$ rpki-client -vvf repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft File: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft (raw, json) Hash identifier: EQuGlAKZxMXOx1/LLPbjJ57uOKrFYTchMHkeL0o3yzg= Subject key identifier: AC:7F:E2:26:81:C7:83:C9:30:F2:DA:42:92:56:73:37:19:A8:D4:82 Authority key identifier: 4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19 Certificate issuer: /CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319 Certificate serial: 5F7AD36AC35321CCE24597034E4461D0E95F806B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft Manifest number: 022C Signing time: Mon 03 Nov 2025 15:41:22 +0000 Manifest this update: Mon 03 Nov 2025 15:36:22 +0000 Manifest next update: Thu 06 Nov 2025 23:45:22 +0000 Files and hashes: 1: 3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa (hash: BplHdHRvA1GeP43VsiSGj8a+Gmuq6dP6VgR2vhuZ0uU=) 2: 3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa (hash: yg4jobWhxttigVY/iZoK6bsKdtykwi2az+8aCa0nyW4=) 3: 3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa (hash: TWsMpo4cWVJOgLuAED46zFpQBaqLsvvEiv7xGtW44bE=) 4: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl (hash: 5GWZr33pznS2YNte8oCDtuKD/wy5AT8A0JZf6WUfwjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 23:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:7a:d3:6a:c3:53:21:cc:e2:45:97:03:4e:44:61:d0:e9:5f:80:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319 Validity Not Before: Nov 3 15:36:22 2025 GMT Not After : Nov 6 23:45:22 2025 GMT Subject: CN=AC7FE22681C783C930F2DA429256733719A8D482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d3:28:a4:54:60:95:ac:2e:47:aa:ec:ab:d1: 5a:bf:f4:5b:bd:b5:30:77:c2:43:47:5e:00:af:ee: f4:a4:c9:d5:1e:e5:b5:27:1e:d7:72:19:64:77:16: 64:68:72:10:19:39:17:d1:00:9b:7f:6a:6c:ea:68: b6:a6:1c:62:4e:69:7e:d5:33:4d:c0:61:8b:06:c4: 25:10:64:74:c4:77:fa:9c:2f:b6:4b:d7:82:50:f1: 36:aa:ca:83:94:e2:b5:19:28:fc:03:1c:84:9b:57: 17:f9:3d:92:70:77:92:f1:ee:86:96:a5:8b:7c:06: 05:f5:67:26:3a:07:11:57:50:a3:fa:69:1a:56:d0: 7d:f0:0f:88:2f:ba:ef:e4:4f:52:7c:63:81:ff:9f: ca:ac:6a:d6:a6:9c:a3:fe:58:78:28:c3:a2:24:6c: 3b:c6:88:85:ca:85:ef:93:74:2e:84:a8:9f:2b:78: 22:5f:ad:38:8d:83:8f:5e:e2:e4:20:b0:81:f1:e5: 41:7d:7c:67:f4:3c:31:a5:91:c9:06:70:c4:81:fb: 0c:45:da:cd:d9:a6:78:0f:b2:76:2a:50:1c:97:90: 0a:0f:7c:96:c9:29:09:73:9d:a8:d6:38:c5:09:7b: 32:f4:8b:bc:b4:ad:4e:d7:eb:9a:d4:25:34:7b:3a: 4b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:7F:E2:26:81:C7:83:C9:30:F2:DA:42:92:56:73:37:19:A8:D4:82 X509v3 