$ rpki-client -vvf repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft File: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft (raw, json) Hash identifier: v8coThURafDHesL8cFJhvWgowtS/hGjkoLYtoij+j8E= Subject key identifier: 8B:11:77:38:23:66:67:83:59:B8:C4:B0:55:B0:E1:38:DE:45:99:26 Authority key identifier: 7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 Certificate issuer: /CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Certificate serial: 319B1EA4FE469B33779FC040E340C038B0ED62F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft Manifest number: 0242 Signing time: Tue 04 Nov 2025 03:30:02 +0000 Manifest this update: Tue 04 Nov 2025 03:25:02 +0000 Manifest next update: Fri 07 Nov 2025 07:58:02 +0000 Files and hashes: 1: 3130332e3138302e35382e302f32332d3233203d3e2039333431.roa (hash: lr7nUWH/7raRlFDZhAD65ANTChYQYYLQIg/z8dK94J4=) 2: 3130332e3138302e35392e302f32342d3234203d3e2039333431.roa (hash: i2rSOVglupsSuL0ZoSXVd/tHmiF7pW8+dps3wslED5c=) 3: 3130332e3138302e35382e302f32342d3234203d3e2039333431.roa (hash: FdloWvzwT5E7bV0h2MrBbwdyadkn1oI1JIyg7UwS1zQ=) 4: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl (hash: HOS4KPwKpfD4v+75RbqY1OTqrm1RVTJs2GqtJetM4kc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:58:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:9b:1e:a4:fe:46:9b:33:77:9f:c0:40:e3:40:c0:38:b0:ed:62:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Validity Not Before: Nov 4 03:25:02 2025 GMT Not After : Nov 7 07:58:02 2025 GMT Subject: CN=8B1177382366678359B8C4B055B0E138DE459926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2d:1f:a1:86:43:a5:60:75:70:6d:18:5c:45: c8:e9:ab:46:af:23:62:10:13:1f:1b:09:0d:87:82: f9:5f:e4:75:6e:1c:60:51:cf:47:f8:8e:74:a4:16: 9b:aa:97:54:ae:9e:82:a4:2a:f6:09:b1:b0:d7:86: 7c:8c:62:c1:fe:ca:88:69:3b:6e:ad:3a:8b:ab:5b: 98:53:94:e0:f6:9a:3d:88:7f:11:f8:bb:d8:41:18: f4:c0:2d:96:28:e6:ba:d3:f3:b3:d1:5f:cc:3c:d5: 34:c0:95:2d:20:6c:de:32:cd:42:38:54:cf:6a:cb: 27:6e:b6:b1:34:83:e0:b0:0a:1b:4d:c9:cf:ef:4e: 38:7d:e8:41:26:46:6f:49:01:38:c4:0c:46:b8:a8: 57:8e:29:4e:aa:65:c9:ea:6d:47:82:b4:6c:71:4c: 5e:8d:86:b1:0c:7c:00:a5:38:47:96:c8:01:42:92: 18:26:32:cd:fe:e9:28:a2:ec:46:0a:a9:1e:e7:0c: 87:4e:57:7f:2c:5e:6c:b5:b3:d3:34:ee:35:dc:91: 0e:a7:93:03:a2:ff:7b:0e:53:60:6b:93:5c:41:64: 0c:6e:8f:00:a1:e4:37:70:7e:b3:9a:ab:57:f9:e1: 55:af:5d:1d:bb:34:ce:a4:98:12:ca:ce:b2:b0:90: 8d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:11:77:38:23:66:67:83:59:B8:C4:B0:55:B0:E1:38:DE:45:99:26 X509v3 