$ rpki-client -vvf repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft File: 7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft (raw, json) Hash identifier: Em9bmFISeWtJXsl8Ik8b5dnoOKa8bkmSpUnTP4JwlkE= Subject key identifier: 01:A8:59:F5:A8:FA:4E:E9:84:85:D5:FB:43:D0:E1:23:36:6A:A6:65 Authority key identifier: 7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0 Certificate issuer: /CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0 Certificate serial: 60354672A7433FC90121A94EE77839DEBF5D20F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft Manifest number: 021C Signing time: Mon 03 Nov 2025 11:21:00 +0000 Manifest this update: Mon 03 Nov 2025 11:16:00 +0000 Manifest next update: Thu 06 Nov 2025 18:02:00 +0000 Files and hashes: 1: 7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl (hash: NXIgM/0xBFBoRpo7OTY0f+YJH/VsSYe/GoX7N2I0hmo=) 2: 3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa (hash: qKtIrqocYRtH9mFT0B1bJLwWXs7q8vOuLUP4J+rTPCk=) 3: 3130332e3138362e38392e302f32342d3234203d3e20313439373137.roa (hash: d85h85v2ptQz3vrVN5qkUm0+GStqZnlOAr5LKlkna3k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 18:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:35:46:72:a7:43:3f:c9:01:21:a9:4e:e7:78:39:de:bf:5d:20:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0 Validity Not Before: Nov 3 11:16:00 2025 GMT Not After : Nov 6 18:02:00 2025 GMT Subject: CN=01A859F5A8FA4EE98485D5FB43D0E123366AA665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bf:52:68:ff:23:9a:fc:8f:bd:26:d3:61:d0: 3e:09:b1:0c:50:d3:d4:03:08:d4:88:01:54:75:23: 05:70:69:e2:08:56:f6:b0:da:db:d5:4b:a3:ce:87: 4c:a8:7b:b4:bd:28:6f:20:8b:85:ff:68:14:85:42: b5:66:1a:18:38:60:2b:7b:e3:9b:3a:57:d7:ac:b1: b8:33:ea:95:d4:58:ca:67:6c:8f:4e:9a:75:a1:ed: 73:f1:9c:10:9a:1e:7e:9c:91:b0:5f:88:3c:a7:b7: 0a:97:02:f8:6c:f7:7b:8c:55:26:8a:f0:e3:48:9d: 7a:50:2a:61:1e:07:5b:65:9f:02:61:2f:72:d2:16: c7:dd:b9:23:50:c1:9a:23:57:0f:91:09:ea:92:b9: 3b:17:a7:3d:01:b7:3d:a8:79:07:bd:14:66:78:70: ef:b3:70:6e:0f:0f:2e:38:47:ce:4e:fc:6c:c3:67: 52:54:66:e7:58:c8:8b:2b:0e:62:33:08:1c:22:54: 66:c7:67:ba:d5:3b:1f:f2:14:2a:b9:e4:38:be:b4: dd:de:73:41:d6:4e:ed:ca:a5:38:6d:e5:8e:8b:c1: 76:cd:d9:e8:ea:00:a1:04:36:b5:c5:ce:37:4a:af: fa:97:36:12:7a:4e:dd:be:d0:e6:c3:a4:5a:10:69: 51:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A8:59:F5:A8:FA:4E:E9:84:85:D5:FB:43:D0:E1:23:36:6A:A6:65 X509v3 Authority Key Identifier: keyid:7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:5c:8c:1c:9d:c7:b3:b1:e2:c6:ff:3f:8e:98:8d:b2:a0:e6: 2c:68:1b:6c:ec:37:20:2b:6b:ab:f7:38:b2:3a:ae:07:5e:ba: e5:ba:55:68:35:be:e6:a7:e1:3d:d6:e9:d8:d7:ed:de:76:c3: 6e:4a:fd:18:be:8a:fe:e4:a5:49:7d:64:e1:a0:a4:20:1b:c0: 9d:b4:ce:25:e4:95:f6:61:40:01:d1:83:58:84:ab:ac:aa:27: 86:b8:6e:27:0f:70:c7:e3:db:da:47:62:96:01:e9:a1:77:4f: e1:33:5e:eb:a1:1e:f2:f6:ba:47:a9:4d:7f:b7:14:f3:90:58: b0:6d:c6:36:31:63:4d:ba:59:04:a1:82:d4:33:f2:34:7b:ee: eb:f8:70:68:11:07:8f:db:5f:0f:4d:08:7b:03:80:7f:9f:21: b3:9c:d0:1e:7d:1f:1e:88:1a:70:7e:67:d4:cd:b6:b6:b2:5a: a7:c1:0d:98:35:c4:35:1d:fb:54:4a:f2:40:90:7f:23:af:91: 43:08:8c:5b:6a:cc:f9:82:ee:da:bd:7c:62:b3:d3:5a:0a:54: 0b:ea:b9:cd:84:ee:5c:b8:32:0e:30:da:75:3c:41:e6:4e:f4: 87:60:19:f9:c4:7d:03:2a:a7:33:14:75:d0:ab:2f:fd:e7:04: b8:4a:02:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYDVGcqdDP8kBIalO53g53r9dIPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRCMTJG NUM5QkJEMDAeFw0yNTExMDMxMTE2MDBaFw0yNTExMDYxODAyMDBaMDMxMTAvBgNV BAMTKDAxQTg1OUY1QThGQTRFRTk4NDg1RDVGQjQzRDBFMTIzMzY2QUE2NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2v1Jo/yOa/I+9JtNh0D4JsQxQ 09QDCNSIAVR1IwVwaeIIVvaw2tvVS6POh0yoe7S9KG8gi4X/aBSFQrVmGhg4YCt7 45s6V9essbgz6pXUWMpnbI9OmnWh7XPxnBCaHn6ckbBfiDyntwqXAvhs93uMVSaK 8ONInXpQKmEeB1tlnwJhL3LSFsfduSNQwZojVw+RCeqSuTsXpz0Btz2oeQe9FGZ4 cO+zcG4PDy44R85O/GzDZ1JUZudYyIsrDmIzCBwiVGbHZ7rVOx/yFCq55Di+tN3e c0HWTu3KpTht5Y6LwXbN2ejqAKEENrXFzjdKr/qXNhJ6Tt2+0ObDpFoQaVFTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAahZ9aj6TumEhdX7Q9DhIzZqpmUwHwYDVR0j BBgwFoAUf9t2GwnnqagM0oyEpf/bEvXJu9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzI5NWRlNi0yMDU4LTQ2YTctOTM2Yi0wNTJjZjJmYTkyMGQvMC83RkRCNzYxQjA5 RTdBOUE4MENEMjhDODRBNUZGREIxMkY1QzlCQkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRCMTJGNUM5 QkJEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMyOTVkZTYtMjA1OC00NmE3LTkz NmItMDUyY2YyZmE5MjBkLzAvN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRC MTJGNUM5QkJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVcjBydx7Ox4sb/P46YjbKg5ixoG2zsNyAr a6v3OLI6rgdeuuW6VWg1vuan4T3W6djX7d52w25K/Ri+iv7kpUl9ZOGgpCAbwJ20 ziXklfZhQAHRg1iEq6yqJ4a4bicPcMfj29pHYpYB6aF3T+EzXuuhHvL2ukepTX+3 FPOQWLBtxjYxY026WQShgtQz8jR77uv4cGgRB4/bXw9NCHsDgH+fIbOc0B59Hx6I GnB+Z9TNtrayWqfBDZg1xDUd+1RK8kCQfyOvkUMIjFtqzPmC7tq9fGKz01oKVAvq uc2E7ly4Mg4w2nU8QeZO9IdgGfnEfQMqpzMUddCrL/3nBLhKAuc= -----END CERTIFICATE-----Generated at Tue Nov 4 08:07:20 2025 by rpki-client