$ rpki-client -vvf repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.mft File: 7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.mft (raw, json) Hash identifier: RHuX23+Jy0sh+hlhTcKUlyO36m9UVYSHHxVBRmJSBS8= Subject key identifier: F0:35:88:E4:81:8E:5F:1D:20:CD:04:E9:DE:8F:C2:38:28:B5:C6:0F Authority key identifier: 7A:82:C5:E5:CF:F6:8F:50:08:CC:06:8E:C7:CA:6D:A3:83:C3:3D:56 Certificate issuer: /CN=7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56 Certificate serial: 7CFE1DEDFBCBF891C752AE8D41FF31DCD568E9FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.mft Manifest number: 0134 Signing time: Sat 18 Oct 2025 11:02:22 +0000 Manifest this update: Sat 18 Oct 2025 10:57:22 +0000 Manifest next update: Tue 21 Oct 2025 20:09:22 +0000 Files and hashes: 1: 7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.crl (hash: QkxE0C05wZQjbK+wwO4wA44v18Mv5LXKDBzs9/ufDMY=) 2: 3231302e37392e3139302e302f32332d3234203d3e20313336303532.roa (hash: ZPskTSVgdsAMYWlITNkyiUwul3HqotLFwwIKqMKt6lE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.crl rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:09:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:fe:1d:ed:fb:cb:f8:91:c7:52:ae:8d:41:ff:31:dc:d5:68:e9:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56 Validity Not Before: Oct 18 10:57:22 2025 GMT Not After : Oct 21 20:09:22 2025 GMT Subject: CN=F03588E4818E5F1D20CD04E9DE8FC23828B5C60F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:82:7f:86:6a:75:a2:1e:1a:f0:74:5d:05:46: a9:e1:98:fd:03:68:42:6d:06:72:01:24:df:0a:bd: a6:67:aa:05:46:4b:ea:2f:b2:be:25:ab:12:d1:26: f7:4c:40:28:e9:95:06:ab:a7:9b:a6:75:81:ba:c4: 97:95:79:51:20:ce:5c:4b:55:cf:69:b4:f5:4d:45: 5d:e8:35:67:6b:85:74:72:90:4e:6b:4e:38:11:24: af:a6:4a:81:4a:42:2c:2a:cb:88:ab:fd:2a:28:66: e0:45:a9:dd:99:09:09:28:08:e0:84:32:4d:8d:16: e1:3f:74:01:e8:3f:2e:b9:b2:3c:dd:74:a2:96:c7: c0:1a:22:e3:5a:a4:6d:69:9d:38:d3:41:2e:15:1f: 20:ce:cb:dd:7d:ab:04:45:7c:53:17:3e:c4:dd:e4: 1a:d8:a7:d7:62:26:2a:b0:13:a7:77:08:84:30:7a: 1b:28:9e:ec:77:31:de:02:d6:30:fa:c7:2f:dc:2e: c6:8a:78:06:d2:1d:ee:15:69:98:3b:7c:c0:6e:bb: 27:fa:2d:c9:3e:b0:bf:44:b8:d1:2f:2f:41:73:b2: f8:d4:66:16:ce:af:71:a7:db:b5:26:88:20:b3:2f: af:77:ff:2a:71:9d:e8:35:32:7c:1d:90:5e:22:03: fe:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:35:88:E4:81:8E:5F:1D:20:CD:04:E9:DE:8F:C2:38:28:B5:C6:0F X509v3 Authority Key Identifier: keyid:7A:82:C5:E5:CF:F6:8F:50:08:CC:06:8E:C7:CA:6D:A3:83:C3:3D:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:53:3d:d0:e0:70:11:68:de:51:be:3c:5e:85:e6:e2:96:30: 