:8a:66:f6:24:8c:2d:c3:5e:7b:90: bd:f8:44:59:21:f0:4f:ab:e8:23:11:b8:7c:96:10:d7:1a:6a: fb:0f:86:c3:f9:91:9d:f3:aa:b6:96:f0:33:89:b4:54:e2:e0: 81:73:43:08:0c:36:3b:ca:d8:fc:4c:37:fb:e0:d5:9b:74:8a: f5:bc:7f:28:27:3d:6e:63:46:f6:16:05:e4:11:a2:b1:b1:ec: b9:c6:ec:e4:60:a1:e8:8a:09:73:f1:b4:db:78:07:8a:19:34: 09:cb:b7:1c:e3:c0:61:bf:3e:56:e7:f3:56:2c:dd:80:6e:f1: 97:e3:24:12:59:44:fe:0f:61:51:80:b2:b3:1f:c6:bb:7a:66: d5:f5:78:37:91:5b:a9:cf:80:0f:d1:3c:c4:3d:89:e0:07:75: 79:72:35:e0:2f:19:cf:6d:da:e6:fb:34:ac:70:74:cf:32:9d: a2:49:b1:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQQLSmcDDFpE6iKyejxFQT2dVARowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2MUNC QzA0MDRDNzAeFw0yNTEwMTgyMDA1MDBaFw0yNTEwMjEyMzE2MDBaMDMxMTAvBgNV BAMTKEIyRkQ5QzA0NTU5QUMwQTBBNUEzQzY3MjZERDlCQUZDQ0M2QTI5N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRx8TgVQWzsIrGLZzZ4+oBzrLg XpPRE3YsUYiNzERbxJyRKRCcqJpqjxw7cI/rziP+LyvSXzc/HdCJAa2ZIHOgcNuX /SMY43qgYnKvLiMpnGo8cKA1WlQjQUaxMRD7yUbzaqap3xmakv5YSxvsnwep9YpG /QvFKJYMihcpeu0iWQskDZiiaoDnF01agFENkO3z+MY6X6dHSQuOI1QPWq8dJRUx /TdeoChqt0+apYZh7thy0PV6PTXTV1RSfotDqNMHbTsR2qQbPU//5KVqhePBUGmb xNzjA/l8dzss2gUJFOFhSoZIDkmDrV4zTzSvIP7W8jmXNpg7m2lOLmsxZaUXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsv2cBFWawKClo8Zybdm6/MxqKX4wHwYDVR0j BBgwFoAUfZ4O5b5yc2CBAdk8X3+2HLwEBMcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmRlMWE4ZS1jMmI4LTQ5OTYtOTQ5Mi02ZjkyYzJkZmVjN2EvMC83RDlFMEVFNUJF NzI3MzYwODEwMUQ5M0M1RjdGQjYxQ0JDMDQwNEM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2MUNCQzA0 MDRDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkZTFhOGUtYzJiOC00OTk2LTk0 OTItNmY5MmMyZGZlYzdhLzAvN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2 MUNCQzA0MDRDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ6b3KLb7Fh4avHxp5oDBRRxQZN/0/km074n 9PRz3O8Yrn/BaBo32+CRVLKckNARrqrAqs4FjIlgzu7IY2a2nxJm2fWPnPbSqsbB x1jAQUiyimb2JIwtw157kL34RFkh8E+r6CMRuHyWENcaavsPhsP5kZ3zqraW8DOJ tFTi4IFzQwgMNjvK2PxMN/vg1Zt0ivW8fygnPW5jRvYWBeQRorGx7LnG7ORgoeiK CXPxtNt4B4oZNAnLtxzjwGG/Plbn81Ys3YBu8ZfjJBJZRP4PYVGAsrMfxrt6ZtX1 eDeRW6nPgA/RPMQ9ieAHdXlyNeAvGc9t2ub7NKxwdM8ynaJJsX8= -----END CERTIFICATE-----Generated at Mon Oct 20 12:35:31 2025 by rpki-client