Authority Key Identifier: keyid:4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:8f:6d:1c:24:4c:65:0d:10:13:25:95:1a:8d:33:a5:41:45: 36:82:6c:f4:53:21:fe:4e:83:8e:d5:c3:fd:a6:09:ed:58:70: 6b:88:5a:f4:8d:3f:85:0f:b0:2c:70:a7:e0:b2:da:c5:70:c0: 46:92:82:46:87:ee:4b:d6:ba:36:ad:bc:26:99:7b:49:68:e4: 82:8e:cc:7c:01:25:e8:5c:e4:9f:3d:32:f2:ce:2f:b4:1b:77: 92:de:b9:93:f4:7b:ae:ed:cc:60:62:8a:7a:31:f5:79:c1:12: 9a:ea:6f:57:38:cc:27:12:60:33:f5:9d:6e:85:88:b6:2f:60: e5:ee:d6:e4:08:1c:d9:9f:6e:f2:60:9a:95:a1:e2:ed:3e:58: 17:c0:79:0c:de:a0:cf:25:f5:37:8f:97:6f:a0:92:bc:cf:2d: d1:86:16:18:7a:5b:11:66:95:9c:06:33:8b:d7:73:03:05:5f: 94:f8:d0:d9:2e:fe:4e:be:8a:8b:57:84:49:55:f5:49:0b:75: 26:15:8b:95:60:ed:3d:da:93:f6:b4:49:35:91:87:36:c9:50: ea:6c:ec:a7:9e:18:97:97:e5:4e:7a:6f:44:60:de:69:2e:2c: 69:34:6d:4e:6f:10:1f:2e:f6:37:c7:90:be:28:0c:d0:6f:6e: 87:bf:f7:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX3rTasNTIcziRZcDTkRh0OlfgGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4 QjZCRDMxOTAeFw0yNTExMDMxNTM2MjJaFw0yNTExMDYyMzQ1MjJaMDMxMTAvBgNV BAMTKEFDN0ZFMjI2ODFDNzgzQzkzMEYyREE0MjkyNTY3MzM3MTlBOEQ0ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK0yikVGCVrC5Hquyr0Vq/9Fu9 tTB3wkNHXgCv7vSkydUe5bUnHtdyGWR3FmRochAZORfRAJt/amzqaLamHGJOaX7V M03AYYsGxCUQZHTEd/qcL7ZL14JQ8TaqyoOU4rUZKPwDHISbVxf5PZJwd5Lx7oaW pYt8BgX1ZyY6BxFXUKP6aRpW0H3wD4gvuu/kT1J8Y4H/n8qsatamnKP+WHgow6Ik bDvGiIXKhe+TdC6EqJ8reCJfrTiNg49e4uQgsIHx5UF9fGf0PDGlkckGcMSB+wxF 2s3ZpngPsnYqUByXkAoPfJbJKQlznajWOMUJezL0i7y0rU7X65rUJTR7OktpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrH/iJoHHg8kw8tpCklZzNxmo1IIwHwYDVR0j BBgwFoAUTs99+wn7O1wh3eZhFQuVdotr0xkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDAzNWIzYi1lNmM1LTQ3ZjgtOTliNC0xY2IwMzI2ZWRhZTUvMC80RUNGN0RGQjA5 RkIzQjVDMjFEREU2NjExNTBCOTU3NjhCNkJEMzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4QjZC RDMxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwMzViM2ItZTZjNS00N2Y4LTk5 YjQtMWNiMDMyNmVkYWU1LzAvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1 NzY4QjZCRDMxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMePbRwkTGUNEBMllRqNM6VBRTaCbPRTIf5O g47Vw/2mCe1YcGuIWvSNP4UPsCxwp+Cy2sVwwEaSgkaH7kvWujatvCaZe0lo5IKO zHwBJehc5J89MvLOL7Qbd5LeuZP0e67tzGBiinox9XnBEprqb1c4zCcSYDP1nW6F iLYvYOXu1uQIHNmfbvJgmpWh4u0+WBfAeQzeoM8l9TePl2+gkrzPLdGGFhh6WxFm lZwGM4vXcwMFX5T40Nku/k6+iotXhElV9UkLdSYVi5Vg7T3ak/a0STWRhzbJUOps 7KeeGJeX5U56b0Rg3mkuLGk0bU5vEB8u9jfHkL4oDNBvboe/95k= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:39 2025 by rpki-client