$ rpki-client -vvf repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft File: D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft (raw, json) Hash identifier: EUQQ8C7jwq/pwooTtgArya9YEBoycIpsx8vr3a7JSaY= Subject key identifier: 44:DA:0D:24:0F:40:A1:1F:8A:15:48:ED:51:62:8D:C6:A8:88:F2:57 Authority key identifier: D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01 Certificate issuer: /CN=D807B5A7716CB56D036EDE4CE994632C0D3A2501 Certificate serial: 4D6BA178E7410C2CAC99B188937622AF55545E46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft Manifest number: 01CC Signing time: Tue 04 Nov 2025 19:12:10 +0000 Manifest this update: Tue 04 Nov 2025 19:07:10 +0000 Manifest next update: Sat 08 Nov 2025 02:10:10 +0000 Files and hashes: 1: D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl (hash: Rs09i4arMI56iJ+IspqLxVXJpqZgFUlr3j2uwlO4OzI=) 2: 3130332e3139312e3230302e302f32342d3234203d3e20313432333636.roa (hash: PoHfbIWBTAgg6GV0EgVNoxxVcZmuQWnVjc1te2yrEhM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 02:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:6b:a1:78:e7:41:0c:2c:ac:99:b1:88:93:76:22:af:55:54:5e:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D807B5A7716CB56D036EDE4CE994632C0D3A2501 Validity Not Before: Nov 4 19:07:10 2025 GMT Not After : Nov 8 02:10:10 2025 GMT Subject: CN=44DA0D240F40A11F8A1548ED51628DC6A888F257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e8:d3:d0:eb:1f:0b:78:4f:98:e9:e1:d6:97: b8:32:12:94:40:04:6a:8e:aa:d3:7e:16:b7:ee:0a: f8:60:1f:08:bf:1b:1b:36:e6:c3:ef:04:ab:d2:11: 0f:cf:42:30:07:32:12:77:9a:da:81:c7:c9:2e:03: f0:fe:0d:87:54:50:ec:6f:87:b6:ea:f8:73:43:27: 5e:50:69:d1:77:2c:79:36:e0:32:72:06:12:5b:45: bc:7d:01:f3:6f:27:a6:b5:17:96:f6:53:91:fa:d8: 88:0b:cd:89:3a:9f:f1:ae:6b:0e:fe:3a:29:81:ff: 01:77:9a:cb:38:52:94:24:22:23:73:c4:30:8d:c3: e6:ff:18:1b:82:f1:55:5a:02:2c:d1:87:05:84:da: c5:88:1e:fb:45:05:8e:71:78:02:9c:e8:26:3e:c2: 41:26:7a:d2:0e:21:15:61:9d:a4:18:b7:04:ea:31: 1f:c5:92:f7:5d:1d:1a:49:b6:96:77:58:92:af:4f: 50:40:a9:88:6e:47:bf:b4:ca:da:36:19:da:e1:15: 7d:38:5c:f1:78:79:85:41:08:d9:00:26:97:09:e6: da:e0:4d:f5:40:14:c5:97:ef:c5:6b:1e:3b:8a:45: 98:78:93:db:a6:3d:e5:d4:06:54:d0:35:dd:d0:f7: 63:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DA:0D:24:0F:40:A1:1F:8A:15:48:ED:51:62:8D:C6:A8:88:F2:57 X509v3 Authority Key Identifier: keyid:D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:53:01:25:02:df:bb:e5:07:82:bb:fd:b5:ae:29:ad:9a:fd: 