Authority Key Identifier: keyid:7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:dd:bd:12:ef:19:05:bd:4d:58:be:b5:60:9f:64:72:f8:09: b7:4c:e1:62:a3:04:78:5a:af:9f:4c:e2:46:b7:ed:0f:9a:57: f3:db:ab:ad:66:09:5b:d6:14:77:b3:70:dc:92:ef:85:7c:e7: 79:2e:96:de:6f:7d:4d:62:d1:d3:2f:30:9d:c3:60:17:88:f7: 51:69:45:a1:61:fb:96:37:29:60:20:f2:43:60:85:84:be:57: 82:0a:32:99:fb:b2:e2:aa:2c:72:69:10:ed:69:0a:3c:82:7d: c0:78:a1:26:0c:1a:82:9f:e5:e5:4a:8f:08:4d:71:66:2a:7e: 43:4b:3b:1a:4f:29:7e:26:6e:58:40:2b:e0:5b:80:fc:88:dc: a9:c2:95:07:b3:10:1d:5d:cf:2b:69:7b:22:ba:ec:7a:db:4d: 80:cd:08:a9:a8:1e:3b:ee:f6:5f:91:90:be:89:ec:6a:d7:3d: 7b:69:2d:24:f5:1c:dc:88:72:d4:01:25:15:a2:3b:aa:8f:22: ae:29:f8:d7:d7:30:fb:29:88:63:9a:9c:01:66:bd:14:1b:cc: 58:3c:bb:0d:40:a7:b8:b7:e3:e4:7f:ce:2f:f1:fe:15:60:8f: 5a:9f:0e:f4:74:92:30:20:6b:ae:3f:a1:5f:fe:10:7d:16:b8: 38:b9:16:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMZsepP5GmzN3n8BA40DAOLDtYvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAw NjMyRUZENDAeFw0yNTExMDQwMzI1MDJaFw0yNTExMDcwNzU4MDJaMDMxMTAvBgNV BAMTKDhCMTE3NzM4MjM2NjY3ODM1OUI4QzRCMDU1QjBFMTM4REU0NTk5MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPLR+hhkOlYHVwbRhcRcjpq0av I2IQEx8bCQ2Hgvlf5HVuHGBRz0f4jnSkFpuql1SunoKkKvYJsbDXhnyMYsH+yohp O26tOourW5hTlOD2mj2IfxH4u9hBGPTALZYo5rrT87PRX8w81TTAlS0gbN4yzUI4 VM9qyydutrE0g+CwChtNyc/vTjh96EEmRm9JATjEDEa4qFeOKU6qZcnqbUeCtGxx TF6NhrEMfAClOEeWyAFCkhgmMs3+6Sii7EYKqR7nDIdOV38sXmy1s9M07jXckQ6n kwOi/3sOU2Brk1xBZAxujwCh5DdwfrOaq1f54VWvXR27NM6kmBLKzrKwkI29AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUixF3OCNmZ4NZuMSwVbDhON5FmSYwHwYDVR0j BBgwFoAUfvibRWktk+nKFdpM+dQ5MAYy79QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzFhODQ3ZC0yNTMxLTRkN2YtOTI0MS05Nzc3ODUwNjA1ZDYvMC83RUY4OUI0NTY5 MkQ5M0U5Q0ExNURBNENGOUQ0MzkzMDA2MzJFRkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAwNjMy RUZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTcxYTg0N2QtMjUzMS00ZDdmLTky NDEtOTc3Nzg1MDYwNWQ2LzAvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5 MzAwNjMyRUZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHdvRLvGQW9TVi+tWCfZHL4CbdM4WKjBHha r59M4ka37Q+aV/Pbq61mCVvWFHezcNyS74V853kult5vfU1i0dMvMJ3DYBeI91Fp RaFh+5Y3KWAg8kNghYS+V4IKMpn7suKqLHJpEO1pCjyCfcB4oSYMGoKf5eVKjwhN cWYqfkNLOxpPKX4mblhAK+BbgPyI3KnClQezEB1dzytpeyK67HrbTYDNCKmoHjvu 9l+RkL6J7GrXPXtpLST1HNyIctQBJRWiO6qPIq4p+NfXMPspiGOanAFmvRQbzFg8 uw1Ap7i34+R/zi/x/hVgj1qfDvR0kjAga64/oV/+EH0WuDi5Fl8= -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:12 2025 by rpki-client