$ rpki-client -vvf repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft File: 7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft (raw, json) Hash identifier: wE+rEWIe8eyCHchGO8ulF2c1XO9SQ49nPBE3Ox3JUjI= Subject key identifier: AC:BC:E8:50:98:75:09:46:22:D8:24:B2:22:72:02:34:AE:94:E4:DF Authority key identifier: 73:76:92:2C:93:BF:66:7F:FB:BD:AF:07:35:AE:73:D1:45:1B:08:C2 Certificate issuer: /CN=7376922C93BF667FFBBDAF0735AE73D1451B08C2 Certificate serial: 2BE36EE4A03596867EF09EBBACEAABD2110571F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft Manifest number: 0512 Signing time: Tue 04 Nov 2025 01:20:58 +0000 Manifest this update: Tue 04 Nov 2025 01:15:58 +0000 Manifest next update: Fri 07 Nov 2025 09:53:58 +0000 Files and hashes: 1: 3130332e38392e3136352e302f32342d3234203d3e20313333383030.roa (hash: 0V79HEBuKR1jbK8PkSQwyA4BziEgKvO+/ItR4BkRmQg=) 2: 3130332e372e3137362e302f32342d3234203d3e20313336303830.roa (hash: pULFJZ+nbfV5jOVZtN4jB+N6TsIyKwD9xJ39aFL57ak=) 3: 7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl (hash: CF9hqB7tNiiOTZbZXmk9Bjkwk4VeMXNdTxtaZ+frF2c=) 4: 3130332e38392e3136342e302f32342d3234203d3e20313333383030.roa (hash: +2SP7VdADvevew0k00TuxJ1WZ3WZFkGqu4JZIMGxgpw=) 5: 3130332e38392e3135342e302f32342d3234203d3e20313333383030.roa (hash: 21L4D1hu21+7UR3Mn3cvc8Jhs/U+RaE8nhEhhkQ5YEA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:e3:6e:e4:a0:35:96:86:7e:f0:9e:bb:ac:ea:ab:d2:11:05:71:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7376922C93BF667FFBBDAF0735AE73D1451B08C2 Validity Not Before: Nov 4 01:15:58 2025 GMT Not After : Nov 7 09:53:58 2025 GMT Subject: CN=ACBCE8509875094622D824B222720234AE94E4DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:65:03:b0:46:60:38:26:60:ea:e7:11:c3:10: c8:c1:ec:41:10:6b:eb:eb:2e:02:41:9e:d0:26:13: 6a:c6:c3:3e:b9:90:dc:de:c2:bd:3c:d7:94:48:21: 9d:44:9d:76:97:2b:d3:59:40:73:23:9b:de:28:97: 00:2d:e2:21:46:7b:ba:b8:5a:3c:6e:aa:4b:db:70: 01:6e:25:aa:2f:e2:6d:e8:81:0b:e6:33:da:52:0c: 0b:4a:c0:5e:61:1a:aa:ce:b7:91:26:d9:e2:0e:cb: 4c:11:1d:83:98:23:cd:98:b9:50:d3:19:87:15:bd: 44:e5:1d:dc:cd:03:26:fd:29:a6:df:60:9e:b1:d6: 83:56:23:27:b8:ff:3b:ad:47:11:5a:65:18:6b:86: 98:73:2b:3c:8d:91:88:ec:fb:90:18:db:9c:0a:c6: 74:85:d4:60:0e:c9:7b:a5:f2:33:5d:d2:cf:42:6c: 43:cd:da:90:61:aa:10:bf:57:9e:ae:f8:9b:90:f4: 5e:d2:3e:6d:70:c3:cb:af:3e:e2:b1:09:c4:41:1a: 5f:c0:a9:eb:4a:44:6a:82:9b:ee:77:a4:92:de:63: de:dd:2d:e7:e2:27:84:29:cb:14:58:c1:12:e1:f3: 77:8b:e8:d5:52:db:89:87:f2:44:d4:01:fb:fe:5c: 4c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BC:E8:50:98:75:09:46:22:D8:24:B2:22:72:02:34:AE:94:E4:DF