$ rpki-client -vvf repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft File: 722FE79638E6D14E4794815122247CBEC27B8505.mft (raw, json) Hash identifier: ubK0PkVsoksJ70O8nFawgUL6a2aOCq7vj650jWktBwQ= Subject key identifier: A1:3C:82:D1:1A:B7:A8:F8:36:38:EA:23:29:32:B1:80:4F:ED:7A:BA Authority key identifier: 72:2F:E7:96:38:E6:D1:4E:47:94:81:51:22:24:7C:BE:C2:7B:85:05 Certificate issuer: /CN=722FE79638E6D14E4794815122247CBEC27B8505 Certificate serial: 6F1955B43F06271A466F49A6D286EEBD5930EE9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft Manifest number: 03D2 Signing time: Sun 02 Nov 2025 19:10:39 +0000 Manifest this update: Sun 02 Nov 2025 19:05:39 +0000 Manifest next update: Wed 05 Nov 2025 20:06:39 +0000 Files and hashes: 1: 722FE79638E6D14E4794815122247CBEC27B8505.crl (hash: W2YCBE0NXttPEFGxNpyBoeppHLuQCn6SJ6aAQUpKy6I=) 2: 3130332e3136372e3136362e302f32342d3234203d3e20313431393834.roa (hash: Lha8Dc5V7yxaccwl2cB1wpI7D9zABdY3uxyScLd254Q=) 3: 3130332e3136372e3136362e302f32332d3233203d3e20313431393834.roa (hash: uMhuVVCWV6KJ9BoKOLCiDb7P+XJG3YcMCjnNadUtMPc=) 4: 3130332e3136372e3136372e302f32342d3234203d3e20313431393834.roa (hash: mcmmT8pT8SsuE0p1UknEAcW7BeTtM+31BJ7lasnlFWU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.crl rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:19:55:b4:3f:06:27:1a:46:6f:49:a6:d2:86:ee:bd:59:30:ee:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722FE79638E6D14E4794815122247CBEC27B8505 Validity Not Before: Nov 2 19:05:39 2025 GMT Not After : Nov 5 20:06:39 2025 GMT Subject: CN=A13C82D11AB7A8F83638EA232932B1804FED7ABA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4d:c7:0c:ed:67:ed:cb:1f:a5:a4:b2:cf:c8: 4d:5f:20:30:a9:7c:5e:5a:9e:38:24:27:25:6a:28: cb:ba:90:06:4a:9e:63:04:cb:ce:e9:1b:73:3d:25: ef:0d:88:72:55:d3:5f:e0:9d:6c:35:f7:6a:8c:90: 65:9a:53:6a:98:10:2e:26:f7:6c:a9:82:0b:11:b1: 07:28:0a:cd:62:bf:9a:c7:11:b2:01:c3:58:f4:16: 67:b7:7c:be:ce:b7:16:fd:41:b5:01:5d:c9:1f:8c: 6d:46:5a:91:b4:53:ec:9b:c0:77:8a:9e:b3:1a:55: 75:b1:99:3d:b9:68:1d:d3:fd:6b:b9:83:04:da:f1: 02:71:64:59:3d:6f:50:26:f8:4f:9e:b6:db:c3:05: 5a:1e:a9:3a:14:35:9c:71:3c:ee:2b:7b:9e:c2:ea: c4:37:79:47:24:dc:5a:08:8d:d3:29:69:6b:03:60: 7f:5c:d3:35:69:af:33:2b:0d:2e:22:ab:69:a9:7c: af:c3:8b:01:14:a5:cc:7f:0c:02:5a:0e:72:e1:4d: 25:20:ec:b3:4f:36:1c:12:6c:72:3d:1a:f2:11:c9: ba:1f:1c:4d:83:fd:03:5d:db:a4:9c:a1:56:f4:0a: 17:c9:11:cb:31:8a:5e:27:5d:32:69:8b:34:70:28: 14:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3C:82:D1:1A:B7:A8:F8:36:38:EA:23:29:32:B1:80:4F:ED:7A:BA X509v3 Authority Key Identifier: keyid:72:2F:E7:96:38:E6:D1:4E:47:94:81:51:22:24:7C:BE:C2:7B:85:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:fd:a5:a9:ee:8f:55:0e:09:99:d9:a2:1f:cf:75:92:84:26: 0d:be:fa:54:94:46:a7:53:50:cd:b1:82:a2:6a:cb:91:21:2b: f6:8f:40:26:72:8d:ed:a8:c8:5d:31:59:aa:7e:5e:6e:1b:da: 0e:c2:5e:10:0d:7b:28:88:f5:0c:d8:71:b1:89:2a:86:ff:d9: e2:21:12:2d:89:38:3f:0d:3d:88:19:cb:65:81:6d:fb:36:40: 2d:b2:f9:e1:dc:ba:64:13:75:f3:1c:f7:89:ad:04:68:cc:27: 4b:f3:ef:2e:93:e0:60:8f:7b:20:9a:f5:7c:d3:55:7b:ec:95: 63:4f:8e:aa:5b:dc:32:6b:4d:be:04:1f:fa:da:bd:78:b4:e6: 16:fc:e3:c5:b6:61:14:43:cb:e6:dd:49:9d:78:48:82:81:0c: bf:b1:ee:d3:5a:6c:22:c2:18:72:90:46:8d:ba:bc:a9:55:38: 59:15:2f:36:03:75:dc:6e:0d:c6:ad:74:ee:45:17:02:29:d1: 2f:bf:26:01:1d:3b:53:29:49:21:55:4f:7b:ae:54:aa:6c:bf: 07:cf:83:76:2d:49:17:66:a3:a0:3c:f1:42:1f:ee:53:0a:1e: 06:7b:50:e0:73:4c:14:8e:99:4d:1d:8d:96:58:22:ba:43:99: 16:e2:dd:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbxlVtD8GJxpGb0mm0obuvVkw7p4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzIyRkU3OTYzOEU2RDE0RTQ3OTQ4MTUxMjIyNDdDQkVD MjdCODUwNTAeFw0yNTExMDIxOTA1MzlaFw0yNTExMDUyMDA2MzlaMDMxMTAvBgNV BAMTKEExM0M4MkQxMUFCN0E4RjgzNjM4RUEyMzI5MzJCMTgwNEZFRDdBQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKTccM7Wftyx+lpLLPyE1fIDCp fF5anjgkJyVqKMu6kAZKnmMEy87pG3M9Je8NiHJV01/gnWw192qMkGWaU2qYEC4m 92ypggsRsQcoCs1iv5rHEbIBw1j0Fme3fL7Otxb9QbUBXckfjG1GWpG0U+ybwHeK nrMaVXWxmT25aB3T/Wu5gwTa8QJxZFk9b1Am+E+ettvDBVoeqToUNZxxPO4re57C 6sQ3eUck3FoIjdMpaWsDYH9c0zVprzMrDS4iq2mpfK/DiwEUpcx/DAJaDnLhTSUg 7LNPNhwSbHI9GvIRybofHE2D/QNd26ScoVb0ChfJEcsxil4nXTJpizRwKBT7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoTyC0Rq3qPg2OOojKTKxgE/terowHwYDVR0j BBgwFoAUci/nljjm0U5HlIFRIiR8vsJ7hQUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTQwY2Y4MC05MzE1LTQyYzEtODQ0ZS1iYjAzNjIyYTA1YzEvMC83MjJGRTc5NjM4 RTZEMTRFNDc5NDgxNTEyMjI0N0NCRUMyN0I4NTA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzIyRkU3OTYzOEU2RDE0RTQ3OTQ4MTUxMjIyNDdDQkVDMjdC ODUwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU0MGNmODAtOTMxNS00MmMxLTg0 NGUtYmIwMzYyMmEwNWMxLzAvNzIyRkU3OTYzOEU2RDE0RTQ3OTQ4MTUxMjIyNDdD QkVDMjdCODUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN79panuj1UOCZnZoh/PdZKEJg2++lSURqdT UM2xgqJqy5EhK/aPQCZyje2oyF0xWap+Xm4b2g7CXhANeyiI9QzYcbGJKob/2eIh Ei2JOD8NPYgZy2WBbfs2QC2y+eHcumQTdfMc94mtBGjMJ0vz7y6T4GCPeyCa9XzT VXvslWNPjqpb3DJrTb4EH/ravXi05hb848W2YRRDy+bdSZ14SIKBDL+x7tNabCLC GHKQRo26vKlVOFkVLzYDddxuDcatdO5FFwIp0S+/JgEdO1MpSSFVT3uuVKpsvwfP g3YtSRdmo6A88UIf7lMKHgZ7UOBzTBSOmU0djZZYIrpDmRbi3UE= -----END CERTIFICATE-----Generated at Tue Nov 4 16:46:54 2025 by rpki-client