$ rpki-client -vvf repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft File: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft (raw, json) Hash identifier: A0l1WEM52dsMBpZF/26VNQ3WWWMeIa9C4R3p8URfH8s= Subject key identifier: DA:64:DD:DE:68:39:24:F9:B6:CF:03:1B:9E:43:9E:D6:36:3E:C5:8A Authority key identifier: CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 Certificate issuer: /CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Certificate serial: 760ED3DC8D773C0C6A6DB017DB7ADB85E12056CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft Manifest number: 038C Signing time: Mon 03 Nov 2025 23:41:28 +0000 Manifest this update: Mon 03 Nov 2025 23:36:28 +0000 Manifest next update: Fri 07 Nov 2025 02:26:28 +0000 Files and hashes: 1: 3130332e3137302e3233342e302f32332d3234203d3e20313338383535.roa (hash: Zud2nnElfbx5UA3aYazzfNWJKcwUrbzENyQybZ8isd0=) 2: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl (hash: CNqSmMCOluQOZa6z3Jz1SAompTRoemyGL7DWwMKC6gw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 02:26:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:0e:d3:dc:8d:77:3c:0c:6a:6d:b0:17:db:7a:db:85:e1:20:56:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Validity Not Before: Nov 3 23:36:28 2025 GMT Not After : Nov 7 02:26:28 2025 GMT Subject: CN=DA64DDDE683924F9B6CF031B9E439ED6363EC58A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:91:36:b6:a7:6a:7f:94:d3:5a:eb:57:d6:5b: 67:70:f9:68:01:33:0a:7a:b7:49:e3:29:3c:97:5b: 0f:4e:05:f7:e6:96:30:0e:39:e5:f5:cd:6b:af:ac: 62:49:2d:2c:a8:eb:90:0c:21:45:4c:32:47:f6:c6: 34:bf:fb:a6:4d:da:7a:08:cf:a4:7f:35:44:73:3d: c4:eb:52:35:2d:12:a4:da:e6:79:5e:7e:b2:96:d0: fb:09:03:00:8d:40:4b:80:d5:f4:10:c7:be:fc:30: 26:c8:6e:10:1e:54:ed:7e:54:6c:68:f7:89:e4:e7: 02:f5:85:d6:33:8d:16:1f:2f:f1:c3:b8:9f:e2:31: 04:0d:5a:9b:30:60:f0:7f:f0:eb:83:0e:34:22:cc: 6e:78:35:ea:38:c4:0a:4f:51:e8:68:b2:e5:43:9f: a0:1d:da:9e:bb:46:d6:91:e4:a7:d8:41:ab:9a:a5: 94:51:9f:33:ed:22:f9:38:03:79:db:ad:bc:f2:b6: e3:76:f2:fb:58:c0:73:f0:bc:36:06:d8:f9:ee:64: ca:61:ef:54:03:45:9c:56:8f:9e:ce:0c:af:06:27: 98:96:57:20:9b:20:48:2b:0b:35:37:a1:3a:d4:a0: ca:d2:02:78:17:b9:10:1b:27:4b:41:cb:9a:cc:cc: a2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:64:DD:DE:68:39:24:F9:B6:CF:03:1B:9E:43:9E:D6:36:3E:C5:8A X509v3 Authority Key Identifier: keyid:CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:d0:d7:77:9f:ba:e4:b2:6b:dd:66:3a:31:35:15:7e:a7:cc: 65:6e:de:99:b0:16:2c:42:72:68:cd:91:ac:38:9b:31:6c:7f: 95:12:9a:6b:ca:10:a7:4e:38:5f:e7:27:8b:77:b1:dd:5c:34: 99:c1:12:d7:df:8e:5d:af:42:12:47:d5:8f:6c:72:31:3b:e5: 3a:cd:5c:11:82:84:29:b1:87:5e:54:b2:d7:ce:1e:ea:3a:87: 37:79:2e:55:d1:f6:7c:e4:ec:c5:4b:63:b1:c9:49:4e:14:8c: 79:96:74:cc:9a:01:b5:b8:9b:4f:a1:6d:31:e0:57:94:4f:a2: f0:30:89:92:61:c2:08:12:b2:f2:15:06:06:9c:43:2a:6a:28: bb:d0:55:92:a7:c8:ad:13:7c:a3:03:29:71:f7:e2:90:78:62: e9:b9:f0:9c:d0:59:d1:8e:ad:39:c8:9d:eb:a6:ae:c6:86:5a: 4d:4f:74:67:63:b4:1a:14:41:06:61:e8:03:f0:80:77:5d:61: c7:b2:39:5b:7c:30:2d:d7:21:42:1e:8d:72:4f:da:60:13:26: fd:b5:77:15:a5:20:7b:e4:86:8c:45:74:87:f9:8c:a7:5b:80: 62:27:f5:e6:2a:12:70:a4:96:9a:e3:08:f7:1b:34:aa:43:59: 60:bb:7c:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdg7T3I13PAxqbbAX23rbheEgVsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFD ODRFQ0VENDAeFw0yNTExMDMyMzM2MjhaFw0yNTExMDcwMjI2MjhaMDMxMTAvBgNV BAMTKERBNjRERERFNjgzOTI0RjlCNkNGMDMxQjlFNDM5RUQ2MzYzRUM1OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfkTa2p2p/lNNa61fWW2dw+WgB Mwp6t0njKTyXWw9OBffmljAOOeX1zWuvrGJJLSyo65AMIUVMMkf2xjS/+6ZN2noI z6R/NURzPcTrUjUtEqTa5nlefrKW0PsJAwCNQEuA1fQQx778MCbIbhAeVO1+VGxo 94nk5wL1hdYzjRYfL/HDuJ/iMQQNWpswYPB/8OuDDjQizG54Neo4xApPUehosuVD n6Ad2p67RtaR5KfYQauapZRRnzPtIvk4A3nbrbzytuN28vtYwHPwvDYG2PnuZMph 71QDRZxWj57ODK8GJ5iWVyCbIEgrCzU3oTrUoMrSAngXuRAbJ0tBy5rMzKJ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2mTd3mg5JPm2zwMbnkOe1jY+xYowHwYDVR0j BBgwFoAUzXwmfFiuL1GBf6pSArC/kchOztQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTQ0ZDU3Ni0zODE4LTQ5ZDYtODY2Mi1mOGRmODlhYjI4NjMvMC9DRDdDMjY3QzU4 QUUyRjUxODE3RkFBNTIwMkIwQkY5MUM4NEVDRUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFDODRF Q0VENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE0NGQ1NzYtMzgxOC00OWQ2LTg2 NjItZjhkZjg5YWIyODYzLzAvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJG OTFDODRFQ0VENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADvQ13efuuSya91mOjE1FX6nzGVu3pmwFixC cmjNkaw4mzFsf5USmmvKEKdOOF/nJ4t3sd1cNJnBEtffjl2vQhJH1Y9scjE75TrN XBGChCmxh15UstfOHuo6hzd5LlXR9nzk7MVLY7HJSU4UjHmWdMyaAbW4m0+hbTHg V5RPovAwiZJhwggSsvIVBgacQypqKLvQVZKnyK0TfKMDKXH34pB4Yum58JzQWdGO rTnIneumrsaGWk1PdGdjtBoUQQZh6APwgHddYceyOVt8MC3XIUIejXJP2mATJv21 dxWlIHvkhoxFdIf5jKdbgGIn9eYqEnCklprjCPcbNKpDWWC7fEk= -----END CERTIFICATE-----Generated at Wed Nov 5 04:00:02 2025 by rpki-client