$ rpki-client -vvf repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft File: C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft (raw, json) Hash identifier: pyKlyIStst3M598cHYDXPYK+8Tv7B/abLH2/2WnbOgQ= Subject key identifier: 94:0D:19:8B:5E:3F:27:DF:62:A9:96:42:03:19:C2:AF:B7:41:49:44 Authority key identifier: C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A Certificate issuer: /CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Certificate serial: 232D6196BFA54A236B160848B91DB444E13700A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft Manifest number: B5 Signing time: Sun 02 Nov 2025 20:31:04 +0000 Manifest this update: Sun 02 Nov 2025 20:26:04 +0000 Manifest next update: Thu 06 Nov 2025 04:51:04 +0000 Files and hashes: 1: 3135372e32302e3233382e302f32342d3234203d3e20313532343239.roa (hash: sRSgraKTbogwmlFJOr2rlVY3cH4E6yWnajOsmbqDWIQ=) 2: 3135372e32302e3233382e302f32332d3233203d3e20313532343239.roa (hash: 47XUtIsbPhvEMu3eZ7qPRDeVpw2v8OOWFwMXf8PZG1I=) 3: C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl (hash: OhibOKgUZZovbIrIe22vSTsW6+pW7HWUSwdB97hRxAM=) 4: 3135372e32302e3233392e302f32342d3234203d3e20313532343239.roa (hash: XdvAlT7dYr0rIgwIFapXg1zX6SWW1AjtQQfUFNhrdwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:51:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:2d:61:96:bf:a5:4a:23:6b:16:08:48:b9:1d:b4:44:e1:37:00:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Validity Not Before: Nov 2 20:26:04 2025 GMT Not After : Nov 6 04:51:04 2025 GMT Subject: CN=940D198B5E3F27DF62A996420319C2AFB7414944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3e:d9:39:ee:e3:93:de:7e:7d:65:40:50:2a: 81:2c:28:66:91:56:97:db:f2:fe:64:4f:f8:92:b1: 14:ae:69:8d:ca:4d:50:85:15:d8:0e:f2:78:ec:39: 8c:0e:9f:85:14:a3:aa:0f:1c:f7:01:bb:da:c8:01: a7:25:1b:1b:76:ae:c8:d6:c0:4f:f5:3e:16:da:d1: 89:7d:b9:7b:50:cd:51:aa:e5:67:b1:a7:e7:21:4c: 0c:06:d3:62:92:47:4e:a0:fd:f1:5e:e4:44:34:bf: 71:d9:a3:64:fd:05:5c:7a:7a:18:79:c4:a0:24:5a: 8e:8f:f1:e6:4f:bd:8a:47:86:03:4c:0e:ee:14:4f: 63:1c:69:3c:ab:7a:19:2d:87:f8:22:9f:e8:a0:62: 8c:9d:c8:b3:6d:a8:00:b8:e4:55:ac:e6:43:43:4a: 85:bc:f9:d9:0c:a4:fc:88:7d:bc:ce:e8:cf:3f:5b: 75:df:0c:be:93:23:32:cf:13:0d:3b:24:44:6b:ae: 78:05:1f:af:d0:da:06:27:e7:a6:61:36:52:2d:ea: 93:f5:94:f8:b6:f4:b3:50:31:ba:0c:90:95:02:b6: 06:ef:29:d5:8a:3a:d0:5b:3f:f5:8a:dd:bf:1a:71: c5:1f:86:2f:d9:66:a6:69:0e:17:3b:bb:5b:47:87: 39:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:0D:19:8B:5E:3F:27:DF:62:A9:96:42:03:19:C2:AF:B7:41:49:44 