$ rpki-client -vvf repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft File: 7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft (raw, json) Hash identifier: DO6fCLh5hTMxN8LAuE/SijpRDBZT5kafooODBHMkcHU= Subject key identifier: 47:8F:25:2B:B7:B6:3C:1D:FF:BF:D2:EE:7C:F1:B8:53:94:0E:15:FB Authority key identifier: 7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF Certificate issuer: /CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF Certificate serial: 0180888EAC4818A46B1AE89CF8C5A2484356126C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft Manifest number: 01AE Signing time: Mon 20 Oct 2025 06:12:18 +0000 Manifest this update: Mon 20 Oct 2025 06:07:18 +0000 Manifest next update: Thu 23 Oct 2025 12:16:18 +0000 Files and hashes: 1: 7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl (hash: d6HTLm4U5Yb2xLgxtgHwmgd/M8KpCh/E3jjyBc76M9I=) 2: 3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa (hash: T5ujnMBfrRFq+9a4Ins8EQ3CJj6sZJk55UE2urIjcWM=) 3: 3130332e3139312e3131362e302f32332d3233203d3e20313439393137.roa (hash: wE41NZyo6Pm4ztOuQo15CxbV7OwbZAt3ABv1Or5h/i4=) 4: 3130332e3139312e3131362e302f32342d3234203d3e20313439393137.roa (hash: LYrLDsZTAbC2Myr0Hc+KOOGkdqztaoQ+U5C2aGpkGQc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 12:16:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:80:88:8e:ac:48:18:a4:6b:1a:e8:9c:f8:c5:a2:48:43:56:12:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF Validity Not Before: Oct 20 06:07:18 2025 GMT Not After : Oct 23 12:16:18 2025 GMT Subject: CN=478F252BB7B63C1DFFBFD2EE7CF1B853940E15FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bb:94:01:39:d5:1b:53:ba:82:85:45:a0:22: 22:cb:6b:5c:29:8f:87:07:b9:68:03:56:35:d9:3d: 99:bb:e9:3d:d4:70:40:45:98:98:1b:0b:46:c9:3e: 87:64:89:17:52:01:2b:8d:e7:17:c2:a5:10:39:c6: 67:38:af:d3:18:14:75:82:8b:88:4f:dc:ff:25:b1: 4e:d6:bf:78:90:c1:90:63:36:1d:7a:d5:37:4f:5f: 43:d5:6b:9f:e0:02:6a:a2:f5:b6:fd:5f:f8:fc:74: 3e:71:14:7f:43:87:2f:1a:e2:10:8e:b1:8a:3f:97: 4a:04:d9:bf:a7:da:6b:a5:c0:a8:22:0f:07:bc:08: 7c:d3:06:8e:7a:6d:04:e2:08:47:ef:a7:7d:f5:14: 3d:ac:b7:4b:35:2b:0b:d2:10:46:4b:78:35:46:bb: 19:e6:93:7d:9b:3e:7b:97:05:69:ce:ff:f6:c1:d8: d5:3a:88:38:c1:fe:39:2c:3e:d2:95:c5:e0:23:6c: 08:fa:10:ee:ca:28:d0:64:49:0e:13:d4:06:aa:1b: 78:e9:ab:bd:d2:ec:02:c4:f7:17:b3:f4:0f:03:88: a2:a3:f5:00:b5:c0:2b:eb:22:c6:85:16:fa:b4:3c: 14:c3:7f:f8:aa:ad:f6:00:b6:5a:9e:4b:b4:54:0f: 02:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8F:25:2B:B7:B6:3C:1D:FF:BF:D2:EE:7C:F1:B8:53:94:0E:15:FB X509v3 