$ rpki-client -vvf repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft File: 7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft (raw, json) Hash identifier: fT6HsL9Pm3XKs0hrCdzOzNJer/2FZPl4JtmNH9haiIQ= Subject key identifier: 47:9A:1F:ED:65:9F:86:E8:4A:61:86:D5:D3:67:90:AA:50:ED:3B:3C Authority key identifier: 7B:9F:50:72:2E:E5:D5:DB:8D:F5:52:ED:32:CB:87:64:B6:4F:A9:02 Certificate issuer: /CN=7B9F50722EE5D5DB8DF552ED32CB8764B64FA902 Certificate serial: 1E8E918052820B8999872AAD3BBEB919FCBD912A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft Manifest number: 013E Signing time: Tue 04 Nov 2025 06:11:21 +0000 Manifest this update: Tue 04 Nov 2025 06:06:21 +0000 Manifest next update: Fri 07 Nov 2025 17:38:21 +0000 Files and hashes: 1: 7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.crl (hash: Qo0sbXikAoEL5ZzxfhPTTqw//T29vflV2Pbbd1QIT/w=) 2: 3130332e3138332e3130302e302f32332d3234203d3e20313439363730.roa (hash: 5MhHdS5d9rGYEWQQUwZMj2uRPg7u67+gzfI6p1UW8Ho=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.crl rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:8e:91:80:52:82:0b:89:99:87:2a:ad:3b:be:b9:19:fc:bd:91:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B9F50722EE5D5DB8DF552ED32CB8764B64FA902 Validity Not Before: Nov 4 06:06:21 2025 GMT Not After : Nov 7 17:38:21 2025 GMT Subject: CN=479A1FED659F86E84A6186D5D36790AA50ED3B3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ee:80:81:3a:86:22:15:13:9f:9a:ee:c3:b2: f9:21:13:fc:a8:5b:a4:96:1a:84:68:6c:2d:bb:e4: 9b:b1:90:d1:80:1e:5e:7e:7c:57:5c:f8:b9:17:69: 88:e4:2a:e3:96:aa:6d:36:f9:42:c3:71:38:ff:b7: 78:33:8a:1e:62:53:0a:1f:80:6c:05:8c:75:22:26: 0b:d2:bc:8a:8b:91:83:e4:44:15:ba:41:5e:52:a5: de:9d:33:00:d8:a8:61:63:f6:c2:df:87:d0:97:39: 4b:ac:c5:a3:e6:ef:80:71:a8:7d:b6:86:03:87:0a: 4f:b8:47:47:f9:63:83:99:cc:af:62:47:11:56:a2: ad:12:94:8e:35:32:83:69:1e:7f:85:fc:d4:83:f4: d8:f9:3f:44:82:4b:df:dd:4d:a3:52:8f:82:ec:1c: 9e:0f:63:17:ee:19:fe:25:f3:25:2d:0f:46:d7:86: 35:e6:44:22:35:95:e0:ac:3e:2a:2b:28:a7:46:dd: c8:10:d0:54:f4:a3:23:98:f0:23:51:90:6a:cb:b9: 15:4d:85:75:db:40:78:67:b6:96:1d:db:88:6f:3e: c2:26:cc:78:a5:d4:07:f1:c9:24:0e:39:a3:bf:6e: aa:ad:45:06:26:c0:c8:9b:14:61:7d:c4:ca:f1:02: b1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9A:1F:ED:65:9F:86:E8:4A:61:86:D5:D3:67:90:AA:50:ED:3B:3C X509v3 Authority Key Identifier: keyid:7B:9F:50:72:2E:E5:D5:DB:8D:F5:52:ED:32:CB:87:64:B6:4F:A9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:79:92:b1:0f:29:59:81:00:f5:7f:89:1a:22:36:36:b3:61: