$ rpki-client -vvf repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft File: 7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft (raw, json) Hash identifier: PVfnx9EUUz7olexseVSY2b3UQfJ1oRvUgDaec+6Rrmk= Subject key identifier: BC:4B:F7:72:B5:34:22:84:47:3F:E7:69:C2:9B:41:D5:1E:6C:74:83 Authority key identifier: 71:36:38:25:78:BA:0A:CB:DD:5E:EA:C6:87:FF:32:34:D0:46:14:B1 Certificate issuer: /CN=7136382578BA0ACBDD5EEAC687FF3234D04614B1 Certificate serial: 10A74C7D1E5B3DADC17AF4567B9FDD1E5804C986 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft Manifest number: 039C Signing time: Mon 03 Nov 2025 15:41:56 +0000 Manifest this update: Mon 03 Nov 2025 15:36:56 +0000 Manifest next update: Thu 06 Nov 2025 16:51:56 +0000 Files and hashes: 1: 3130332e3136392e3230372e302f32342d3234203d3e203435333235.roa (hash: af3wLczo6S1Ff2cHv7BLC7ZKbE+GaXVBqYVonmsEaYA=) 2: 3130332e3136392e3230362e302f32342d3234203d3e203435333235.roa (hash: /3CGvY//H1css9zYuxxW/Bez/32hDDiVLYL7tvwgxws=) 3: 7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl (hash: mVAEy4k/QYL+gNDqOewvG6qKIG1bsSZIcPybmVlHNAQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 16:51:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:a7:4c:7d:1e:5b:3d:ad:c1:7a:f4:56:7b:9f:dd:1e:58:04:c9:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7136382578BA0ACBDD5EEAC687FF3234D04614B1 Validity Not Before: Nov 3 15:36:56 2025 GMT Not After : Nov 6 16:51:56 2025 GMT Subject: CN=BC4BF772B5342284473FE769C29B41D51E6C7483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7c:e8:75:db:6d:5c:db:46:0e:85:57:27:44: e5:94:b8:df:b0:45:f0:4a:91:9b:30:97:1f:b4:8b: 3f:63:18:f7:e4:84:39:0d:31:63:ca:d0:ce:97:8a: 96:2e:fb:75:8a:22:01:6a:27:5c:72:e5:79:96:f9: 02:df:3d:c1:28:b7:3c:f9:74:51:18:b1:25:68:30: b1:24:7c:a8:4f:f6:e5:5d:b7:63:1e:42:d5:78:0a: 55:54:ab:07:a6:95:d8:86:ed:a3:7b:dd:5a:30:57: 3e:80:d2:bd:f6:fe:86:be:cb:7a:61:0b:d9:a9:a3: 96:bb:82:f2:e0:b8:3f:f7:4c:5f:21:fd:f8:a4:db: ef:c5:a3:da:24:7e:20:d8:bd:18:f2:8c:81:d7:af: 47:8d:26:54:34:de:81:b1:86:da:1f:64:6e:a3:52: 69:1d:96:88:d8:24:b3:15:f3:4f:f1:21:94:f5:46: b1:6e:9c:99:9c:d8:0d:37:16:a5:85:16:3b:28:39: ae:2e:ed:5c:77:38:e8:99:a5:f8:27:b7:a8:e6:d3: 78:71:ae:00:0d:29:dc:15:00:c2:f1:dc:0d:59:78: 85:59:c6:83:31:e5:f4:20:5f:b8:cf:81:1a:5f:a8: 71:7b:60:69:95:65:c1:46:fc:5c:f7:29:06:c7:8b: f6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:4B:F7:72:B5:34:22:84:47:3F:E7:69:C2:9B:41:D5:1E:6C:74:83 X509v3 Authority Key Identifier: keyid:71:36:38:25:78:BA:0A:CB:DD:5E:EA:C6:87:FF:32:34:D0:46:14:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:e6:75:45:39:7c:a3:b9:b6:04:15:28:64:cb:e7:94:7b:74: 3f:26:f3:be:4a:c9:28:a3:7b:e7:75:51:95:13:5d:7b:42:c9: 05:16:22:d0:df:27:33:d8:7b:10:94:0b:5d:35:ca:5a:9d:a1: 49:7c:7c:ac:07:6b:00:cf:19:7a:b9:71:28:73:f2:28:cf:c4: 14:ab:cf:ab:e9:98:b2:92:ac:0d:ea:6c:72:5f:ad:21:d1:f7: 65:e9:ca:db:dc:a8:bc:e4:05:a1:d3:cb:a0:93:cd:21:6d:8b: 84:52:ae:11:73:47:c3:bd:15:74:6e:e6:83:ce:1c:cb:b7:fc: 68:1a:1f:ac:c0:03:6a:b9:b5:48:43:ad:a6:21:4d:95:f7:6c: a4:09:d0:90:e4:6a:0d:94:c6:19:29:98:89:4d:1e:6e:8e:b0: 00:2c:d7:0d:f3:23:92:65:ca:0b:78:76:a9:bb:e0:86:27:b7: ef:25:7f:3f:ec:18:56:c0:64:42:01:34:72:16:f4:35:4f:61: d0:e1:4d:5a:35:7b:f0:64:e4:04:9e:01:47:34:10:09:4e:77: 12:c6:0f:dc:fe:48:59:a8:d8:b4:a9:93:19:1e:06:b2:47:88: 62:fd:e2:81:56:e2:1a:85:ab:e4:f0:69:9d:ff:7b:d6:0d:bb: 30:14:75:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEKdMfR5bPa3BevRWe5/dHlgEyYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzEzNjM4MjU3OEJBMEFDQkRENUVFQUM2ODdGRjMyMzRE MDQ2MTRCMTAeFw0yNTExMDMxNTM2NTZaFw0yNTExMDYxNjUxNTZaMDMxMTAvBgNV BAMTKEJDNEJGNzcyQjUzNDIyODQ0NzNGRTc2OUMyOUI0MUQ1MUU2Qzc0ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIfOh1221c20YOhVcnROWUuN+w RfBKkZswlx+0iz9jGPfkhDkNMWPK0M6XipYu+3WKIgFqJ1xy5XmW+QLfPcEotzz5 dFEYsSVoMLEkfKhP9uVdt2MeQtV4ClVUqwemldiG7aN73VowVz6A0r32/oa+y3ph C9mpo5a7gvLguD/3TF8h/fik2+/Fo9okfiDYvRjyjIHXr0eNJlQ03oGxhtofZG6j UmkdlojYJLMV80/xIZT1RrFunJmc2A03FqWFFjsoOa4u7Vx3OOiZpfgnt6jm03hx rgANKdwVAMLx3A1ZeIVZxoMx5fQgX7jPgRpfqHF7YGmVZcFG/Fz3KQbHi/anAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvEv3crU0IoRHP+dpwptB1R5sdIMwHwYDVR0j BBgwFoAUcTY4JXi6CsvdXurGh/8yNNBGFLEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2Y3Mzc4MC0wOTI1LTRiNGEtYmNhNy1hMWU3ZWQzZmY0MmEvMC83MTM2MzgyNTc4 QkEwQUNCREQ1RUVBQzY4N0ZGMzIzNEQwNDYxNEIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzEzNjM4MjU3OEJBMEFDQkRENUVFQUM2ODdGRjMyMzREMDQ2 MTRCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdmNzM3ODAtMDkyNS00YjRhLWJj YTctYTFlN2VkM2ZmNDJhLzAvNzEzNjM4MjU3OEJBMEFDQkRENUVFQUM2ODdGRjMy MzREMDQ2MTRCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALHmdUU5fKO5tgQVKGTL55R7dD8m875KySij e+d1UZUTXXtCyQUWItDfJzPYexCUC101ylqdoUl8fKwHawDPGXq5cShz8ijPxBSr z6vpmLKSrA3qbHJfrSHR92XpytvcqLzkBaHTy6CTzSFti4RSrhFzR8O9FXRu5oPO HMu3/GgaH6zAA2q5tUhDraYhTZX3bKQJ0JDkag2UxhkpmIlNHm6OsAAs1w3zI5Jl ygt4dqm74IYnt+8lfz/sGFbAZEIBNHIW9DVPYdDhTVo1e/Bk5ASeAUc0EAlOdxLG D9z+SFmo2LSpkxkeBrJHiGL94oFW4hqFq+TwaZ3/e9YNuzAUdUE= -----END CERTIFICATE-----Generated at Tue Nov 4 21:15:10 2025 by rpki-client