$ rpki-client -vvf repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft File: 407919FF69A512DDAE7CCD48BE288F17073A5512.mft (raw, json) Hash identifier: jhqOc6ah6EMIroxsyvbw2zwHKgu/fFBcQ4EBWwCg3ew= Subject key identifier: A3:B5:4C:AD:B3:52:39:8E:07:11:73:23:9F:C4:41:1F:B9:E4:9D:F6 Authority key identifier: 40:79:19:FF:69:A5:12:DD:AE:7C:CD:48:BE:28:8F:17:07:3A:55:12 Certificate issuer: /CN=407919FF69A512DDAE7CCD48BE288F17073A5512 Certificate serial: 6034B8B75DB85A71CE9FBB24BFA2E34F309021F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft Manifest number: C8 Signing time: Sun 02 Nov 2025 14:21:47 +0000 Manifest this update: Sun 02 Nov 2025 14:16:47 +0000 Manifest next update: Wed 05 Nov 2025 15:17:47 +0000 Files and hashes: 1: 407919FF69A512DDAE7CCD48BE288F17073A5512.crl (hash: WLmvSsQpILunOv9o4FWaul4SKiBS9KjT2fBCLvsCoAs=) 2: 3130332e3132302e3233322e302f32342d3234203d3e20313337333834.roa (hash: rgW49bD9jOG05sHGGVXJ7K4U0Fs52fl5W3GSqo/JMxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.crl rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 15:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:34:b8:b7:5d:b8:5a:71:ce:9f:bb:24:bf:a2:e3:4f:30:90:21:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407919FF69A512DDAE7CCD48BE288F17073A5512 Validity Not Before: Nov 2 14:16:47 2025 GMT Not After : Nov 5 15:17:47 2025 GMT Subject: CN=A3B54CADB352398E071173239FC4411FB9E49DF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3b:46:c2:45:ac:a9:a7:c3:5f:2d:5e:5a:56: 08:74:a3:f8:95:f7:86:e5:14:08:fd:12:7c:e3:fd: 2e:7c:7a:bd:1d:4d:d1:06:95:e3:14:23:5d:a7:07: 03:07:a1:82:86:3d:0f:f4:ea:84:c5:c6:d6:9d:ae: 6c:1c:ce:78:6e:43:2c:8c:16:5f:57:41:4e:8d:0c: c8:a8:f6:66:cc:9b:05:06:91:dc:e5:b6:0b:49:07: cf:eb:10:f3:3d:6e:a8:33:56:ae:50:3b:44:0e:b3: 3f:0a:2a:34:ae:92:3a:f3:bf:f7:9c:13:ac:d9:5f: a4:00:19:51:ee:69:91:99:c7:73:48:b4:2a:8b:e9: 21:d3:be:d1:b6:08:5c:ee:c6:05:68:c7:12:15:aa: 87:0e:f8:00:41:9c:b5:06:ba:f4:f4:9c:c9:53:07: 5d:de:fd:f8:01:cd:23:43:75:86:8b:e6:25:97:8a: 12:5b:65:f3:df:50:18:3a:ed:5a:df:6e:7c:f6:14: 6b:1b:73:aa:d2:87:e7:b9:2c:b1:ed:eb:e5:6d:c9: 94:23:38:f1:70:c0:c5:a9:66:10:2a:ed:c4:a3:90: d0:4d:9e:77:3d:47:04:8b:35:da:17:02:12:66:fe: cb:fe:e7:4c:2b:a3:1e:f8:53:ed:7a:ad:41:f8:7d: 7a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B5:4C:AD:B3:52:39:8E:07:11:73:23:9F:C4:41:1F:B9:E4:9D:F6 X509v3 Authority Key Identifier: keyid:40:79:19:FF:69:A5:12:DD:AE:7C:CD:48:BE:28:8F:17:07:3A:55:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:7c:7f:c7:21:41:95:27:36:57:ee:7f:62:60:ff:be:38:df: c3:97:7d:77:38:98:a6:32:b0:2d:54:10:db:d6:e3:ca:29:85: 54:d0:ee:09:5b:c3:4f:b4:c7:f7:17:54:7c:75:e9:8d:00:3f: a0:e1:4c:51:34:94:4a:02:28:7e:7c:5e:87:c2:3c:58:a3:33: d0:51:05:e0:23:22:56:78:54:2d:d6:cc:05:ea:fa:3d:f2:0a: f5:83:88:5e:9b:cb:77:04:08:47:2b:0c:7b:4a:ba:7d:f9:15: a9:dc:4a:7a:35:ef:38:fd:66:e7:aa:71:f8:71:26:15:1b:f4: 85:ea:d7:c4:d1:14:c8:49:c5:39:cf:e4:a5:23:c7:44:ee:d8: 8a:1d:3e:33:30:d4:45:92:8d:19:aa:26:d5:97:5d:60:74:4f: f5:4e:fd:33:9e:be:e8:06:73:6c:b0:a4:be:99:ef:3a:19:33: 7c:4d:be:a4:a9:d8:f5:7e:03:3c:86:6f:ac:71:dd:dd:16:23: 45:a9:c3:d3:4c:93:00:64:b3:ce:ca:af:a5:34:bf:d9:b8:3a: a4:f9:0e:f4:bf:10:25:90:2c:f7:f2:75:9a:28:99:fc:e6:73: af:df:b7:a2:8a:b4:eb:6c:19:ff:77:16:fc:18:0b:18:06:74: 13:6f:1a:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYDS4t124WnHOn7skv6LjTzCQIfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhGMTcw NzNBNTUxMjAeFw0yNTExMDIxNDE2NDdaFw0yNTExMDUxNTE3NDdaMDMxMTAvBgNV BAMTKEEzQjU0Q0FEQjM1MjM5OEUwNzExNzMyMzlGQzQ0MTFGQjlFNDlERjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9O0bCRaypp8NfLV5aVgh0o/iV 94blFAj9Enzj/S58er0dTdEGleMUI12nBwMHoYKGPQ/06oTFxtadrmwcznhuQyyM Fl9XQU6NDMio9mbMmwUGkdzltgtJB8/rEPM9bqgzVq5QO0QOsz8KKjSukjrzv/ec E6zZX6QAGVHuaZGZx3NItCqL6SHTvtG2CFzuxgVoxxIVqocO+ABBnLUGuvT0nMlT B13e/fgBzSNDdYaL5iWXihJbZfPfUBg67Vrfbnz2FGsbc6rSh+e5LLHt6+VtyZQj OPFwwMWpZhAq7cSjkNBNnnc9RwSLNdoXAhJm/sv+50wrox74U+16rUH4fXo3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo7VMrbNSOY4HEXMjn8RBH7nknfYwHwYDVR0j BBgwFoAUQHkZ/2mlEt2ufM1IviiPFwc6VRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmMwMGY3OS00OWViLTQ1MjUtOTAyNi1hMjM4ZmY0NDgwNzAvMC80MDc5MTlGRjY5 QTUxMkREQUU3Q0NENDhCRTI4OEYxNzA3M0E1NTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhGMTcwNzNB NTUxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJjMDBmNzktNDllYi00NTI1LTkw MjYtYTIzOGZmNDQ4MDcwLzAvNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhG MTcwNzNBNTUxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHl8f8chQZUnNlfuf2Jg/74438OXfXc4mKYy sC1UENvW48ophVTQ7glbw0+0x/cXVHx16Y0AP6DhTFE0lEoCKH58XofCPFijM9BR BeAjIlZ4VC3WzAXq+j3yCvWDiF6by3cECEcrDHtKun35FancSno17zj9Zueqcfhx JhUb9IXq18TRFMhJxTnP5KUjx0Tu2IodPjMw1EWSjRmqJtWXXWB0T/VO/TOevugG c2ywpL6Z7zoZM3xNvqSp2PV+AzyGb6xx3d0WI0Wpw9NMkwBks87Kr6U0v9m4OqT5 DvS/ECWQLPfydZoomfzmc6/ft6KKtOtsGf93FvwYCxgGdBNvGiM= -----END CERTIFICATE-----Generated at Tue Nov 4 12:39:54 2025 by rpki-client