$ rpki-client -vvf repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft File: FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft (raw, json) Hash identifier: e3z7F4BCgqsW9bcJi3j4+BtkEwjKpo44+DnoCEl/TRU= Subject key identifier: 7C:CF:0D:39:F1:E7:03:A8:03:15:3F:B9:67:2D:13:09:1A:BB:41:1D Authority key identifier: FD:7C:5A:44:A3:CA:AF:7C:D1:40:CF:D1:C6:16:22:BA:5E:A2:E6:23 Certificate issuer: /CN=FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623 Certificate serial: 1BF343574FEA35C8DDF438F1C52E7E47C73C2B53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft Manifest number: 0107 Signing time: Tue 04 Nov 2025 02:52:17 +0000 Manifest this update: Tue 04 Nov 2025 02:47:17 +0000 Manifest next update: Fri 07 Nov 2025 12:17:17 +0000 Files and hashes: 1: 3135372e32302e3132362e302f32332d3234203d3e20313532343130.roa (hash: mIAtzNrfjeKiFzHKpCt4+yI3FhKtEfckYghfutbPb44=) 2: FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl (hash: 83ojlV3hNO3+7q2S8qp498Fbsl0oDZReCmvRB1wS8hc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:f3:43:57:4f:ea:35:c8:dd:f4:38:f1:c5:2e:7e:47:c7:3c:2b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623 Validity Not Before: Nov 4 02:47:17 2025 GMT Not After : Nov 7 12:17:17 2025 GMT Subject: CN=7CCF0D39F1E703A803153FB9672D13091ABB411D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7c:b6:30:a4:17:ff:a0:9a:c0:ed:c1:db:e4: d8:13:1e:c2:fa:c3:3b:22:3f:7d:d2:a1:1e:06:50: 76:2f:c9:06:f9:d5:cc:f2:a1:74:39:68:00:39:6f: fc:8b:fe:bc:24:bb:1b:13:7e:14:49:6f:5e:5f:ab: c5:9f:3a:22:84:3f:ea:15:8b:f7:6a:c1:76:0d:cf: be:3f:91:be:f6:6d:f5:1e:f2:e9:04:6f:96:b3:14: 98:08:4b:bf:46:10:cc:b8:76:a4:0c:93:d3:ba:1f: 45:ab:87:ae:e1:df:99:10:25:1b:8d:5d:0d:36:76: aa:5b:3d:50:a8:53:36:f7:0f:41:e3:54:a8:bb:ba: 92:d9:a3:90:df:6b:e4:da:7d:5c:37:cf:a6:4d:51: 6c:25:0c:4e:a2:3b:1a:37:3c:59:6a:bf:81:07:6b: 7d:c8:62:17:fc:73:54:dc:66:51:7b:f5:f5:db:c9: a8:81:b8:59:ca:f1:86:24:71:1c:af:c3:83:af:46: 1d:a5:f9:c1:7b:03:46:68:a2:02:b7:71:a4:d5:1e: 47:c9:14:44:aa:62:95:42:77:b1:62:79:fc:76:09: c4:fc:3a:e4:e8:91:e5:0e:d8:41:89:59:3c:e3:0c: 54:dd:19:82:24:d3:8d:02:8c:1f:bc:9d:c8:20:83: bd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CF:0D:39:F1:E7:03:A8:03:15:3F:B9:67:2D:13:09:1A:BB:41:1D X509v3 Authority Key Identifier: keyid:FD:7C:5A:44:A3:CA:AF:7C:D1:40:CF:D1:C6:16:22:BA:5E:A2:E6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:56:74:39:10:0c:8a:8d:c7:77:a5:0a:3a:96:70:41:5b:8a: d4:c6:c8:31:b9:5d:5e:82:18:57:d0:f1:f5:cf:f3:73:f4:f2: 9e:92:02:66:2c:6a:11:c4:25:bf:08:d2:35:3c:41:07:fd:d1: f3:81:5c:0b:96:ad:cd:1d:e1:f1:d7:3c:f1:ff:44:a4:08:c2: 9f:5f:96:06:64:90:0b:22:82:aa:9f:14:d3:e9:b9:77:5f:7b: 62:e3:27:48:84:80:88:c2:c3:62:16:48:a3:9b:0c:8b:d3:bf: b7:cb:0e:7e:d6:02:96:28:b0:ba:7f:81:23:26:17:e8:8d:60: fd:9b:ae:9e:44:79:8f:2c:ee:ff:32:1f:36:cb:ba:7d:52:64: 12:09:d3:7d:f6:55:2f:b5:75:d6:ea:c3:41:1b:11:7c:63:d7: bd:c9:9c:d3:43:06:0e:7a:0b:84:93:1a:53:ad:b4:f8:8b:84: d3:d6:ea:fb:9d:af:2e:2a:a4:60:89:45:d2:04:5a:5e:f2:de: cf:ae:0f:98:29:b1:c7:49:dc:ed:73:a5:69:04:de:95:31:a1: e1:66:e7:50:a3:19:f1:36:ff:cc:5a:c3:1b:81:d4:73:e1:d8: b7:c8:ab:76:55:61:ad:26:f0:f4:6b:47:37:e2:f0:15:bd:b1: eb:55:4a:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG/NDV0/qNcjd9DjxxS5+R8c8K1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIyQkE1 RUEyRTYyMzAeFw0yNTExMDQwMjQ3MTdaFw0yNTExMDcxMjE3MTdaMDMxMTAvBgNV BAMTKDdDQ0YwRDM5RjFFNzAzQTgwMzE1M0ZCOTY3MkQxMzA5MUFCQjQxMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTfLYwpBf/oJrA7cHb5NgTHsL6 wzsiP33SoR4GUHYvyQb51czyoXQ5aAA5b/yL/rwkuxsTfhRJb15fq8WfOiKEP+oV i/dqwXYNz74/kb72bfUe8ukEb5azFJgIS79GEMy4dqQMk9O6H0Wrh67h35kQJRuN XQ02dqpbPVCoUzb3D0HjVKi7upLZo5Dfa+TafVw3z6ZNUWwlDE6iOxo3PFlqv4EH a33IYhf8c1TcZlF79fXbyaiBuFnK8YYkcRyvw4OvRh2l+cF7A0ZoogK3caTVHkfJ FESqYpVCd7Fiefx2CcT8OuTokeUO2EGJWTzjDFTdGYIk040CjB+8ncggg71HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfM8NOfHnA6gDFT+5Zy0TCRq7QR0wHwYDVR0j BBgwFoAU/XxaRKPKr3zRQM/RxhYiul6i5iMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGY3OGJkNC1jMTliLTRkNDAtYWE1NC1lZDhkN2JjNzcyY2EvMC9GRDdDNUE0NEEz Q0FBRjdDRDE0MENGRDFDNjE2MjJCQTVFQTJFNjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIyQkE1RUEy RTYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmNzhiZDQtYzE5Yi00ZDQwLWFh NTQtZWQ4ZDdiYzc3MmNhLzAvRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIy QkE1RUEyRTYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNWdDkQDIqNx3elCjqWcEFbitTGyDG5XV6C GFfQ8fXP83P08p6SAmYsahHEJb8I0jU8QQf90fOBXAuWrc0d4fHXPPH/RKQIwp9f lgZkkAsigqqfFNPpuXdfe2LjJ0iEgIjCw2IWSKObDIvTv7fLDn7WApYosLp/gSMm F+iNYP2brp5EeY8s7v8yHzbLun1SZBIJ0332VS+1ddbqw0EbEXxj173JnNNDBg56 C4STGlOttPiLhNPW6vudry4qpGCJRdIEWl7y3s+uD5gpscdJ3O1zpWkE3pUxoeFm 51CjGfE2/8xawxuB1HPh2LfIq3ZVYa0m8PRrRzfi8BW9setVSmI= -----END CERTIFICATE-----Generated at Tue Nov 4 23:01:27 2025 by rpki-client