$ rpki-client -vvf repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft File: C7840142ADE3E1876CB50EA3A410454EB3889153.mft (raw, json) Hash identifier: HYn+7XNqHyFoV+GtZIRz0y2yj4Fgvus/TiJlLZbmY2A= Subject key identifier: 3E:38:07:70:3D:85:4A:CF:E0:E9:B3:52:CB:F8:F1:7F:02:47:55:9D Authority key identifier: C7:84:01:42:AD:E3:E1:87:6C:B5:0E:A3:A4:10:45:4E:B3:88:91:53 Certificate issuer: /CN=C7840142ADE3E1876CB50EA3A410454EB3889153 Certificate serial: 06938488D3F7859040A4866606431C975D129AA4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft Manifest number: DA Signing time: Mon 03 Nov 2025 04:50:12 +0000 Manifest this update: Mon 03 Nov 2025 04:45:12 +0000 Manifest next update: Thu 06 Nov 2025 09:42:12 +0000 Files and hashes: 1: 3130332e3234382e382e302f32332d3234203d3e20313531353338.roa (hash: H6s77RONQxfYVUNz4YRn/C2zSuIhVFg1GTTCJsiiK0o=) 2: 323030313a6466323a633963303a3a2f34382d3438203d3e20313531353338.roa (hash: IoIyP//hrQlYB+aIBKE8acsqetTnMXLdLd08/ax7yKA=) 3: C7840142ADE3E1876CB50EA3A410454EB3889153.crl (hash: AaOWLFcC8I5l0v0mb7ZY8SP2tKNpmYCCNATMfmrwEf4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.crl rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 09:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:93:84:88:d3:f7:85:90:40:a4:86:66:06:43:1c:97:5d:12:9a:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7840142ADE3E1876CB50EA3A410454EB3889153 Validity Not Before: Nov 3 04:45:12 2025 GMT Not After : Nov 6 09:42:12 2025 GMT Subject: CN=3E3807703D854ACFE0E9B352CBF8F17F0247559D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1a:a8:e2:e6:76:a2:91:99:82:31:1c:df:81: 07:8a:a2:e4:9f:2e:3f:a7:8e:58:5d:83:66:38:b0: 40:60:97:13:dc:96:fd:fe:32:d3:17:06:05:a4:19: 07:8f:fe:61:0e:f0:b1:1a:74:8f:c4:d3:a8:36:4e: d5:f4:8b:c1:aa:90:1f:ec:b3:fe:58:fc:53:2d:12: 21:46:0d:36:25:ed:2c:be:b4:ac:8f:76:e7:ef:b9: d5:b6:11:2c:05:4f:dc:46:27:ed:87:0e:bd:40:3d: c2:0c:48:fb:a7:a0:07:54:08:d7:a3:cf:d5:d3:b8: 09:f8:04:2b:db:83:60:2b:23:54:11:49:ed:e1:74: 85:39:79:a3:e4:93:a0:64:f7:ea:1b:fb:73:91:23: 80:19:0d:fd:f0:32:80:62:db:8a:15:a6:d0:61:16: 9b:7c:de:2b:f6:c1:fd:10:4d:72:31:3e:d3:e0:c9: a3:7d:68:37:57:24:c5:98:70:2c:41:72:7e:05:ad: 7d:14:27:c4:88:9b:13:b3:4b:8f:d2:14:70:76:05: 5b:e6:3a:4f:3c:ea:82:df:00:0b:38:26:f2:b4:51: 2a:d6:ea:d4:a6:5e:58:5e:46:51:d4:08:66:ac:83: a4:12:a0:41:2a:c5:3a:e8:b0:f5:fc:6d:77:d6:55: 83:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:38:07:70:3D:85:4A:CF:E0:E9:B3:52:CB:F8:F1:7F:02:47:55:9D X509v3 Authority Key Identifier: keyid:C7:84:01:42:AD:E3:E1:87:6C:B5:0E:A3:A4:10:45:4E:B3:88:91:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:c8:4a:80:51:b4:41:c5:57:bb:58:e6:45:28:d9:96:30:0d: ee:07:36:90:25:8b:92:3e:64:4f:cd:f7:89:5f:ed:1d:af:b7: 56:52:4d:d1:c0:c7:b3:c1:77:fd:fc:bc:86:27:f6:1f:a2:66: 4d:62:30:39:96:41:a8:54:8a:fa:69:da:3e:dc:47:eb:46:90: 48:d2:f8:ae:1a:89:b2:81:22:de:96:12:ea:63:a2:ba:c8:1f: 7a:9b:fc:e2:9b:8c:16:30:70:92:f1:84:57:a6:7f:6d:df:3f: 79:b7:03:bd:97:74:74:92:ee:4e:c6:b7:05:10:e5:9a:06:05: 32:6f:36:2d:38:45:7a:a0:48:9b:6e:2a:ce:b5:70:a6:19:fa: 2e:28:ee:38:fe:81:99:b4:4f:64:ac:b4:d6:05:85:18:05:87: 4c:d5:b4:0a:1e:01:da:60:0e:30:4d:e2:b2:f9:42:da:38:14: b6:c1:31:7b:ea:35:70:b9:63:83:50:d3:b9:51:26:8a:a6:2b: 60:d6:aa:ea:7c:67:4a:21:66:5c:d1:fc:5e:d6:a8:c0:68:43: 82:c5:58:bb:e5:32:f2:9a:5e:0c:c0:29:86:27:23:0f:fc:02: 03:59:69:55:2c:52:bc:0b:a2:c1:f7:dd:46:e4:77:64:4f:30: cd:4a:05:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBpOEiNP3hZBApIZmBkMcl10SmqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4NDAxNDJBREUzRTE4NzZDQjUwRUEzQTQxMDQ1NEVC Mzg4OTE1MzAeFw0yNTExMDMwNDQ1MTJaFw0yNTExMDYwOTQyMTJaMDMxMTAvBgNV BAMTKDNFMzgwNzcwM0Q4NTRBQ0ZFMEU5QjM1MkNCRjhGMTdGMDI0NzU1OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLGqji5naikZmCMRzfgQeKouSf Lj+njlhdg2Y4sEBglxPclv3+MtMXBgWkGQeP/mEO8LEadI/E06g2TtX0i8GqkB/s s/5Y/FMtEiFGDTYl7Sy+tKyPdufvudW2ESwFT9xGJ+2HDr1APcIMSPunoAdUCNej z9XTuAn4BCvbg2ArI1QRSe3hdIU5eaPkk6Bk9+ob+3ORI4AZDf3wMoBi24oVptBh Fpt83iv2wf0QTXIxPtPgyaN9aDdXJMWYcCxBcn4FrX0UJ8SImxOzS4/SFHB2BVvm Ok886oLfAAs4JvK0USrW6tSmXlheRlHUCGasg6QSoEEqxTrosPX8bXfWVYMrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPjgHcD2FSs/g6bNSy/jxfwJHVZ0wHwYDVR0j BBgwFoAUx4QBQq3j4YdstQ6jpBBFTrOIkVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGY1YmE1ZS0xZjVjLTQyODQtOWExNi0wMTM1YTlmZDRlMjgvMC9DNzg0MDE0MkFE RTNFMTg3NkNCNTBFQTNBNDEwNDU0RUIzODg5MTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc4NDAxNDJBREUzRTE4NzZDQjUwRUEzQTQxMDQ1NEVCMzg4 OTE1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhmNWJhNWUtMWY1Yy00Mjg0LTlh MTYtMDEzNWE5ZmQ0ZTI4LzAvQzc4NDAxNDJBREUzRTE4NzZDQjUwRUEzQTQxMDQ1 NEVCMzg4OTE1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIDISoBRtEHFV7tY5kUo2ZYwDe4HNpAli5I+ ZE/N94lf7R2vt1ZSTdHAx7PBd/38vIYn9h+iZk1iMDmWQahUivpp2j7cR+tGkEjS +K4aibKBIt6WEupjorrIH3qb/OKbjBYwcJLxhFemf23fP3m3A72XdHSS7k7GtwUQ 5ZoGBTJvNi04RXqgSJtuKs61cKYZ+i4o7jj+gZm0T2SstNYFhRgFh0zVtAoeAdpg DjBN4rL5Qto4FLbBMXvqNXC5Y4NQ07lRJoqmK2DWqup8Z0ohZlzR/F7WqMBoQ4LF WLvlMvKaXgzAKYYnIw/8AgNZaVUsUrwLosH33Ubkd2RPMM1KBRc= -----END CERTIFICATE-----Generated at Tue Nov 4 01:56:41 2025 by rpki-client