Authority Key Identifier: keyid:7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:d6:cf:4e:3a:e1:c9:c3:64:bc:14:60:30:88:9c:b3:31:dd: 0f:5d:e8:a2:27:c5:a7:01:38:04:08:d3:83:cc:77:1e:5b:1a: ec:9d:84:63:c9:85:3a:e6:74:80:15:0f:06:1c:b4:bb:e9:d3: 0a:b0:ca:d6:31:6e:c6:b6:09:d0:4d:00:8d:fa:fb:5e:1a:cd: 7c:cf:6d:a7:5f:f9:c5:44:22:86:3e:00:34:9c:26:07:33:c5: 16:1c:c0:61:21:2f:08:2f:d8:46:ca:cf:6c:d1:f4:cb:f3:68: 05:9b:0b:09:c3:c2:cb:cd:e8:f3:d1:80:da:25:86:51:c3:d4: 88:52:fe:7c:7e:e0:eb:05:86:93:63:2e:59:bc:0e:44:4b:94: b6:3d:24:ac:7d:57:82:b8:35:7c:86:b7:ba:ae:84:89:05:cd: fa:95:e1:28:72:18:3b:56:28:3d:0b:6c:f4:7d:f8:34:14:94: b3:28:bb:21:18:b1:fe:5b:83:e3:c5:19:2d:38:12:2f:8a:b1: 40:e1:5c:91:41:1b:b4:4f:bf:12:13:b6:25:e4:11:a7:d9:9c: ef:5b:3d:53:46:0a:08:e8:05:4c:b0:78:28:6c:49:42:95:b0: 19:d5:9d:e6:c7:12:1b:c8:f7:04:65:8f:b1:a7:5e:47:ba:26: 85:a6:31:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAYCIjqxIGKRrGuic+MWiSENWEmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIyNzU1 MTRGNUVDRjAeFw0yNTEwMjAwNjA3MThaFw0yNTEwMjMxMjE2MThaMDMxMTAvBgNV BAMTKDQ3OEYyNTJCQjdCNjNDMURGRkJGRDJFRTdDRjFCODUzOTQwRTE1RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeu5QBOdUbU7qChUWgIiLLa1wp j4cHuWgDVjXZPZm76T3UcEBFmJgbC0bJPodkiRdSASuN5xfCpRA5xmc4r9MYFHWC i4hP3P8lsU7Wv3iQwZBjNh161TdPX0PVa5/gAmqi9bb9X/j8dD5xFH9Dhy8a4hCO sYo/l0oE2b+n2mulwKgiDwe8CHzTBo56bQTiCEfvp331FD2st0s1KwvSEEZLeDVG uxnmk32bPnuXBWnO//bB2NU6iDjB/jksPtKVxeAjbAj6EO7KKNBkSQ4T1AaqG3jp q73S7ALE9xez9A8DiKKj9QC1wCvrIsaFFvq0PBTDf/iqrfYAtlqeS7RUDwI9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR48lK7e2PB3/v9LufPG4U5QOFfswHwYDVR0j BBgwFoAUfKPyxA/kU87iMK9ZSYWydVFPXs8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NmFkYWUyYS00N2I2LTRhZTUtOWMzZi0zZThjYjkyYTM5ODcvMC83Q0EzRjJDNDBG RTQ1M0NFRTIzMEFGNTk0OTg1QjI3NTUxNEY1RUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIyNzU1MTRG NUVDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTZhZGFlMmEtNDdiNi00YWU1LTlj M2YtM2U4Y2I5MmEzOTg3LzAvN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIy NzU1MTRGNUVDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXWz0464cnDZLwUYDCInLMx3Q9d6KInxacB OAQI04PMdx5bGuydhGPJhTrmdIAVDwYctLvp0wqwytYxbsa2CdBNAI36+14azXzP badf+cVEIoY+ADScJgczxRYcwGEhLwgv2EbKz2zR9MvzaAWbCwnDwsvN6PPRgNol hlHD1IhS/nx+4OsFhpNjLlm8DkRLlLY9JKx9V4K4NXyGt7quhIkFzfqV4ShyGDtW KD0LbPR9+DQUlLMouyEYsf5bg+PFGS04Ei+KsUDhXJFBG7RPvxITtiXkEafZnO9b PVNGCgjoBUyweChsSUKVsBnVnebHEhvI9wRlj7GnXke6JoWmMZI= -----END CERTIFICATE-----Generated at Tue Oct 21 08:33:30 2025 by rpki-client