$ rpki-client -vvf repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.mft File: 7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.mft (raw, json) Hash identifier: feG1mpqKAvfbFQin/z2BSA2+cEJfF9w0LKsxZIfhaWs= Subject key identifier: B9:40:8A:3E:20:C5:28:85:2C:AB:BC:2C:72:47:E4:AC:4D:93:2B:8B Authority key identifier: 7E:46:C2:EE:50:82:35:4F:14:94:DE:6A:EA:6C:DA:64:27:69:ED:F1 Certificate issuer: /CN=7E46C2EE5082354F1494DE6AEA6CDA642769EDF1 Certificate serial: 4DB526C6DD1AC477798DF81464BCEA6C37220D55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.mft Manifest number: 0190 Signing time: Mon 03 Nov 2025 21:22:57 +0000 Manifest this update: Mon 03 Nov 2025 21:17:57 +0000 Manifest next update: Fri 07 Nov 2025 08:10:57 +0000 Files and hashes: 1: 3130332e3137322e37302e302f32332d3234203d3e20313432333836.roa (hash: 1/5F/Fe2PkpRkHNw+n97pPHSrmMag78XpgU4CUEJyIA=) 2: 7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.crl (hash: Rw9dYQMHWBzU2J7Ylz+eHwF7wdAExVKYwLCR+45H32g=) 3: 323030313a6466313a393863303a3a2f34382d3438203d3e20313432333836.roa (hash: knqZS2zET5ty4Hn5ENyXOzq+6kdiMgWMs4wKA0jO5Co=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.crl rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:b5:26:c6:dd:1a:c4:77:79:8d:f8:14:64:bc:ea:6c:37:22:0d:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E46C2EE5082354F1494DE6AEA6CDA642769EDF1 Validity Not Before: Nov 3 21:17:57 2025 GMT Not After : Nov 7 08:10:57 2025 GMT Subject: CN=B9408A3E20C528852CABBC2C7247E4AC4D932B8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:53:26:9b:64:4f:93:14:49:83:8c:bb:c0:39: 3b:d6:19:d6:95:68:c9:7b:24:ca:e7:60:ee:b8:57: 45:d7:27:ea:a4:ca:e5:c6:3c:ec:a5:40:6c:18:45: 11:39:48:b9:10:ef:11:7a:70:ff:89:f3:36:4e:e9: 75:92:90:c1:cd:5a:ee:27:2d:a0:8b:db:2f:a4:b4: 56:18:60:79:bb:0c:2d:c0:a8:4d:55:73:e6:5d:4c: 55:4a:2b:59:e8:ad:ff:f0:f5:fd:8c:aa:e9:a0:90: eb:2b:87:20:b2:9b:16:36:52:e0:f6:f2:58:8d:72: af:df:5a:b4:e6:39:4f:89:95:f4:15:f2:fd:37:9f: cf:aa:af:04:11:9a:52:32:a1:81:5c:45:54:1c:ac: 21:6a:e2:f8:f6:ee:31:52:45:15:67:93:4f:22:0e: 00:67:88:7a:88:2e:65:9c:a9:07:88:55:87:e6:73: cd:19:50:5e:cf:ba:86:92:bd:e7:3c:38:8d:bb:7e: 9f:5e:aa:e7:da:24:fd:7c:14:60:0f:48:c4:8d:ee: ca:29:d8:0a:e1:86:ac:59:98:c9:c3:74:e6:59:da: 43:8d:84:63:c9:53:a9:f9:23:3c:f1:2e:09:ef:77: ac:2c:d1:89:f8:ce:11:fa:0a:67:a4:2c:39:b2:79: c5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:40:8A:3E:20:C5:28:85:2C:AB:BC:2C:72:47:E4:AC:4D:93:2B:8B X509v3 Authority Key Identifier: