$ rpki-client -vvf repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft File: 7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft (raw, json) Hash identifier: GDwTi2hCgENnrLAdy/wHfTJHp+YmZSMD3hKABTUqz88= Subject key identifier: 7F:A5:C6:6C:57:90:93:9B:A8:93:35:7C:E0:E0:1E:32:24:E3:A1:7B Authority key identifier: 7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3 Certificate issuer: /CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3 Certificate serial: 2B8525A6F4909A881EF83413568B5D96FD5AFB20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft Manifest number: 0205 Signing time: Sun 19 Oct 2025 13:52:12 +0000 Manifest this update: Sun 19 Oct 2025 13:47:12 +0000 Manifest next update: Thu 23 Oct 2025 01:13:12 +0000 Files and hashes: 1: 3130332e32302e3130392e302f32342d3234203d3e20313439373037.roa (hash: 3msI/ygFttmp4PXSnBx54sTyPLJ5YCmXmK79NjZs9sY=) 2: 7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl (hash: w1hTiaMVeXaHzTIlByMOqTPP+wPybvggaPAmpzUgcWs=) 3: 3130332e32302e3130382e302f32332d3234203d3e20313439373037.roa (hash: GyJFRm5QBw0DVeVQuvzw8Fd9uB9Nai2ZZg9HhVjXTMo=) 4: 3130332e32302e3130382e302f32342d3234203d3e20313439373037.roa (hash: RC/WoQjd0AnGJGIfXrYxV2LmADFS4+Z04pTssF1Bamk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 01:13:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:85:25:a6:f4:90:9a:88:1e:f8:34:13:56:8b:5d:96:fd:5a:fb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3 Validity Not Before: Oct 19 13:47:12 2025 GMT Not After : Oct 23 01:13:12 2025 GMT Subject: CN=7FA5C66C5790939BA893357CE0E01E3224E3A17B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:20:56:21:24:cd:cb:b8:16:11:c1:0b:f3:37: 5c:1f:c5:13:a2:66:80:f7:a5:e5:33:cd:4e:c6:15: 50:1a:b9:94:c3:9f:d1:ac:d9:52:c0:69:86:d8:0f: 0a:c2:b3:fa:1e:ab:61:5d:3a:40:5f:1f:46:16:6a: 0b:c2:83:40:4d:f5:21:3d:ae:6e:d6:7b:05:b2:c4: b2:8c:54:45:fa:e8:7a:65:24:1c:04:a5:f9:41:9a: 6b:72:72:5e:f1:ac:a8:80:b3:ce:f4:b2:d1:18:d9: 2d:8d:be:c9:f4:74:ed:b0:5c:27:08:9f:de:f6:84: 59:e6:bd:38:87:16:5d:2f:e3:8e:4c:2a:53:03:96: 91:5c:37:cf:d2:ce:5b:95:a2:67:44:6b:02:1d:21: 63:e0:35:32:e1:dd:b1:65:00:2e:b6:ac:06:5c:f2: 1e:93:29:e6:f8:40:c8:ec:ec:05:11:6c:ec:2b:14: 84:9e:dd:f3:b5:f1:e4:d2:ba:0a:10:98:1e:99:24: 66:f8:72:6f:13:61:a3:e5:4f:7c:b0:27:6b:6f:99: 1b:f7:d5:c8:05:2c:f5:e3:3f:29:fd:df:61:31:58: bc:0d:25:6b:d7:dc:7c:62:77:33:e0:1e:d1:3a:bf: fc:6d:15:29:1e:12:13:88:58:5e:a2:28:9f:7e:07: f4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A5:C6:6C:57:90:93:9B:A8:93:35:7C:E0:E0:1E:32:24:E3:A1:7B