$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft File: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft (raw, json) Hash identifier: jxmSjzOhUgFHBCJASe1mUfRiYjBgQ0O1Q8J2JjYKA2Y= Subject key identifier: FA:BD:AA:6D:E9:55:7F:F4:63:05:C8:93:C8:4C:E6:1E:B8:5D:00:5E Authority key identifier: C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A Certificate issuer: /CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Certificate serial: 277D200007046741AF5D3E1185AE668FC9A0F55B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft Manifest number: CC Signing time: Sat 18 Oct 2025 16:51:56 +0000 Manifest this update: Sat 18 Oct 2025 16:46:56 +0000 Manifest next update: Tue 21 Oct 2025 23:18:56 +0000 Files and hashes: 1: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl (hash: jUXD/IVUwV7bvhWB/xqbixaIBeH6O58HffBwxs28gVA=) 2: 323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa (hash: 67keM1hQfIucwuWQhvzKk8YthRoib+6jHGmIeaRFOqs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 23:18:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:7d:20:00:07:04:67:41:af:5d:3e:11:85:ae:66:8f:c9:a0:f5:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Validity Not Before: Oct 18 16:46:56 2025 GMT Not After : Oct 21 23:18:56 2025 GMT Subject: CN=FABDAA6DE9557FF46305C893C84CE61EB85D005E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d3:61:fb:1f:f2:72:e0:c6:62:3a:47:e9:ef: bb:ff:29:ae:db:62:7b:8c:93:02:80:29:e0:33:e3: e2:ef:11:51:64:aa:cd:be:92:d6:cb:71:2f:58:45: 6d:c4:7a:44:4c:f8:e7:a1:3b:05:0a:35:73:f4:2f: b0:43:65:b9:35:c4:e5:e5:c7:45:d4:5b:9a:63:6f: 77:ef:bd:6c:48:5e:80:58:0e:f6:1f:eb:c5:28:e8: 25:a5:8b:39:22:8e:0b:76:cd:56:73:43:1b:cb:5b: f6:c6:69:29:90:8e:de:7b:c2:14:29:c6:0f:4b:b8: ca:ea:9a:d2:6b:b2:94:32:cf:c5:7f:92:18:1b:c6: 47:8f:dd:58:30:0c:b6:49:12:da:67:9f:80:9e:47: c8:22:21:3d:67:33:65:14:ab:90:04:0b:03:66:1d: ce:02:d3:d9:f4:61:6d:97:1c:f7:5d:e4:96:07:5a: 2b:85:0a:ae:42:aa:e7:64:22:3e:c2:e9:bd:e0:e3: 7a:2d:b7:f5:33:5e:59:d6:0e:fe:bf:b3:1a:d0:47: c2:a8:25:65:74:46:f1:fb:87:d9:6c:01:52:22:c1: a6:8e:09:d0:32:23:e0:07:bc:09:c7:67:c0:a9:fe: c8:90:32:b3:e6:1b:00:41:a2:e9:e4:45:a2:3a:30: 5e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BD:AA:6D:E9:55:7F:F4:63:05:C8:93:C8:4C:E6:1E:B8:5D:00:5E X509v3 Authority Key Identifier: keyid:C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:b4:8e:05:c6:f8:60:7b:f8:c2:ca:50:c1:1e:ed:30:d1:4c: 44:66:8a:52:9c:60:89:8c:ff:23:ae:97:9b:3f:66:42:33:7c: 66:99:77:60:d7:5e:25:23:02:49:67:0d:1a:74:78:77:ce:a2: 72:bd:ca:46:58:16:ec:c4:ea:29:33:71:a8:d3:41:0d:01:1e: 5a:dc:b6:34:00:ba:7a:6b:95:4c:5c:15:76:cd:17:3f:bc:05: 79:9c:b9:e4:86:ba:db:fd:04:b2:b0:6c:54:10:d7:a1:72:5b: ad:31:9b:b6:de:28:42:a1:12:3f:87:73:8b:f6:d6:76:af:c5: 87:32:29:68:46:ba:9e:ce:b2:bc:26:ab:76:66:32:8a:4c:a6: b9:11:d0:a4:66:02:26:95:12:c1:ec:2d:95:e9:18:b8:ea:d2: c3:22:c3:30:33:af:b9:21:cc:5d:f8:66:3b:f6:ea:70:61:ec: 5c:32:e1:f7:9b:7a:49:73:60:30:3c:24:54:b0:46:7b:4a:0e: 1d:c6:fa:a7:cd:f6:6e:bb:71:dc:0c:60:e3:6a:a3:ff:31:62: 49:62:7a:4f:93:67:b7:87:d4:c7:8b:3e:ac:d4:2d:2e:99:52: e4:42:f2:58:af:19:ff:e5:ef:d8:eb:98:f2:e6:09:e8:f2:6b: a5:66:0c:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ30gAAcEZ0GvXT4Rha5mj8mg9VswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTEx RUZCMUQ4QTAeFw0yNTEwMTgxNjQ2NTZaFw0yNTEwMjEyMzE4NTZaMDMxMTAvBgNV BAMTKEZBQkRBQTZERTk1NTdGRjQ2MzA1Qzg5M0M4NENFNjFFQjg1RDAwNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA02H7H/Jy4MZiOkfp77v/Ka7b YnuMkwKAKeAz4+LvEVFkqs2+ktbLcS9YRW3EekRM+OehOwUKNXP0L7BDZbk1xOXl x0XUW5pjb3fvvWxIXoBYDvYf68Uo6CWlizkijgt2zVZzQxvLW/bGaSmQjt57whQp xg9LuMrqmtJrspQyz8V/khgbxkeP3VgwDLZJEtpnn4CeR8giIT1nM2UUq5AECwNm Hc4C09n0YW2XHPdd5JYHWiuFCq5CqudkIj7C6b3g43ott/UzXlnWDv6/sxrQR8Ko JWV0RvH7h9lsAVIiwaaOCdAyI+AHvAnHZ8Cp/siQMrPmGwBBounkRaI6MF7xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+r2qbelVf/RjBciTyEzmHrhdAF4wHwYDVR0j BBgwFoAUwH9a4tncmdCvKLaxVCEMkR77HYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTdkNzM4ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMS9DMDdGNUFFMkQ5 REM5OUQwQUYyOEI2QjE1NDIxMEM5MTFFRkIxRDhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTExRUZC MUQ4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzEvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBD OTExRUZCMUQ4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIa0jgXG+GB7+MLKUMEe7TDRTERmilKcYImM /yOul5s/ZkIzfGaZd2DXXiUjAklnDRp0eHfOonK9ykZYFuzE6ikzcajTQQ0BHlrc tjQAunprlUxcFXbNFz+8BXmcueSGutv9BLKwbFQQ16FyW60xm7beKEKhEj+Hc4v2 1navxYcyKWhGup7Osrwmq3ZmMopMprkR0KRmAiaVEsHsLZXpGLjq0sMiwzAzr7kh zF34Zjv26nBh7Fwy4febeklzYDA8JFSwRntKDh3G+qfN9m67cdwMYONqo/8xYkli ek+TZ7eH1MeLPqzULS6ZUuRC8livGf/l79jrmPLmCejya6VmDNA= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:47 2025 by rpki-client