$ rpki-client -vvf repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.mft File: 7CDEC0195C0619A2844735B38B762AB1C145318A.mft (raw, json) Hash identifier: yvnygiXUOEpjKXxDyS+ViHE5gjvG58nxHqvYVFhHANo= Subject key identifier: 88:58:25:4F:C6:C5:02:43:01:11:28:CE:7B:19:09:F1:D3:E1:AC:8B Authority key identifier: 7C:DE:C0:19:5C:06:19:A2:84:47:35:B3:8B:76:2A:B1:C1:45:31:8A Certificate issuer: /CN=7CDEC0195C0619A2844735B38B762AB1C145318A Certificate serial: 037B2C62A26D3EC632B6A8948A85C4C91EDC0B2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CDEC0195C0619A2844735B38B762AB1C145318A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.mft Manifest number: 01E9 Signing time: Sun 02 Nov 2025 16:20:49 +0000 Manifest this update: Sun 02 Nov 2025 16:15:49 +0000 Manifest next update: Wed 05 Nov 2025 19:45:49 +0000 Files and hashes: 1: 7CDEC0195C0619A2844735B38B762AB1C145318A.crl (hash: AgYfYqQWD2XeJEr0ZRp5iuo8ivZzxnNYkxgl1NbWdvg=) 2: 3130332e3136332e33362e302f32332d3234203d3e20313338383836.roa (hash: CtGkBvOXr+z5xeQBMHV9NThlZEDqDbWOP9wsaKhn80Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.crl rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CDEC0195C0619A2844735B38B762AB1C145318A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 19:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:7b:2c:62:a2:6d:3e:c6:32:b6:a8:94:8a:85:c4:c9:1e:dc:0b:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CDEC0195C0619A2844735B38B762AB1C145318A Validity Not Before: Nov 2 16:15:49 2025 GMT Not After : Nov 5 19:45:49 2025 GMT Subject: CN=8858254FC6C50243011128CE7B1909F1D3E1AC8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b1:5d:4f:11:33:34:97:3e:3f:c8:32:b0:96: a0:45:4a:ce:da:5d:e3:60:ea:26:61:0f:e2:54:7c: 55:bd:db:8d:b2:20:b9:42:87:ea:de:2a:de:bf:bd: 72:2e:44:68:68:6d:d0:26:8c:21:4d:b8:70:21:37: 5a:69:4a:20:9c:ee:40:eb:f9:68:a7:65:72:15:66: ac:5e:6d:c2:a2:d2:e0:60:25:48:69:38:87:0a:18: de:96:b7:09:fb:0a:ce:61:cf:f1:56:81:95:9b:01: a0:34:16:b7:09:a7:a3:7d:28:92:ca:df:61:cf:fb: a5:d9:1f:b3:15:00:ad:f0:1b:f5:6e:1d:09:9e:39: b0:84:69:47:69:16:ec:e6:13:44:fb:8c:1c:3f:f7: 77:c8:65:60:4b:c6:98:54:c9:4f:ad:93:3c:30:d2: 45:c8:ec:a3:c5:08:09:7e:c1:6b:be:a4:9f:78:4a: 53:17:70:53:51:3e:8e:01:41:98:af:83:73:2c:96: 82:8e:73:47:3f:85:2d:ec:0b:c0:fb:16:9c:b3:6d: 91:3b:01:d1:8c:79:a5:54:dd:9b:07:ab:08:04:9d: 89:ff:b3:51:6c:7c:11:0d:48:4b:66:0a:5b:51:0d: 32:26:da:3b:09:40:63:ec:59:c4:31:83:c8:07:1a: 3f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:58:25:4F:C6:C5:02:43:01:11:28:CE:7B:19:09:F1:D3:E1:AC:8B X509v3 Authority Key Identifier: keyid:7C:DE:C0:19:5C:06:19:A2:84:47:35:B3:8B:76:2A:B1:C1:45:31:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CDEC0195C0619A2844735B38B762AB1C145318A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:59:9e:cb:ba:47:27:72:89:9b:ab:7c:e9:11:90:f1:91:f7: ed:4f:51:4f:f2:f0:a7:29:2f:53:12:1d:db:ba:0c:4c:b6:d8: 76:c0:a6:6f:50:23:68:65:67:52:9f:ac:02:d0:a8:89:97:74: d7:44:55:2f:9c:56:32:57:0f:d1:2f:b6:a4:0c:9c:85:06:db: 89:d9:91:72:91:55:71:06:62:d6:89:9d:4a:5c:4e:3c:7f:7e: 5d:fa:df:9a:36:ce:e6:1a:dc:c9:11:da:d1:ce:d2:bd:67:cb: 64:d1:c0:31:17:bc:ec:d5:8f:f0:3b:56:5b:58:13:94:e4:08: 03:08:92:8a:10:1e:24:98:41:e3:60:19:ac:b5:90:c5:41:44: 68:0a:74:10:2a:74:a1:76:b6:a9:d9:57:d5:22:56:6d:fc:03: 4b:98:9e:88:0c:c5:18:54:4f:71:5f:2b:bd:f9:73:00:6d:2a: b5:4a:87:e5:09:68:b5:8e:7f:5e:3c:ae:fb:16:5f:4a:3b:3d: ab:16:4f:f6:d8:be:a6:94:cc:18:ad:ab:39:c1:a5:60:1f:41: d4:91:14:74:3a:c8:8b:13:ce:a3:3b:e9:40:c4:8e:68:c6:87: c6:69:62:10:aa:4b:45:97:48:30:dd:60:78:6f:ec:89:27:98: 88:6b:5e:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA3ssYqJtPsYytqiUioXEyR7cCyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NERUMwMTk1QzA2MTlBMjg0NDczNUIzOEI3NjJBQjFD MTQ1MzE4QTAeFw0yNTExMDIxNjE1NDlaFw0yNTExMDUxOTQ1NDlaMDMxMTAvBgNV BAMTKDg4NTgyNTRGQzZDNTAyNDMwMTExMjhDRTdCMTkwOUYxRDNFMUFDOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCasV1PETM0lz4/yDKwlqBFSs7a XeNg6iZhD+JUfFW9242yILlCh+reKt6/vXIuRGhobdAmjCFNuHAhN1ppSiCc7kDr +WinZXIVZqxebcKi0uBgJUhpOIcKGN6Wtwn7Cs5hz/FWgZWbAaA0FrcJp6N9KJLK 32HP+6XZH7MVAK3wG/VuHQmeObCEaUdpFuzmE0T7jBw/93fIZWBLxphUyU+tkzww 0kXI7KPFCAl+wWu+pJ94SlMXcFNRPo4BQZivg3MsloKOc0c/hS3sC8D7FpyzbZE7 AdGMeaVU3ZsHqwgEnYn/s1FsfBENSEtmCltRDTIm2jsJQGPsWcQxg8gHGj/tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiFglT8bFAkMBESjOexkJ8dPhrIswHwYDVR0j BBgwFoAUfN7AGVwGGaKERzWzi3YqscFFMYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjkwYWRhNi1iNzIxLTRiNWYtOTBjYS1lOGY0Yjk3N2Q1NjEvMC83Q0RFQzAxOTVD MDYxOUEyODQ0NzM1QjM4Qjc2MkFCMUMxNDUzMThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NERUMwMTk1QzA2MTlBMjg0NDczNUIzOEI3NjJBQjFDMTQ1 MzE4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI5MGFkYTYtYjcyMS00YjVmLTkw Y2EtZThmNGI5NzdkNTYxLzAvN0NERUMwMTk1QzA2MTlBMjg0NDczNUIzOEI3NjJB QjFDMTQ1MzE4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxZnsu6RydyiZurfOkRkPGR9+1PUU/y8Kcp L1MSHdu6DEy22HbApm9QI2hlZ1KfrALQqImXdNdEVS+cVjJXD9EvtqQMnIUG24nZ kXKRVXEGYtaJnUpcTjx/fl3635o2zuYa3MkR2tHO0r1ny2TRwDEXvOzVj/A7VltY E5TkCAMIkooQHiSYQeNgGay1kMVBRGgKdBAqdKF2tqnZV9UiVm38A0uYnogMxRhU T3FfK735cwBtKrVKh+UJaLWOf148rvsWX0o7PasWT/bYvqaUzBitqznBpWAfQdSR FHQ6yIsTzqM76UDEjmjGh8ZpYhCqS0WXSDDdYHhv7IknmIhrXhg= -----END CERTIFICATE-----Generated at Tue Nov 4 16:30:18 2025 by rpki-client