$ rpki-client -vvf repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft File: A708865394D992A01D1736F0AB500E24889B7F34.mft (raw, json) Hash identifier: LzOI5geKGlkURQnX/tXr9r9FUFIKZv7FqEOdl5MTbG8= Subject key identifier: E7:A6:DF:62:1A:D6:77:72:6A:80:50:08:8C:E9:3C:92:0B:82:5B:8C Authority key identifier: A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34 Certificate issuer: /CN=A708865394D992A01D1736F0AB500E24889B7F34 Certificate serial: 2682F8B9BC14246BE492CE735FDA783957887065 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft Manifest number: 0175 Signing time: Tue 04 Nov 2025 02:50:48 +0000 Manifest this update: Tue 04 Nov 2025 02:45:48 +0000 Manifest next update: Fri 07 Nov 2025 09:20:48 +0000 Files and hashes: 1: 3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa (hash: yL0gLS/lvq9j5h+L42yAYYctUM1Kqtv5bl12En0Z8dY=) 2: A708865394D992A01D1736F0AB500E24889B7F34.crl (hash: ixa9JGrOAWsfnAogdg0/aU7vrrVe/aQf5ZC1hYRysp8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:20:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:82:f8:b9:bc:14:24:6b:e4:92:ce:73:5f:da:78:39:57:88:70:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A708865394D992A01D1736F0AB500E24889B7F34 Validity Not Before: Nov 4 02:45:48 2025 GMT Not After : Nov 7 09:20:48 2025 GMT Subject: CN=E7A6DF621AD677726A8050088CE93C920B825B8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8c:44:d5:77:2e:0e:56:65:eb:c7:2d:29:30: ff:7b:db:f4:cc:89:6f:b3:01:6f:cb:b4:2b:15:f2: 92:0a:51:2a:47:a3:e4:f4:94:61:9a:66:a6:2c:a9: 54:41:78:f9:32:35:4e:9b:5e:24:3b:1c:e0:1d:9f: 78:4d:b6:19:c9:66:e7:4f:58:3f:23:0f:fd:1d:60: bd:dc:71:39:d8:e1:2b:e3:e2:ca:00:96:28:13:cb: 67:67:fd:5e:5b:01:12:7b:87:b0:82:cf:a4:ec:bf: c5:e1:98:94:5c:26:b2:62:60:7e:71:6c:dd:c6:d5: 2c:ba:23:b3:aa:cf:fd:bc:7a:df:e5:c4:d8:75:f7: c7:41:8e:f8:65:cb:24:f0:e8:60:d7:d4:8e:91:cf: b9:8f:cc:71:b3:86:f8:e2:db:15:dc:e9:98:72:6c: 19:48:54:3d:b6:0d:66:0e:af:d6:ce:be:fd:06:a8: 83:a3:8c:74:45:7f:d9:19:06:5e:1a:22:2a:87:91: 93:7b:7a:80:51:a5:6c:f1:93:80:f3:af:77:ec:d5: 4b:4d:84:93:c3:1c:e1:e1:da:8c:06:e8:3c:d8:d3: 83:ab:0c:e9:37:35:68:17:26:64:e7:f7:a6:1e:89: 24:41:22:6c:71:44:de:37:da:5d:5d:30:70:e0:2e: 84:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A6:DF:62:1A:D6:77:72:6A:80:50:08:8C:E9:3C:92:0B:82:5B:8C X509v3 Authority Key Identifier: keyid:A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:39:16:76:26:ed:9f:0c:1f:21:69:bf:13:9b:c3:4b:44:1d: e0:d2:38:79:8c:5b:75:84:e1:70:de:e7:55:88:6d:b7:b7:e1: 89:f0:c5:8f:3b:90:cb:3f:41:fd:e5:f4:01:59:79:a5:e5:85: 77:5c:36:bf:aa:02:56:0a:5d:3c:29:fb:2e:b4:23:8c:01:f8: 11:4e:52:e5:61:f5:c7:ce:64:b1:9a:d5:9f:93:20:8d:4c:34: b4:c9:d1:52:cf:92:ff:2f:29:c7:b4:33:d2:52:e4:61:d3:b7: f7:a8:02:8e:25:78:cc:3f:d8:b4:9a:0b:d6:85:a2:f0:87:cb: ad:04:51:82:4d:b9:a9:6e:34:82:4c:14:17:b4:48:09:30:68: 57:c5:7e:28:23:17:45:c0:a9:f7:ab:f2:99:82:14:f7:95:10: 10:13:52:53:0d:fe:66:21:fc:89:09:d9:89:05:71:48:d8:e3: 36:b9:62:c5:15:82:53:9f:f5:03:19:6b:88:e3:b7:c8:79:09: 8f:0e:22:e9:89:85:7f:a7:cd:86:6d:1b:d0:a2:60:7a:e9:65: c7:4f:8a:7c:79:a9:e8:54:ee:ec:94:5f:91:8e:33:18:c5:36: f4:42:6d:c5:42:e0:87:24:cc:88:4a:df:07:42:93:a5:fc:21: b0:da:39:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJoL4ubwUJGvkks5zX9p4OVeIcGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4 ODlCN0YzNDAeFw0yNTExMDQwMjQ1NDhaFw0yNTExMDcwOTIwNDhaMDMxMTAvBgNV BAMTKEU3QTZERjYyMUFENjc3NzI2QTgwNTAwODhDRTkzQzkyMEI4MjVCOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHjETVdy4OVmXrxy0pMP972/TM iW+zAW/LtCsV8pIKUSpHo+T0lGGaZqYsqVRBePkyNU6bXiQ7HOAdn3hNthnJZudP WD8jD/0dYL3ccTnY4Svj4soAligTy2dn/V5bARJ7h7CCz6Tsv8XhmJRcJrJiYH5x bN3G1Sy6I7Oqz/28et/lxNh198dBjvhlyyTw6GDX1I6Rz7mPzHGzhvji2xXc6Zhy bBlIVD22DWYOr9bOvv0GqIOjjHRFf9kZBl4aIiqHkZN7eoBRpWzxk4Dzr3fs1UtN hJPDHOHh2owG6DzY04OrDOk3NWgXJmTn96YeiSRBImxxRN432l1dMHDgLoTtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU56bfYhrWd3JqgFAIjOk8kguCW4wwHwYDVR0j BBgwFoAUpwiGU5TZkqAdFzbwq1AOJIibfzQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjBjN2EzNy01ZDE5LTRjNWMtOTMwMS1hMTRhN2YxODVjOTIvMC9BNzA4ODY1Mzk0 RDk5MkEwMUQxNzM2RjBBQjUwMEUyNDg4OUI3RjM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4ODlC N0YzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYwYzdhMzctNWQxOS00YzVjLTkz MDEtYTE0YTdmMTg1YzkyLzAvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBF MjQ4ODlCN0YzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALY5FnYm7Z8MHyFpvxObw0tEHeDSOHmMW3WE 4XDe51WIbbe34YnwxY87kMs/Qf3l9AFZeaXlhXdcNr+qAlYKXTwp+y60I4wB+BFO UuVh9cfOZLGa1Z+TII1MNLTJ0VLPkv8vKce0M9JS5GHTt/eoAo4leMw/2LSaC9aF ovCHy60EUYJNualuNIJMFBe0SAkwaFfFfigjF0XAqfer8pmCFPeVEBATUlMN/mYh /IkJ2YkFcUjY4za5YsUVglOf9QMZa4jjt8h5CY8OIumJhX+nzYZtG9CiYHrpZcdP inx5qehU7uyUX5GOMxjFNvRCbcVC4IckzIhK3wdCk6X8IbDaOYQ= -----END CERTIFICATE-----Generated at Wed Nov 5 08:18:45 2025 by rpki-client