$ rpki-client -vvf repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft File: 7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft (raw, json) Hash identifier: oCSdbkqLJtgw2IDbxWvWkkX6JIoY6tSU1JGZn/89CZY= Subject key identifier: 24:BF:0C:04:2A:78:4C:9F:BC:E8:6E:CF:35:C7:97:B5:1E:CE:B0:5C Authority key identifier: 7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4 Certificate issuer: /CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4 Certificate serial: 1DCC10086606ABE3D23C9E1690B8820A3D65D623 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft Manifest number: A1 Signing time: Mon 03 Nov 2025 15:00:49 +0000 Manifest this update: Mon 03 Nov 2025 14:55:49 +0000 Manifest next update: Thu 06 Nov 2025 18:43:49 +0000 Files and hashes: 1: 3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa (hash: da7FZv0wwu0NgAl+k4INGAA7MG+JDxJrpPp3i49uNg8=) 2: 7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl (hash: 3Dh8qyyy9nNUGP64y2VMAZU01HEoqw3XZ7ONlucBIpA=) 3: 3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa (hash: oiY8bQ+d3an3MLZGl2PnLxS3g6sHhrZaRpjEwIP9wlY=) 4: 3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa (hash: 0rqaY28k1qKmtYy4sqNJeu6TR3NmCct3st2uKHz4Kkw=) 5: 3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa (hash: qDPmCUCvpl2ggw/iTR1lXmer3/EVY6LQXV8BhrJSCJQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 18:43:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:cc:10:08:66:06:ab:e3:d2:3c:9e:16:90:b8:82:0a:3d:65:d6:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4 Validity Not Before: Nov 3 14:55:49 2025 GMT Not After : Nov 6 18:43:49 2025 GMT Subject: CN=24BF0C042A784C9FBCE86ECF35C797B51ECEB05C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d8:3f:f1:b0:43:d2:f1:9f:fe:97:f2:88:a5: cf:31:b2:f5:d8:8f:b2:08:5c:07:cc:9d:a1:22:a3: 75:40:59:3f:98:fa:82:b2:c0:59:3e:bd:6b:c2:56: 3b:b2:96:6a:4e:10:7a:0d:df:0a:aa:76:4b:37:e3: 06:d2:92:80:af:23:d0:aa:33:85:7a:78:fe:d0:38: c0:df:84:9a:60:b0:f0:08:ba:8e:48:98:0e:38:52: 95:6f:7a:08:7e:a8:25:68:6c:24:8f:8b:56:2d:be: e6:94:67:88:bd:3c:50:9d:f2:1f:0e:d8:05:af:99: a9:ff:42:b7:aa:29:15:85:24:5d:8a:b7:36:04:ab: b7:1a:d3:c9:a7:b5:d9:cb:c5:53:a0:b0:de:8e:ae: 14:ce:14:a8:b3:c2:99:53:8b:b8:1b:2b:bf:49:ce: 68:97:8f:6b:04:b4:64:ac:f2:1c:0d:d3:87:e5:91: cd:51:65:5f:4d:89:e2:1b:4f:3b:db:f2:fa:ff:d1: bc:0b:78:4d:61:c0:9b:05:93:aa:b8:ba:59:bf:30: f6:65:0c:6b:ed:d6:1c:08:76:5e:10:08:58:f7:27: 0d:22:cb:0b:54:1e:b5:67:d1:2a:10:76:74:46:98: a3:a7:d7:36:32:1c:c0:43:8e:9b:a0:93:b5:28:55: 4d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BF:0C:04:2A:78:4C:9F:BC:E8:6E:CF:35:C7:97:B5:1E:CE:B0:5C