$ rpki-client -vvf repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft File: 7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft (raw, json) Hash identifier: 4vO2LCjv92vsh0EPat5QJDtkP9phRwYqj/id74larf8= Subject key identifier: 7D:E9:9D:7D:7D:25:17:29:8F:66:2E:56:38:A0:CC:4B:58:C4:F9:5B Authority key identifier: 7B:9F:50:72:2E:E5:D5:DB:8D:F5:52:ED:32:CB:87:64:B6:4F:A9:02 Certificate issuer: /CN=7B9F50722EE5D5DB8DF552ED32CB8764B64FA902 Certificate serial: 1FBEEFD7ED69FCB40330911419397466D04C249D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft Manifest number: 0137 Signing time: Sun 19 Oct 2025 08:41:19 +0000 Manifest this update: Sun 19 Oct 2025 08:36:19 +0000 Manifest next update: Wed 22 Oct 2025 15:17:19 +0000 Files and hashes: 1: 3130332e3138332e3130302e302f32332d3234203d3e20313439363730.roa (hash: 5MhHdS5d9rGYEWQQUwZMj2uRPg7u67+gzfI6p1UW8Ho=) 2: 7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.crl (hash: UqFPTfr4eOzN4TSzqbVbunGDgpociKc/mvT8XY09JQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.crl rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 15:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:be:ef:d7:ed:69:fc:b4:03:30:91:14:19:39:74:66:d0:4c:24:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B9F50722EE5D5DB8DF552ED32CB8764B64FA902 Validity Not Before: Oct 19 08:36:19 2025 GMT Not After : Oct 22 15:17:19 2025 GMT Subject: CN=7DE99D7D7D2517298F662E5638A0CC4B58C4F95B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:92:d1:47:b5:88:68:7c:17:d8:9f:95:14:7a: 99:56:ff:b1:e7:0d:6b:50:40:ef:82:dd:18:37:bc: f0:ff:c3:d0:a1:dd:a2:39:a8:3b:44:05:40:03:d6: 84:12:d0:06:30:d7:34:98:71:53:71:21:9d:19:80: a4:53:db:3f:97:de:66:cf:92:aa:af:7c:0f:0a:fc: 6b:6d:27:56:5b:a6:f0:99:cb:3c:c8:12:13:b8:2f: 65:fe:a8:1d:1d:5d:80:ec:46:60:72:95:f3:15:fd: 36:82:0b:76:16:d0:6c:16:2c:17:12:a5:61:bf:b2: 64:32:07:4d:72:58:b5:4a:2f:4a:28:b1:81:69:41: 43:97:08:68:42:d1:c0:e5:8b:31:68:0c:5b:a5:43: a0:67:7d:cc:68:13:d5:9a:b0:a2:d3:17:fc:a1:de: bc:4d:88:bb:f0:78:57:06:55:d7:a1:af:89:5f:e1: 93:db:e4:b9:c8:cc:70:4b:00:05:d1:7e:a1:eb:cd: 8d:87:96:b6:89:16:16:86:7a:80:d8:5c:24:6e:09: c0:57:e8:3f:6b:f9:2d:42:d8:50:2d:ec:f2:e7:08: d3:fa:1b:cd:85:12:e3:13:57:77:86:26:66:6b:44: 53:ba:fc:10:49:f6:20:55:fe:61:ae:2e:13:b6:11: ee:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E9:9D:7D:7D:25:17:29:8F:66:2E:56:38:A0:CC:4B:58:C4:F9:5B X509v3 Authority Key Identifier: keyid:7B:9F:50:72:2E:E5:D5:DB:8D:F5:52:ED:32:CB:87:64:B6:4F:A9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:f0:35:09:fd:0c:e8:77:9b:87:d2:b1:ea:0c:b9:ee:e4:01: 