28:f6:d4:71:1f:e9:12:cb:8f:2e:9f:0a:a2:9c:25:1d:c6:c7: 34:41:a1:6d:aa:e9:de:7e:b1:10:b7:52:29:ba:93:a5:f3:12: 37:83:aa:da:02:2d:72:ca:fb:45:20:99:92:02:ef:a9:57:de: 24:ab:4d:b6:eb:2b:bb:98:23:af:d8:d1:69:17:8c:ea:41:35: 40:66:3c:a3:3e:bf:be:f1:05:df:70:93:d6:fe:93:cc:25:e9: 1f:32:3a:2c:9a:19:56:fb:85:08:b0:bd:3a:e9:d0:e0:ea:71: 52:33:57:c8:53:8d:71:fb:5d:96:f8:09:b3:bb:b4:85:cb:4a: fe:c3:03:1d:9c:12:a0:37:1c:a5:c0:e5:6d:61:e8:e7:60:b5: df:7c:bb:9f:26:18:1c:21:17:e1:81:3a:6c:01:67:83:e9:b3: f3:23:dc:4e:d7:9d:7c:9a:4c:a8:20:ff:27:d3:c2:fd:b9:28: 50:18:01:e7:ba:f1:e0:d6:60:5c:2d:dd:62:29:9a:29:62:d8: 3e:84:4d:ed:7b:a9:6d:32:ce:1f:20:a9:f9:75:b5:77:80:6f: c0:1a:46:d3:a4:d4:ee:e9:f3:ac:d2:6d:0c:2a:75:39:e8:d7: 98:0b:ed:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfP4d7fvL+JHHUq6NQf8x3NVo6fwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E4MkM1RTVDRkY2OEY1MDA4Q0MwNjhFQzdDQTZEQTM4 M0MzM0Q1NjAeFw0yNTEwMTgxMDU3MjJaFw0yNTEwMjEyMDA5MjJaMDMxMTAvBgNV BAMTKEYwMzU4OEU0ODE4RTVGMUQyMENEMDRFOURFOEZDMjM4MjhCNUM2MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCugn+GanWiHhrwdF0FRqnhmP0D aEJtBnIBJN8KvaZnqgVGS+ovsr4lqxLRJvdMQCjplQarp5umdYG6xJeVeVEgzlxL Vc9ptPVNRV3oNWdrhXRykE5rTjgRJK+mSoFKQiwqy4ir/SooZuBFqd2ZCQkoCOCE Mk2NFuE/dAHoPy65sjzddKKWx8AaIuNapG1pnTjTQS4VHyDOy919qwRFfFMXPsTd 5BrYp9diJiqwE6d3CIQwehsonux3Md4C1jD6xy/cLsaKeAbSHe4VaZg7fMBuuyf6 Lck+sL9EuNEvL0FzsvjUZhbOr3Gn27UmiCCzL693/ypxneg1MnwdkF4iA/7vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8DWI5IGOXx0gzQTp3o/COCi1xg8wHwYDVR0j BBgwFoAUeoLF5c/2j1AIzAaOx8pto4PDPVYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjYwZjAzYy04OTY4LTQ3MGYtYjYxOC1kM2ViMmM5MjhhNGQvMC83QTgyQzVFNUNG RjY4RjUwMDhDQzA2OEVDN0NBNkRBMzgzQzMzRDU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0E4MkM1RTVDRkY2OEY1MDA4Q0MwNjhFQzdDQTZEQTM4M0Mz M0Q1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI2MGYwM2MtODk2OC00NzBmLWI2 MTgtZDNlYjJjOTI4YTRkLzAvN0E4MkM1RTVDRkY2OEY1MDA4Q0MwNjhFQzdDQTZE QTM4M0MzM0Q1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABBTPdDgcBFo3lG+PF6F5uKWMCj21HEf6RLL jy6fCqKcJR3GxzRBoW2q6d5+sRC3Uim6k6XzEjeDqtoCLXLK+0UgmZIC76lX3iSr TbbrK7uYI6/Y0WkXjOpBNUBmPKM+v77xBd9wk9b+k8wl6R8yOiyaGVb7hQiwvTrp 0ODqcVIzV8hTjXH7XZb4CbO7tIXLSv7DAx2cEqA3HKXA5W1h6Odgtd98u58mGBwh F+GBOmwBZ4Pps/Mj3E7XnXyaTKgg/yfTwv25KFAYAee68eDWYFwt3WIpmili2D6E Te17qW0yzh8gqfl1tXeAb8AaRtOk1O7p86zSbQwqdTno15gL7RE= -----END CERTIFICATE-----Generated at Mon Oct 20 12:09:18 2025 by rpki-client