$ rpki-client -vvf repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.mft File: 7FAD2077691F807236683910594F23BA68280CD9.mft (raw, json) Hash identifier: W6Yto53Dx129MjNzp7W/Hi6jXrR/ZhgILofc25/LOTA= Subject key identifier: E2:35:EC:21:60:91:77:8D:40:C2:5C:BF:3C:A6:C8:1D:4A:0B:76:FF Authority key identifier: 7F:AD:20:77:69:1F:80:72:36:68:39:10:59:4F:23:BA:68:28:0C:D9 Certificate issuer: /CN=7FAD2077691F807236683910594F23BA68280CD9 Certificate serial: 44B38A389A04CE71206DE00EE106673D946F5143 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.mft Manifest number: 0517 Signing time: Sun 19 Oct 2025 16:31:53 +0000 Manifest this update: Sun 19 Oct 2025 16:26:53 +0000 Manifest next update: Wed 22 Oct 2025 17:35:53 +0000 Files and hashes: 1: 3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa (hash: inn5/pTXe326JcI/eQLFFh0GJuSiHNACA3LyQlZzv0k=) 2: 323030313a6466323a376638303a3a2f34382d3438203d3e20313333383033.roa (hash: tl64BNKIeWPiWplSwphcJa2kjFiO8+8RBPcNGp3Fo5U=) 3: 7FAD2077691F807236683910594F23BA68280CD9.crl (hash: Te+0Il4g+e0Gr05DM2/+1VBQVYugXcpk8EEUf86ppv0=) 4: 3130332e34342e3134392e302f32342d3234203d3e20313333383033.roa (hash: +izo906qJR0//zszVUjaR0jf7ZrrEtZEmo5pUlJJNLQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.crl rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b3:8a:38:9a:04:ce:71:20:6d:e0:0e:e1:06:67:3d:94:6f:51:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FAD2077691F807236683910594F23BA68280CD9 Validity Not Before: Oct 19 16:26:53 2025 GMT Not After : Oct 22 17:35:53 2025 GMT Subject: CN=E235EC216091778D40C25CBF3CA6C81D4A0B76FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a6:33:33:c5:4d:f2:38:86:30:93:bb:0a:67: eb:e2:1f:01:39:6a:01:a2:0d:78:3b:b5:7a:ef:75: 6f:56:9d:2f:bc:7d:44:d9:fb:df:d7:86:3f:22:7f: a3:b5:a5:89:2f:5a:6c:6b:89:83:41:22:62:fb:f0: 85:5a:43:24:e3:19:fd:2a:fe:90:f3:27:0e:b0:51: c1:61:ab:ec:76:ed:27:87:16:ea:99:2e:c8:a6:be: a1:1f:1f:8c:4f:4b:4b:2a:bd:ef:ff:1b:27:ec:44: 15:a4:58:45:88:ec:7e:72:72:f2:92:d6:24:3d:0a: 02:2f:42:a0:8a:50:ee:89:00:69:40:31:04:24:97: 1c:cd:42:64:aa:0f:16:1f:e6:75:80:7d:ce:1b:19: 57:f7:12:00:6c:c0:3a:88:cf:c0:2f:dd:67:cb:57: 37:3e:8d:33:b1:ca:fa:9a:f7:c3:eb:4f:11:c9:d6: 8e:f7:df:a0:14:5e:a6:f4:7b:03:2c:d4:d3:40:11: 83:81:78:7d:b7:cc:e6:f6:49:bf:18:89:26:a9:1b: b0:bc:df:a8:26:3e:40:ea:b6:b4:29:0c:b5:ac:12: 78:f9:53:b9:7b:0b:0b:2b:32:6b:b8:66:bf:5c:11: f4:88:a0:38:e0:b8:f5:30:09:d3:bb:b8:ac:44:f9: 50:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:35:EC:21:60:91:77:8D:40:C2:5C:BF:3C:A6:C8:1D:4A:0B:76:FF X509v3 Authority Key Identifier: