$ rpki-client -vvf repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft File: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft (raw, json) Hash identifier: hIjwhd+X9aNI9JfDwJAjCVs252ICcPt0ErEj0HDqntM= Subject key identifier: D8:A0:CD:6B:26:B2:1E:D3:8E:1A:6E:C6:67:50:BC:21:83:D6:91:C1 Authority key identifier: 7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 Certificate issuer: /CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Certificate serial: 333206959D5EE2451EAA3A821A52F97B1737FA03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer Subject info access: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft Manifest number: 0222 Signing time: Mon 03 Nov 2025 20:41:35 +0000 Manifest this update: Mon 03 Nov 2025 20:36:35 +0000 Manifest next update: Fri 07 Nov 2025 01:42:35 +0000 Files and hashes: 1: 3130332e3136372e3130352e302f32342d3234203d3e203338333230.roa (hash: ruqE2F34CZN/5KqJhiyDZO8euZHnYhKqfwBiaFPn2lc=) 2: 3130332e3136372e3130342e302f32342d3234203d3e20313339343130.roa (hash: SapOMMIVothLtXId44y92PXYWgqYBrvZdRlhJ/EEALc=) 3: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl (hash: n27ja9NjtEl/IuwnU+PNRpi6dSMpcCFso/25CnhJ+q8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 01:42:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:32:06:95:9d:5e:e2:45:1e:aa:3a:82:1a:52:f9:7b:17:37:fa:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Validity Not Before: Nov 3 20:36:35 2025 GMT Not After : Nov 7 01:42:35 2025 GMT Subject: CN=D8A0CD6B26B21ED38E1A6EC66750BC2183D691C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5b:fc:a8:35:97:19:8e:71:d1:b6:84:cb:ac: 3c:30:24:e2:55:f2:e4:77:b3:9d:c5:01:55:16:6d: b9:5f:f9:91:da:5d:0e:ae:c9:c1:f3:7d:56:ae:c8: 3d:dd:4b:b3:05:4d:ff:d3:b1:2e:51:46:77:03:aa: 07:d0:8d:b2:e7:3c:3a:63:ed:99:a8:30:77:23:f0: 1c:e1:07:3d:24:83:05:c3:27:1d:4a:c2:e2:01:33: 91:8e:fe:a0:08:0a:a1:3f:fe:38:a2:0c:25:75:6a: 94:37:86:40:38:ed:b1:70:dc:26:0a:a3:b6:0d:f6: 18:34:85:97:ec:e0:12:c8:12:03:ee:0b:7b:63:9a: 7a:76:af:12:69:42:02:81:b4:40:77:31:3a:b1:a0: be:81:87:04:74:0c:73:84:4d:63:fb:d9:d1:e3:91: d9:cc:5f:59:8b:81:a2:b3:44:64:b4:3a:42:f4:1a: 3c:23:b1:86:7a:c7:a7:84:66:cb:33:1c:d9:5d:dd: 17:76:73:40:d3:27:11:93:a7:f1:e8:e8:9f:a6:87: cc:fd:e9:46:35:65:5a:3c:1d:40:03:e9:af:c9:05: 43:7c:57:24:8e:9e:b3:60:56:53:d1:fc:94:d0:64: 26:a6:84:73:70:5f:d2:41:b5:12:0d:25:95:d5:4f: ea:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A0:CD:6B:26:B2:1E:D3:8E:1A:6E:C6:67:50:BC:21:83:D6:91:C1 X509v3 Authority Key