$ rpki-client -vvf repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft File: 7188210EAEFBA7947009E19B6219830752F542A9.mft (raw, json) Hash identifier: TpUdN7AzY1uI8OAWpPC3Ib1HjXxcCJcmLMS3JCzS9No= Subject key identifier: F8:4C:6D:5F:DA:87:BE:63:07:94:4B:C9:11:88:83:39:A5:C2:A3:3A Authority key identifier: 71:88:21:0E:AE:FB:A7:94:70:09:E1:9B:62:19:83:07:52:F5:42:A9 Certificate issuer: /CN=7188210EAEFBA7947009E19B6219830752F542A9 Certificate serial: 14F3DA9F067AA61D0985E444372DF6F357C38F33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft Manifest number: 01B3 Signing time: Sat 18 Oct 2025 08:41:09 +0000 Manifest this update: Sat 18 Oct 2025 08:36:09 +0000 Manifest next update: Tue 21 Oct 2025 13:01:09 +0000 Files and hashes: 1: 7188210EAEFBA7947009E19B6219830752F542A9.crl (hash: GPehFl+deKW38FhMdBH6F4lroW5i1nlv3G25zq86ogE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.crl rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:f3:da:9f:06:7a:a6:1d:09:85:e4:44:37:2d:f6:f3:57:c3:8f:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7188210EAEFBA7947009E19B6219830752F542A9 Validity Not Before: Oct 18 08:36:09 2025 GMT Not After : Oct 21 13:01:09 2025 GMT Subject: CN=F84C6D5FDA87BE6307944BC911888339A5C2A33A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f1:52:ca:68:a0:0f:1c:a8:24:77:ce:09:80: 58:f3:02:13:b7:1c:0e:9b:7a:bb:c8:79:7b:f4:fe: 38:56:78:dc:5f:b6:07:37:59:ec:36:f8:79:4c:3d: 29:73:6c:7a:aa:5a:97:39:35:93:79:17:08:49:66: 17:b5:0c:6b:87:e8:fe:34:6d:21:93:f5:09:52:d2: 42:00:f8:57:b6:65:a1:8b:db:e1:75:e8:6a:52:d0: fa:2a:aa:d9:a9:dc:bb:28:2d:f4:58:59:2c:3b:a4: 78:00:6d:b8:ab:b6:09:1f:b4:fd:17:55:97:b7:39: 2c:05:81:70:7a:53:05:4e:78:d7:15:cb:9e:62:8d: 29:56:54:d9:ac:83:80:d3:b9:39:d0:d3:b4:00:a6: bc:fa:26:da:4f:a1:08:b5:54:c8:8a:7e:0d:12:ba: 7d:56:ed:7c:0f:9d:33:4b:c2:56:bc:0c:f5:91:a7: 86:74:33:b5:45:3c:9c:ec:d8:9d:cf:ff:a8:dd:55: 7f:83:cd:46:69:61:c1:55:d3:b5:64:b3:97:ee:13: 77:e7:9b:be:f4:57:d2:ca:63:53:de:2c:f0:ee:67: 6d:2a:a4:f1:86:df:ca:c2:f5:94:8c:01:11:97:b4: 50:2a:d6:20:b8:ab:1d:1b:e1:9c:7a:2c:a3:99:53: 1a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4C:6D:5F:DA:87:BE:63:07:94:4B:C9:11:88:83:39:A5:C2:A3:3A X509v3 Authority Key Identifier: keyid:71:88:21:0E:AE:FB:A7:94:70:09:E1:9B:62:19:83:07:52:F5:42:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:1f:a0:69:10:f3:e4:90:fe:26:4d:87:98:05:9b:7f:2f:8c: 