43:4c:89:75:35:3c:49:44:23:00:aa:6c:04:d6:84:1a:b8:33: e7:82:73:ee:47:6a:5a:71:91:b5:2e:a9:97:42:41:0a:0e:2d: 32:12:17:43:71:80:de:66:47:92:c3:23:d3:b5:63:46:4d:22: b8:24:c0:f1:6b:fa:60:f2:57:59:4a:2d:d4:6d:d4:cc:38:21: 37:cd:c6:7a:d2:d5:08:16:fa:f7:bb:00:51:4c:ed:89:1d:34: 41:62:69:36:b0:84:41:98:d7:e4:9c:58:2a:60:c4:0c:d7:74: 2a:a4:6c:32:11:ab:03:63:ef:4b:4a:45:49:30:18:bc:4a:e1: 30:7e:1e:7d:e8:9e:4f:84:43:32:cc:76:75:95:00:2b:db:60: 07:e5:dd:e1:a4:11:d6:4c:09:d7:b9:3f:eb:ac:3d:b8:86:ea: 8a:09:9b:5d:10:b2:68:a2:76:c3:23:99:97:d0:42:70:47:c9: 01:9b:2d:f5:f9:89:04:86:26:23:c6:29:89:bf:45:ae:08:72: c9:d7:b2:93:c2:b7:14:39:85:a0:64:00:cb:fe:94:d7:f9:9e: 0f:c4:a1:2e:be:12:2a:81:98:78:4d:d7:7a:a4:a1:52:bf:1b: c5:e4:b9:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTWuheOdBDCysmbGIk3Yir1VUXkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYzMkMw RDNBMjUwMTAeFw0yNTExMDQxOTA3MTBaFw0yNTExMDgwMjEwMTBaMDMxMTAvBgNV BAMTKDQ0REEwRDI0MEY0MEExMUY4QTE1NDhFRDUxNjI4REM2QTg4OEYyNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC76NPQ6x8LeE+Y6eHWl7gyEpRA BGqOqtN+FrfuCvhgHwi/Gxs25sPvBKvSEQ/PQjAHMhJ3mtqBx8kuA/D+DYdUUOxv h7bq+HNDJ15QadF3LHk24DJyBhJbRbx9AfNvJ6a1F5b2U5H62IgLzYk6n/Guaw7+ OimB/wF3mss4UpQkIiNzxDCNw+b/GBuC8VVaAizRhwWE2sWIHvtFBY5xeAKc6CY+ wkEmetIOIRVhnaQYtwTqMR/FkvddHRpJtpZ3WJKvT1BAqYhuR7+0yto2GdrhFX04 XPF4eYVBCNkAJpcJ5trgTfVAFMWX78VrHjuKRZh4k9umPeXUBlTQNd3Q92PLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURNoNJA9AoR+KFUjtUWKNxqiI8lcwHwYDVR0j BBgwFoAU2Ae1p3FstW0Dbt5M6ZRjLA06JQEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDNlNzFmZS1hZDMzLTRkMTItODcyMC00MzE0M2ZmMDFkYmYvMC9EODA3QjVBNzcx NkNCNTZEMDM2RURFNENFOTk0NjMyQzBEM0EyNTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYzMkMwRDNB MjUwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTAzZTcxZmUtYWQzMy00ZDEyLTg3 MjAtNDMxNDNmZjAxZGJmLzAvRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYz MkMwRDNBMjUwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJTASUC37vlB4K7/bWuKa2a/UNMiXU1PElE IwCqbATWhBq4M+eCc+5HalpxkbUuqZdCQQoOLTISF0NxgN5mR5LDI9O1Y0ZNIrgk wPFr+mDyV1lKLdRt1Mw4ITfNxnrS1QgW+ve7AFFM7YkdNEFiaTawhEGY1+ScWCpg xAzXdCqkbDIRqwNj70tKRUkwGLxK4TB+Hn3onk+EQzLMdnWVACvbYAfl3eGkEdZM Cde5P+usPbiG6ooJm10QsmiidsMjmZfQQnBHyQGbLfX5iQSGJiPGKYm/Ra4IcsnX spPCtxQ5haBkAMv+lNf5ng/EoS6+EiqBmHhN13qkoVK/G8XkuQY= -----END CERTIFICATE-----Generated at Wed Nov 5 21:09:29 2025 by rpki-client