X509v3 Authority Key Identifier: keyid:73:76:92:2C:93:BF:66:7F:FB:BD:AF:07:35:AE:73:D1:45:1B:08:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:bb:1a:8c:64:3b:8e:0f:e4:f9:fd:d9:db:e7:2d:a1:56:99: 81:22:c6:80:0c:6f:32:ed:b9:c2:c6:e2:d1:93:f4:c5:45:fa: a2:ce:8e:75:bb:52:cd:09:e4:40:6d:e2:68:aa:86:43:b1:e5: 41:9d:be:8c:bd:b9:09:05:46:df:80:a7:ba:61:df:5b:8a:be: c9:e4:58:5b:86:49:b1:6e:78:95:55:4d:5e:dd:55:b6:66:36: 0b:e9:21:c0:55:d2:31:32:c7:f6:4b:5d:91:b7:a9:44:7c:25: 93:57:24:05:0f:81:6b:73:50:91:67:12:19:6a:0a:ab:84:14: 70:d9:25:69:83:ad:5e:71:d7:a9:e3:f8:36:ad:8a:ad:a3:41: ac:7b:9a:2c:db:f9:d6:71:f5:49:a8:83:80:a4:27:c6:b8:13: 65:02:bf:a7:42:0f:cc:86:00:1c:08:c2:56:d3:1d:0f:b3:cb: 05:05:1b:cc:54:c6:90:66:43:4a:af:6e:d7:35:0a:13:6f:85: a4:3f:df:d9:09:6c:73:ee:fe:12:28:18:90:6d:88:72:e4:33: 73:f2:f7:a3:02:8a:a9:aa:2a:2f:18:a5:32:ab:1e:cb:66:67: cc:a6:19:65:77:4c:dd:d8:c2:c6:50:9d:60:d2:40:eb:4c:54: 4c:ce:44:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK+Nu5KA1loZ+8J67rOqr0hEFcfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTczRDE0 NTFCMDhDMjAeFw0yNTExMDQwMTE1NThaFw0yNTExMDcwOTUzNThaMDMxMTAvBgNV BAMTKEFDQkNFODUwOTg3NTA5NDYyMkQ4MjRCMjIyNzIwMjM0QUU5NEU0REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNZQOwRmA4JmDq5xHDEMjB7EEQ a+vrLgJBntAmE2rGwz65kNzewr0815RIIZ1EnXaXK9NZQHMjm94olwAt4iFGe7q4 WjxuqkvbcAFuJaov4m3ogQvmM9pSDAtKwF5hGqrOt5Em2eIOy0wRHYOYI82YuVDT GYcVvUTlHdzNAyb9KabfYJ6x1oNWIye4/zutRxFaZRhrhphzKzyNkYjs+5AY25wK xnSF1GAOyXul8jNd0s9CbEPN2pBhqhC/V56u+JuQ9F7SPm1ww8uvPuKxCcRBGl/A qetKRGqCm+53pJLeY97dLefiJ4QpyxRYwRLh83eL6NVS24mH8kTUAfv+XEzDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrLzoUJh1CUYi2CSyInICNK6U5N8wHwYDVR0j BBgwFoAUc3aSLJO/Zn/7va8HNa5z0UUbCMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDE3NmRkZC1hOTgwLTQzZDYtOTRhNy05NWVlZGE1Mzk2NjUvMC83Mzc2OTIyQzkz QkY2NjdGRkJCREFGMDczNUFFNzNEMTQ1MUIwOEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTczRDE0NTFC MDhDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQxNzZkZGQtYTk4MC00M2Q2LTk0 YTctOTVlZWRhNTM5NjY1LzAvNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTcz RDE0NTFCMDhDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEy7GoxkO44P5Pn92dvnLaFWmYEixoAMbzLt ucLG4tGT9MVF+qLOjnW7Us0J5EBt4miqhkOx5UGdvoy9uQkFRt+Ap7ph31uKvsnk WFuGSbFueJVVTV7dVbZmNgvpIcBV0jEyx/ZLXZG3qUR8JZNXJAUPgWtzUJFnEhlq CquEFHDZJWmDrV5x16nj+Datiq2jQax7mizb+dZx9Umog4CkJ8a4E2UCv6dCD8yG ABwIwlbTHQ+zywUFG8xUxpBmQ0qvbtc1ChNvhaQ/39kJbHPu/hIoGJBtiHLkM3Py 96MCiqmqKi8YpTKrHstmZ8ymGWV3TN3YwsZQnWDSQOtMVEzORLg= -----END CERTIFICATE-----Generated at Tue Nov 4 21:41:45 2025 by rpki-client