$ rpki-client -vvf repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft File: 7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft (raw, json) Hash identifier: REBekt8SOJV3AP+K77H/2hJhR3pynw/s9kQj0ixcyFs= Subject key identifier: C9:5C:5C:7C:56:5F:43:18:16:F0:3C:09:D8:CF:B0:5F:13:A3:E5:69 Authority key identifier: 7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0 Certificate issuer: /CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0 Certificate serial: 23393CE8EF4A8FCAD104DCB06D29DB85EE495CBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft Manifest number: 0215 Signing time: Sun 19 Oct 2025 02:20:59 +0000 Manifest this update: Sun 19 Oct 2025 02:15:59 +0000 Manifest next update: Wed 22 Oct 2025 08:54:59 +0000 Files and hashes: 1: 7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl (hash: WvPCIHE4MS3/I/o7izKZBuu/cWEfTbJsKi+BTPBexTU=) 2: 3130332e3138362e38392e302f32342d3234203d3e20313439373137.roa (hash: d85h85v2ptQz3vrVN5qkUm0+GStqZnlOAr5LKlkna3k=) 3: 3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa (hash: qKtIrqocYRtH9mFT0B1bJLwWXs7q8vOuLUP4J+rTPCk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 08:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:39:3c:e8:ef:4a:8f:ca:d1:04:dc:b0:6d:29:db:85:ee:49:5c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0 Validity Not Before: Oct 19 02:15:59 2025 GMT Not After : Oct 22 08:54:59 2025 GMT Subject: CN=C95C5C7C565F431816F03C09D8CFB05F13A3E569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7c:26:2a:47:bd:26:3a:6b:4d:f1:91:5a:9c: 19:42:6a:4f:c6:e8:8c:0f:73:a5:86:62:31:f7:de: 96:d8:05:ec:6d:7d:4f:d5:16:f0:13:e6:10:cd:c7: be:c9:a8:2f:8d:c4:bf:28:f8:5c:28:e9:bf:d0:f1: eb:01:44:3e:a1:c9:58:e9:f9:34:00:e1:b4:5e:88: 5f:66:6a:96:72:b2:89:28:0a:99:a0:ac:16:53:23: fb:86:5b:a2:4b:97:e9:35:98:c4:d1:00:0f:64:56: f4:ef:7f:39:38:f0:f3:02:e2:93:28:a7:27:1b:fc: 6a:02:a6:41:7c:d7:f3:d2:d2:03:5f:e0:7d:8b:c9: 2e:ae:dd:b6:b4:2e:2a:c1:04:3a:54:29:0d:ef:36: d2:c7:5b:84:6d:e8:d4:54:82:1c:cd:65:62:99:8b: 3b:1e:c7:d7:f5:b8:a4:4d:83:4f:59:a5:81:41:4d: 47:dc:6a:1a:1f:26:03:f5:f1:5c:10:f1:d9:2f:e0: 6f:b7:3e:09:40:a4:90:27:39:25:0f:84:e6:48:4f: 98:96:0e:e8:8f:c3:58:f1:14:56:99:fc:03:f5:8f: a3:d4:9d:c1:4c:13:39:94:bd:53:b4:0d:d7:7f:94: d7:42:5c:3f:2f:af:81:9a:3a:2a:cb:e4:13:53:b4: 94:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:5C:5C:7C:56:5F:43:18:16:F0:3C:09:D8:CF:B0:5F:13:A3:E5:69 X509v3 Authority Key Identifier: keyid:7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:03:af:7e:6f:53:c0:d3:e0:d5:91:d1:b9:50:6e:c9:19:c2: 24:b3:9e:16:a7:1f:9b:6b:63:42:40:f6:4f:cb:6a:86:0a:eb: 82:c6:10:42:21:22:e5:58:4f:f0:cb:b7:21:27:b2:e0:75:fc: 9c:e8:ec:63:ed:d2:2a:82:b4:19:cd:da:00:71:4a:f1:81:15: df:5c:c8:15:7e:03:55:d9:04:73:c2:cb:24:da:3f:47:d8:d6: cb:8e:16:c5:39:df:bf:ab:a5:34:23:ab:2d:98:8d:ac:0e:83: 70:cc:fb:8c:cb:34:7e:da:bb:33:36:86:4a:9e:18:ad:60:52: e5:6b:68:5e:f0:20:bb:6d:a4:ec:07:01:d6:26:dd:ed:d7:57: f2:a4:bf:91:7a:06:78:b5:50:1f:81:2b:86:39:68:ee:76:fa: 5d:80:4b:99:19:4e:bd:9d:31:20:6b:91:e7:86:bb:19:90:87: 14:63:c6:7a:97:81:bd:3a:00:02:87:68:15:44:48:a0:9b:52: 74:3c:b1:02:9f:1b:2a:ee:19:b5:79:85:03:b2:74:35:bf:67: 52:2e:48:3c:03:b7:39:cb:16:19:45:6a:e4:62:f7:1d:82:7d: 5d:a6:d3:b8:f4:7c:94:93:6b:e7:68:e6:30:d0:7f:7d:43:56: b7:4c:6a:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIzk86O9Kj8rRBNywbSnbhe5JXL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRCMTJG NUM5QkJEMDAeFw0yNTEwMTkwMjE1NTlaFw0yNTEwMjIwODU0NTlaMDMxMTAvBgNV BAMTKEM5NUM1QzdDNTY1RjQzMTgxNkYwM0MwOUQ4Q0ZCMDVGMTNBM0U1NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUfCYqR70mOmtN8ZFanBlCak/G 6IwPc6WGYjH33pbYBextfU/VFvAT5hDNx77JqC+NxL8o+Fwo6b/Q8esBRD6hyVjp +TQA4bReiF9mapZysokoCpmgrBZTI/uGW6JLl+k1mMTRAA9kVvTvfzk48PMC4pMo pycb/GoCpkF81/PS0gNf4H2LyS6u3ba0LirBBDpUKQ3vNtLHW4Rt6NRUghzNZWKZ izsex9f1uKRNg09ZpYFBTUfcahofJgP18VwQ8dkv4G+3PglApJAnOSUPhOZIT5iW DuiPw1jxFFaZ/AP1j6PUncFMEzmUvVO0Ddd/lNdCXD8vr4GaOirL5BNTtJQ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyVxcfFZfQxgW8DwJ2M+wXxOj5WkwHwYDVR0j BBgwFoAUf9t2GwnnqagM0oyEpf/bEvXJu9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzI5NWRlNi0yMDU4LTQ2YTctOTM2Yi0wNTJjZjJmYTkyMGQvMC83RkRCNzYxQjA5 RTdBOUE4MENEMjhDODRBNUZGREIxMkY1QzlCQkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRCMTJGNUM5 QkJEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMyOTVkZTYtMjA1OC00NmE3LTkz NmItMDUyY2YyZmE5MjBkLzAvN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRC MTJGNUM5QkJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHsDr35vU8DT4NWR0blQbskZwiSznhanH5tr Y0JA9k/LaoYK64LGEEIhIuVYT/DLtyEnsuB1/Jzo7GPt0iqCtBnN2gBxSvGBFd9c yBV+A1XZBHPCyyTaP0fY1suOFsU537+rpTQjqy2YjawOg3DM+4zLNH7auzM2hkqe GK1gUuVraF7wILttpOwHAdYm3e3XV/Kkv5F6Bni1UB+BK4Y5aO52+l2AS5kZTr2d MSBrkeeGuxmQhxRjxnqXgb06AAKHaBVESKCbUnQ8sQKfGyruGbV5hQOydDW/Z1Iu SDwDtznLFhlFauRi9x2CfV2m07j0fJSTa+do5jDQf31DVrdMav0= -----END CERTIFICATE-----Generated at Mon Oct 20 07:05:24 2025 by rpki-client