$ rpki-client -vvf repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft File: 7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft (raw, json) Hash identifier: zIeabae3g7OyDF0O1atAr4QOTqCZbT0IuqSNENd1yEU= Subject key identifier: 66:67:86:00:17:6B:D1:EF:EF:8E:55:9E:40:DC:EF:54:A8:4A:3C:88 Authority key identifier: 7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 Certificate issuer: /CN=7DA308A66EF705BEE42CA04631A0E3901DAF88D8 Certificate serial: 2760DBB8124B88FA0A73500F4B681D8D120EA224 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft Manifest number: 0177 Signing time: Sun 02 Nov 2025 19:22:24 +0000 Manifest this update: Sun 02 Nov 2025 19:17:24 +0000 Manifest next update: Thu 06 Nov 2025 02:41:24 +0000 Files and hashes: 1: 7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl (hash: b9e6j5b4sydBEl1qd8FYS5nYOAqsMDrp2KmRfCpQ5hk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 02:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:60:db:b8:12:4b:88:fa:0a:73:50:0f:4b:68:1d:8d:12:0e:a2:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DA308A66EF705BEE42CA04631A0E3901DAF88D8 Validity Not Before: Nov 2 19:17:24 2025 GMT Not After : Nov 6 02:41:24 2025 GMT Subject: CN=66678600176BD1EFEF8E559E40DCEF54A84A3C88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:63:3a:43:a8:c5:34:2c:20:cb:52:69:f8:8a: 0e:c3:a7:b1:94:61:86:50:c4:fd:de:c6:91:e5:32: 2e:5d:1d:de:a2:50:74:a2:8f:0a:6f:cf:7e:da:64: 27:48:66:c4:18:2b:e2:ca:fa:d5:dc:b7:21:af:81: 66:a9:c8:84:ee:78:27:cd:9a:98:d4:5c:9a:eb:82: 7d:6a:5e:d8:f6:f6:86:34:76:5b:0b:07:55:6e:07: c2:e9:26:2d:7f:f0:67:d4:ee:57:af:9f:8c:51:ce: 0a:09:0a:74:9b:7c:c3:eb:be:4f:2e:b8:81:10:81: 39:a3:8c:94:39:82:0d:c5:18:a0:e0:fb:e9:31:2b: e0:56:d5:34:5b:42:f0:5f:2b:2a:f7:c4:c3:68:be: 01:7c:c6:ce:e1:01:33:48:b5:98:c1:60:32:df:f5: 6b:03:4c:a0:56:4e:5e:c4:22:cb:25:f5:2c:01:dd: ca:6b:75:33:0d:a6:27:6b:9f:47:24:fd:bd:bf:40: 76:eb:2c:89:36:69:a4:1f:9e:b7:30:74:0f:9e:93: b4:51:8d:cd:0a:7b:63:a3:8c:2d:83:e7:cb:22:c5: 1d:2b:ef:d9:a9:85:56:11:85:69:83:15:d1:f9:72: 42:9c:ca:6d:04:bc:cb:52:ac:ff:12:7a:cc:17:27: 44:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:67:86:00:17:6B:D1:EF:EF:8E:55:9E:40:DC:EF:54:A8:4A:3C:88 X509v3 Authority Key Identifier: keyid:7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:da:d9:d4:94:f9:c2:30:40:60:00:24:50:ea:57:73:9c:d4: db:53:6b:04:19:b3:76:80:1b:f9:97:c0:68:ca:db:72:4c:95: eb:e4:3f:c6:80:47:62:6c:13:cf:d5:25:88:1f:af:cf:01:7f: 27:bc:f6:30:97:9a:35:c8:75:e0:db:0f:4a:6d:83:1d:04:2f: eb:e0:42:f5:c5:73:18:de:e8:52:08:0c:1c:b0:99:44:61:f0: d1:a3:19:30:51:b1:c0:9e:c6:28:77:6b:53:04:75:41:71:6e: 69:46:47:61:c9:17:bc:f9:71:27:91:e4:0d:7e:4a:ff:ba:d8: 69:a6:09:da:04:58:e3:de:f7:78:4d:b5:1b:c0:3c:0b:d6:4d: 63:64:88:36:f7:5a:fb:28:61:d9:af:be:b2:f9:aa:a7:7e:b6: 10:e4:9b:7b:fa:32:60:61:22:14:8a:b7:aa:f6:c9:fd:db:41: 56:1b:20:c4:04:46:e9:c1:60:26:34:50:11:ae:31:16:2b:c6: 1a:c2:fc:97:b2:92:71:c4:ab:9f:35:55:3e:a7:01:51:8d:53: bf:c2:8b:13:ec:2b:07:25:28:e5:5f:fc:24:37:70:5f:f7:57: f2:4e:e0:88:c9:c9:c5:5d:c2:ac:f3:f0:52:34:2d:ff:45:db: 9c:29:ff:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ2DbuBJLiPoKc1APS2gdjRIOoiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUzOTAx REFGODhEODAeFw0yNTExMDIxOTE3MjRaFw0yNTExMDYwMjQxMjRaMDMxMTAvBgNV BAMTKDY2Njc4NjAwMTc2QkQxRUZFRjhFNTU5RTQwRENFRjU0QTg0QTNDODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+YzpDqMU0LCDLUmn4ig7Dp7GU YYZQxP3expHlMi5dHd6iUHSijwpvz37aZCdIZsQYK+LK+tXctyGvgWapyITueCfN mpjUXJrrgn1qXtj29oY0dlsLB1VuB8LpJi1/8GfU7levn4xRzgoJCnSbfMPrvk8u uIEQgTmjjJQ5gg3FGKDg++kxK+BW1TRbQvBfKyr3xMNovgF8xs7hATNItZjBYDLf 9WsDTKBWTl7EIssl9SwB3cprdTMNpidrn0ck/b2/QHbrLIk2aaQfnrcwdA+ek7RR jc0Ke2OjjC2D58sixR0r79mphVYRhWmDFdH5ckKcym0EvMtSrP8SeswXJ0Q5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZmeGABdr0e/vjlWeQNzvVKhKPIgwHwYDVR0j BBgwFoAUfaMIpm73Bb7kLKBGMaDjkB2viNgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmI1ZmYzNy0zOTRhLTRlYmEtYTQ3MC0xMGFmMzdjZjc1ZGMvMC83REEzMDhBNjZF RjcwNUJFRTQyQ0EwNDYzMUEwRTM5MDFEQUY4OEQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUzOTAxREFG ODhEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZiNWZmMzctMzk0YS00ZWJhLWE0 NzAtMTBhZjM3Y2Y3NWRjLzAvN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUz OTAxREFGODhEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIza2dSU+cIwQGAAJFDqV3Oc1NtTawQZs3aA G/mXwGjK23JMlevkP8aAR2JsE8/VJYgfr88Bfye89jCXmjXIdeDbD0ptgx0EL+vg QvXFcxje6FIIDBywmURh8NGjGTBRscCexih3a1MEdUFxbmlGR2HJF7z5cSeR5A1+ Sv+62GmmCdoEWOPe93hNtRvAPAvWTWNkiDb3WvsoYdmvvrL5qqd+thDkm3v6MmBh IhSKt6r2yf3bQVYbIMQERunBYCY0UBGuMRYrxhrC/JeyknHEq581VT6nAVGNU7/C ixPsKwclKOVf/CQ3cF/3V/JO4IjJycVdwqzz8FI0Lf9F25wp/5U= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:37 2025 by rpki-client