$ rpki-client -vvf repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft File: 7AD0DDB5789DE529C8697A033978C381FFE40D83.mft (raw, json) Hash identifier: MqQ8TZzqGs+BZNJHNEixtN2cEmtgKwhSP/LmdXaoA0o= Subject key identifier: C9:13:B1:2B:02:71:A6:4C:62:CC:F2:9A:55:C7:78:EB:E7:E0:A2:B2 Authority key identifier: 7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 Certificate issuer: /CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Certificate serial: 08855354DE1458B15C423AFFB868E7D3A1D541FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft Manifest number: 021C Signing time: Tue 04 Nov 2025 08:21:30 +0000 Manifest this update: Tue 04 Nov 2025 08:16:30 +0000 Manifest next update: Fri 07 Nov 2025 16:36:30 +0000 Files and hashes: 1: 7AD0DDB5789DE529C8697A033978C381FFE40D83.crl (hash: xUquluryfvnj6MteN0qrzW0WEocFP4JHM+FVEAtFPGs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:85:53:54:de:14:58:b1:5c:42:3a:ff:b8:68:e7:d3:a1:d5:41:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Validity Not Before: Nov 4 08:16:30 2025 GMT Not After : Nov 7 16:36:30 2025 GMT Subject: CN=C913B12B0271A64C62CCF29A55C778EBE7E0A2B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8d:cc:ab:56:9d:58:27:f3:83:f3:aa:89:c8: 7a:d0:47:a6:6b:0c:57:36:34:4b:54:0f:9f:45:13: 90:9b:de:32:78:d0:2d:42:46:29:f5:04:90:e4:2a: e4:d7:dc:24:03:aa:1c:8c:4e:f4:e3:dd:4f:bd:ea: c6:dc:cf:a3:c2:78:ca:d6:d0:ff:a5:de:de:cb:3c: 03:4c:5d:91:dd:2b:e8:01:ac:bb:91:8e:a1:d9:42: 78:ad:cc:cc:cc:cf:52:0a:6c:23:4c:5d:c3:59:cf: 5b:29:d7:e0:fb:bb:a2:4b:9a:3a:13:c6:91:81:bd: b9:06:9f:0a:b1:75:5a:50:0c:76:c0:f2:7e:18:7d: 00:b8:88:dc:92:57:24:75:3a:c5:58:64:68:af:20: 46:e0:02:87:e8:e4:a3:a3:dd:f7:a8:75:f1:18:44: a3:00:95:02:5b:87:3b:33:95:4f:61:4d:79:8c:62: 1a:a7:4c:f6:eb:94:79:4c:ff:39:2a:e2:f1:21:f1: 64:4c:e7:85:f7:dd:83:76:c4:e9:72:33:e2:68:6b: af:7b:e2:85:ac:ba:f8:62:1f:f2:ca:bd:b7:91:5f: ee:18:dd:bb:cc:40:69:6a:6b:66:bd:9d:7f:82:a2: 12:2a:cf:3a:93:a8:94:28:ac:24:4b:ab:13:d0:39: 2e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:13:B1:2B:02:71:A6:4C:62:CC:F2:9A:55:C7:78:EB:E7:E0:A2:B2 X509v3 Authority Key Identifier: keyid:7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:b0:2d:e0:76:0f:79:ab:76:1c:74:33:19:e8:83:33:2c:17: 5d:8d:d5:b5:b6:87:91:97:4c:63:67:84:38:aa:64:93:c1:40: e1:40:13:48:62:c9:b1:87:b4:be:95:0e:6e:a8:a3:97:fd:6a: 3f:a0:d6:2f:a7:6b:d7:d4:c6:0c:60:db:2d:36:f1:40:db:f9: db:59:26:08:71:11:43:5d:93:36:59:75:38:a4:bf:dc:a6:13: 65:c5:ba:c0:e4:f7:89:02:fc:2e:cc:13:4d:1f:ad:dd:35:36: 4e:79:aa:73:f2:89:28:a8:3a:b4:02:3b:cc:fd:e3:ab:ed:7d: 9a:16:e2:63:bf:78:e7:b5:3c:32:bd:29:a4:05:4b:f7:e1:5f: d9:17:a5:80:ab:17:9a:67:f0:42:e4:95:36:d2:b7:96:b9:7f: 66:1c:7f:42:81:59:a2:bf:20:8e:f6:71:22:b0:59:18:8e:d8: ac:82:3a:6b:69:a4:b9:26:9d:68:db:33:3b:b0:a0:07:b0:cc: 58:7e:13:3e:76:62:26:2d:ae:46:a3:85:50:a2:76:2f:57:5d: b5:fb:fa:6d:5d:25:df:40:20:d0:5d:1e:21:92:79:12:4a:26: 93:79:dc:01:6b:a0:36:26:62:cf:20:f6:9c:fa:09:5a:96:68: d2:50:17:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCIVTVN4UWLFcQjr/uGjn06HVQfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMzODFG RkU0MEQ4MzAeFw0yNTExMDQwODE2MzBaFw0yNTExMDcxNjM2MzBaMDMxMTAvBgNV BAMTKEM5MTNCMTJCMDI3MUE2NEM2MkNDRjI5QTU1Qzc3OEVCRTdFMEEyQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNjcyrVp1YJ/OD86qJyHrQR6Zr DFc2NEtUD59FE5Cb3jJ40C1CRin1BJDkKuTX3CQDqhyMTvTj3U+96sbcz6PCeMrW 0P+l3t7LPANMXZHdK+gBrLuRjqHZQnitzMzMz1IKbCNMXcNZz1sp1+D7u6JLmjoT xpGBvbkGnwqxdVpQDHbA8n4YfQC4iNySVyR1OsVYZGivIEbgAofo5KOj3feodfEY RKMAlQJbhzszlU9hTXmMYhqnTPbrlHlM/zkq4vEh8WRM54X33YN2xOlyM+Joa697 4oWsuvhiH/LKvbeRX+4Y3bvMQGlqa2a9nX+CohIqzzqTqJQorCRLqxPQOS7DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyROxKwJxpkxizPKaVcd46+fgorIwHwYDVR0j BBgwFoAUetDdtXid5SnIaXoDOXjDgf/kDYMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjJiMTc4Ni0xODMzLTRkMGEtYTEzOS00NjQ0MzMzOTNkNzgvMC83QUQwRERCNTc4 OURFNTI5Qzg2OTdBMDMzOTc4QzM4MUZGRTQwRDgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMzODFGRkU0 MEQ4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWYyYjE3ODYtMTgzMy00ZDBhLWEx MzktNDY0NDMzMzkzZDc4LzAvN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMz ODFGRkU0MEQ4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKSwLeB2D3mrdhx0MxnogzMsF12N1bW2h5GX TGNnhDiqZJPBQOFAE0hiybGHtL6VDm6oo5f9aj+g1i+na9fUxgxg2y028UDb+dtZ JghxEUNdkzZZdTikv9ymE2XFusDk94kC/C7ME00frd01Nk55qnPyiSioOrQCO8z9 46vtfZoW4mO/eOe1PDK9KaQFS/fhX9kXpYCrF5pn8ELklTbSt5a5f2Ycf0KBWaK/ II72cSKwWRiO2KyCOmtppLkmnWjbMzuwoAewzFh+Ez52YiYtrkajhVCidi9XXbX7 +m1dJd9AINBdHiGSeRJKJpN53AFroDYmYs8g9pz6CVqWaNJQFxM= -----END CERTIFICATE-----Generated at Tue Nov 4 19:02:28 2025 by rpki-client