$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft File: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft (raw, json) Hash identifier: 3w1OtoAqofGscgthm6QEnqz/pZdGpBgz+ZWEDBRV/uU= Subject key identifier: D5:FA:0A:78:2F:EA:AB:9E:FF:67:53:CF:AA:9B:47:A2:14:20:B6:5E Authority key identifier: A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 Certificate issuer: /CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Certificate serial: 27D2B63B5FAFD50F81AC0BFEC7C85FF07DEB3686 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft Manifest number: 01E0 Signing time: Sun 19 Oct 2025 01:51:26 +0000 Manifest this update: Sun 19 Oct 2025 01:46:26 +0000 Manifest next update: Wed 22 Oct 2025 05:26:26 +0000 Files and hashes: 1: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl (hash: XyRpgfGgYUo2A85LXMWfrBGDECvThzUMQlbYXQfq9J0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 05:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:d2:b6:3b:5f:af:d5:0f:81:ac:0b:fe:c7:c8:5f:f0:7d:eb:36:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Validity Not Before: Oct 19 01:46:26 2025 GMT Not After : Oct 22 05:26:26 2025 GMT Subject: CN=D5FA0A782FEAAB9EFF6753CFAA9B47A21420B65E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3a:c0:79:be:cd:23:e5:1b:13:f3:8b:f8:c3: 70:a9:2b:84:2c:f7:5c:2c:1a:bc:ec:59:82:34:6b: 20:9b:bc:6c:b1:2a:fb:0e:45:73:55:34:e7:9e:27: 3c:82:6d:86:87:72:9f:3f:8b:26:0e:f2:50:52:83: 27:5b:23:91:12:02:1d:0b:c5:10:60:1e:f3:f6:d4: 8b:07:4f:8a:19:97:f5:ca:ab:41:c9:b5:c6:10:f9: db:1c:8d:81:fe:a3:31:df:1c:28:b8:4c:10:ed:fb: 90:85:1a:93:93:62:cd:03:f5:84:e4:50:3a:fa:40: 66:1e:46:92:e7:c2:e4:70:4d:bc:41:ad:2d:7e:1a: ca:61:09:ff:4b:da:6c:2e:cc:e0:08:5e:a4:33:62: d3:cd:8d:5c:36:c9:c9:e3:1b:cb:35:c6:44:b4:17: 5c:49:03:db:b9:3c:e0:b2:83:be:aa:e7:85:fe:22: 79:61:7c:5b:12:75:33:5d:4c:97:28:4b:23:86:2d: d4:42:db:ee:db:5a:48:f0:c7:ba:f8:ff:8b:8f:06: 86:6a:13:ee:cd:3a:9f:bb:ad:47:47:49:e2:03:3b: 3a:e8:c3:c6:68:a9:c6:ef:d2:78:0a:8f:3c:86:a5: b6:f3:81:41:b4:40:3d:5c:21:bc:ef:72:c6:d4:fe: 2d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FA:0A:78:2F:EA:AB:9E:FF:67:53:CF:AA:9B:47:A2:14:20:B6:5E X509v3 Authority Key Identifier: keyid:A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c7:0c:8c:6b:35:2f:3a:d9:bb:62:6d:2b:e5:a2:cc:e5:a4: a6:26:a9:75:3c:cb:ff:11:8f:52:95:c6:59:4b:ed:a3:95:a1: a0:f5:29:23:38:83:c1:04:b2:eb:6d:e3:07:57:fd:af:cc:dd: f6:19:71:41:90:3a:e4:04:3e:5c:02:37:63:b4:9a:a4:1f:5b: 23:c3:49:fe:77:a2:55:3d:8d:8b:08:b2:4e:5c:9d:90:95:31: 66:27:ba:dd:19:07:ea:cc:1a:c5:2e:71:df:15:97:9e:d0:a3: d4:41:03:09:bd:a5:ec:56:c9:dd:c2:d8:42:dc:e7:8d:63:35: 1c:c0:28:79:a2:3e:ff:65:05:b7:67:b1:ba:8f:f0:0c:cd:a9: cd:8c:1d:0b:00:ff:a2:85:ab:88:f2:e9:dc:61:c5:af:ed:cb: 65:d1:e5:a9:e8:ee:58:3a:1f:89:c3:24:ec:62:01:26:d7:af: 6d:ba:49:30:bc:ed:73:78:3b:60:33:de:0e:7c:38:ed:f4:6f: 7d:79:ea:1b:41:0a:5b:c1:4f:e7:d7:1f:c0:c8:52:7f:b1:11: 33:49:c8:cd:37:3c:b1:18:d3:e4:d2:f8:56:76:b9:ad:13:f0: 11:3c:01:3e:a5:21:a7:09:b0:6d:ee:54:99:fa:f1:a8:fe:76: 74:1c:cf:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ9K2O1+v1Q+BrAv+x8hf8H3rNoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4 RjM2NjlGODAeFw0yNTEwMTkwMTQ2MjZaFw0yNTEwMjIwNTI2MjZaMDMxMTAvBgNV BAMTKEQ1RkEwQTc4MkZFQUFCOUVGRjY3NTNDRkFBOUI0N0EyMTQyMEI2NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAOsB5vs0j5RsT84v4w3CpK4Qs 91wsGrzsWYI0ayCbvGyxKvsORXNVNOeeJzyCbYaHcp8/iyYO8lBSgydbI5ESAh0L xRBgHvP21IsHT4oZl/XKq0HJtcYQ+dscjYH+ozHfHCi4TBDt+5CFGpOTYs0D9YTk UDr6QGYeRpLnwuRwTbxBrS1+GsphCf9L2mwuzOAIXqQzYtPNjVw2ycnjG8s1xkS0 F1xJA9u5POCyg76q54X+InlhfFsSdTNdTJcoSyOGLdRC2+7bWkjwx7r4/4uPBoZq E+7NOp+7rUdHSeIDOzrow8Zoqcbv0ngKjzyGpbbzgUG0QD1cIbzvcsbU/i2NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1foKeC/qq57/Z1PPqptHohQgtl4wHwYDVR0j BBgwFoAUp9znZH+ndafp30Tq76xSEY82afgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2YzMGUyNy1iOTVlLTRkNzUtOTY4ZC01MzhmYjc5MTg4MjkvMC9BN0RDRTc2NDdG QTc3NUE3RTlERjQ0RUFFRkFDNTIxMThGMzY2OUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4RjM2 NjlGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNmMzBlMjctYjk1ZS00ZDc1LTk2 OGQtNTM4ZmI3OTE4ODI5LzAvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUy MTE4RjM2NjlGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3HDIxrNS862btibSvloszlpKYmqXU8y/8R j1KVxllL7aOVoaD1KSM4g8EEsutt4wdX/a/M3fYZcUGQOuQEPlwCN2O0mqQfWyPD Sf53olU9jYsIsk5cnZCVMWYnut0ZB+rMGsUucd8Vl57Qo9RBAwm9pexWyd3C2ELc 541jNRzAKHmiPv9lBbdnsbqP8AzNqc2MHQsA/6KFq4jy6dxhxa/ty2XR5ano7lg6 H4nDJOxiASbXr226STC87XN4O2Az3g58OO30b3156htBClvBT+fXH8DIUn+xETNJ yM03PLEY0+TS+FZ2ua0T8BE8AT6lIacJsG3uVJn68aj+dnQcz8A= -----END CERTIFICATE-----Generated at Mon Oct 20 09:47:12 2025 by rpki-client