$ rpki-client -vvf repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft File: 7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft (raw, json) Hash identifier: O+kGfwCPGSW5k8P6RNFUit56zRvJ2LzxKlukqjN81z4= Subject key identifier: CD:76:8E:F6:D6:8F:55:AB:10:B4:77:A2:10:B6:93:FC:1D:F2:F0:55 Authority key identifier: 7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38 Certificate issuer: /CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038 Certificate serial: 04A3D1DB298C56B2746B9CBD7BF8FA64B9929525 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft Manifest number: 039D Signing time: Wed 05 Nov 2025 06:42:05 +0000 Manifest this update: Wed 05 Nov 2025 06:37:05 +0000 Manifest next update: Sat 08 Nov 2025 08:24:05 +0000 Files and hashes: 1: 7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl (hash: NqGlNx5p9B78XaXuPOQm5UhJAArbB5qvrXflO6qkx+I=) 2: 3130332e3136372e33302e302f32332d3234203d3e203137393935.roa (hash: jJAIyVbfrGhaQ1dlxzFUdHOYskMs8jKydFWI9VuwVq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 08:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:a3:d1:db:29:8c:56:b2:74:6b:9c:bd:7b:f8:fa:64:b9:92:95:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038 Validity Not Before: Nov 5 06:37:05 2025 GMT Not After : Nov 8 08:24:05 2025 GMT Subject: CN=CD768EF6D68F55AB10B477A210B693FC1DF2F055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b0:05:03:ad:f6:42:fe:b1:73:41:1e:26:2a: 4e:2d:45:a6:ad:6d:56:c7:c0:a5:72:4a:68:be:f6: 95:c5:a3:a5:f2:1b:eb:63:ab:fb:81:db:b5:9e:ce: 98:88:1e:ce:39:3d:46:99:65:81:7d:7a:9c:a5:c4: 63:06:5e:83:ef:a7:4a:ca:4c:42:ba:5f:06:a7:47: e2:9a:3c:6a:2d:a5:ac:ec:b8:a8:0c:ac:4d:b4:5d: 84:1a:5c:66:79:79:cf:5b:da:92:24:d8:d8:21:20: c4:d9:11:bd:ff:18:fc:18:2e:9a:db:17:12:79:84: 4b:56:96:ed:aa:47:b5:ab:50:26:e2:de:f3:8f:11: 4c:d0:ba:21:97:c4:6f:2a:4b:ab:53:aa:2d:74:90: 0b:0f:9d:33:d9:d6:a3:2d:89:1c:46:53:9f:5e:3b: a4:70:22:ba:d0:c0:15:7b:95:0a:4b:8e:6e:2b:3a: b9:8c:dd:d0:81:51:29:ee:ee:ca:13:d7:23:fb:6f: 21:0c:fe:0d:be:7b:2a:0b:ca:54:30:8d:01:44:c3: e3:7b:b4:71:fc:3e:f8:70:c0:2a:e2:c5:91:81:cc: a0:25:dc:38:31:38:5a:e4:f7:cc:25:c3:2b:48:c9: f1:38:d9:11:3e:97:42:c2:d7:20:70:9b:8b:ef:4a: 8b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:76:8E:F6:D6:8F:55:AB:10:B4:77:A2:10:B6:93:FC:1D:F2:F0:55 X509v3 Authority Key Identifier: keyid:7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:0e:c0:34:1f:24:90:b8:3c:f4:e9:66:ab:26:67:30:45:08: f0:3e:11:a2:44:8c:c0:6d:9a:95:b8:fb:29:db:a7:49:72:65: 5a:ca:52:03:b5:a5:1d:af:7f:96:ba:3a:e1:b5:5a:52:03:ee: 5d:b4:9c:d3:30:64:ea:82:54:73:52:2a:11:ea:0b:c8:c0:4f: 19:24:37:a3:96:b2:2c:f5:27:f1:6b:63:a9:75:5c:6a:1a:ce: ea:f3:01:8c:e0:6f:04:96:d7:de:af:9e:72:12:db:b3:1a:0b: b8:86:33:6a:10:a0:9a:c9:b7:17:bc:17:93:3f:b7:63:ba:e6: d7:6a:ea:ab:d5:76:94:aa:2f:fd:96:fd:a6:46:2e:1b:74:6b: e7:ea:b1:37:5d:e0:91:7c:6f:b1:ec:1d:d8:d9:80:f0:f3:8a: b6:22:3e:ac:79:b1:3a:f2:d9:4d:06:8c:70:cf:80:1a:2a:e9: 5d:29:87:85:23:48:e5:4a:4a:e6:03:54:20:24:e9:8c:ef:62: 90:e4:53:97:38:c6:ad:76:a1:74:1d:61:05:d7:91:8e:7d:80: f6:50:af:2e:d0:b8:20:17:0d:d7:65:7f:7a:72:23:6d:cd:9a: 8f:4e:58:d4:bf:11:3b:80:30:a3:76:b8:8f:d6:c7:c8:bb:fc: ad:00:0d:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBKPR2ymMVrJ0a5y9e/j6ZLmSlSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlGODdC QUEwRTAzODAeFw0yNTExMDUwNjM3MDVaFw0yNTExMDgwODI0MDVaMDMxMTAvBgNV BAMTKENENzY4RUY2RDY4RjU1QUIxMEI0NzdBMjEwQjY5M0ZDMURGMkYwNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGsAUDrfZC/rFzQR4mKk4tRaat bVbHwKVySmi+9pXFo6XyG+tjq/uB27WezpiIHs45PUaZZYF9epylxGMGXoPvp0rK TEK6XwanR+KaPGotpazsuKgMrE20XYQaXGZ5ec9b2pIk2NghIMTZEb3/GPwYLprb FxJ5hEtWlu2qR7WrUCbi3vOPEUzQuiGXxG8qS6tTqi10kAsPnTPZ1qMtiRxGU59e O6RwIrrQwBV7lQpLjm4rOrmM3dCBUSnu7soT1yP7byEM/g2+eyoLylQwjQFEw+N7 tHH8PvhwwCrixZGBzKAl3DgxOFrk98wlwytIyfE42RE+l0LC1yBwm4vvSosTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzXaO9taPVasQtHeiELaT/B3y8FUwHwYDVR0j BBgwFoAUe5RZdKeejHfLAvlElbqfh7qg4DgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzYzNWNlOS0wZWE1LTQ3ZDgtOWZjYy1jYWQxYzlmMDZmYmUvMC83Qjk0NTk3NEE3 OUU4Qzc3Q0IwMkY5NDQ5NUJBOUY4N0JBQTBFMDM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlGODdCQUEw RTAzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M2MzVjZTktMGVhNS00N2Q4LTlm Y2MtY2FkMWM5ZjA2ZmJlLzAvN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlG ODdCQUEwRTAzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACEOwDQfJJC4PPTpZqsmZzBFCPA+EaJEjMBt mpW4+ynbp0lyZVrKUgO1pR2vf5a6OuG1WlID7l20nNMwZOqCVHNSKhHqC8jATxkk N6OWsiz1J/FrY6l1XGoazurzAYzgbwSW196vnnIS27MaC7iGM2oQoJrJtxe8F5M/ t2O65tdq6qvVdpSqL/2W/aZGLht0a+fqsTdd4JF8b7HsHdjZgPDzirYiPqx5sTry 2U0GjHDPgBoq6V0ph4UjSOVKSuYDVCAk6YzvYpDkU5c4xq12oXQdYQXXkY59gPZQ ry7QuCAXDddlf3pyI23Nmo9OWNS/ETuAMKN2uI/Wx8i7/K0ADRY= -----END CERTIFICATE-----Generated at Wed Nov 5 10:15:16 2025 by rpki-client