$ rpki-client -vvf repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft File: 407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft (raw, json) Hash identifier: y1mvq3avSYj2rO8xqWiy7nSblAHIoCPBvuiBbIlMAeg= Subject key identifier: C2:E4:97:73:41:CC:CD:E0:07:1E:45:C7:6C:C5:38:CD:52:EF:8B:F7 Authority key identifier: 40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 Certificate issuer: /CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Certificate serial: 5FB604F0DE492A247EC140BC4FB61B4E29940530 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft Manifest number: CE Signing time: Sat 01 Nov 2025 18:52:23 +0000 Manifest this update: Sat 01 Nov 2025 18:47:23 +0000 Manifest next update: Wed 05 Nov 2025 03:24:23 +0000 Files and hashes: 1: 3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa (hash: NqmMORtYspcubuoIhO/lJNy3KlFyaaaNEdp/IXvq0Ng=) 2: 3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa (hash: Gj+dL3k6BLOV8ougeJn8Z24XkFylft6ZOL9dKAW0YtU=) 3: 407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl (hash: EUmAH+eCIxS4UcuzmdvHAkW2e5b3KPSItNfpHIy6KVA=) 4: 323030313a6466313a366263303a3a2f34382d3438203d3e20313431363036.roa (hash: LnoUiVTC+YkZ5Y/4/Q1S1mXaeabC5U6lsaInD923/gY=) 5: 3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa (hash: gOnGfuRTcZIR+30ZYAMikHYwYT1lMfTYagdIRfIVS+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 03:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:b6:04:f0:de:49:2a:24:7e:c1:40:bc:4f:b6:1b:4e:29:94:05:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Validity Not Before: Nov 1 18:47:23 2025 GMT Not After : Nov 5 03:24:23 2025 GMT Subject: CN=C2E4977341CCCDE0071E45C76CC538CD52EF8BF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1e:b4:03:80:a4:2e:b5:36:8a:37:08:69:19: eb:ff:ad:2b:46:9f:41:b1:38:fa:31:3f:35:e5:0b: cf:a6:a7:3c:7e:c9:ff:47:4e:1a:8c:9e:91:8c:d7: a1:8a:db:b7:97:e7:11:71:51:85:03:35:2b:79:73: 67:90:7a:55:e2:9c:50:13:c6:80:63:cb:a5:73:14: 28:f2:6c:67:a4:95:a7:53:78:ff:4e:69:c7:67:d5: df:78:d3:4c:c7:be:52:ad:3d:96:fc:e6:3d:a9:d6: e6:9f:5b:82:c7:e9:4d:d3:36:45:1d:67:a5:5d:a5: 49:17:bd:7d:77:24:0e:7a:35:61:13:c2:3d:98:d3: 1c:e9:c6:48:6b:c4:84:b9:87:ab:17:3d:9a:11:39: 9e:02:1b:c2:24:61:d3:08:a3:ba:d6:7d:2c:ef:05: f5:32:de:25:fe:5f:2b:da:d8:cb:12:bc:d7:db:5c: 00:73:4a:ae:88:1d:19:3b:3e:13:90:81:fe:c6:4b: fc:8a:2b:91:2e:63:b5:fb:fc:bf:70:f5:96:51:cd: 37:bb:7f:c2:35:6d:04:20:ae:31:ca:c5:21:e7:38: 0c:1e:c6:80:8b:4e:a9:c7:4f:4d:0d:c2:59:ff:59: 8e:7e:f5:df:23:19:14:ca:9c:1d:17:21:6e:a1:aa: 67:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E4:97:73:41:CC:CD:E0:07:1E:45:C7:6C:C5:38:CD:52:EF:8B:F7 