$ rpki-client -vvf repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft File: 142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft (raw, json) Hash identifier: vgUFd+PdURiKsXp9P/55Qb5R0kAgGVlWJznBw9FZYu4= Subject key identifier: 71:E1:F8:BC:C4:85:67:F8:83:80:5E:20:A0:AE:5A:7B:47:43:18:CE Authority key identifier: 14:2A:78:CA:51:D8:80:42:BA:51:2A:1B:B4:6D:6D:F4:4F:63:BB:D7 Certificate issuer: /CN=142A78CA51D88042BA512A1BB46D6DF44F63BBD7 Certificate serial: 7A8CF7389B35F44E07915E7C1DE0D08D0B188EED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft Manifest number: D2 Signing time: Wed 05 Nov 2025 02:40:37 +0000 Manifest this update: Wed 05 Nov 2025 02:35:37 +0000 Manifest next update: Sat 08 Nov 2025 12:17:37 +0000 Files and hashes: 1: 142A78CA51D88042BA512A1BB46D6DF44F63BBD7.crl (hash: JKWniAGv2MGVR+pb5T6wJUBWmv+s1f41seNTg0dBh3c=) 2: 3136302e32302e3234302e302f32342d3234203d3e20313532383035.roa (hash: Ags6qEj8G1tNVxqoTo734mNPZsVwGq25ouTkNgTgiXA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.crl rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 10:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:8c:f7:38:9b:35:f4:4e:07:91:5e:7c:1d:e0:d0:8d:0b:18:8e:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=142A78CA51D88042BA512A1BB46D6DF44F63BBD7 Validity Not Before: Nov 5 02:35:37 2025 GMT Not After : Nov 8 12:17:37 2025 GMT Subject: CN=71E1F8BCC48567F883805E20A0AE5A7B474318CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6b:3a:a2:e3:69:f4:ec:4b:4f:9f:b0:fb:db: 54:6d:87:f8:dc:e4:3c:4e:fd:dc:97:b7:5a:cf:8b: fd:ab:8d:6a:31:0e:08:b2:9b:ed:c6:f6:6d:cf:3a: eb:3c:e9:cc:ad:06:76:c4:90:60:22:0a:8c:7f:d5: 90:92:9a:bc:3f:f0:52:58:20:b3:ec:1e:24:03:f5: e5:14:d8:da:6b:0c:54:fc:f8:49:82:d3:7d:70:b5: 0a:97:ff:8b:ad:fa:47:cf:0f:1d:7e:57:56:62:19: bf:c8:bf:2d:51:7a:46:79:50:b9:f6:4d:13:16:d9: dc:ce:d3:e3:03:26:f8:ad:e4:7b:fa:c9:95:1c:97: 2e:7d:33:26:28:8e:b1:23:de:42:55:ad:e9:f6:77: 16:ff:92:58:e9:30:af:55:c1:9e:f8:b1:f3:3d:23: 04:b5:6a:2e:e7:1e:be:65:b1:1e:c9:14:2d:ca:c1: 50:70:93:83:2c:d6:fc:79:d0:59:d7:99:40:4c:82: d3:68:38:47:f7:60:bc:64:80:d6:23:e0:d7:94:8e: a6:1f:dc:1d:57:21:62:be:4f:5f:e1:bf:f7:d5:2b: af:a0:7f:18:eb:12:f2:43:c9:99:03:61:b1:61:2d: 79:37:cf:3b:b0:6d:86:7f:6c:c4:87:5e:6b:be:4c: 84:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E1:F8:BC:C4:85:67:F8:83:80:5E:20:A0:AE:5A:7B:47:43:18:CE X509v3 Authority Key Identifier: keyid:14:2A:78:CA:51:D8:80:42:BA:51:2A:1B:B4:6D:6D:F4:4F:63:BB:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d9:ac:16:13:cc:d1:2a:b6:c0:2a:cc:19:0a:33:d6:b5:a6: da:f6:c7:81:cd:70:23:df:21:56:13:1d:91:5f:19:f0:42:1b: df:72:be:e9:e8:33:45:81:9c:cc:92:85:d6:09:4a:9b:54:c4: 26:8c:c4:2c:66:af:31:18:7e:20:4f:65:1f:22:ae:01:4e:2a: fc:ca:9d:0c:a8:6b:45:6a:85:3b:6d:17:14:6f:43:e9:e5:7b: cb:cd:67:c0:f8:33:79:7a:bd:18:4e:e3:80:ab:6e:f1:ae:f4: 26:d3:6a:1e:cf:6c:8b:06:59:63:7a:d1:b6:8a:8d:3e:a6:6e: 82:e5:8c:5e:22:37:f4:61:c5:9e:bb:31:cf:74:d3:ea:e4:66: e4:b0:3f:ef:ad:5d:a3:57:28:65:7f:04:ee:f7:7a:f1:15:69: 4a:f4:9f:64:fa:f7:3b:37:c9:4f:9b:d7:4f:58:30:0e:d1:c2: 27:51:16:44:5f:9b:88:5f:72:74:dc:67:d6:67:e7:8e:07:a9: 70:f7:cb:6b:19:66:0f:70:49:30:f4:bb:f7:36:42:1d:1a:48: 60:3b:e1:ef:79:de:eb:32:88:f9:5c:8a:dc:de:a9:fb:87:0a: 7f:3b:87:8d:51:59:be:c3:99:b1:e2:6c:23:21:23:70:b9:bf: 10:87:3a:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeoz3OJs19E4HkV58HeDQjQsYju0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQyQTc4Q0E1MUQ4ODA0MkJBNTEyQTFCQjQ2RDZERjQ0 RjYzQkJENzAeFw0yNTExMDUwMjM1MzdaFw0yNTExMDgxMjE3MzdaMDMxMTAvBgNV BAMTKDcxRTFGOEJDQzQ4NTY3Rjg4MzgwNUUyMEEwQUU1QTdCNDc0MzE4Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzazqi42n07EtPn7D721Rth/jc 5DxO/dyXt1rPi/2rjWoxDgiym+3G9m3POus86cytBnbEkGAiCox/1ZCSmrw/8FJY ILPsHiQD9eUU2NprDFT8+EmC031wtQqX/4ut+kfPDx1+V1ZiGb/Ivy1RekZ5ULn2 TRMW2dzO0+MDJvit5Hv6yZUcly59MyYojrEj3kJVren2dxb/kljpMK9VwZ74sfM9 IwS1ai7nHr5lsR7JFC3KwVBwk4Ms1vx50FnXmUBMgtNoOEf3YLxkgNYj4NeUjqYf 3B1XIWK+T1/hv/fVK6+gfxjrEvJDyZkDYbFhLXk3zzuwbYZ/bMSHXmu+TIRxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUceH4vMSFZ/iDgF4goK5ae0dDGM4wHwYDVR0j BBgwFoAUFCp4ylHYgEK6USobtG1t9E9ju9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZmM1YTFjYy1jYzVlLTRlNTgtOGRmNC1mODg2NzE4MzEzYWEvMC8xNDJBNzhDQTUx RDg4MDQyQkE1MTJBMUJCNDZENkRGNDRGNjNCQkQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTQyQTc4Q0E1MUQ4ODA0MkJBNTEyQTFCQjQ2RDZERjQ0RjYz QkJENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2ZjNWExY2MtY2M1ZS00ZTU4LThk ZjQtZjg4NjcxODMxM2FhLzAvMTQyQTc4Q0E1MUQ4ODA0MkJBNTEyQTFCQjQ2RDZE RjQ0RjYzQkJENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7ZrBYTzNEqtsAqzBkKM9a1ptr2x4HNcCPf IVYTHZFfGfBCG99yvunoM0WBnMyShdYJSptUxCaMxCxmrzEYfiBPZR8irgFOKvzK nQyoa0VqhTttFxRvQ+nle8vNZ8D4M3l6vRhO44CrbvGu9CbTah7PbIsGWWN60baK jT6mboLljF4iN/RhxZ67Mc900+rkZuSwP++tXaNXKGV/BO73evEVaUr0n2T69zs3 yU+b109YMA7RwidRFkRfm4hfcnTcZ9Zn544HqXD3y2sZZg9wSTD0u/c2Qh0aSGA7 4e953usyiPlcitzeqfuHCn87h41RWb7DmbHibCMhI3C5vxCHOkw= -----END CERTIFICATE-----Generated at Wed Nov 5 16:22:27 2025 by rpki-client