$ rpki-client -vvf repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft File: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft (raw, json) Hash identifier: rDdYjaiJaqeR6lsuW6D9+uRF0BTLccmMGI+YUrK7PP0= Subject key identifier: FF:06:0B:0A:80:F7:BF:67:3A:08:72:15:8B:F6:EC:8C:90:F4:AB:7D Authority key identifier: D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 Certificate issuer: /CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Certificate serial: 791D5DF289C287375C6926C50B4926CAA6F1C1B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft Manifest number: 0119 Signing time: Mon 03 Nov 2025 00:21:19 +0000 Manifest this update: Mon 03 Nov 2025 00:16:19 +0000 Manifest next update: Thu 06 Nov 2025 10:41:19 +0000 Files and hashes: 1: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl (hash: Ur/sRoLPEeke7ZtGFO9mn6TQDSdfMumkZZbn74TadNw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:1d:5d:f2:89:c2:87:37:5c:69:26:c5:0b:49:26:ca:a6:f1:c1:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Validity Not Before: Nov 3 00:16:19 2025 GMT Not After : Nov 6 10:41:19 2025 GMT Subject: CN=FF060B0A80F7BF673A0872158BF6EC8C90F4AB7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d4:33:af:5e:81:3c:ab:60:83:89:7d:c6:04: 96:f9:c1:ee:a5:70:ab:f8:de:e7:aa:64:2b:66:ac: b7:b0:88:2e:03:f7:11:09:9f:b9:67:c1:04:2a:c3: 82:22:3b:83:74:12:3b:33:f3:b5:1e:70:5b:20:37: d7:a5:00:d5:34:fe:03:b1:53:77:02:39:58:12:a7: 0b:be:1b:c0:9d:ee:9f:14:7f:ba:59:0f:d3:47:73: ac:d9:6a:30:8c:35:7d:b6:86:db:84:02:a4:3b:e8: 4b:b3:67:f8:c2:bd:f9:4d:89:d0:91:e8:a6:0a:65: 03:95:fe:b1:36:aa:59:2e:39:e3:a4:c1:bf:d5:ab: 8e:71:79:f7:24:04:14:15:40:76:20:c1:15:a4:75: 02:b1:9c:bf:49:f9:49:35:11:f3:9b:1d:f9:9a:8a: d0:33:db:90:d2:4d:88:4b:33:83:f1:c4:0a:dc:a4: be:4a:5c:fa:7c:6a:45:69:a1:d3:9f:8f:97:56:82: 85:b8:13:a3:d1:7d:99:26:d2:63:c4:77:cf:74:50: 13:3a:8e:14:87:a8:47:27:48:e7:5f:33:37:ad:0b: 3a:94:ec:03:89:3b:64:e1:7e:4c:77:de:e5:7d:92: d3:3d:75:62:50:3a:9d:a0:c0:5f:c5:15:bc:ea:5f: d2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:06:0B:0A:80:F7:BF:67:3A:08:72:15:8B:F6:EC:8C:90:F4:AB:7D X509v3 Authority Key Identifier: keyid:D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:53:f2:a4:da:82:24:6c:4d:4b:f7:88:3b:f3:8d:0e:00:16: 23:2f:93:df:f8:db:3e:b3:a4:d4:ca:32:12:cf:0b:02:94:e2: 3f:60:e5:da:62:3c:e8:ac:b7:a8:ed:ae:bc:e2:90:85:82:86: 2e:c6:6c:cf:01:ba:93:e8:7b:a3:79:c9:1f:08:11:ec:2e:e6: c3:e1:dd:ac:d0:15:db:3a:f9:cc:b0:cc:34:e7:07:de:ee:78: ac:5d:bd:aa:3c:86:e1:79:ad:ef:9a:48:b7:6a:ed:73:2e:cb: 24:19:d3:81:85:28:e3:06:8b:b4:45:7e:3c:d4:1a:d3:48:57: 6a:dd:b1:a1:8a:4f:c8:73:bd:63:b6:dd:a9:c6:e1:98:fb:0b: ab:b4:ae:17:ae:90:4f:dc:f9:80:c6:90:0e:9e:b2:73:54:94: 74:1f:52:40:05:a9:ff:42:25:b7:52:94:12:44:da:ed:01:e4: c9:ff:50:4a:dd:eb:1a:d8:f0:d0:ea:89:f0:f1:a9:bd:cb:c7: 6e:7e:67:d7:1f:de:27:da:e1:29:a1:6b:37:32:2e:5e:15:11: 13:c8:24:05:b6:7d:ea:b4:0f:68:91:75:65:84:ed:e9:2a:80: de:01:ff:0f:89:40:70:a5:f3:1a:2e:d8:f5:14:57:8c:90:51: a5:9c:3f:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeR1d8onChzdcaSbFC0kmyqbxwbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0 RDlCRDRDOTAeFw0yNTExMDMwMDE2MTlaFw0yNTExMDYxMDQxMTlaMDMxMTAvBgNV BAMTKEZGMDYwQjBBODBGN0JGNjczQTA4NzIxNThCRjZFQzhDOTBGNEFCN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp1DOvXoE8q2CDiX3GBJb5we6l cKv43ueqZCtmrLewiC4D9xEJn7lnwQQqw4IiO4N0Ejsz87UecFsgN9elANU0/gOx U3cCOVgSpwu+G8Cd7p8Uf7pZD9NHc6zZajCMNX22htuEAqQ76EuzZ/jCvflNidCR 6KYKZQOV/rE2qlkuOeOkwb/Vq45xefckBBQVQHYgwRWkdQKxnL9J+Uk1EfObHfma itAz25DSTYhLM4PxxArcpL5KXPp8akVpodOfj5dWgoW4E6PRfZkm0mPEd890UBM6 jhSHqEcnSOdfMzetCzqU7AOJO2Thfkx33uV9ktM9dWJQOp2gwF/FFbzqX9LVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/wYLCoD3v2c6CHIVi/bsjJD0q30wHwYDVR0j BBgwFoAU1/I9e1SJDw7s9VD/pCeZtk2b1MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Yjk4NTFiMS01YTZkLTRlNzUtOWZmZi1jMDNhOWM0OWNmNjkvMC9EN0YyM0Q3QjU0 ODkwRjBFRUNGNTUwRkZBNDI3OTlCNjREOUJENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0RDlC RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmI5ODUxYjEtNWE2ZC00ZTc1LTlm ZmYtYzAzYTljNDljZjY5LzAvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5 QjY0RDlCRDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANT8qTagiRsTUv3iDvzjQ4AFiMvk9/42z6z pNTKMhLPCwKU4j9g5dpiPOist6jtrrzikIWChi7GbM8BupPoe6N5yR8IEewu5sPh 3azQFds6+cywzDTnB97ueKxdvao8huF5re+aSLdq7XMuyyQZ04GFKOMGi7RFfjzU GtNIV2rdsaGKT8hzvWO23anG4Zj7C6u0rheukE/c+YDGkA6esnNUlHQfUkAFqf9C JbdSlBJE2u0B5Mn/UErd6xrY8NDqifDxqb3Lx25+Z9cf3ifa4SmhazcyLl4VERPI JAW2feq0D2iRdWWE7ekqgN4B/w+JQHCl8xou2PUUV4yQUaWcP9E= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:37 2025 by rpki-client