X509v3 Authority Key Identifier: keyid:7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:8d:5e:5b:b7:42:8f:cb:96:c8:15:8e:fd:86:c9:c0:c2:0b: d6:65:2e:59:bb:68:10:a8:30:25:8c:77:b9:69:a4:e1:fd:1d: f6:5d:fd:f7:7c:a1:91:d7:ac:b0:4d:e7:fd:a2:27:1a:d9:fa: 2f:6e:5e:22:80:6c:b7:64:d9:f9:b1:ea:29:61:1d:e6:be:08: cd:5e:b6:5f:01:b2:08:c7:74:b0:e4:8f:92:80:a7:70:2b:32: 8c:05:c8:aa:e7:ec:2d:e8:ef:b1:7b:32:04:2c:0f:77:56:41: 62:3c:15:9e:d2:d2:ae:5d:ce:14:64:98:df:82:1d:bd:2a:74: a9:f3:e2:70:34:2a:7c:fc:d6:b6:19:c1:87:d2:d4:3f:84:77: ea:01:fa:8f:e0:26:15:5c:95:e5:63:10:71:8c:07:88:0c:11: ab:09:2e:39:92:07:bf:00:30:92:e6:cd:56:2e:2d:d6:b6:b4: 55:97:9d:28:c5:d6:fa:c2:29:ad:11:82:c0:25:78:bb:34:d0: 95:46:68:94:90:fa:f5:cd:60:26:d4:a0:c3:48:c1:95:0c:f2: 04:21:d3:a2:f4:22:3f:2d:b8:e7:eb:14:58:3e:fb:d9:d2:62: da:c4:38:4c:50:6f:3e:5d:6d:b1:02:a7:ef:a0:89:75:22:29: d6:0e:26:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHcwQCGYGq+PSPJ4WkLiCCj1l1iMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUx MjY3MDZFNDAeFw0yNTExMDMxNDU1NDlaFw0yNTExMDYxODQzNDlaMDMxMTAvBgNV BAMTKDI0QkYwQzA0MkE3ODRDOUZCQ0U4NkVDRjM1Qzc5N0I1MUVDRUIwNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN2D/xsEPS8Z/+l/KIpc8xsvXY j7IIXAfMnaEio3VAWT+Y+oKywFk+vWvCVjuylmpOEHoN3wqqdks34wbSkoCvI9Cq M4V6eP7QOMDfhJpgsPAIuo5ImA44UpVvegh+qCVobCSPi1YtvuaUZ4i9PFCd8h8O 2AWvman/QreqKRWFJF2KtzYEq7ca08mntdnLxVOgsN6OrhTOFKizwplTi7gbK79J zmiXj2sEtGSs8hwN04flkc1RZV9NieIbTzvb8vr/0bwLeE1hwJsFk6q4ulm/MPZl DGvt1hwIdl4QCFj3Jw0iywtUHrVn0SoQdnRGmKOn1zYyHMBDjpugk7UoVU1bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJL8MBCp4TJ+86G7PNceXtR7OsFwwHwYDVR0j BBgwFoAUfVrghZaNx8sxECP36+C/jhJnBuQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmU2M2NkMi1mYjNjLTQxYjItYjk2Yi1hYjIzNDQyMGEyMTEvMC83RDVBRTA4NTk2 OERDN0NCMzExMDIzRjdFQkUwQkY4RTEyNjcwNkU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUxMjY3 MDZFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZlNjNjZDItZmIzYy00MWIyLWI5 NmItYWIyMzQ0MjBhMjExLzAvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJG OEUxMjY3MDZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2NXlu3Qo/LlsgVjv2GycDCC9ZlLlm7aBCo MCWMd7lppOH9HfZd/fd8oZHXrLBN5/2iJxrZ+i9uXiKAbLdk2fmx6ilhHea+CM1e tl8BsgjHdLDkj5KAp3ArMowFyKrn7C3o77F7MgQsD3dWQWI8FZ7S0q5dzhRkmN+C Hb0qdKnz4nA0Knz81rYZwYfS1D+Ed+oB+o/gJhVcleVjEHGMB4gMEasJLjmSB78A MJLmzVYuLda2tFWXnSjF1vrCKa0RgsAleLs00JVGaJSQ+vXNYCbUoMNIwZUM8gQh 06L0Ij8tuOfrFFg++9nSYtrEOExQbz5dbbECp++giXUiKdYOJkI= -----END CERTIFICATE-----Generated at Wed Nov 5 11:15:31 2025 by rpki-client