$ rpki-client -vvf repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft File: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft (raw, json) Hash identifier: jdYBGgBECk7f6I1kn9iCP6NVogWc10O/hQQMqwKQoeU= Subject key identifier: AB:F7:0C:2B:E8:4A:68:2B:97:9C:19:B4:7C:BB:96:D1:19:53:8C:42 Authority key identifier: 7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC Certificate issuer: /CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Certificate serial: 5BE97C46A46A7DC27DED837515B974905209A214 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft Manifest number: A7 Signing time: Tue 04 Nov 2025 20:11:16 +0000 Manifest this update: Tue 04 Nov 2025 20:06:16 +0000 Manifest next update: Sat 08 Nov 2025 07:54:16 +0000 Files and hashes: 1: 3136302e3138372e3133372e302f32342d3234203d3e20313533313233.roa (hash: lAtUfGS13GDkvr/Pm9PSGFkJR4Rstob6+L+fcyUN72Q=) 2: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl (hash: N2PE3QEY4wbMPDU9668h5t6bkwOUSB4pgY4KgjyGIFA=) 3: 3136302e3138372e3133362e302f32342d3234203d3e20313533313233.roa (hash: HJdK4DRAmRrZWLjILXhoJkILfMyC0BwC4uGRxH8TEAM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:e9:7c:46:a4:6a:7d:c2:7d:ed:83:75:15:b9:74:90:52:09:a2:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Validity Not Before: Nov 4 20:06:16 2025 GMT Not After : Nov 8 07:54:16 2025 GMT Subject: CN=ABF70C2BE84A682B979C19B47CBB96D119538C42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ea:ab:8a:26:47:a7:db:d1:2f:f1:9a:8c:29: 89:f4:7e:f3:90:87:ac:b6:b7:f1:13:57:d4:5c:77: 9b:15:2c:59:5b:9f:6b:a9:89:d0:8e:3a:ac:02:12: 5d:ab:5a:ab:7d:43:d7:eb:8b:ea:00:d2:fe:4d:bc: 2e:07:41:63:fd:fd:3a:8e:d9:75:67:9c:2d:69:c9: 51:3e:21:68:be:b7:2a:d5:09:b2:5f:f3:ae:57:57: 62:e3:86:56:70:48:78:e0:0a:fc:f7:9f:76:e1:2b: fd:72:93:5b:3c:32:be:37:68:c3:c7:a3:c1:2f:f2: 36:01:fa:17:2b:cc:b1:ce:b2:78:2f:33:7f:6f:1a: 43:cd:c0:a8:f1:13:f7:2e:f9:23:08:5b:55:d3:a8: 32:99:37:b7:9a:c0:45:f3:4e:45:65:86:b9:b9:c0: d4:21:97:73:93:5d:fd:05:fb:98:d5:57:dd:6a:df: b9:74:18:5b:48:8f:65:02:bb:99:9a:9d:eb:89:16: dc:6a:06:39:fd:b6:bb:c2:02:7a:0b:e7:46:2e:2e: bf:97:54:94:58:c8:0d:17:9e:20:b9:67:04:f0:66: 67:01:92:7a:e1:f3:ce:43:71:f1:8d:cd:1e:5e:89: 13:d2:79:a2:5f:3d:55:40:f0:a4:8f:0a:f0:64:af: e2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F7:0C:2B:E8:4A:68:2B:97:9C:19:B4:7C:BB:96:D1:19:53:8C:42 X509v3 Authority Key Identifier: keyid:7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:17:de:e1:e0:5d:10:bc:b5:97:40:76:1d:7d:51:14:f9:8f: 4c:09:82:bd:b7:02:2b:13:08:0b:c5:16:76:a2:05:d5:4f:71: 02:80:76:45:98:10:85:ae:a7:7c:de:d1:8f:3a:cb:ac:2b:38: a5:e7:1f:64:c9:b4:3d:bd:b9:7e:db:87:8f:e4:b1:0d:fa:c4: 38:19:4d:e6:02:bb:e0:73:e6:53:26:6a:ff:5c:8e:41:eb:21: d7:71:23:e8:5c:5c:99:c4:ee:cf:63:8f:9a:d7:e2:38:11:7e: eb:68:dc:89:fc:2c:ac:20:86:e7:09:7b:d6:c4:6e:ba:cc:c7: 90:0c:4d:9d:9c:7f:1e:95:be:dd:43:19:8c:e0:b8:6b:ea:58: 7a:52:70:e9:66:fb:95:37:5e:f3:62:03:b9:4e:e2:32:27:66: 99:8c:02:60:68:0f:95:50:90:7e:6c:d4:2f:25:07:99:81:3e: 1a:82:43:39:b5:a5:2c:b6:d0:1e:f1:88:65:08:df:97:76:61: 1e:9f:8b:d5:aa:b7:fa:eb:b5:10:c8:ea:1e:63:66:a9:cb:5a: 1d:14:eb:47:9b:4f:f4:6b:29:f5:02:71:f9:93:03:fc:83:4a: c0:3d:b6:37:08:4f:1a:e0:55:5a:9d:47:c7:51:ff:5d:81:2d: 17:a5:b8:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW+l8RqRqfcJ97YN1Fbl0kFIJohQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5RkE4 NDM5NDhEQzAeFw0yNTExMDQyMDA2MTZaFw0yNTExMDgwNzU0MTZaMDMxMTAvBgNV BAMTKEFCRjcwQzJCRTg0QTY4MkI5NzlDMTlCNDdDQkI5NkQxMTk1MzhDNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc6quKJken29Ev8ZqMKYn0fvOQ h6y2t/ETV9Rcd5sVLFlbn2upidCOOqwCEl2rWqt9Q9fri+oA0v5NvC4HQWP9/TqO 2XVnnC1pyVE+IWi+tyrVCbJf865XV2LjhlZwSHjgCvz3n3bhK/1yk1s8Mr43aMPH o8Ev8jYB+hcrzLHOsngvM39vGkPNwKjxE/cu+SMIW1XTqDKZN7eawEXzTkVlhrm5 wNQhl3OTXf0F+5jVV91q37l0GFtIj2UCu5maneuJFtxqBjn9trvCAnoL50YuLr+X VJRYyA0XniC5ZwTwZmcBknrh885DcfGNzR5eiRPSeaJfPVVA8KSPCvBkr+I/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq/cMK+hKaCuXnBm0fLuW0RlTjEIwHwYDVR0j BBgwFoAUfE39eJFNwfZhMPJWrmnZ+oQ5SNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTkyMzM5Ny04Y2Y4LTRjZWYtODg1Ni0wZDI2OGQ3M2VkYjEvMC83QzRERkQ3ODkx NERDMUY2NjEzMEYyNTZBRTY5RDlGQTg0Mzk0OERDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5RkE4NDM5 NDhEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzAvN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5 RkE4NDM5NDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJUX3uHgXRC8tZdAdh19URT5j0wJgr23AisT CAvFFnaiBdVPcQKAdkWYEIWup3ze0Y86y6wrOKXnH2TJtD29uX7bh4/ksQ36xDgZ TeYCu+Bz5lMmav9cjkHrIddxI+hcXJnE7s9jj5rX4jgRfuto3In8LKwghucJe9bE brrMx5AMTZ2cfx6Vvt1DGYzguGvqWHpScOlm+5U3XvNiA7lO4jInZpmMAmBoD5VQ kH5s1C8lB5mBPhqCQzm1pSy20B7xiGUI35d2YR6fi9Wqt/rrtRDI6h5jZqnLWh0U 60ebT/RrKfUCcfmTA/yDSsA9tjcITxrgVVqdR8dR/12BLReluFA= -----END CERTIFICATE-----Generated at Tue Nov 4 21:22:25 2025 by rpki-client