keyid:7F:AD:20:77:69:1F:80:72:36:68:39:10:59:4F:23:BA:68:28:0C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:24:42:d6:70:8e:35:e6:bc:a5:d0:5f:1a:a7:b5:60:3f:3c: 26:69:be:15:ec:f4:57:95:81:33:60:b3:52:99:a4:29:92:a7: 4b:54:00:e4:36:81:d3:bb:94:8b:60:59:24:3e:a8:75:54:ee: c9:f0:be:03:8a:42:09:f0:fa:ad:15:ab:56:be:be:e8:d6:15: 1a:5a:04:78:39:4f:0d:29:fa:3c:e2:96:a8:be:c9:8c:aa:22: 52:c9:d3:b8:41:04:eb:ab:ec:f7:9f:49:49:52:5e:e9:05:a4: 22:06:1a:c2:8b:a6:09:cf:24:2a:38:fd:23:a2:70:43:36:d9: 14:a2:c6:f9:2c:8e:62:0b:96:2f:26:f2:2e:84:17:e5:66:47: 1c:ea:75:f7:95:cf:b2:8e:4e:ba:4d:25:39:e3:1e:30:6a:3c: b8:0a:fa:12:ab:5e:0b:d0:45:4c:2d:90:ce:c9:b6:31:a3:2e: b6:b8:8d:8e:ba:67:d3:73:1b:7c:cc:0d:fd:ec:82:4d:45:09: 9a:c9:ab:63:3d:71:99:ae:23:3c:89:a0:6c:e6:ae:cc:67:8b: 6c:31:e8:5f:72:c2:df:b7:be:4f:68:37:16:68:cf:ed:e6:9b: f8:bd:77:9d:49:7f:d2:0c:af:ec:25:f5:49:00:d3:f7:42:1d: 6f:9c:90:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURLOKOJoEznEgbeAO4QZnPZRvUUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZBRDIwNzc2OTFGODA3MjM2NjgzOTEwNTk0RjIzQkE2 ODI4MENEOTAeFw0yNTEwMTkxNjI2NTNaFw0yNTEwMjIxNzM1NTNaMDMxMTAvBgNV BAMTKEUyMzVFQzIxNjA5MTc3OEQ0MEMyNUNCRjNDQTZDODFENEEwQjc2RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGpjMzxU3yOIYwk7sKZ+viHwE5 agGiDXg7tXrvdW9WnS+8fUTZ+9/Xhj8if6O1pYkvWmxriYNBImL78IVaQyTjGf0q /pDzJw6wUcFhq+x27SeHFuqZLsimvqEfH4xPS0sqve//GyfsRBWkWEWI7H5ycvKS 1iQ9CgIvQqCKUO6JAGlAMQQklxzNQmSqDxYf5nWAfc4bGVf3EgBswDqIz8Av3WfL Vzc+jTOxyvqa98PrTxHJ1o7336AUXqb0ewMs1NNAEYOBeH23zOb2Sb8YiSapG7C8 36gmPkDqtrQpDLWsEnj5U7l7CwsrMmu4Zr9cEfSIoDjguPUwCdO7uKxE+VD7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4jXsIWCRd41Awly/PKbIHUoLdv8wHwYDVR0j BBgwFoAUf60gd2kfgHI2aDkQWU8jumgoDNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTc1Yjc0MS04NDZhLTQzMzAtOTY1OS0wNWZmZTgyNjk4ZWUvMC83RkFEMjA3NzY5 MUY4MDcyMzY2ODM5MTA1OTRGMjNCQTY4MjgwQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZBRDIwNzc2OTFGODA3MjM2NjgzOTEwNTk0RjIzQkE2ODI4 MENEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E3NWI3NDEtODQ2YS00MzMwLTk2 NTktMDVmZmU4MjY5OGVlLzAvN0ZBRDIwNzc2OTFGODA3MjM2NjgzOTEwNTk0RjIz QkE2ODI4MENEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALYkQtZwjjXmvKXQXxqntWA/PCZpvhXs9FeV gTNgs1KZpCmSp0tUAOQ2gdO7lItgWSQ+qHVU7snwvgOKQgnw+q0Vq1a+vujWFRpa BHg5Tw0p+jzilqi+yYyqIlLJ07hBBOur7PefSUlSXukFpCIGGsKLpgnPJCo4/SOi cEM22RSixvksjmILli8m8i6EF+VmRxzqdfeVz7KOTrpNJTnjHjBqPLgK+hKrXgvQ RUwtkM7JtjGjLra4jY66Z9NzG3zMDf3sgk1FCZrJq2M9cZmuIzyJoGzmrsxni2wx 6F9ywt+3vk9oNxZoz+3mm/i9d51Jf9IMr+wl9UkA0/dCHW+ckHE= -----END CERTIFICATE-----Generated at Mon Oct 20 10:13:54 2025 by rpki-client