$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft File: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft (raw, json) Hash identifier: L+Xk2JdyzuHx/I1iF4PD0wtsSQ8/wzecqNGpnVH6kvc= Subject key identifier: 0C:23:C2:65:E8:07:FC:91:C2:A1:0A:D6:4C:E1:91:0C:36:7C:77:CE Authority key identifier: C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A Certificate issuer: /CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Certificate serial: 39AFA199D0192954C4F74060A0C37D189C3F8B4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft Manifest number: D4 Signing time: Wed 05 Nov 2025 18:41:58 +0000 Manifest this update: Wed 05 Nov 2025 18:36:58 +0000 Manifest next update: Sun 09 Nov 2025 05:45:58 +0000 Files and hashes: 1: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl (hash: 9y3BdeAZxwX3bnPT0GS7okIyddsWgUtm0SHA6BcwBgY=) 2: 323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa (hash: 67keM1hQfIucwuWQhvzKk8YthRoib+6jHGmIeaRFOqs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 05:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:af:a1:99:d0:19:29:54:c4:f7:40:60:a0:c3:7d:18:9c:3f:8b:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Validity Not Before: Nov 5 18:36:58 2025 GMT Not After : Nov 9 05:45:58 2025 GMT Subject: CN=0C23C265E807FC91C2A10AD64CE1910C367C77CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:34:9f:67:71:2d:9d:5e:02:f8:49:8c:1b:02: 0e:f4:2c:69:11:ea:4e:95:44:0c:7d:4a:5d:17:7b: ea:9f:cc:27:59:24:39:4b:fe:da:b9:26:96:e0:ac: 31:6a:37:e5:e4:f4:b4:cc:68:37:3a:e2:a7:1c:0a: 9b:51:19:38:c0:eb:c9:46:fe:bf:e1:6d:c3:64:b0: 15:35:81:6f:c5:b4:45:21:32:b4:16:0a:4d:64:5d: f7:43:42:54:e7:5a:e2:ca:c1:e8:35:41:7a:c1:ee: ab:5b:c0:f0:84:70:4f:81:05:f8:bd:5b:fc:6f:40: a6:96:86:91:d0:24:06:d7:3e:d4:4c:29:f6:6f:0a: 55:ec:e9:09:de:07:4f:31:b9:5f:3c:70:45:8e:70: d7:57:e3:30:3e:6e:c5:c0:ba:83:4c:bd:4b:e0:9a: 7f:57:ec:cc:69:55:ae:58:a4:ad:ef:fa:4d:4d:d8: 44:b1:f3:49:d6:b6:32:89:f0:66:1a:63:a2:09:25: 11:fe:34:6b:84:3a:29:ad:20:0a:29:7c:3d:07:ad: 35:dc:c2:bd:77:14:05:35:cb:66:95:ba:85:72:c1: 20:8d:39:25:82:c2:76:86:34:be:56:4a:b6:96:3f: 3f:3c:67:44:76:c0:0e:e3:3f:65:61:f8:ba:10:92: 7e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:23:C2:65:E8:07:FC:91:C2:A1:0A:D6:4C:E1:91:0C:36:7C:77:CE X509v3 Authority Key Identifier: keyid:C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:dd:80:92:ff:f8:1b:7b:b9:f5:e5:eb:e1:fd:70:0f:4f:53: a3:e8:ed:a4:41:8f:e1:f5:b7:50:6e:96:54:28:d2:45:bf:08: 65:cd:9b:36:a3:87:31:77:26:0d:5a:d6:d8:bb:d0:05:ed:0e: 76:f1:6e:d0:21:05:c6:e2:2e:8f:43:ca:f3:0a:87:49:65:55: 12:97:57:c0:c1:8e:0a:00:48:5a:b4:8a:e5:2d:bf:0f:2a:02: 25:35:87:7e:3f:31:1b:23:85:ca:96:13:0e:58:3f:d3:95:3d: 11:1c:f6:ae:c6:fd:1e:0e:9d:3e:0b:c5:0e:c3:a4:b1:66:64: c2:8b:f6:fd:9a:35:c1:6c:83:72:93:51:52:fb:c4:c4:20:9f: 1e:57:e4:c9:9b:44:63:87:67:fd:db:e5:12:08:80:ea:59:62: cf:2b:4a:8d:21:63:45:7d:64:7d:73:40:d7:23:86:89:bb:b9: f4:cb:d1:af:44:e8:a6:18:5e:45:14:01:54:bd:f0:84:43:ba: 0e:9c:e8:87:ad:04:03:d1:e1:da:7b:b0:86:f5:8c:c3:a5:70: 00:5b:1d:a4:ce:88:d5:7f:59:a8:84:f9:c0:24:00:d2:44:be: b3:09:d3:48:fa:a6:f8:7f:a2:78:7c:22:5f:e5:e4:76:c7:38: 4d:e3:3a:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOa+hmdAZKVTE90BgoMN9GJw/i0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTEx RUZCMUQ4QTAeFw0yNTExMDUxODM2NThaFw0yNTExMDkwNTQ1NThaMDMxMTAvBgNV BAMTKDBDMjNDMjY1RTgwN0ZDOTFDMkExMEFENjRDRTE5MTBDMzY3Qzc3Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZNJ9ncS2dXgL4SYwbAg70LGkR 6k6VRAx9Sl0Xe+qfzCdZJDlL/tq5JpbgrDFqN+Xk9LTMaDc64qccCptRGTjA68lG /r/hbcNksBU1gW/FtEUhMrQWCk1kXfdDQlTnWuLKweg1QXrB7qtbwPCEcE+BBfi9 W/xvQKaWhpHQJAbXPtRMKfZvClXs6QneB08xuV88cEWOcNdX4zA+bsXAuoNMvUvg mn9X7MxpVa5YpK3v+k1N2ESx80nWtjKJ8GYaY6IJJRH+NGuEOimtIAopfD0HrTXc wr13FAU1y2aVuoVywSCNOSWCwnaGNL5WSraWPz88Z0R2wA7jP2Vh+LoQkn4pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDCPCZegH/JHCoQrWTOGRDDZ8d84wHwYDVR0j BBgwFoAUwH9a4tncmdCvKLaxVCEMkR77HYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTdkNzM4ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMS9DMDdGNUFFMkQ5 REM5OUQwQUYyOEI2QjE1NDIxMEM5MTFFRkIxRDhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTExRUZC MUQ4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzEvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBD OTExRUZCMUQ4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPdgJL/+Bt7ufXl6+H9cA9PU6Po7aRBj+H1 t1BullQo0kW/CGXNmzajhzF3Jg1a1ti70AXtDnbxbtAhBcbiLo9DyvMKh0llVRKX V8DBjgoASFq0iuUtvw8qAiU1h34/MRsjhcqWEw5YP9OVPREc9q7G/R4OnT4LxQ7D pLFmZMKL9v2aNcFsg3KTUVL7xMQgnx5X5MmbRGOHZ/3b5RIIgOpZYs8rSo0hY0V9 ZH1zQNcjhom7ufTL0a9E6KYYXkUUAVS98IRDug6c6IetBAPR4dp7sIb1jMOlcABb HaTOiNV/WaiE+cAkANJEvrMJ00j6pvh/onh8Il/l5HbHOE3jOvM= -----END CERTIFICATE-----Generated at Fri Nov 7 11:42:47 2025 by rpki-client