ec:c2:e9:43:dd:ce:d9:a9:1f:2e:90:8e:95:62:31:6d:7e:a7: 1f:a9:06:69:17:88:46:b0:00:70:44:40:45:00:b1:b5:ed:18: 8e:05:71:d0:c0:48:d5:5d:29:08:21:be:f7:74:3c:b8:ff:fc: 96:5f:c5:be:cc:60:c6:ca:4a:f8:cd:d1:f2:b2:da:ef:79:21: 34:67:82:5b:4d:c9:ca:51:ac:2e:33:d7:65:bf:ef:0f:11:fd: 3d:42:e9:dc:f2:3a:b7:d7:52:01:d5:4c:1b:bf:c4:25:9f:d2: 4d:4b:22:9c:4a:ef:23:63:5e:8d:b6:8f:87:b2:8b:66:08:a4: 10:b2:8c:fb:18:59:e6:a2:03:9d:d8:07:26:84:ca:46:e7:1f: f3:1b:02:0f:1b:2f:dc:98:3a:31:e4:ab:65:3b:c7:61:43:24: 2d:75:ed:53:f3:95:22:11:6d:3f:f6:90:d7:ae:5f:9b:c8:a5: fe:d7:d2:3a:a1:b5:c0:a3:da:5f:f1:92:a2:88:4a:88:08:b5: 08:a3:71:96:cd:ea:77:d8:36:c4:31:7d:17:65:46:8a:58:c9: 2b:64:9c:5c:b2:dd:95:b3:92:b5:1a:a1:45:f0:40:f0:c8:3e: b7:43:0c:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHo6RgFKCC4mZhyqtO765Gfy9kSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I5RjUwNzIyRUU1RDVEQjhERjU1MkVEMzJDQjg3NjRC NjRGQTkwMjAeFw0yNTExMDQwNjA2MjFaFw0yNTExMDcxNzM4MjFaMDMxMTAvBgNV BAMTKDQ3OUExRkVENjU5Rjg2RTg0QTYxODZENUQzNjc5MEFBNTBFRDNCM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe7oCBOoYiFROfmu7DsvkhE/yo W6SWGoRobC275JuxkNGAHl5+fFdc+LkXaYjkKuOWqm02+ULDcTj/t3gzih5iUwof gGwFjHUiJgvSvIqLkYPkRBW6QV5Spd6dMwDYqGFj9sLfh9CXOUusxaPm74BxqH22 hgOHCk+4R0f5Y4OZzK9iRxFWoq0SlI41MoNpHn+F/NSD9Nj5P0SCS9/dTaNSj4Ls HJ4PYxfuGf4l8yUtD0bXhjXmRCI1leCsPiorKKdG3cgQ0FT0oyOY8CNRkGrLuRVN hXXbQHhntpYd24hvPsImzHil1AfxySQOOaO/bqqtRQYmwMibFGF9xMrxArE5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR5of7WWfhuhKYYbV02eQqlDtOzwwHwYDVR0j BBgwFoAUe59Qci7l1duN9VLtMsuHZLZPqQIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTNkOGMwMy0xN2JiLTRjYWItODUyNi0xMThmNTg3ZGNjMDkvMC83QjlGNTA3MjJF RTVENURCOERGNTUyRUQzMkNCODc2NEI2NEZBOTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0I5RjUwNzIyRUU1RDVEQjhERjU1MkVEMzJDQjg3NjRCNjRG QTkwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2UzZDhjMDMtMTdiYi00Y2FiLTg1 MjYtMTE4ZjU4N2RjYzA5LzAvN0I5RjUwNzIyRUU1RDVEQjhERjU1MkVEMzJDQjg3 NjRCNjRGQTkwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGp5krEPKVmBAPV/iRoiNjazYezC6UPdztmp Hy6QjpViMW1+px+pBmkXiEawAHBEQEUAsbXtGI4FcdDASNVdKQghvvd0PLj//JZf xb7MYMbKSvjN0fKy2u95ITRngltNycpRrC4z12W/7w8R/T1C6dzyOrfXUgHVTBu/ xCWf0k1LIpxK7yNjXo22j4eyi2YIpBCyjPsYWeaiA53YByaEykbnH/MbAg8bL9yY OjHkq2U7x2FDJC117VPzlSIRbT/2kNeuX5vIpf7X0jqhtcCj2l/xkqKISogItQij cZbN6nfYNsQxfRdlRopYyStknFyy3ZWzkrUaoUXwQPDIPrdDDG0= -----END CERTIFICATE-----Generated at Wed Nov 5 00:28:10 2025 by rpki-client