$ rpki-client -vvf repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft File: 7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft (raw, json) Hash identifier: ZxVkIRcKVGMlulxx3EuGGHAFhMqzcGnQ6dGbEc5//1Q= Subject key identifier: AA:B5:92:2B:E0:B1:F9:93:1A:89:F3:89:81:35:03:58:6C:0D:09:DC Authority key identifier: 7C:A2:52:4C:6D:82:55:0B:5D:21:C1:31:82:BD:9C:C0:21:44:33:F4 Certificate issuer: /CN=7CA2524C6D82550B5D21C13182BD9CC0214433F4 Certificate serial: 76AA2C6A7FAB91BA2E06C161E3679D339CB67675 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft Manifest number: 01C5 Signing time: Tue 04 Nov 2025 10:13:23 +0000 Manifest this update: Tue 04 Nov 2025 10:08:23 +0000 Manifest next update: Fri 07 Nov 2025 20:54:23 +0000 Files and hashes: 1: 3130332e36312e31372e302f32342d3234203d3e20313530353039.roa (hash: bUHS7zCDhqnhQezsrNXcG47gU9JfG5NQcO4U+4/bwQc=) 2: 3130332e36312e31362e302f32342d3234203d3e20313530353039.roa (hash: 0YLohf/ggkakqxRaRFVJUp8vfmU0YPLjnkvCoTzlI1g=) 3: 7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl (hash: y+FQqCwSZP04M7fa4YDaAGTxVq886pnTo/m5lotL5vM=) 4: 3130332e36312e31362e302f32332d3233203d3e20313530353039.roa (hash: PphyhzafZc8USb+ULqaNnnRbeA397pdQzPJ0fXA6bSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:aa:2c:6a:7f:ab:91:ba:2e:06:c1:61:e3:67:9d:33:9c:b6:76:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA2524C6D82550B5D21C13182BD9CC0214433F4 Validity Not Before: Nov 4 10:08:23 2025 GMT Not After : Nov 7 20:54:23 2025 GMT Subject: CN=AAB5922BE0B1F9931A89F389813503586C0D09DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f4:1d:31:cb:0a:ef:15:98:f7:e6:12:93:1f: d2:96:0f:a9:0c:da:be:12:77:e0:ee:27:c6:a6:23: 6f:d2:3b:59:a1:87:ab:b9:eb:74:db:32:1d:53:6c: 41:ac:65:50:26:e4:5d:1a:c7:de:44:cb:3d:a1:92: f6:58:69:c5:c2:14:09:28:f9:81:b9:e6:b1:5b:db: 4a:5c:3e:d7:88:85:58:7a:c5:92:55:2f:2a:57:f5: c1:a0:2e:db:5b:97:c0:e3:d9:9a:16:d0:20:11:73: 70:af:a9:7c:14:6d:c7:f1:f4:2d:e0:31:5a:e9:35: 99:5d:36:98:8d:91:e7:c1:d8:e9:60:72:02:3d:71: 3f:3b:d2:e8:08:96:10:47:3f:b7:1a:f5:58:d0:ff: 45:96:6d:38:a3:c9:9a:cf:d2:79:e0:95:06:0f:f9: 56:c8:ff:30:41:c6:72:91:04:3b:1f:b4:53:30:f2: 25:a5:e4:26:ff:82:a1:f7:91:76:ae:1e:7b:80:98: 1a:91:bd:78:53:3a:66:37:b1:87:17:c8:1d:6a:f9: fd:60:5f:8d:36:1c:1c:65:8d:1a:0e:68:93:a6:62: 83:dc:26:a7:ca:ed:a5:60:31:42:00:39:3e:e7:f3: ac:33:fc:74:f2:0b:16:0b:6b:60:f1:de:37:f0:6d: 09:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B5:92:2B:E0:B1:F9:93:1A:89:F3:89:81:35:03:58:6C:0D:09:DC X509v3 Authority Key Identifier: keyid:7C:A2:52:4C:6D:82:55:0B:5D:21:C1:31:82:BD:9C:C0:21:44:33:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:80:1c:13:8e:43:0d:bf:4d:f7:ca:fb:65:b7:ef:b5:8b:52: b6:2d:e2:4a:cd:e3:89:ea:3e:8c:81:6d:e9:4d:c1:86:b0:4b: 0f:9b:97:6a:da:27:67:06:67:e4:b1:fd:18:67:ad:7e:9a:cc: 21:b1:f1:6d:cb:8c:da:72:d6:0b:29:0b:a6:0e:f3:a5:e1:94: 9b:75:2c:7b:08:c1:4b:f7:71:a2:f7:21:5a:1c:79:52:6a:fe: ea:72:09:0b:d1:6e:87:06:ec:8a:7a:e6:01:94:12:21:eb:6a: 37:dc:55:d1:a9:a6:f6:f4:57:39:3d:21:6e:c2:88:38:e9:91: 19:f4:e4:db:03:33:0c:9a:16:7a:62:74:13:ec:cb:7c:c4:0c: da:4f:62:5b:1b:7d:a1:dc:bb:8c:7a:db:65:07:4d:51:76:28: 4d:67:88:72:63:e6:81:88:ac:da:67:27:f5:8e:a6:8f:ab:4b: f6:22:1f:81:a1:c1:e5:fd:36:60:45:73:29:4e:d1:a0:a0:8c: 60:a6:19:1e:5c:e9:e3:9f:32:86:a3:5e:cb:d4:0b:ea:cf:c3: 2c:96:b6:04:7f:83:d2:70:9e:b2:9e:cd:74:93:ee:d8:76:35: 38:dd:9a:fa:0d:89:a3:96:ea:f2:a6:51:fa:62:c2:e3:48:45: 04:9c:46:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdqosan+rkbouBsFh42edM5y2dnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBMjUyNEM2RDgyNTUwQjVEMjFDMTMxODJCRDlDQzAy MTQ0MzNGNDAeFw0yNTExMDQxMDA4MjNaFw0yNTExMDcyMDU0MjNaMDMxMTAvBgNV BAMTKEFBQjU5MjJCRTBCMUY5OTMxQTg5RjM4OTgxMzUwMzU4NkMwRDA5REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw9B0xywrvFZj35hKTH9KWD6kM 2r4Sd+DuJ8amI2/SO1mhh6u563TbMh1TbEGsZVAm5F0ax95Eyz2hkvZYacXCFAko +YG55rFb20pcPteIhVh6xZJVLypX9cGgLttbl8Dj2ZoW0CARc3CvqXwUbcfx9C3g MVrpNZldNpiNkefB2OlgcgI9cT870ugIlhBHP7ca9VjQ/0WWbTijyZrP0nnglQYP +VbI/zBBxnKRBDsftFMw8iWl5Cb/gqH3kXauHnuAmBqRvXhTOmY3sYcXyB1q+f1g X402HBxljRoOaJOmYoPcJqfK7aVgMUIAOT7n86wz/HTyCxYLa2Dx3jfwbQkdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqrWSK+Cx+ZMaifOJgTUDWGwNCdwwHwYDVR0j BBgwFoAUfKJSTG2CVQtdIcExgr2cwCFEM/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWVjNmNmOC05NjU1LTQzNzktYmYzNi0zNzI3MTQzOGQwM2EvMC83Q0EyNTI0QzZE ODI1NTBCNUQyMUMxMzE4MkJEOUNDMDIxNDQzM0Y0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NBMjUyNEM2RDgyNTUwQjVEMjFDMTMxODJCRDlDQzAyMTQ0 MzNGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVlYzZjZjgtOTY1NS00Mzc5LWJm MzYtMzcyNzE0MzhkMDNhLzAvN0NBMjUyNEM2RDgyNTUwQjVEMjFDMTMxODJCRDlD QzAyMTQ0MzNGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCAHBOOQw2/TffK+2W377WLUrYt4krN44nq PoyBbelNwYawSw+bl2raJ2cGZ+Sx/RhnrX6azCGx8W3LjNpy1gspC6YO86XhlJt1 LHsIwUv3caL3IVoceVJq/upyCQvRbocG7Ip65gGUEiHrajfcVdGppvb0Vzk9IW7C iDjpkRn05NsDMwyaFnpidBPsy3zEDNpPYlsbfaHcu4x622UHTVF2KE1niHJj5oGI rNpnJ/WOpo+rS/YiH4GhweX9NmBFcylO0aCgjGCmGR5c6eOfMoajXsvUC+rPwyyW tgR/g9JwnrKezXST7th2NTjdmvoNiaOW6vKmUfpiwuNIRQScRio= -----END CERTIFICATE-----Generated at Tue Nov 4 21:31:50 2025 by rpki-client