$ rpki-client -vvf repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft File: 7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft (raw, json) Hash identifier: MvtBOCBbtYu+RvIyH4i0k8DTSlbEsPvnXlv0ZkRAdtE= Subject key identifier: 92:4D:53:BB:B0:6A:E2:A2:D5:60:DF:81:A9:86:24:80:E3:75:67:CE Authority key identifier: 7A:BD:31:DD:82:8D:D5:8C:9D:91:18:00:21:90:3E:A0:4D:8E:B5:8E Certificate issuer: /CN=7ABD31DD828DD58C9D91180021903EA04D8EB58E Certificate serial: 78FE45D29B52A2EB31B786706739C0BFE3EC8DCE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ABD31DD828DD58C9D91180021903EA04D8EB58E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft Manifest number: D7 Signing time: Sat 18 Oct 2025 19:31:32 +0000 Manifest this update: Sat 18 Oct 2025 19:26:32 +0000 Manifest next update: Wed 22 Oct 2025 05:53:32 +0000 Files and hashes: 1: 7ABD31DD828DD58C9D91180021903EA04D8EB58E.crl (hash: 3IXiMUWW0BM3TYn8OuZwZaK56qbNQXnkcXc5NoNPs/0=) 2: 3135372e36362e32312e302f32342d3234203d3e20313431353932.roa (hash: 3IUGvQHYckh9j4psQSuGBFM7lfhV4EtYEKWC7HzE4TE=) 3: 3135372e36362e32302e302f32342d3234203d3e20313337333439.roa (hash: VWW2OjO2Nb0Oyhr5Vqe+VmM1lOl8RPUO1FTuyvBrHBg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.crl rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ABD31DD828DD58C9D91180021903EA04D8EB58E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 05:53:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:fe:45:d2:9b:52:a2:eb:31:b7:86:70:67:39:c0:bf:e3:ec:8d:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ABD31DD828DD58C9D91180021903EA04D8EB58E Validity Not Before: Oct 18 19:26:32 2025 GMT Not After : Oct 22 05:53:32 2025 GMT Subject: CN=924D53BBB06AE2A2D560DF81A9862480E37567CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:11:e1:a6:e6:ab:c1:87:75:7a:98:65:dd:30: 6f:19:14:ef:61:c2:3b:7e:0a:54:f8:ba:f3:a6:32: 14:12:b3:03:76:79:77:c8:b8:30:36:be:ce:ea:6f: be:7d:cc:8f:b0:6f:92:db:0c:14:4b:f3:7e:d5:3b: 80:f9:bf:c1:f6:95:c2:81:bb:45:c6:4c:d6:6a:d4: 3d:1a:fa:85:1f:f5:6e:25:90:f4:f5:85:71:9f:02: 3c:a5:0c:c9:27:4f:bf:64:62:5b:3f:13:da:50:81: e7:6b:00:f1:ce:fd:95:5d:16:63:1d:dd:84:85:52: fa:09:83:0a:f2:37:f2:41:f6:f1:f0:95:2e:fc:08: 02:12:0e:69:96:bc:87:23:7d:d2:67:20:05:d5:0d: de:f4:f9:9d:82:41:1d:68:9b:79:b2:8d:f0:f2:5c: 9b:4b:97:41:99:8c:de:f3:a8:cf:d4:10:07:d9:e9: 22:25:98:da:9f:3e:84:46:a9:1e:72:0e:1b:ff:8b: cc:ea:47:1a:06:ff:c6:32:be:2d:ce:36:a2:45:b7: 8e:91:0a:6a:48:4e:75:a0:28:43:0a:b2:30:a3:11: c0:92:6f:ad:a2:47:cc:92:a0:7c:b2:04:02:82:c1: 30:a9:ee:46:07:26:79:3b:3a:69:5c:cf:43:8c:d8: 59:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:4D:53:BB:B0:6A:E2:A2:D5:60:DF:81:A9:86:24:80:E3:75:67:CE X509v3 Authority Key Identifier: keyid:7A:BD:31:DD:82:8D:D5:8C:9D:91:18:00:21:90:3E:A0:4D:8E:B5:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ABD31DD828DD58C9D91180021903EA04D8EB58E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:5b:7f:2f:c5:9c:1c:3c:20:c2:55:43:4c:2a:63:38:0f:13: 8a:90:66:39:55:d1:a5:18:a1:d1:35:83:08:77:9f:81:2f:f4: 2b:4a:37:a1:89:b8:85:bd:d9:b6:fc:8b:e1:a6:ab:ef:cf:42: 33:02:9c:e2:40:8e:ca:05:cb:b0:10:88:68:4c:f8:3a:f1:9f: 20:a6:c1:b3:97:e5:01:b4:ab:e0:62:87:95:33:14:1d:5d:d5: 33:93:21:1c:2b:e2:78:79:87:aa:86:24:a6:3e:9d:58:3a:7a: cc:dd:dd:19:54:39:b2:df:bf:b1:cd:3a:b2:6b:a8:16:ec:9b: 0a:34:b1:f8:5b:7e:2f:ca:52:2b:3a:9d:0e:a1:75:26:69:84: 8c:41:78:6d:d1:42:be:66:fe:a5:44:83:74:16:a5:16:2c:5f: d7:d0:56:14:d1:bc:43:92:99:81:2e:90:39:79:d4:31:6f:ee: c4:9c:1c:9f:6f:d8:54:41:9b:b7:f2:0b:35:64:37:74:81:24: 9f:79:43:e3:a8:88:6b:96:0c:24:5b:cb:66:4e:26:f3:02:67: b9:1d:1d:0d:21:fa:49:bc:b6:00:99:a4:e6:3a:14:2f:4e:cd: ac:9e:c9:88:2d:3e:27:86:34:ca:c2:83:db:7b:6f:84:bd:a5: 61:97:6c:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeP5F0ptSousxt4ZwZznAv+Psjc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FCRDMxREQ4MjhERDU4QzlEOTExODAwMjE5MDNFQTA0 RDhFQjU4RTAeFw0yNTEwMTgxOTI2MzJaFw0yNTEwMjIwNTUzMzJaMDMxMTAvBgNV BAMTKDkyNEQ1M0JCQjA2QUUyQTJENTYwREY4MUE5ODYyNDgwRTM3NTY3Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4EeGm5qvBh3V6mGXdMG8ZFO9h wjt+ClT4uvOmMhQSswN2eXfIuDA2vs7qb759zI+wb5LbDBRL837VO4D5v8H2lcKB u0XGTNZq1D0a+oUf9W4lkPT1hXGfAjylDMknT79kYls/E9pQgedrAPHO/ZVdFmMd 3YSFUvoJgwryN/JB9vHwlS78CAISDmmWvIcjfdJnIAXVDd70+Z2CQR1om3myjfDy XJtLl0GZjN7zqM/UEAfZ6SIlmNqfPoRGqR5yDhv/i8zqRxoG/8Yyvi3ONqJFt46R CmpITnWgKEMKsjCjEcCSb62iR8ySoHyyBAKCwTCp7kYHJnk7Omlcz0OM2Fm3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkk1Tu7Bq4qLVYN+BqYYkgON1Z84wHwYDVR0j BBgwFoAUer0x3YKN1YydkRgAIZA+oE2OtY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWY1ZWYxOC02ZmZhLTRkNjktOGMwYy0zNTE4Y2ZhODc1OGUvMC83QUJEMzFERDgy OERENThDOUQ5MTE4MDAyMTkwM0VBMDREOEVCNThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0FCRDMxREQ4MjhERDU4QzlEOTExODAwMjE5MDNFQTA0RDhF QjU4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVmNWVmMTgtNmZmYS00ZDY5LThj MGMtMzUxOGNmYTg3NThlLzAvN0FCRDMxREQ4MjhERDU4QzlEOTExODAwMjE5MDNF QTA0RDhFQjU4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJNbfy/FnBw8IMJVQ0wqYzgPE4qQZjlV0aUY odE1gwh3n4Ev9CtKN6GJuIW92bb8i+Gmq+/PQjMCnOJAjsoFy7AQiGhM+DrxnyCm wbOX5QG0q+Bih5UzFB1d1TOTIRwr4nh5h6qGJKY+nVg6eszd3RlUObLfv7HNOrJr qBbsmwo0sfhbfi/KUis6nQ6hdSZphIxBeG3RQr5m/qVEg3QWpRYsX9fQVhTRvEOS mYEukDl51DFv7sScHJ9v2FRBm7fyCzVkN3SBJJ95Q+OoiGuWDCRby2ZOJvMCZ7kd HQ0h+km8tgCZpOY6FC9OzayeyYgtPieGNMrCg9t7b4S9pWGXbJw= -----END CERTIFICATE-----Generated at Tue Oct 21 00:00:29 2025 by rpki-client