Identifier: keyid:7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:51:b7:26:50:29:d1:3b:5f:67:0c:81:53:12:9a:61:00:78: 06:7b:9d:23:7d:db:a5:0c:fe:35:26:15:2f:59:0f:87:86:79: fb:34:f5:60:9b:a5:67:c5:47:c2:fd:5c:d0:cd:a2:62:5f:71: 62:bb:ba:c5:04:bc:51:80:0c:13:bf:b5:f7:bd:37:fc:a0:b3: 3f:b8:21:3b:63:2b:27:a4:69:bf:06:19:7f:0e:a4:ec:f4:54: c8:ea:8f:82:e8:7b:06:9b:31:31:c1:f2:58:77:c8:32:38:b0: 5f:88:67:f0:65:03:e2:72:88:1b:58:51:57:5b:d9:3c:eb:32: 9e:6e:d1:04:b6:11:81:27:19:02:b0:93:54:6f:2f:84:b3:02: 79:5e:4f:f1:df:d1:82:76:8f:75:69:da:87:c2:8f:f9:cf:2b: 7b:2b:83:45:8a:da:82:f7:b9:67:c3:34:d9:4c:37:47:a5:8d: ee:42:a2:5e:74:3e:28:51:eb:a9:61:30:0d:d6:f4:ae:4c:d0: b2:1b:3e:b8:aa:26:9b:de:ec:33:34:e1:1c:52:f6:70:37:c9: bf:d9:91:fc:31:09:0e:cf:c6:5e:97:93:93:99:a8:1c:3e:be: 97:83:bb:e5:d1:e4:9f:45:49:1b:16:1e:25:83:cf:54:e3:a5: 3d:0d:b8:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMzIGlZ1e4kUeqjqCGlL5exc3+gMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUxMzc5 MkExNDU0NTAeFw0yNTExMDMyMDM2MzVaFw0yNTExMDcwMTQyMzVaMDMxMTAvBgNV BAMTKEQ4QTBDRDZCMjZCMjFFRDM4RTFBNkVDNjY3NTBCQzIxODNENjkxQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHW/yoNZcZjnHRtoTLrDwwJOJV 8uR3s53FAVUWbblf+ZHaXQ6uycHzfVauyD3dS7MFTf/TsS5RRncDqgfQjbLnPDpj 7ZmoMHcj8BzhBz0kgwXDJx1KwuIBM5GO/qAICqE//jiiDCV1apQ3hkA47bFw3CYK o7YN9hg0hZfs4BLIEgPuC3tjmnp2rxJpQgKBtEB3MTqxoL6BhwR0DHOETWP72dHj kdnMX1mLgaKzRGS0OkL0GjwjsYZ6x6eEZsszHNld3Rd2c0DTJxGTp/Ho6J+mh8z9 6UY1ZVo8HUAD6a/JBUN8VySOnrNgVlPR/JTQZCamhHNwX9JBtRINJZXVT+r9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2KDNayayHtOOGm7GZ1C8IYPWkcEwHwYDVR0j BBgwFoAUf+9r9T+jEioPCc70tAjhN5KhRUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDNlYmFiYi05OTlmLTRmM2UtODRjMS1iZjI3OWJmZTE3ODcvMC83RkVGNkJGNTNG QTMxMjJBMEYwOUNFRjRCNDA4RTEzNzkyQTE0NTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUxMzc5MkEx NDU0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAzZWJhYmItOTk5Zi00ZjNlLTg0 YzEtYmYyNzliZmUxNzg3LzAvN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUx Mzc5MkExNDU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJRtyZQKdE7X2cMgVMSmmEAeAZ7nSN926UM /jUmFS9ZD4eGefs09WCbpWfFR8L9XNDNomJfcWK7usUEvFGADBO/tfe9N/ygsz+4 ITtjKyekab8GGX8OpOz0VMjqj4LoewabMTHB8lh3yDI4sF+IZ/BlA+JyiBtYUVdb 2TzrMp5u0QS2EYEnGQKwk1RvL4SzAnleT/Hf0YJ2j3Vp2ofCj/nPK3srg0WK2oL3 uWfDNNlMN0elje5Col50PihR66lhMA3W9K5M0LIbPriqJpve7DM04RxS9nA3yb/Z kfwxCQ7Pxl6Xk5OZqBw+vpeDu+XR5J9FSRsWHiWDz1TjpT0NuDY= -----END CERTIFICATE-----Generated at Tue Nov 4 20:03:42 2025 by rpki-client