84:6a:bb:4e:18:69:f5:38:60:8f:90:10:a8:82:39:2f:f6:a1: 71:7b:4e:91:55:b1:81:33:66:54:84:66:b6:93:79:ee:a7:9c: 0a:4e:8e:b0:da:13:25:7c:11:46:c5:dc:9e:23:b6:78:03:33: ee:e4:e8:f4:60:2c:2a:0c:af:d7:ae:6b:b1:4d:fb:2c:f3:60: 8a:77:1a:3d:61:5c:e0:4d:82:4e:3b:fd:16:9d:9a:26:73:97: b6:38:48:56:7a:a6:3e:66:ba:f2:33:fa:79:3b:0c:2d:03:6c: 21:9d:f0:6c:8e:d9:f2:b0:41:a6:c7:1a:a7:01:5b:0b:98:65: 80:79:6c:d3:d3:1c:f9:d5:4c:5f:a2:e1:4b:72:88:3b:a7:f8: f0:e0:78:91:39:e8:e8:d2:21:6b:60:95:75:fa:63:08:1c:1e: 2d:b3:6c:32:d0:99:cf:a4:d1:d3:8a:4b:fb:49:1c:4e:4f:30: 5e:4d:82:6b:9c:be:30:f1:c9:21:aa:95:af:8f:f9:d4:0e:17: e3:9d:20:55:0f:82:31:57:36:1a:6e:17:d6:dc:47:79:bf:35: da:42:69:59:28:7a:11:fd:63:8f:82:ee:8e:7f:86:24:c8:b9: 6f:62:e8:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFPPanwZ6ph0JheRENy3281fDjzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgzMDc1 MkY1NDJBOTAeFw0yNTEwMTgwODM2MDlaFw0yNTEwMjExMzAxMDlaMDMxMTAvBgNV BAMTKEY4NEM2RDVGREE4N0JFNjMwNzk0NEJDOTExODg4MzM5QTVDMkEzM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG8VLKaKAPHKgkd84JgFjzAhO3 HA6bervIeXv0/jhWeNxftgc3Wew2+HlMPSlzbHqqWpc5NZN5FwhJZhe1DGuH6P40 bSGT9QlS0kIA+Fe2ZaGL2+F16GpS0Poqqtmp3LsoLfRYWSw7pHgAbbirtgkftP0X VZe3OSwFgXB6UwVOeNcVy55ijSlWVNmsg4DTuTnQ07QAprz6JtpPoQi1VMiKfg0S un1W7XwPnTNLwla8DPWRp4Z0M7VFPJzs2J3P/6jdVX+DzUZpYcFV07Vks5fuE3fn m770V9LKY1PeLPDuZ20qpPGG38rC9ZSMARGXtFAq1iC4qx0b4Zx6LKOZUxpvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+ExtX9qHvmMHlEvJEYiDOaXCozowHwYDVR0j BBgwFoAUcYghDq77p5RwCeGbYhmDB1L1QqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTdkN2IzOC1kNjZiLTQzYjMtOTFmYi00YmI5ZTY2MzdlMmEvMC83MTg4MjEwRUFF RkJBNzk0NzAwOUUxOUI2MjE5ODMwNzUyRjU0MkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgzMDc1MkY1 NDJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE3ZDdiMzgtZDY2Yi00M2IzLTkx ZmItNGJiOWU2NjM3ZTJhLzAvNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgz MDc1MkY1NDJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQfoGkQ8+SQ/iZNh5gFm38vjIRqu04YafU4 YI+QEKiCOS/2oXF7TpFVsYEzZlSEZraTee6nnApOjrDaEyV8EUbF3J4jtngDM+7k 6PRgLCoMr9eua7FN+yzzYIp3Gj1hXOBNgk47/RadmiZzl7Y4SFZ6pj5muvIz+nk7 DC0DbCGd8GyO2fKwQabHGqcBWwuYZYB5bNPTHPnVTF+i4UtyiDun+PDgeJE56OjS IWtglXX6YwgcHi2zbDLQmc+k0dOKS/tJHE5PMF5NgmucvjDxySGqla+P+dQOF+Od IFUPgjFXNhpuF9bcR3m/NdpCaVkoehH9Y4+C7o5/hiTIuW9i6KU= -----END CERTIFICATE-----Generated at Mon Oct 20 08:47:38 2025 by rpki-client