X509v3 Authority Key Identifier: keyid:C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:c1:42:06:72:e2:6a:0c:7d:c5:14:b9:07:20:99:bc:a5:c9: 3f:33:fb:2a:c7:f1:ca:80:8a:d8:e9:6d:87:9b:93:42:ba:02: 3a:ba:48:32:3e:d5:d2:56:d9:6b:57:58:5e:01:ac:cb:c6:ab: 9c:69:29:1e:15:ea:ff:10:3a:d7:d0:33:74:2c:e2:51:07:07: 4c:cd:21:84:64:84:e2:7d:0f:c5:06:58:ce:49:b4:a6:8f:67: a9:3e:cc:7e:da:da:68:f0:de:d4:39:f9:57:fd:73:b0:54:f7: bb:27:19:ce:cc:df:03:50:97:dc:66:33:6a:08:75:d7:e7:65: 15:7a:3e:15:ae:6f:4d:3b:e2:a2:29:a9:67:c8:31:8c:c8:62: 21:1e:c3:fd:4e:ed:c9:c7:f3:1d:6d:fc:a2:4a:a6:1a:ac:e7: 14:86:21:25:aa:26:d8:70:28:5c:36:18:85:d9:fe:4d:c6:cf: 7b:41:c3:37:89:15:d5:38:c3:25:a8:88:c1:f1:be:62:a3:8c: 92:21:3b:72:81:6e:25:fe:ed:ef:df:89:61:28:96:c5:8d:d2: 0d:af:9d:fc:50:b5:12:60:85:0e:1a:5c:85:6d:94:dd:ad:39: ee:c8:68:9e:96:9f:9e:d5:1a:d6:01:17:8f:ec:70:ef:a2:33: 86:92:fa:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIy1hlr+lSiNrFghIuR20ROE3AKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5 MjcwRkQyQTAeFw0yNTExMDIyMDI2MDRaFw0yNTExMDYwNDUxMDRaMDMxMTAvBgNV BAMTKDk0MEQxOThCNUUzRjI3REY2MkE5OTY0MjAzMTlDMkFGQjc0MTQ5NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkPtk57uOT3n59ZUBQKoEsKGaR Vpfb8v5kT/iSsRSuaY3KTVCFFdgO8njsOYwOn4UUo6oPHPcBu9rIAaclGxt2rsjW wE/1Phba0Yl9uXtQzVGq5Wexp+chTAwG02KSR06g/fFe5EQ0v3HZo2T9BVx6ehh5 xKAkWo6P8eZPvYpHhgNMDu4UT2McaTyrehkth/gin+igYoydyLNtqAC45FWs5kND SoW8+dkMpPyIfbzO6M8/W3XfDL6TIzLPEw07JERrrngFH6/Q2gYn56ZhNlIt6pP1 lPi29LNQMboMkJUCtgbvKdWKOtBbP/WK3b8accUfhi/ZZqZpDhc7u1tHhzkvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlA0Zi14/J99iqZZCAxnCr7dBSUQwHwYDVR0j BBgwFoAUx4OUJ/RMjtiebCcg8ZzPJ5Jw/SowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OGQxYzQ0OS05NzhjLTQ4NDUtYjgyMy1iNTkyNWE5MDU0MjcvMC9DNzgzOTQyN0Y0 NEM4RUQ4OUU2QzI3MjBGMTlDQ0YyNzkyNzBGRDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5Mjcw RkQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMThkMWM0NDktOTc4Yy00ODQ1LWI4 MjMtYjU5MjVhOTA1NDI3LzAvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NG Mjc5MjcwRkQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbBQgZy4moMfcUUuQcgmbylyT8z+yrH8cqA itjpbYebk0K6Ajq6SDI+1dJW2WtXWF4BrMvGq5xpKR4V6v8QOtfQM3Qs4lEHB0zN IYRkhOJ9D8UGWM5JtKaPZ6k+zH7a2mjw3tQ5+Vf9c7BU97snGc7M3wNQl9xmM2oI ddfnZRV6PhWub0074qIpqWfIMYzIYiEew/1O7cnH8x1t/KJKphqs5xSGISWqJthw KFw2GIXZ/k3Gz3tBwzeJFdU4wyWoiMHxvmKjjJIhO3KBbiX+7e/fiWEolsWN0g2v nfxQtRJghQ4aXIVtlN2tOe7IaJ6Wn57VGtYBF4/scO+iM4aS+pc= -----END CERTIFICATE-----Generated at Wed Nov 5 03:41:51 2025 by rpki-client