$ rpki-client -vvf repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft File: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft (raw, json) Hash identifier: yjACsNfDestQP6udDhwLv0UT22a8g9OovBHgBrJ5dbc= Subject key identifier: FB:CE:86:C4:2D:8F:4F:AB:57:48:EB:59:D1:1C:61:46:65:64:A2:CE Authority key identifier: D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 Certificate issuer: /CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Certificate serial: 3C316656C94D41C2F339CDC43E9B5483CDBBB046 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft Manifest number: 0112 Signing time: Sat 18 Oct 2025 16:11:19 +0000 Manifest this update: Sat 18 Oct 2025 16:06:19 +0000 Manifest next update: Tue 21 Oct 2025 16:11:19 +0000 Files and hashes: 1: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl (hash: 7xcZgfJ0i1/CiwBJSiG03G7AfysvQ+aSwOjxohIXw8M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 16:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:31:66:56:c9:4d:41:c2:f3:39:cd:c4:3e:9b:54:83:cd:bb:b0:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Validity Not Before: Oct 18 16:06:19 2025 GMT Not After : Oct 21 16:11:19 2025 GMT Subject: CN=FBCE86C42D8F4FAB5748EB59D11C61466564A2CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e5:c8:a4:55:1a:a6:e4:b3:e1:17:e6:86:9d: 56:36:b8:30:7b:ce:f7:2b:b6:da:8d:61:c6:05:c3: 57:be:16:0c:f7:6e:8e:9c:ab:d6:49:17:48:e4:60: 55:6e:8a:26:e3:36:9c:17:b9:9c:8c:4b:dd:03:3e: 9b:e6:c7:80:5a:44:17:3f:5e:4f:58:de:99:a5:99: d2:6c:ad:58:20:56:fd:dc:a9:9c:c6:48:43:e4:c8: 8b:c9:c5:f4:84:35:4a:e5:4b:37:b4:6d:f7:a6:e2: f3:66:eb:53:ac:65:fc:e3:b1:9a:6a:1a:07:70:ce: 10:f3:f3:1e:94:65:1f:4e:44:07:04:4f:fb:ff:b2: 7a:17:29:8e:79:b2:a9:66:b5:3a:f9:f1:7a:b0:2f: 59:02:b2:94:91:36:ad:0e:1b:7c:cc:db:a5:91:06: 74:e0:36:01:62:0f:c9:6c:43:c2:77:f3:be:7a:c7: d6:a7:28:9a:1a:26:4e:11:3d:f2:ff:c0:d2:85:16: fd:1e:4a:66:96:6c:ef:ac:f5:9a:26:c2:ce:f8:be: eb:38:29:a0:fc:4b:3d:6e:cc:95:fb:44:49:36:e7: ee:30:9c:21:65:c3:ae:71:46:e1:ea:ce:36:4d:a6: d7:90:59:bc:2d:10:c6:9b:1e:84:8b:cc:2e:6a:d3: 12:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CE:86:C4:2D:8F:4F:AB:57:48:EB:59:D1:1C:61:46:65:64:A2:CE X509v3 Authority Key Identifier: keyid:D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:d6:a0:79:50:9e:87:bc:c4:c1:29:23:09:93:13:aa:12:9b: 06:e1:46:b2:14:a7:2c:33:b7:db:61:79:e8:59:12:e3:63:fe: 19:51:50:b5:8a:da:0f:79:57:1a:07:fa:dd:03:e6:06:e1:7b: 58:b2:d1:03:06:f8:15:35:e4:3f:d1:01:b3:d7:f3:d8:9a:fb: 89:c7:43:e5:c1:18:c7:fa:90:78:96:e6:1b:6a:ce:67:74:e3: f6:84:a7:15:ab:ae:02:a7:07:a6:d5:f2:56:25:08:4e:0b:75: 35:26:40:0d:79:ad:5b:dd:ae:11:58:fe:4c:b2:5e:42:96:88: c4:ce:38:07:ea:e7:4e:2e:a0:5e:6b:c0:29:44:13:27:d3:4a: 61:8b:f6:a3:12:f8:58:80:80:e7:6c:df:e8:e0:97:fe:26:f4: 9f:9b:90:7c:a8:1b:2f:11:2d:be:25:e3:5c:5b:58:28:8c:fc: b0:25:91:fb:14:ff:fa:e8:8e:3d:a7:42:0e:0a:eb:5c:4a:8f: 00:3c:4e:13:6b:f3:a9:9c:a5:2b:93:8c:55:f2:8d:a8:2c:21: 94:5c:2b:f4:7d:65:a6:68:84:4f:f2:c1:d5:e4:3d:0d:91:3f: 0e:b9:fe:7e:42:bb:d7:4b:03:6d:05:f0:be:84:64:24:35:fd: c5:a0:a5:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPDFmVslNQcLzOc3EPptUg827sEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0 RDlCRDRDOTAeFw0yNTEwMTgxNjA2MTlaFw0yNTEwMjExNjExMTlaMDMxMTAvBgNV BAMTKEZCQ0U4NkM0MkQ4RjRGQUI1NzQ4RUI1OUQxMUM2MTQ2NjU2NEEyQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC95cikVRqm5LPhF+aGnVY2uDB7 zvcrttqNYcYFw1e+Fgz3bo6cq9ZJF0jkYFVuiibjNpwXuZyMS90DPpvmx4BaRBc/ Xk9Y3pmlmdJsrVggVv3cqZzGSEPkyIvJxfSENUrlSze0bfem4vNm61OsZfzjsZpq GgdwzhDz8x6UZR9ORAcET/v/snoXKY55sqlmtTr58XqwL1kCspSRNq0OG3zM26WR BnTgNgFiD8lsQ8J38756x9anKJoaJk4RPfL/wNKFFv0eSmaWbO+s9Zomws74vus4 KaD8Sz1uzJX7REk25+4wnCFlw65xRuHqzjZNpteQWbwtEMabHoSLzC5q0xLFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+86GxC2PT6tXSOtZ0RxhRmVkos4wHwYDVR0j BBgwFoAU1/I9e1SJDw7s9VD/pCeZtk2b1MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Yjk4NTFiMS01YTZkLTRlNzUtOWZmZi1jMDNhOWM0OWNmNjkvMC9EN0YyM0Q3QjU0 ODkwRjBFRUNGNTUwRkZBNDI3OTlCNjREOUJENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0RDlC RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmI5ODUxYjEtNWE2ZC00ZTc1LTlm ZmYtYzAzYTljNDljZjY5LzAvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5 QjY0RDlCRDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHWoHlQnoe8xMEpIwmTE6oSmwbhRrIUpywz t9theehZEuNj/hlRULWK2g95VxoH+t0D5gbhe1iy0QMG+BU15D/RAbPX89ia+4nH Q+XBGMf6kHiW5htqzmd04/aEpxWrrgKnB6bV8lYlCE4LdTUmQA15rVvdrhFY/kyy XkKWiMTOOAfq504uoF5rwClEEyfTSmGL9qMS+FiAgOds3+jgl/4m9J+bkHyoGy8R Lb4l41xbWCiM/LAlkfsU//rojj2nQg4K61xKjwA8ThNr86mcpSuTjFXyjagsIZRc K/R9ZaZohE/ywdXkPQ2RPw65/n5Cu9dLA20F8L6EZCQ1/cWgpT4= -----END CERTIFICATE-----Generated at Mon Oct 20 12:12:32 2025 by rpki-client