X509v3 Authority Key Identifier: keyid:7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:07:c3:ec:1f:d0:f3:49:9f:73:63:74:4d:fc:25:c4:26:a9: 71:81:1f:da:78:3a:4c:43:8e:56:c0:d2:3d:d3:67:28:f2:c9: 04:30:55:4e:f6:5f:59:48:e0:54:bd:f0:58:a2:6f:8e:67:ab: f0:27:18:7b:bd:f3:95:52:1c:54:ba:1e:2c:29:76:9c:04:43: 40:a0:dd:3d:74:d0:1f:8f:17:71:41:d1:8b:94:de:89:7b:01: 97:c3:18:d8:e3:a4:e9:f2:7a:e5:99:b1:67:84:a4:4c:60:43: 2e:92:2f:c5:8a:d1:ca:20:e2:85:38:a6:de:16:f6:86:24:46: 8d:64:c7:9c:cf:52:88:4e:7f:b9:9e:cb:34:51:0f:31:f9:a5: b5:cc:6e:ac:9d:c6:5c:03:47:7d:a8:14:a3:85:9b:e8:aa:8d: ce:70:0e:8e:14:27:be:c7:7a:c3:5a:f3:00:03:74:45:97:52: f9:3f:58:37:44:70:4d:7e:5d:5d:a7:22:c8:e0:bf:5c:ad:88: 73:f0:35:c1:e3:4d:11:de:d7:f8:95:a8:9e:fd:1d:22:a4:56: d3:7c:ee:00:72:df:25:c9:78:25:40:a4:4c:39:87:34:f3:3f: 09:99:a3:26:89:c5:6a:d0:87:c7:06:ee:48:02:a1:25:57:81: 5f:70:7f:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK4UlpvSQmoge+DQTVotdlv1a+yAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1 MDMyMzFCMzAeFw0yNTEwMTkxMzQ3MTJaFw0yNTEwMjMwMTEzMTJaMDMxMTAvBgNV BAMTKDdGQTVDNjZDNTc5MDkzOUJBODkzMzU3Q0UwRTAxRTMyMjRFM0ExN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdIFYhJM3LuBYRwQvzN1wfxROi ZoD3peUzzU7GFVAauZTDn9Gs2VLAaYbYDwrCs/oeq2FdOkBfH0YWagvCg0BN9SE9 rm7WewWyxLKMVEX66HplJBwEpflBmmtycl7xrKiAs870stEY2S2Nvsn0dO2wXCcI n972hFnmvTiHFl0v445MKlMDlpFcN8/SzluVomdEawIdIWPgNTLh3bFlAC62rAZc 8h6TKeb4QMjs7AURbOwrFISe3fO18eTSugoQmB6ZJGb4cm8TYaPlT3ywJ2tvmRv3 1cgFLPXjPyn932ExWLwNJWvX3HxidzPgHtE6v/xtFSkeEhOIWF6iKJ9+B/T5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf6XGbFeQk5uokzV84OAeMiTjoXswHwYDVR0j BBgwFoAUeiFvI9iiKPu49WPsFd92/VAyMbMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2M2YmQ3My1mOWJkLTRmNWEtOWM1OS1mYmVhMWJkODM0NzMvMC83QTIxNkYyM0Q4 QTIyOEZCQjhGNTYzRUMxNURGNzZGRDUwMzIzMUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1MDMy MzFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNjNmJkNzMtZjliZC00ZjVhLTlj NTktZmJlYTFiZDgzNDczLzAvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2 RkQ1MDMyMzFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgHw+wf0PNJn3NjdE38JcQmqXGBH9p4OkxD jlbA0j3TZyjyyQQwVU72X1lI4FS98Fiib45nq/AnGHu985VSHFS6HiwpdpwEQ0Cg 3T100B+PF3FB0YuU3ol7AZfDGNjjpOnyeuWZsWeEpExgQy6SL8WK0cog4oU4pt4W 9oYkRo1kx5zPUohOf7meyzRRDzH5pbXMbqydxlwDR32oFKOFm+iqjc5wDo4UJ77H esNa8wADdEWXUvk/WDdEcE1+XV2nIsjgv1ytiHPwNcHjTRHe1/iVqJ79HSKkVtN8 7gBy3yXJeCVApEw5hzTzPwmZoyaJxWrQh8cG7kgCoSVXgV9wf/8= -----END CERTIFICATE-----Generated at Mon Oct 20 09:42:36 2025 by rpki-client