X509v3 Authority Key Identifier: keyid:40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:f4:c6:03:06:a2:52:89:19:ea:e5:8a:e2:2e:fc:4c:1d:24: 12:49:ed:bb:a8:09:27:4b:5d:52:97:9c:ab:51:d2:42:ef:2c: 32:a2:56:fa:71:d5:87:18:0b:7e:34:e2:9c:c4:92:1e:a6:5d: 43:f9:77:44:6f:3f:d8:6b:9c:b0:2a:b0:ce:00:c6:82:b0:01: 23:33:68:e6:79:1b:3c:6f:7d:2a:d4:99:b6:9c:5d:cc:7a:e8: cd:a0:6f:65:c5:20:24:d9:f5:36:4c:2c:ed:99:33:1d:21:96: 9f:4b:56:02:c3:93:3e:f0:84:96:42:08:97:06:5c:6d:63:98: 06:b0:dd:71:11:02:9b:0c:68:4b:9f:92:d8:09:97:52:66:eb: e0:96:f0:ca:e6:80:a2:25:0c:72:0e:27:f6:f5:af:8d:a3:8c: 17:94:8a:23:e4:43:af:ef:36:0d:d6:1e:07:2e:06:c0:fb:27: f1:69:5b:bf:b5:5e:65:94:49:c2:c3:21:36:80:9b:e5:15:97: 8f:e4:46:3a:b7:0f:18:43:e8:98:a3:57:af:da:27:b7:b8:e3: ad:f7:7b:ab:a0:1e:8f:c2:26:4f:f3:9a:aa:92:55:67:7e:35: 65:4f:2d:e2:16:60:fa:ac:28:15:b6:cc:4c:25:ec:b0:3e:29: 80:d4:d5:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX7YE8N5JKiR+wUC8T7YbTimUBTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNF NDg2NTNDODAeFw0yNTExMDExODQ3MjNaFw0yNTExMDUwMzI0MjNaMDMxMTAvBgNV BAMTKEMyRTQ5NzczNDFDQ0NERTAwNzFFNDVDNzZDQzUzOENENTJFRjhCRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqHrQDgKQutTaKNwhpGev/rStG n0GxOPoxPzXlC8+mpzx+yf9HThqMnpGM16GK27eX5xFxUYUDNSt5c2eQelXinFAT xoBjy6VzFCjybGekladTeP9Oacdn1d9400zHvlKtPZb85j2p1uafW4LH6U3TNkUd Z6VdpUkXvX13JA56NWETwj2Y0xzpxkhrxIS5h6sXPZoROZ4CG8IkYdMIo7rWfSzv BfUy3iX+Xyva2MsSvNfbXABzSq6IHRk7PhOQgf7GS/yKK5EuY7X7/L9w9ZZRzTe7 f8I1bQQgrjHKxSHnOAwexoCLTqnHT00Nwln/WY5+9d8jGRTKnB0XIW6hqmcPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwuSXc0HMzeAHHkXHbMU4zVLvi/cwHwYDVR0j BBgwFoAUQHt8fuCe26oKNSXiCf+Ok+SGU8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDY0YmY2YS00MzAyLTQ2MGYtOTY2OS0wOWE1MGE3M2FmMWEvMC80MDdCN0M3RUUw OUVEQkFBMEEzNTI1RTIwOUZGOEU5M0U0ODY1M0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNFNDg2 NTNDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ2NGJmNmEtNDMwMi00NjBmLTk2 NjktMDlhNTBhNzNhZjFhLzAvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhF OTNFNDg2NTNDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAT0xgMGolKJGerliuIu/EwdJBJJ7buoCSdL XVKXnKtR0kLvLDKiVvpx1YcYC3404pzEkh6mXUP5d0RvP9hrnLAqsM4AxoKwASMz aOZ5GzxvfSrUmbacXcx66M2gb2XFICTZ9TZMLO2ZMx0hlp9LVgLDkz7whJZCCJcG XG1jmAaw3XERApsMaEufktgJl1Jm6+CW8MrmgKIlDHIOJ/b1r42jjBeUiiPkQ6/v Ng3WHgcuBsD7J/FpW7+1XmWUScLDITaAm+UVl4/kRjq3DxhD6JijV6/aJ7e44633 e6ugHo/CJk/zmqqSVWd+NWVPLeIWYPqsKBW2zEwl7LA+KYDU1fo= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:37 2025 by rpki-client