$ rpki-client -vvf repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft File: 7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft (raw, json) Hash identifier: Kxw2lo4HwJ4JMPLTVWPTfTL2FQS91zd3nXNwxbyffBk= Subject key identifier: D1:DB:38:E5:8C:6D:25:E7:A0:E3:07:F2:78:D1:05:D3:2C:62:58:0A Authority key identifier: 7E:6A:78:6A:CE:F6:84:F3:77:58:FC:4A:6D:85:17:CA:D1:65:FA:77 Certificate issuer: /CN=7E6A786ACEF684F37758FC4A6D8517CAD165FA77 Certificate serial: 4D8E1A5FF6AFDF64563062B5AA59013D7BBCADEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft Manifest number: 01D4 Signing time: Wed 05 Nov 2025 07:52:00 +0000 Manifest this update: Wed 05 Nov 2025 07:47:00 +0000 Manifest next update: Sat 08 Nov 2025 10:55:00 +0000 Files and hashes: 1: 3130332e3231332e3233312e302f32342d3234203d3e20313431313236.roa (hash: P26CLYaAiMviaHDVXlCPRfno/SeqGYyHaQquQlltu00=) 2: 7E6A786ACEF684F37758FC4A6D8517CAD165FA77.crl (hash: 0HuNsFWuqWkpyGBCnYAM2BgpRMftAnLyOXW9PJc72wM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.crl rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 10:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:8e:1a:5f:f6:af:df:64:56:30:62:b5:aa:59:01:3d:7b:bc:ad:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E6A786ACEF684F37758FC4A6D8517CAD165FA77 Validity Not Before: Nov 5 07:47:00 2025 GMT Not After : Nov 8 10:55:00 2025 GMT Subject: CN=D1DB38E58C6D25E7A0E307F278D105D32C62580A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4c:76:9c:74:0b:af:31:53:e1:7a:e2:fd:d5: 5d:42:72:97:dc:da:b6:72:a5:9f:6d:a5:09:7b:23: df:59:ef:53:45:d6:f7:a2:97:0e:d5:78:6e:f7:64: 47:18:d0:5a:f2:41:ae:b4:5a:53:61:49:82:6a:5c: b3:cc:75:e3:22:52:3c:7b:7f:e0:0d:24:c0:f5:87: 9a:3f:c3:b1:ed:2d:9f:d2:0e:79:b7:27:f4:78:0c: 6e:fd:16:a5:27:e0:8a:bd:49:15:87:a3:a4:c2:c3: b0:be:2e:2f:8f:2b:80:17:89:94:cb:9a:b2:d3:98: a0:a4:b2:41:92:3b:ec:f4:bb:b2:57:38:0c:2b:b9: 16:9b:6c:44:3b:af:85:cb:c5:98:ab:23:ff:1a:cc: 4f:02:4d:90:0d:32:4e:2b:c0:94:fc:5f:82:f9:c7: e0:ec:6f:17:95:57:22:5a:9b:34:10:81:60:64:e2: 67:3a:be:3d:e6:fa:c5:0e:e9:c4:fc:b2:06:b6:db: 67:7f:30:78:a3:81:50:e5:7e:7d:f8:98:95:9a:3f: 80:1d:d9:2e:1f:19:0b:13:af:81:30:cb:ca:8d:5f: 2c:74:99:19:f2:ac:64:fe:eb:03:e8:99:fc:d7:09: 60:a6:fe:b6:79:83:62:86:71:57:4f:a9:18:3d:d7: 9f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DB:38:E5:8C:6D:25:E7:A0:E3:07:F2:78:D1:05:D3:2C:62:58:0A X509v3 Authority Key Identifier: keyid:7E:6A:78:6A:CE:F6:84:F3:77:58:FC:4A:6D:85:17:CA:D1:65:FA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f8:6b:25:49:08:cb:e2:1b:36:00:59:90:a9:66:ef:99:35: e6:d3:93:e1:80:d2:72:88:70:e8:a3:7b:24:0d:b9:da:ff:14: 61:f1:9b:fb:7e:d0:f0:b1:4d:d7:8d:33:7b:97:69:b8:7b:16: 3d:5e:76:ca:91:d5:81:ac:6a:0b:f0:53:df:8c:1a:8d:dc:ea: 4b:b6:53:3c:7c:b3:f1:4f:a3:ba:d0:39:c9:de:55:89:a6:20: 56:bf:82:16:b6:99:30:f4:1f:31:ba:94:48:a4:34:92:72:10: e3:3e:08:8b:50:8e:6d:39:79:74:07:59:08:a8:cf:31:43:28: 1d:fe:6b:90:59:18:0e:f8:76:ab:6d:99:1a:f4:5f:42:18:8c: 7d:34:53:c1:96:ed:87:e7:69:0c:d8:df:65:63:e3:ae:b3:ec: 96:d5:5d:79:e0:87:96:6e:40:bd:29:f6:87:03:fe:c7:1c:67: db:12:0e:f8:bb:8b:66:f3:31:f4:35:96:10:c5:be:85:b7:8a: bd:c0:3e:ba:92:2a:56:00:73:f8:20:ee:af:04:b0:33:cc:e0: 68:28:55:af:7c:3a:87:66:8a:1f:92:dd:bc:80:69:f8:5d:16: 4f:b5:dd:8f:fe:8d:a6:dd:6d:3d:08:a8:b7:69:7d:87:84:5d: bf:c1:4c:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTY4aX/av32RWMGK1qlkBPXu8re8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U2QTc4NkFDRUY2ODRGMzc3NThGQzRBNkQ4NTE3Q0FE MTY1RkE3NzAeFw0yNTExMDUwNzQ3MDBaFw0yNTExMDgxMDU1MDBaMDMxMTAvBgNV BAMTKEQxREIzOEU1OEM2RDI1RTdBMEUzMDdGMjc4RDEwNUQzMkM2MjU4MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQTHacdAuvMVPheuL91V1Ccpfc 2rZypZ9tpQl7I99Z71NF1veilw7VeG73ZEcY0FryQa60WlNhSYJqXLPMdeMiUjx7 f+ANJMD1h5o/w7HtLZ/SDnm3J/R4DG79FqUn4Iq9SRWHo6TCw7C+Li+PK4AXiZTL mrLTmKCkskGSO+z0u7JXOAwruRabbEQ7r4XLxZirI/8azE8CTZANMk4rwJT8X4L5 x+DsbxeVVyJamzQQgWBk4mc6vj3m+sUO6cT8sga222d/MHijgVDlfn34mJWaP4Ad 2S4fGQsTr4Ewy8qNXyx0mRnyrGT+6wPomfzXCWCm/rZ5g2KGcVdPqRg9158TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0ds45YxtJeeg4wfyeNEF0yxiWAowHwYDVR0j BBgwFoAUfmp4as72hPN3WPxKbYUXytFl+ncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjI5MmJhOC1hZDFhLTQxMzktOGMyMC01YjUyNmRhOTcwYmQvMC83RTZBNzg2QUNF RjY4NEYzNzc1OEZDNEE2RDg1MTdDQUQxNjVGQTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U2QTc4NkFDRUY2ODRGMzc3NThGQzRBNkQ4NTE3Q0FEMTY1 RkE3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTIyOTJiYTgtYWQxYS00MTM5LThj MjAtNWI1MjZkYTk3MGJkLzAvN0U2QTc4NkFDRUY2ODRGMzc3NThGQzRBNkQ4NTE3 Q0FEMTY1RkE3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI74ayVJCMviGzYAWZCpZu+ZNebTk+GA0nKI cOijeyQNudr/FGHxm/t+0PCxTdeNM3uXabh7Fj1edsqR1YGsagvwU9+MGo3c6ku2 Uzx8s/FPo7rQOcneVYmmIFa/gha2mTD0HzG6lEikNJJyEOM+CItQjm05eXQHWQio zzFDKB3+a5BZGA74dqttmRr0X0IYjH00U8GW7YfnaQzY32Vj466z7JbVXXngh5Zu QL0p9ocD/sccZ9sSDvi7i2bzMfQ1lhDFvoW3ir3APrqSKlYAc/gg7q8EsDPM4Ggo Va98Oodmih+S3byAafhdFk+13Y/+jabdbT0IqLdpfYeEXb/BTD4= -----END CERTIFICATE-----Generated at Wed Nov 5 23:01:49 2025 by rpki-client