$ rpki-client -vvf repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft File: C7D4D30314160FDACB9582CF972E90EC10AE206F.mft (raw, json) Hash identifier: yBVpWz62DI87Kaw4q7U+WxGW/Fd1G88BakGRX6BjipM= Subject key identifier: C8:F5:3F:E3:4C:C0:2C:A0:22:36:19:A8:E4:5F:46:1E:01:72:B6:6F Authority key identifier: C7:D4:D3:03:14:16:0F:DA:CB:95:82:CF:97:2E:90:EC:10:AE:20:6F Certificate issuer: /CN=C7D4D30314160FDACB9582CF972E90EC10AE206F Certificate serial: 21DCB4345511F24C8D893E73BEAD26A2B6D6E13F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft Manifest number: 051F Signing time: Wed 05 Nov 2025 03:41:32 +0000 Manifest this update: Wed 05 Nov 2025 03:36:32 +0000 Manifest next update: Sat 08 Nov 2025 05:02:32 +0000 Files and hashes: 1: C7D4D30314160FDACB9582CF972E90EC10AE206F.crl (hash: b+vnsCfAJbVN6dMBaNxGdt62cU6eZBssv3pSB26NL3I=) 2: 323030313a6466303a333330303a3a2f34382d3438203d3e20313333383339.roa (hash: 4N6LRCptGvt5p5Z3fi0q5sQmHj3OTG0hHztRBZdu+t8=) 3: 3130332e35302e3231382e302f32342d3234203d3e20313333383339.roa (hash: xsM8R50wRfdlN5JweHjZIfTpmduLeILF/fWliK+i37M=) 4: 3130332e3134342e32322e302f32342d3234203d3e20313333383339.roa (hash: llGSDUYqSL3OD7TtVsp6ArCR8mqRzLPhfJs1tW9L5wg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.crl rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 05:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:dc:b4:34:55:11:f2:4c:8d:89:3e:73:be:ad:26:a2:b6:d6:e1:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7D4D30314160FDACB9582CF972E90EC10AE206F Validity Not Before: Nov 5 03:36:32 2025 GMT Not After : Nov 8 05:02:32 2025 GMT Subject: CN=C8F53FE34CC02CA0223619A8E45F461E0172B66F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:81:5a:f0:8e:fc:19:41:bb:9e:8c:8e:a8:83: 1c:a1:55:14:f1:0b:e0:9e:b7:ac:d8:ed:08:9e:01: 7c:42:c7:95:c5:17:b9:24:af:88:e2:d5:84:3a:0b: b7:97:8e:24:97:c9:01:82:33:40:71:e3:c2:8d:a3: 5c:f1:33:94:5b:83:7c:1b:72:e2:52:4c:8e:26:20: e5:fa:0d:35:c6:de:9b:25:48:3f:4a:f6:0c:26:ab: 6c:4b:9a:39:ab:ce:50:1f:81:3d:16:43:14:94:e6: 74:54:a2:34:16:82:53:27:be:29:9b:39:bd:d7:aa: 7c:87:fe:1d:5e:02:fd:ac:33:b9:ea:b3:e8:ac:57: 86:98:c2:a9:d9:74:0b:f3:52:99:d9:8f:1c:90:80: 4d:9d:c7:e1:b8:63:b4:1e:3d:11:a0:84:ba:8c:68: 63:90:c2:97:23:af:4f:29:a0:ca:36:af:b0:82:b1: 12:fa:89:78:a4:a1:c6:1c:bc:a2:66:dd:e5:0b:53: 1a:45:27:7b:71:59:76:f8:b5:a9:5f:71:65:85:9d: 29:62:a4:40:5c:b4:a4:e8:d3:40:37:6e:80:bd:9b: 57:af:91:6c:f8:89:48:5b:81:d3:d3:a1:0a:e7:f9: 81:76:67:9f:f2:36:6d:7d:86:43:5f:f1:c4:bd:52: 21:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F5:3F:E3:4C:C0:2C:A0:22:36:19:A8:E4:5F:46:1E:01:72:B6:6F X509v3 Authority Key