$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft File: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft (raw, json) Hash identifier: K6N2R9/BZIs2LYQRC2lT73EtkbM8Za/VuUbvbSTj/DE= Subject key identifier: 91:33:46:6F:51:20:89:1D:6D:9D:44:C3:5D:70:BB:86:82:1D:EF:2E Authority key identifier: 7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 Certificate issuer: /CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Certificate serial: 14DA290FEFC22986E1DED3331C3BD4D4F04FF83F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft Manifest number: CA Signing time: Sun 02 Nov 2025 12:52:03 +0000 Manifest this update: Sun 02 Nov 2025 12:47:03 +0000 Manifest next update: Wed 05 Nov 2025 22:08:03 +0000 Files and hashes: 1: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl (hash: r4GwnzzHPhl+qRSYbXv/F4Zh5dKwKl2H5GavLNCnH6Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 22:08:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:da:29:0f:ef:c2:29:86:e1:de:d3:33:1c:3b:d4:d4:f0:4f:f8:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Validity Not Before: Nov 2 12:47:03 2025 GMT Not After : Nov 5 22:08:03 2025 GMT Subject: CN=9133466F5120891D6D9D44C35D70BB86821DEF2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:98:04:6c:40:ce:8b:1f:2e:cb:a2:c1:a7:86: 82:dd:a9:d4:3b:b3:98:5b:89:ac:3b:22:e4:d9:68: fe:23:ea:78:84:8a:08:ae:cf:30:62:61:27:d0:ec: b5:d8:d7:07:1b:69:7e:98:1b:b3:2f:5d:27:2d:5b: ca:c9:63:9b:f0:24:97:bb:ad:85:59:80:23:00:19: fc:85:00:fa:37:c7:fc:42:93:2d:23:b4:8d:6d:5d: 31:02:10:42:5c:25:be:b4:11:ba:cd:6c:cb:f8:c8: 5b:93:5e:7b:70:99:1b:8f:d4:ca:db:2a:b2:2e:9e: c5:c3:17:a1:6a:64:77:6d:90:05:97:2c:96:6e:ff: 2b:f2:16:d7:54:44:85:76:cf:c3:13:57:0f:76:67: f8:06:5b:83:b7:05:1d:12:58:08:d1:a0:cc:80:d3: 45:62:7e:9b:f8:93:62:0b:bd:63:86:5a:64:e8:19: 7c:66:a3:42:ac:32:28:a5:f8:89:4b:98:17:3e:02: 3a:86:24:9a:54:b3:bf:a0:e4:74:b3:be:00:2c:cf: 6f:22:46:5b:d1:d2:54:7a:c9:50:0a:f9:99:63:5e: be:c7:82:39:f8:da:06:19:71:62:c6:9e:3a:38:7c: ec:b6:14:2e:59:8e:f2:a8:67:34:17:91:59:56:7b: ee:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:33:46:6F:51:20:89:1D:6D:9D:44:C3:5D:70:BB:86:82:1D:EF:2E X509v3 Authority Key Identifier: keyid:7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:cc:c0:2f:a4:0b:45:b6:ca:3c:0e:18:c7:23:41:a4:0f:1f: da:28:18:65:04:58:33:3f:87:5f:d0:3c:52:80:ca:4b:3b:18: b2:68:e3:2b:5d:ed:6c:02:5d:4f:c4:d0:94:b8:ba:e7:33:28: 88:99:5b:5c:17:e4:d8:76:ea:5b:5b:1d:1f:0f:d4:6a:71:9e: 08:86:51:63:74:b4:63:80:cc:5b:dd:e0:3a:d7:3b:06:52:78: bd:67:7b:03:22:a2:f9:05:2d:05:a2:cd:8c:04:fe:8f:cd:24: 81:d6:0e:09:97:2e:c2:d5:68:17:51:18:74:60:22:eb:47:2e: 67:01:8c:78:60:8e:9e:17:e7:9f:99:74:11:05:38:c0:59:a5: ad:12:22:b6:90:5f:76:5d:7f:56:bb:d4:ba:e5:af:f8:d9:11: 11:73:74:c8:1f:37:1f:b9:3c:1e:da:6a:f4:ee:5c:3f:aa:2a: e2:ba:3e:ce:48:d2:e0:0b:76:18:a3:74:4f:b3:aa:89:3d:16: 90:7a:1a:ee:eb:a6:6a:bf:cd:91:f0:e5:84:da:63:c4:d7:a0: 32:b0:97:dc:19:45:ba:e0:5b:2f:2b:a2:c5:36:da:d0:24:d0: 35:fa:8f:02:80:0e:59:4b:3a:95:78:60:76:aa:88:b9:b7:2a: 17:9d:4c:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFNopD+/CKYbh3tMzHDvU1PBP+D8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2 QUM0RkMzMTAeFw0yNTExMDIxMjQ3MDNaFw0yNTExMDUyMjA4MDNaMDMxMTAvBgNV BAMTKDkxMzM0NjZGNTEyMDg5MUQ2RDlENDRDMzVENzBCQjg2ODIxREVGMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvmARsQM6LHy7LosGnhoLdqdQ7 s5hbiaw7IuTZaP4j6niEigiuzzBiYSfQ7LXY1wcbaX6YG7MvXSctW8rJY5vwJJe7 rYVZgCMAGfyFAPo3x/xCky0jtI1tXTECEEJcJb60EbrNbMv4yFuTXntwmRuP1Mrb KrIunsXDF6FqZHdtkAWXLJZu/yvyFtdURIV2z8MTVw92Z/gGW4O3BR0SWAjRoMyA 00Vifpv4k2ILvWOGWmToGXxmo0KsMiil+IlLmBc+AjqGJJpUs7+g5HSzvgAsz28i RlvR0lR6yVAK+ZljXr7Hgjn42gYZcWLGnjo4fOy2FC5ZjvKoZzQXkVlWe+57AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkTNGb1EgiR1tnUTDXXC7hoId7y4wHwYDVR0j BBgwFoAUfVCLIlNQsNIE8ZQ/T1PU2GrE/DEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjNiMjMwYS1mZmYxLTQ3ZjAtYmY5MS03Y2ViOGQzNjA5NmUvMC83RDUwOEIyMjUz NTBCMEQyMDRGMTk0M0Y0RjUzRDREODZBQzRGQzMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2QUM0 RkMzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzYjIzMGEtZmZmMS00N2YwLWJm OTEtN2NlYjhkMzYwOTZlLzAvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0 RDg2QUM0RkMzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrMwC+kC0W2yjwOGMcjQaQPH9ooGGUEWDM/ h1/QPFKAyks7GLJo4ytd7WwCXU/E0JS4uuczKIiZW1wX5Nh26ltbHR8P1GpxngiG UWN0tGOAzFvd4DrXOwZSeL1newMiovkFLQWizYwE/o/NJIHWDgmXLsLVaBdRGHRg IutHLmcBjHhgjp4X55+ZdBEFOMBZpa0SIraQX3Zdf1a71Lrlr/jZERFzdMgfNx+5 PB7aavTuXD+qKuK6Ps5I0uALdhijdE+zqok9FpB6Gu7rpmq/zZHw5YTaY8TXoDKw l9wZRbrgWy8rosU22tAk0DX6jwKADllLOpV4YHaqiLm3KhedTPw= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:32 2025 by rpki-client