$ rpki-client -vvf repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft File: 7AD0DDB5789DE529C8697A033978C381FFE40D83.mft (raw, json) Hash identifier: RrekydMzoJfIkdhm/TxL8z6Nso39Jhq+1CxCtZChWg4= Subject key identifier: 57:DF:32:C1:F4:6F:07:B4:13:8C:87:E9:9D:3C:BA:CA:75:2D:78:4E Authority key identifier: 7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 Certificate issuer: /CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Certificate serial: 5247B3A09BCDC9A6BD54B744FA661FDB723B9EEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft Manifest number: 0215 Signing time: Sun 19 Oct 2025 12:11:29 +0000 Manifest this update: Sun 19 Oct 2025 12:06:29 +0000 Manifest next update: Wed 22 Oct 2025 14:38:29 +0000 Files and hashes: 1: 7AD0DDB5789DE529C8697A033978C381FFE40D83.crl (hash: ZcQTq8YCZJNm5zpHy6whmhh/1UPChviJiblroG+S/K8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 14:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:47:b3:a0:9b:cd:c9:a6:bd:54:b7:44:fa:66:1f:db:72:3b:9e:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Validity Not Before: Oct 19 12:06:29 2025 GMT Not After : Oct 22 14:38:29 2025 GMT Subject: CN=57DF32C1F46F07B4138C87E99D3CBACA752D784E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1f:73:d1:f3:21:53:5e:21:88:0b:ab:b8:ff: 80:36:77:4e:b2:59:66:69:2b:8c:43:73:ba:35:be: 72:21:5e:f1:5c:d2:81:1c:ba:10:fb:67:64:d1:fb: 79:f9:40:36:a0:2f:7e:a7:bc:a4:65:c0:9d:ff:66: 67:38:7d:ac:12:42:ea:42:99:7d:33:3b:01:cf:78: ae:af:72:60:f2:81:6f:69:e6:1a:47:d5:3e:27:37: 14:d8:89:09:ee:2f:28:a9:54:5e:ed:0e:5b:d8:60: 25:e4:1c:e3:2a:32:96:fd:f7:86:63:19:7d:3e:5e: 78:b7:4e:38:a6:5c:18:71:a3:92:62:02:a9:42:af: fc:d9:bd:7d:34:e0:e3:ea:86:d1:70:c0:93:2d:3e: 23:5b:37:da:aa:3a:13:8a:5b:c1:f3:ef:96:cf:8e: 56:99:1a:cb:61:a6:ef:e3:f3:42:11:06:23:be:28: 0e:5c:1a:a3:e7:0e:30:dd:ed:b1:64:2c:18:93:85: 78:f8:98:0c:66:ad:37:28:f0:25:5e:53:30:c9:44: 66:8c:e7:9c:c7:a1:cb:7f:82:0c:be:d8:f3:5c:52: 1a:5d:d1:3b:52:a4:24:9f:78:22:c0:0d:17:8c:a3: d9:66:d8:fa:6f:ea:9a:73:fd:27:c2:dc:6e:a5:e4: d4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DF:32:C1:F4:6F:07:B4:13:8C:87:E9:9D:3C:BA:CA:75:2D:78:4E X509v3 Authority Key Identifier: keyid:7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:ac:b1:9e:4c:2f:96:5e:15:65:ac:3f:4f:9b:04:a0:0b:f8: 04:f7:b9:ba:e4:08:e1:05:06:f9:d9:a4:53:10:73:75:3e:b5: 50:50:c0:3e:88:27:f8:50:04:3c:52:0b:ca:ce:30:44:40:11: 72:98:a3:b1:3a:5c:5a:cf:b9:8c:0b:cf:0e:08:86:87:29:a7: 2a:f1:b0:11:b5:d0:9b:36:1d:5e:bd:3c:d4:bf:2a:3e:8c:38: 64:fb:85:b9:bb:43:89:9f:c3:0a:78:70:86:de:e9:fb:50:fb: e1:e0:41:02:63:73:c6:fe:99:6c:99:33:84:6a:b1:cb:17:58: b8:99:1a:52:9a:37:cf:a8:07:49:c3:94:a9:62:85:04:c4:a6: 05:b0:c2:50:72:82:75:3f:d2:7a:48:06:1a:68:44:17:1e:fb: c9:95:ab:57:ae:78:d3:78:a3:a1:dc:9e:00:56:ae:8a:c3:6b: 32:a9:33:dd:fd:0d:8c:b9:f2:54:53:33:36:ae:a4:cc:1f:05: 0c:6b:1c:7d:da:92:f8:00:cf:4d:9d:e0:11:b1:01:fc:a0:45: 08:85:5b:89:15:49:4f:0d:6e:3f:5a:c0:b1:ad:7c:94:94:aa: e0:7c:95:b8:26:28:e1:9b:c9:a5:17:75:d0:28:1f:10:f4:75: ae:a9:e7:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUkezoJvNyaa9VLdE+mYf23I7nu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMzODFG RkU0MEQ4MzAeFw0yNTEwMTkxMjA2MjlaFw0yNTEwMjIxNDM4MjlaMDMxMTAvBgNV BAMTKDU3REYzMkMxRjQ2RjA3QjQxMzhDODdFOTlEM0NCQUNBNzUyRDc4NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxH3PR8yFTXiGIC6u4/4A2d06y WWZpK4xDc7o1vnIhXvFc0oEcuhD7Z2TR+3n5QDagL36nvKRlwJ3/Zmc4fawSQupC mX0zOwHPeK6vcmDygW9p5hpH1T4nNxTYiQnuLyipVF7tDlvYYCXkHOMqMpb994Zj GX0+Xni3TjimXBhxo5JiAqlCr/zZvX004OPqhtFwwJMtPiNbN9qqOhOKW8Hz75bP jlaZGsthpu/j80IRBiO+KA5cGqPnDjDd7bFkLBiThXj4mAxmrTco8CVeUzDJRGaM 55zHoct/ggy+2PNcUhpd0TtSpCSfeCLADReMo9lm2Ppv6ppz/SfC3G6l5NQHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV98ywfRvB7QTjIfpnTy6ynUteE4wHwYDVR0j BBgwFoAUetDdtXid5SnIaXoDOXjDgf/kDYMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjJiMTc4Ni0xODMzLTRkMGEtYTEzOS00NjQ0MzMzOTNkNzgvMC83QUQwRERCNTc4 OURFNTI5Qzg2OTdBMDMzOTc4QzM4MUZGRTQwRDgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMzODFGRkU0 MEQ4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWYyYjE3ODYtMTgzMy00ZDBhLWEx MzktNDY0NDMzMzkzZDc4LzAvN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMz ODFGRkU0MEQ4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASssZ5ML5ZeFWWsP0+bBKAL+AT3ubrkCOEF BvnZpFMQc3U+tVBQwD6IJ/hQBDxSC8rOMERAEXKYo7E6XFrPuYwLzw4Ihocppyrx sBG10Js2HV69PNS/Kj6MOGT7hbm7Q4mfwwp4cIbe6ftQ++HgQQJjc8b+mWyZM4Rq scsXWLiZGlKaN8+oB0nDlKlihQTEpgWwwlBygnU/0npIBhpoRBce+8mVq1eueNN4 o6HcngBWrorDazKpM939DYy58lRTMzaupMwfBQxrHH3akvgAz02d4BGxAfygRQiF W4kVSU8Nbj9awLGtfJSUquB8lbgmKOGbyaUXddAoHxD0da6p5zQ= -----END CERTIFICATE-----Generated at Mon Oct 20 16:14:21 2025 by rpki-client