$ rpki-client -vvf repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft File: 07043FF6B66099F2CBFBBB64672822F3014937E8.mft (raw, json) Hash identifier: DS6GW/z6nVAamimtp2PZgAe5ZnqBPXhNa/FBkfMJcj8= Subject key identifier: F6:6A:02:4B:8B:1B:24:78:2A:5E:3F:CA:C6:82:86:E5:14:DE:6F:41 Authority key identifier: 07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8 Certificate issuer: /CN=07043FF6B66099F2CBFBBB64672822F3014937E8 Certificate serial: 7A5439583ACFC43AB0B9B2C4434959528FE9D6F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft Manifest number: 0203 Signing time: Sun 02 Nov 2025 16:01:41 +0000 Manifest this update: Sun 02 Nov 2025 15:56:41 +0000 Manifest next update: Thu 06 Nov 2025 01:01:41 +0000 Files and hashes: 1: 07043FF6B66099F2CBFBBB64672822F3014937E8.crl (hash: n4bfG2Z8QBLi4KUu62Y/n9pJ6wpSkJyt6DQiZTaqk6A=) 2: 3130332e3132352e31352e302f32342d3234203d3e20313335363336.roa (hash: jfBPikwcOXfyCAw2T4LtcRftqdJoZDQGQR3Ub10AvuI=) 3: 3130332e3132352e31322e302f32342d3234203d3e20313533333137.roa (hash: b6fruH9Pkg0tQtl5YFYqPR73UwekDQbIDYYtyH1Ta2c=) 4: 3130332e3132352e31332e302f32342d3234203d3e20313335363336.roa (hash: 9YIt3S9f2TckOIHLJingGQoR7QpEu3PnRMAwc6NgmOA=) 5: 3130332e3132352e31342e302f32342d3234203d3e20313335363336.roa (hash: LDE8MHvWr7ClJaD2b6MGzIMO0HFW7Xb1cGyTVwE6YBs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.crl rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:54:39:58:3a:cf:c4:3a:b0:b9:b2:c4:43:49:59:52:8f:e9:d6:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07043FF6B66099F2CBFBBB64672822F3014937E8 Validity Not Before: Nov 2 15:56:41 2025 GMT Not After : Nov 6 01:01:41 2025 GMT Subject: CN=F66A024B8B1B24782A5E3FCAC68286E514DE6F41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:de:96:ec:4d:85:d6:8a:52:5d:8a:8e:2d:79: 06:2d:f5:ab:f3:44:30:60:53:7e:97:e7:ea:cb:b3: d6:7c:ab:7f:e7:8d:01:de:1d:5f:be:a5:f1:30:e9: a0:89:fd:ba:1b:19:c7:67:ab:59:8c:89:47:e1:ed: c0:97:eb:a5:c4:d5:f4:e2:0c:9d:24:cc:48:93:40: e4:6b:c8:40:40:db:2f:51:1d:87:18:ba:f4:a0:15: 54:fa:7f:69:70:c8:02:2a:91:cb:be:dc:2d:4b:a0: 3d:58:33:af:fe:e2:ce:44:eb:ac:4d:32:d2:b8:b4: 8e:e2:8f:47:19:99:3f:e3:3c:3e:a8:90:da:8a:91: d6:fe:c8:38:a1:d4:48:4f:46:6a:a2:48:3d:fc:23: 4d:12:ff:d0:e2:3e:2f:5e:e5:91:a2:9c:b2:a1:84: 35:f9:1a:86:5d:91:2c:96:b9:06:6f:02:19:f8:4c: ab:8c:38:22:56:e7:de:88:7b:05:66:d3:3c:c2:16: 96:f2:8e:dd:9d:6c:b5:3b:b3:97:58:5c:a0:09:69: f9:c9:f7:f0:e0:ab:bb:3c:6a:35:5e:79:0d:b5:7c: 53:1a:c5:61:d9:34:9f:64:a4:c7:15:9f:39:d2:2d: c4:38:5c:fc:10:95:a8:6b:7e:b6:04:b7:52:03:bb: 17:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:6A:02:4B:8B:1B:24:78:2A:5E:3F:CA:C6:82:86:E5:14:DE:6F:41 X509v3 Authority Key Identifier: keyid:07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:19:e0:c2:a9:ed:bf:94:03:af:4a:25:1b:48:03:f2:14:59: 31:4d:03:b8:20:4b:f8:51:eb:98:92:98:d5:3e:e6:94:ce:4a: 6c:b9:f1:6e:32:1e:20:20:f0:a7:6d:c6:fe:5c:db:c3:d7:91: 27:d6:3f:76:62:4e:8b:50:b3:e3:8b:8c:ea:be:85:a1:6b:61: 99:e4:17:06:47:d8:a9:88:95:51:33:24:14:48:fc:da:aa:4d: a7:94:34:d0:91:c2:4c:c1:c5:51:e1:6a:09:db:91:0f:b5:0a: c8:71:7b:64:17:70:96:71:36:72:01:3e:f3:04:be:0f:33:2d: 87:90:8b:ca:1c:b4:d7:01:78:06:98:05:5d:56:dd:e0:43:b0: c0:13:47:4b:74:38:18:26:76:5d:bd:fc:53:39:bd:5c:1a:9a: 46:c8:89:5c:0f:fb:a1:86:93:23:0e:a0:1d:06:06:d3:55:ff: 48:ea:42:08:7a:c0:e2:c0:69:4a:0f:87:a7:1c:53:72:1d:03: 36:55:6a:1a:a3:c0:b5:69:71:89:38:32:b1:37:d4:36:c7:06: 3e:12:d7:16:4b:70:4a:76:48:b5:6d:aa:d1:b3:09:bc:17:45: 18:36:8b:ed:d3:2e:91:51:f9:8a:1e:6f:99:6e:6b:8e:d1:98: 46:f6:9b:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUelQ5WDrPxDqwubLEQ0lZUo/p1vEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIyRjMw MTQ5MzdFODAeFw0yNTExMDIxNTU2NDFaFw0yNTExMDYwMTAxNDFaMDMxMTAvBgNV BAMTKEY2NkEwMjRCOEIxQjI0NzgyQTVFM0ZDQUM2ODI4NkU1MTRERTZGNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr3pbsTYXWilJdio4teQYt9avz RDBgU36X5+rLs9Z8q3/njQHeHV++pfEw6aCJ/bobGcdnq1mMiUfh7cCX66XE1fTi DJ0kzEiTQORryEBA2y9RHYcYuvSgFVT6f2lwyAIqkcu+3C1LoD1YM6/+4s5E66xN MtK4tI7ij0cZmT/jPD6okNqKkdb+yDih1EhPRmqiSD38I00S/9DiPi9e5ZGinLKh hDX5GoZdkSyWuQZvAhn4TKuMOCJW596IewVm0zzCFpbyjt2dbLU7s5dYXKAJafnJ 9/Dgq7s8ajVeeQ21fFMaxWHZNJ9kpMcVnznSLcQ4XPwQlahrfrYEt1IDuxehAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9moCS4sbJHgqXj/KxoKG5RTeb0EwHwYDVR0j BBgwFoAUBwQ/9rZgmfLL+7tkZygi8wFJN+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzU0YmU5YS05YjVkLTRjNjQtYjRlOC02MWM3NGU5ZWNlZGMvMC8wNzA0M0ZGNkI2 NjA5OUYyQ0JGQkJCNjQ2NzI4MjJGMzAxNDkzN0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIyRjMwMTQ5 MzdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGM1NGJlOWEtOWI1ZC00YzY0LWI0 ZTgtNjFjNzRlOWVjZWRjLzAvMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIy RjMwMTQ5MzdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEEZ4MKp7b+UA69KJRtIA/IUWTFNA7ggS/hR 65iSmNU+5pTOSmy58W4yHiAg8Kdtxv5c28PXkSfWP3ZiTotQs+OLjOq+haFrYZnk FwZH2KmIlVEzJBRI/NqqTaeUNNCRwkzBxVHhagnbkQ+1Cshxe2QXcJZxNnIBPvME vg8zLYeQi8octNcBeAaYBV1W3eBDsMATR0t0OBgmdl29/FM5vVwamkbIiVwP+6GG kyMOoB0GBtNV/0jqQgh6wOLAaUoPh6ccU3IdAzZVahqjwLVpcYk4MrE31DbHBj4S 1xZLcEp2SLVtqtGzCbwXRRg2i+3TLpFR+Yoeb5lua47RmEb2m0A= -----END CERTIFICATE-----Generated at Tue Nov 4 23:55:17 2025 by rpki-client