77:38:7a:3f:41:e3:c6:2b:ce:73:3d:93:f2:b1:6a:d6:39:fe: fa:87:e5:db:1d:12:06:3b:de:44:2e:a7:e6:19:e7:09:11:38: 29:2c:96:9f:9f:12:48:dd:4e:54:7d:de:96:45:03:f5:8e:2f: cb:f0:a0:10:87:41:0f:1b:e3:c6:eb:18:e5:5b:6a:3d:75:ed: b7:86:a8:b0:74:e0:dd:61:65:22:10:4d:0d:26:41:ec:41:28: 25:e7:7c:9b:6d:19:82:41:89:cb:1f:e2:49:0a:14:ee:88:d2: 2d:b2:1c:ef:2a:45:56:d8:de:8c:4e:7d:3e:74:dc:d9:0a:eb: f7:87:58:97:cc:7f:e7:44:63:2c:1a:8b:00:43:59:5c:c0:98: 0b:49:cc:f7:ff:8d:87:32:d3:27:f2:7c:1b:23:59:92:c6:e2: 22:29:c1:41:8d:01:39:5e:a2:1a:c3:7f:2f:74:cd:2d:99:1d: b6:3b:91:eb:56:14:01:b4:62:df:50:43:80:75:73:95:77:9c: 58:83:04:86:38:77:3a:06:4d:94:88:47:1e:90:bf:8d:e6:24: 61:6d:6e:00:99:1e:6c:d5:a3:1b:8c:7b:d4:0c:9f:29:3a:4d: 33:88:3b:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH77v1+1p/LQDMJEUGTl0ZtBMJJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I5RjUwNzIyRUU1RDVEQjhERjU1MkVEMzJDQjg3NjRC NjRGQTkwMjAeFw0yNTEwMTkwODM2MTlaFw0yNTEwMjIxNTE3MTlaMDMxMTAvBgNV BAMTKDdERTk5RDdEN0QyNTE3Mjk4RjY2MkU1NjM4QTBDQzRCNThDNEY5NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPktFHtYhofBfYn5UUeplW/7Hn DWtQQO+C3Rg3vPD/w9Ch3aI5qDtEBUAD1oQS0AYw1zSYcVNxIZ0ZgKRT2z+X3mbP kqqvfA8K/GttJ1ZbpvCZyzzIEhO4L2X+qB0dXYDsRmBylfMV/TaCC3YW0GwWLBcS pWG/smQyB01yWLVKL0oosYFpQUOXCGhC0cDlizFoDFulQ6BnfcxoE9WasKLTF/yh 3rxNiLvweFcGVdehr4lf4ZPb5LnIzHBLAAXRfqHrzY2HlraJFhaGeoDYXCRuCcBX 6D9r+S1C2FAt7PLnCNP6G82FEuMTV3eGJmZrRFO6/BBJ9iBV/mGuLhO2Ee6HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfemdfX0lFymPZi5WOKDMS1jE+VswHwYDVR0j BBgwFoAUe59Qci7l1duN9VLtMsuHZLZPqQIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTNkOGMwMy0xN2JiLTRjYWItODUyNi0xMThmNTg3ZGNjMDkvMC83QjlGNTA3MjJF RTVENURCOERGNTUyRUQzMkNCODc2NEI2NEZBOTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0I5RjUwNzIyRUU1RDVEQjhERjU1MkVEMzJDQjg3NjRCNjRG QTkwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2UzZDhjMDMtMTdiYi00Y2FiLTg1 MjYtMTE4ZjU4N2RjYzA5LzAvN0I5RjUwNzIyRUU1RDVEQjhERjU1MkVEMzJDQjg3 NjRCNjRGQTkwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACbwNQn9DOh3m4fSseoMue7kAXc4ej9B48Yr znM9k/KxatY5/vqH5dsdEgY73kQup+YZ5wkROCkslp+fEkjdTlR93pZFA/WOL8vw oBCHQQ8b48brGOVbaj117beGqLB04N1hZSIQTQ0mQexBKCXnfJttGYJBicsf4kkK FO6I0i2yHO8qRVbY3oxOfT503NkK6/eHWJfMf+dEYywaiwBDWVzAmAtJzPf/jYcy 0yfyfBsjWZLG4iIpwUGNATleohrDfy90zS2ZHbY7ketWFAG0Yt9QQ4B1c5V3nFiD BIY4dzoGTZSIRx6Qv43mJGFtbgCZHmzVoxuMe9QMnyk6TTOIO7w= -----END CERTIFICATE-----Generated at Mon Oct 20 09:19:50 2025 by rpki-client