Identifier: keyid:C7:D4:D3:03:14:16:0F:DA:CB:95:82:CF:97:2E:90:EC:10:AE:20:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:9a:c6:00:d5:5b:ff:ba:f9:ac:fc:d3:7d:65:fd:06:15:19: 03:f6:4d:14:e3:f5:6a:73:72:bc:77:7f:45:5c:90:61:ec:12: d0:41:06:5d:c0:90:05:6c:9c:f9:55:86:13:2f:35:ef:6c:46: a9:4c:cd:1a:91:d2:66:51:bf:1c:70:5c:1c:1d:4b:e6:d0:95: 29:4e:e1:de:af:5a:dd:79:8a:b1:4e:3c:04:1f:bf:46:d8:eb: 4b:a0:f2:e7:da:56:f4:66:86:a3:a2:bb:4c:0b:52:6f:cf:93: 8c:8c:68:13:07:c0:68:ac:bf:df:18:7a:03:0d:16:4f:95:dd: b5:e7:09:31:ee:74:5e:a8:17:da:52:52:9d:f8:ba:19:8a:82: 75:db:2f:b7:16:3b:17:cb:8b:8a:d1:fe:51:f4:1e:93:f9:00: 56:01:ae:68:8e:30:96:2c:8a:1d:1a:6c:b8:44:a5:4c:27:56: 17:26:5d:42:03:bc:4d:cb:ad:1d:b8:d0:de:84:f5:09:75:e7: 3b:25:46:33:fc:9b:f1:43:37:e2:67:7e:af:25:8f:30:fb:62: 1f:96:7b:09:ea:19:4a:08:44:91:67:c2:06:f4:47:f4:d5:e4: 89:de:eb:6d:b2:c6:7d:27:3c:68:89:91:e3:e8:25:86:f7:1f: 1f:e5:37:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIdy0NFUR8kyNiT5zvq0morbW4T8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdENEQzMDMxNDE2MEZEQUNCOTU4MkNGOTcyRTkwRUMx MEFFMjA2RjAeFw0yNTExMDUwMzM2MzJaFw0yNTExMDgwNTAyMzJaMDMxMTAvBgNV BAMTKEM4RjUzRkUzNENDMDJDQTAyMjM2MTlBOEU0NUY0NjFFMDE3MkI2NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1gVrwjvwZQbuejI6ogxyhVRTx C+Cet6zY7QieAXxCx5XFF7kkr4ji1YQ6C7eXjiSXyQGCM0Bx48KNo1zxM5Rbg3wb cuJSTI4mIOX6DTXG3pslSD9K9gwmq2xLmjmrzlAfgT0WQxSU5nRUojQWglMnvimb Ob3XqnyH/h1eAv2sM7nqs+isV4aYwqnZdAvzUpnZjxyQgE2dx+G4Y7QePRGghLqM aGOQwpcjr08poMo2r7CCsRL6iXikocYcvKJm3eULUxpFJ3txWXb4talfcWWFnSli pEBctKTo00A3boC9m1evkWz4iUhbgdPToQrn+YF2Z5/yNm19hkNf8cS9UiGtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyPU/40zALKAiNhmo5F9GHgFytm8wHwYDVR0j BBgwFoAUx9TTAxQWD9rLlYLPly6Q7BCuIG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MThhZDdhNi1jOTA3LTQzNTktYWJhNS1kNTc0OGJhMTYxNzYvMC9DN0Q0RDMwMzE0 MTYwRkRBQ0I5NTgyQ0Y5NzJFOTBFQzEwQUUyMDZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdENEQzMDMxNDE2MEZEQUNCOTU4MkNGOTcyRTkwRUMxMEFF MjA2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTE4YWQ3YTYtYzkwNy00MzU5LWFi YTUtZDU3NDhiYTE2MTc2LzAvQzdENEQzMDMxNDE2MEZEQUNCOTU4MkNGOTcyRTkw RUMxMEFFMjA2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSaxgDVW/+6+az8031l/QYVGQP2TRTj9Wpz crx3f0VckGHsEtBBBl3AkAVsnPlVhhMvNe9sRqlMzRqR0mZRvxxwXBwdS+bQlSlO 4d6vWt15irFOPAQfv0bY60ug8ufaVvRmhqOiu0wLUm/Pk4yMaBMHwGisv98YegMN Fk+V3bXnCTHudF6oF9pSUp34uhmKgnXbL7cWOxfLi4rR/lH0HpP5AFYBrmiOMJYs ih0abLhEpUwnVhcmXUIDvE3LrR240N6E9Ql15zslRjP8m/FDN+Jnfq8ljzD7Yh+W ewnqGUoIRJFnwgb0R/TV5Ine622yxn0nPGiJkePoJYb3Hx/lN+k= -----END CERTIFICATE-----Generated at Wed Nov 5 11:08:34 2025 by rpki-client