keyid:7E:46:C2:EE:50:82:35:4F:14:94:DE:6A:EA:6C:DA:64:27:69:ED:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:58:c6:20:8f:38:f2:f7:45:c1:a5:b9:06:a9:d4:ba:73:6c: 84:6c:43:28:12:58:a1:94:46:9b:48:5f:02:56:7f:84:31:c7: cb:74:fc:c6:2d:36:e3:f0:af:86:f0:c4:b8:b6:8a:56:ab:ac: e2:65:34:c5:67:18:76:f6:d3:62:37:10:35:bd:7c:55:1c:7a: 7c:5c:b2:4b:c2:0a:a9:da:19:43:37:e5:27:46:e6:d6:84:97: 72:cd:c1:a8:a9:05:5b:f6:2c:f1:0e:33:59:e0:bf:f8:17:6f: 82:de:47:12:80:84:c5:d1:a8:e2:5e:29:cd:35:4c:9e:3e:f4: 7b:01:00:35:79:10:1a:15:ed:ef:70:1f:ef:93:32:fa:3e:b8: a7:aa:ce:7e:a7:6f:8d:30:ad:01:70:2a:a5:8d:f0:71:fa:e9: c6:96:1e:24:f2:f8:78:7e:84:e4:78:d4:0b:bf:3c:05:a7:a8: 4c:da:62:d2:04:1c:ca:17:da:fc:0f:c4:95:0f:1a:11:f6:f0: 23:15:0b:e4:37:72:f6:d0:6a:07:ed:5d:90:80:0a:d3:c8:01: e7:19:bd:42:92:a9:66:04:dc:a9:0c:4f:8d:d6:7c:7d:b6:ff: ea:c3:a3:22:0d:c6:e0:70:68:49:24:4d:cd:b0:8d:5b:16:5a: 46:40:67:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTbUmxt0axHd5jfgUZLzqbDciDVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U0NkMyRUU1MDgyMzU0RjE0OTRERTZBRUE2Q0RBNjQy NzY5RURGMTAeFw0yNTExMDMyMTE3NTdaFw0yNTExMDcwODEwNTdaMDMxMTAvBgNV BAMTKEI5NDA4QTNFMjBDNTI4ODUyQ0FCQkMyQzcyNDdFNEFDNEQ5MzJCOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5UyabZE+TFEmDjLvAOTvWGdaV aMl7JMrnYO64V0XXJ+qkyuXGPOylQGwYRRE5SLkQ7xF6cP+J8zZO6XWSkMHNWu4n LaCL2y+ktFYYYHm7DC3AqE1Vc+ZdTFVKK1norf/w9f2MqumgkOsrhyCymxY2UuD2 8liNcq/fWrTmOU+JlfQV8v03n8+qrwQRmlIyoYFcRVQcrCFq4vj27jFSRRVnk08i DgBniHqILmWcqQeIVYfmc80ZUF7PuoaSvec8OI27fp9equfaJP18FGAPSMSN7sop 2ArhhqxZmMnDdOZZ2kONhGPJU6n5IzzxLgnvd6ws0Yn4zhH6CmekLDmyecU7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuUCKPiDFKIUsq7wsckfkrE2TK4swHwYDVR0j BBgwFoAUfkbC7lCCNU8UlN5q6mzaZCdp7fEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGZmMDIyYS05YjE2LTRiNGMtOThhMi01MzQ5OTRmNTg5ZDAvMC83RTQ2QzJFRTUw ODIzNTRGMTQ5NERFNkFFQTZDREE2NDI3NjlFREYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U0NkMyRUU1MDgyMzU0RjE0OTRERTZBRUE2Q0RBNjQyNzY5 RURGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBmZjAyMmEtOWIxNi00YjRjLTk4 YTItNTM0OTk0ZjU4OWQwLzAvN0U0NkMyRUU1MDgyMzU0RjE0OTRERTZBRUE2Q0RB NjQyNzY5RURGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1YxiCPOPL3RcGluQap1LpzbIRsQygSWKGU RptIXwJWf4Qxx8t0/MYtNuPwr4bwxLi2ilarrOJlNMVnGHb202I3EDW9fFUcenxc skvCCqnaGUM35SdG5taEl3LNwaipBVv2LPEOM1ngv/gXb4LeRxKAhMXRqOJeKc01 TJ4+9HsBADV5EBoV7e9wH++TMvo+uKeqzn6nb40wrQFwKqWN8HH66caWHiTy+Hh+ hOR41Au/PAWnqEzaYtIEHMoX2vwPxJUPGhH28CMVC+Q3cvbQagftXZCACtPIAecZ vUKSqWYE3KkMT43WfH22/+rDoyINxuBwaEkkTc2wjVsWWkZAZz8= -----END CERTIFICATE-----Generated at Wed Nov 5 01:11:59 2025 by rpki-client