$ rpki-client -vvf repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft File: 07087494011A8BD71E0AB56E4A29820B0C265D45.mft (raw, json) Hash identifier: nh01F+QlxDv0A+0V1HquxP1gxpYU5KlfaLWVTRHM8O8= Subject key identifier: A2:06:51:64:FE:E0:0E:BE:B1:0C:7D:D4:8B:62:5C:19:76:33:C4:3D Authority key identifier: 07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45 Certificate issuer: /CN=07087494011A8BD71E0AB56E4A29820B0C265D45 Certificate serial: 7C8716736173BC74DA6896350E73D0E5F682FF54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft Manifest number: 72 Signing time: Tue 04 Nov 2025 04:21:18 +0000 Manifest this update: Tue 04 Nov 2025 04:16:18 +0000 Manifest next update: Fri 07 Nov 2025 05:41:18 +0000 Files and hashes: 1: 07087494011A8BD71E0AB56E4A29820B0C265D45.crl (hash: sptA+l5JcnQ+98WmYkUKJBXhohbMYCEJWto7OBBKo6Q=) 2: 3130332e38392e3234382e302f32342d3234203d3e20313336303939.roa (hash: nJDk2moXVJKOcLf/s2ENaD41Lvuu7Wv1fbgDq/e+7rk=) 3: 323030313a6466303a633330303a3a2f34382d3438203d3e20313336303939.roa (hash: 7vK5kAAznF/vtGtOCVNcNBhvktxpMswh2ctIXuNsU5A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.crl rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 05:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:87:16:73:61:73:bc:74:da:68:96:35:0e:73:d0:e5:f6:82:ff:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07087494011A8BD71E0AB56E4A29820B0C265D45 Validity Not Before: Nov 4 04:16:18 2025 GMT Not After : Nov 7 05:41:18 2025 GMT Subject: CN=A2065164FEE00EBEB10C7DD48B625C197633C43D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:be:a3:7f:fe:b2:ff:10:15:3a:29:a2:ed:7a: 86:86:2c:9c:e3:1a:3f:3d:b1:75:e8:8d:68:c3:d6: bd:3c:1d:11:2d:f2:b7:bc:0d:1d:10:9f:99:a0:eb: ed:fb:9d:29:5f:01:63:62:ac:d6:d8:5b:2c:21:49: 41:e0:f1:20:40:81:10:88:df:3c:36:22:64:c7:02: 6c:af:c1:03:f4:dc:6b:7c:b1:ba:31:92:e1:d2:fd: 70:f9:c3:bb:13:54:02:a7:48:47:9f:b4:34:5a:60: 9b:e7:bb:0a:7e:ed:81:d1:fc:d0:a8:95:0f:29:2c: e0:b6:53:b7:45:a3:e7:43:58:b4:e2:e9:88:56:4f: 6f:b4:7d:d8:57:5f:4a:cf:38:e3:31:1e:46:f4:94: bf:24:10:95:62:51:d9:99:91:2a:03:70:92:b2:f4: 08:0d:7c:7a:ed:98:fe:33:b2:07:c5:46:9c:cb:ee: 15:52:63:96:75:c9:d2:37:b0:61:87:4c:c5:01:55: 47:4d:60:61:8c:e8:4d:2a:0c:9f:df:a1:d1:7d:98: 6b:26:9c:30:e6:d0:f9:b6:13:c9:52:8a:ee:01:ec: fa:0a:44:b7:3f:a0:0d:fc:79:66:30:bf:a4:69:cd: fb:d4:b7:2b:14:dc:ef:3c:94:25:5c:29:c7:72:41: c0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:06:51:64:FE:E0:0E:BE:B1:0C:7D:D4:8B:62:5C:19:76:33:C4:3D X509v3 Authority Key Identifier: keyid:07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:56:ed:47:14:12:86:2a:12:d2:aa:0e:97:bd:5a:54:86:85: 75:06:e1:0e:b3:b3:c6:57:98:3b:4c:b7:87:c3:a5:2e:f9:c2: 24:9a:3b:68:5d:99:88:3a:de:27:5d:da:59:38:b8:59:fa:6f: b4:0c:60:01:26:77:42:aa:8f:b3:64:eb:5e:7c:b1:d6:1e:0a: cd:d3:88:af:31:49:49:3e:a0:c7:f6:eb:32:c7:92:45:72:bb: f2:de:55:d8:8a:a8:d8:f4:ca:ef:05:47:42:56:ff:9b:1f:1e: 67:97:c0:10:46:f5:ce:5a:be:eb:1d:b5:62:6c:a3:3a:91:74: a7:79:4c:da:5e:ab:f1:24:9d:98:95:6a:b9:50:23:6f:b6:f8: 13:dd:59:68:3a:42:5a:19:8c:4d:21:94:a6:09:3d:7c:be:bf: 8e:92:bf:82:70:40:4c:76:76:3b:d4:89:1d:cd:dd:e6:4d:32: ac:6e:8a:f2:d6:07:b9:da:cd:95:b4:72:ef:ba:fd:71:52:88: 82:1d:ff:67:91:6f:40:45:5c:ba:f8:68:48:01:7f:bd:05:d8: 7f:c0:89:8a:47:74:93:9e:f6:1a:d8:76:5b:72:f7:c9:2c:38: 6b:f6:a0:d3:1b:72:3f:a7:cb:73:a5:f5:00:51:ca:ba:52:a1: 94:db:46:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfIcWc2FzvHTaaJY1DnPQ5faC/1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgyMEIw QzI2NUQ0NTAeFw0yNTExMDQwNDE2MThaFw0yNTExMDcwNTQxMThaMDMxMTAvBgNV BAMTKEEyMDY1MTY0RkVFMDBFQkVCMTBDN0RENDhCNjI1QzE5NzYzM0M0M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFvqN//rL/EBU6KaLteoaGLJzj Gj89sXXojWjD1r08HREt8re8DR0Qn5mg6+37nSlfAWNirNbYWywhSUHg8SBAgRCI 3zw2ImTHAmyvwQP03Gt8sboxkuHS/XD5w7sTVAKnSEeftDRaYJvnuwp+7YHR/NCo lQ8pLOC2U7dFo+dDWLTi6YhWT2+0fdhXX0rPOOMxHkb0lL8kEJViUdmZkSoDcJKy 9AgNfHrtmP4zsgfFRpzL7hVSY5Z1ydI3sGGHTMUBVUdNYGGM6E0qDJ/fodF9mGsm nDDm0Pm2E8lSiu4B7PoKRLc/oA38eWYwv6RpzfvUtysU3O88lCVcKcdyQcCjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUogZRZP7gDr6xDH3Ui2JcGXYzxD0wHwYDVR0j BBgwFoAUBwh0lAEai9ceCrVuSimCCwwmXUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTQwNTU0NS1jMzVkLTRkZTEtOTYxOC00NGI1ZjQxN2EzMDMvMC8wNzA4NzQ5NDAx MUE4QkQ3MUUwQUI1NkU0QTI5ODIwQjBDMjY1RDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgyMEIwQzI2 NUQ0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE0MDU1NDUtYzM1ZC00ZGUxLTk2 MTgtNDRiNWY0MTdhMzAzLzAvMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgy MEIwQzI2NUQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRW7UcUEoYqEtKqDpe9WlSGhXUG4Q6zs8ZX mDtMt4fDpS75wiSaO2hdmYg63idd2lk4uFn6b7QMYAEmd0Kqj7Nk6158sdYeCs3T iK8xSUk+oMf26zLHkkVyu/LeVdiKqNj0yu8FR0JW/5sfHmeXwBBG9c5avusdtWJs ozqRdKd5TNpeq/EknZiVarlQI2+2+BPdWWg6QloZjE0hlKYJPXy+v46Sv4JwQEx2 djvUiR3N3eZNMqxuivLWB7nazZW0cu+6/XFSiIId/2eRb0BFXLr4aEgBf70F2H/A iYpHdJOe9hrYdlty98ksOGv2oNMbcj+ny3Ol9QBRyrpSoZTbRl0= -----END CERTIFICATE-----Generated at Wed Nov 5 17:05:37 2025 by rpki-client