$ rpki-client -vvf repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft File: D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft (raw, json) Hash identifier: Rmleuz9vYY8wweAzk+cnOx33w0j5uV1EvnuMDj8zYHA= Subject key identifier: F1:5B:8D:51:8F:61:A7:E8:48:D2:8A:1B:F5:D5:0B:76:22:DF:02:75 Authority key identifier: D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 Certificate issuer: /CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Certificate serial: 230B6FA709AEFAACE459B7C30D64820E9F6B0A05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft Manifest number: 0231 Signing time: Sun 02 Nov 2025 22:10:45 +0000 Manifest this update: Sun 02 Nov 2025 22:05:45 +0000 Manifest next update: Thu 06 Nov 2025 04:48:45 +0000 Files and hashes: 1: D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl (hash: UYiXrENmAAFOknVXei/3GEGB40AiFllTeVaKJNnI+ug=) 2: 3130332e3138352e34322e302f32342d3234203d3e20313439363733.roa (hash: dkX3mi6UtP2EclKtk4Ns5Our6XJ4lNIlC+WY5pkrMVA=) 3: 3130332e3138352e34332e302f32342d3234203d3e20313333333630.roa (hash: pZz62m1gD3j25rkNtr+ZrpUFopI0lVMRASTdO0j7bx0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:48:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:0b:6f:a7:09:ae:fa:ac:e4:59:b7:c3:0d:64:82:0e:9f:6b:0a:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Validity Not Before: Nov 2 22:05:45 2025 GMT Not After : Nov 6 04:48:45 2025 GMT Subject: CN=F15B8D518F61A7E848D28A1BF5D50B7622DF0275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2e:8a:cf:6a:7b:e2:0a:e7:9c:1c:60:c4:b2: 18:f6:ce:0a:74:37:38:c4:21:0a:bd:b4:b9:12:4e: a9:eb:ac:e7:eb:0d:16:19:f1:fc:61:33:ed:52:65: db:40:93:d8:b3:fa:9f:1d:09:13:26:ca:2e:e4:eb: 6d:38:90:1b:24:1c:b8:64:4b:61:0e:12:33:e2:e1: d0:11:2f:14:9d:5c:88:8c:79:d6:dc:15:49:63:30: 63:63:e9:7c:59:fc:22:e5:79:54:c2:4e:65:da:b6: 31:fd:68:15:b0:e2:ca:63:be:8a:1a:83:76:d7:c1: 95:de:68:1a:10:17:b4:17:0f:3e:eb:62:4f:ed:5a: 6c:8d:c6:a1:19:bc:25:79:4f:39:08:74:dd:45:60: 38:6d:f5:98:d7:ec:1c:78:27:9e:98:d9:62:be:7b: f6:2f:03:85:c7:df:c6:6e:8a:85:13:7a:5a:f1:26: 19:27:42:61:2f:bf:13:a1:c9:24:f6:c3:e1:7e:11: 62:e7:78:e0:fb:ff:a1:06:ad:ce:5d:df:be:89:c6: 7c:cf:45:e2:8c:c2:6b:d7:bd:b5:81:a3:7e:89:81: 5f:e9:6e:b9:48:d3:a1:f1:f1:52:24:86:21:85:54: af:fc:66:6f:22:05:5c:a5:e4:97:46:ae:ec:ed:6c: 76:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:5B:8D:51:8F:61:A7:E8:48:D2:8A:1B:F5:D5:0B:76:22:DF:02:75 X509v3 Authority Key Identifier: keyid:D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:f5:9a:0f:d5:2e:91:bf:a7:d9:95:0f:cc:3b:41:d5:e7:d7: 20:c1:ee:92:87:57:ee:58:69:7b:8a:b4:b8:70:04:d9:4e:4e: c3:6f:14:65:49:06:c8:8e:15:bd:5a:2d:13:b4:4e:9c:e0:d4: 12:63:42:49:e2:82:dc:4b:9c:df:cd:7b:89:9c:0a:0f:45:4a: 2b:83:7a:0c:8b:a3:29:17:78:cb:36:c1:c2:c0:3f:fe:0b:11: 7b:1a:78:2b:fc:f4:a5:49:2c:f5:25:0e:4f:4e:08:7f:28:da: 83:64:6f:d2:4a:58:43:09:5d:3a:03:39:33:e6:d3:87:be:a4: f4:09:da:0d:ab:0c:b0:33:94:0b:69:3d:2d:6b:60:b4:5e:31: 46:a6:b7:f7:e3:cd:e7:8e:25:cf:07:6b:71:94:bd:5b:f5:a5: 7e:d6:1f:30:c1:65:59:84:b2:28:cb:f6:c9:88:c6:0e:c2:59: 4b:97:a2:03:88:fc:f9:1b:33:08:89:47:dc:d4:a2:06:10:cd: 1a:2f:e8:3b:02:ac:20:f2:6f:9d:ae:2b:6e:8c:7d:8c:a3:b1: 95:3c:88:9d:8c:a5:e5:b1:1a:2b:c8:78:e2:b8:1e:aa:98:45: fe:a0:71:98:7b:33:98:b3:1c:a3:f0:1d:94:49:ec:4c:7c:c2: f3:1c:b7:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIwtvpwmu+qzkWbfDDWSCDp9rCgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4 NTgyQkFDNDAeFw0yNTExMDIyMjA1NDVaFw0yNTExMDYwNDQ4NDVaMDMxMTAvBgNV BAMTKEYxNUI4RDUxOEY2MUE3RTg0OEQyOEExQkY1RDUwQjc2MjJERjAyNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVLorPanviCuecHGDEshj2zgp0 NzjEIQq9tLkSTqnrrOfrDRYZ8fxhM+1SZdtAk9iz+p8dCRMmyi7k6204kBskHLhk S2EOEjPi4dARLxSdXIiMedbcFUljMGNj6XxZ/CLleVTCTmXatjH9aBWw4spjvooa g3bXwZXeaBoQF7QXDz7rYk/tWmyNxqEZvCV5TzkIdN1FYDht9ZjX7Bx4J56Y2WK+ e/YvA4XH38ZuioUTelrxJhknQmEvvxOhyST2w+F+EWLneOD7/6EGrc5d376JxnzP ReKMwmvXvbWBo36JgV/pbrlI06Hx8VIkhiGFVK/8Zm8iBVyl5JdGruztbHYNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8VuNUY9hp+hI0oob9dULdiLfAnUwHwYDVR0j BBgwFoAU18dhIkJkkbgfhOWoJOSr64WCusQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDUwZGNjMy04NGRkLTQ1OTUtYmEyYy1iYzY5OTg5NjkyZjEvMC9EN0M3NjEyMjQy NjQ5MUI4MUY4NEU1QTgyNEU0QUJFQjg1ODJCQUM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4NTgy QkFDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA1MGRjYzMtODRkZC00NTk1LWJh MmMtYmM2OTk4OTY5MmYxLzAvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFC RUI4NTgyQkFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFH1mg/VLpG/p9mVD8w7QdXn1yDB7pKHV+5Y aXuKtLhwBNlOTsNvFGVJBsiOFb1aLRO0Tpzg1BJjQknigtxLnN/Ne4mcCg9FSiuD egyLoykXeMs2wcLAP/4LEXsaeCv89KVJLPUlDk9OCH8o2oNkb9JKWEMJXToDOTPm 04e+pPQJ2g2rDLAzlAtpPS1rYLReMUamt/fjzeeOJc8Ha3GUvVv1pX7WHzDBZVmE sijL9smIxg7CWUuXogOI/PkbMwiJR9zUogYQzRov6DsCrCDyb52uK26MfYyjsZU8 iJ2MpeWxGivIeOK4HqqYRf6gcZh7M5izHKPwHZRJ7Ex8wvMct4o= -----END CERTIFICATE-----Generated at Tue Nov 4 12:54:32 2025 by rpki-client