$ rpki-client -vvf repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft File: 7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft (raw, json) Hash identifier: YUqJdbwnVk4TkZH1qebWug11aFywOBRkYe6G5BSITFk= Subject key identifier: E8:B3:CC:36:46:FA:02:BD:C1:3D:E4:39:1D:2A:04:31:53:6E:ED:8A Authority key identifier: 7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF Certificate issuer: /CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF Certificate serial: 7BD5AB48D28F443C352B3C7BFD181A36D360C6C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft Manifest number: 01B4 Signing time: Sun 02 Nov 2025 21:52:16 +0000 Manifest this update: Sun 02 Nov 2025 21:47:16 +0000 Manifest next update: Thu 06 Nov 2025 06:52:16 +0000 Files and hashes: 1: 7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl (hash: RJ/w7qPS1oL783kWSajZCh37CAIgDxYoUY5xlPiPw5E=) 2: 3130332e3139312e3131362e302f32342d3234203d3e20313439393137.roa (hash: LYrLDsZTAbC2Myr0Hc+KOOGkdqztaoQ+U5C2aGpkGQc=) 3: 3130332e3139312e3131362e302f32332d3233203d3e20313439393137.roa (hash: wE41NZyo6Pm4ztOuQo15CxbV7OwbZAt3ABv1Or5h/i4=) 4: 3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa (hash: T5ujnMBfrRFq+9a4Ins8EQ3CJj6sZJk55UE2urIjcWM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 06:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:d5:ab:48:d2:8f:44:3c:35:2b:3c:7b:fd:18:1a:36:d3:60:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF Validity Not Before: Nov 2 21:47:16 2025 GMT Not After : Nov 6 06:52:16 2025 GMT Subject: CN=E8B3CC3646FA02BDC13DE4391D2A0431536EED8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f5:6a:e3:92:94:85:9a:ae:b2:78:aa:1a:ad: d6:13:b7:84:ca:46:e7:5d:4a:93:a6:4d:48:c8:4e: c0:78:e8:06:36:68:63:a9:60:e0:67:bc:3a:04:60: cf:56:a3:08:70:fd:05:a5:2e:92:8b:0f:9e:46:16: f4:81:4c:23:3f:f3:0c:a8:ef:c2:10:47:8b:42:72: e3:da:1f:70:9b:6e:ac:74:88:e7:e1:d3:97:3d:e2: 03:df:92:07:6a:a9:5a:ef:9b:e6:64:e0:95:f3:76: dc:10:a2:75:83:2a:a4:c0:f9:a0:f3:20:86:d3:41: 3e:97:38:32:ad:19:7c:a3:b1:e1:db:2e:3d:6f:57: 36:53:cb:5b:b0:00:d2:8d:35:63:db:9d:52:66:18: 11:bc:67:67:27:bb:3e:9f:11:ef:8c:ba:b6:9d:3f: 03:5f:af:5b:bb:f4:44:50:fb:3c:f9:d8:fa:b1:96: 53:c7:10:fd:94:9e:79:83:f5:00:01:20:74:b4:20: 2f:8d:ea:e7:6f:0a:64:68:62:a8:67:dd:b2:88:34: fc:2a:8f:2c:ac:aa:1a:f9:1c:e0:98:23:f1:e8:5e: 20:6f:01:2f:ab:c9:74:77:bc:9f:b3:e9:0a:9f:69: ab:2f:e0:e8:a2:f5:5f:eb:39:12:96:2e:8a:77:74: b6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B3:CC:36:46:FA:02:BD:C1:3D:E4:39:1D:2A:04:31:53:6E:ED:8A X509v3 Authority Key Identifier: keyid:7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:06:2e:58:6c:95:44:95:f6:8a:94:68:f9:2a:f3:69:af:01: 2f:1e:fe:d1:0b:5b:26:a3:66:7b:39:66:3b:07:17:fe:41:62: d3:2b:4d:49:3b:5c:81:57:eb:45:ce:62:bd:d2:e5:cf:5f:a9: f5:19:f7:eb:42:19:6c:0b:c3:09:66:db:ed:19:c2:54:e1:8f: 95:d1:ee:ce:c6:7c:f7:a0:81:78:cd:8a:c1:b1:ad:dd:7d:c6: 5b:ca:65:6e:e8:22:dc:83:4c:fb:12:34:65:b2:12:ea:35:d8: 98:c4:7d:3a:98:5c:43:c1:90:26:37:c6:dd:2a:31:7d:58:45: 2e:fd:6c:c9:33:eb:5b:a8:e5:bd:15:2c:49:26:ab:ea:c2:f0: 50:f6:e2:00:6a:28:96:c5:ec:3d:dd:b6:e6:f0:21:d3:0e:a2: 4b:c2:f6:64:32:b6:27:6d:ee:52:57:11:8b:f4:7d:69:fd:33: 8d:71:3b:8f:c5:56:28:34:ea:d0:03:2f:a4:33:cc:34:7d:16: 66:a8:48:b9:af:c6:66:a1:97:df:32:7d:33:e0:54:74:67:e5: 68:9b:84:f4:fb:ec:f9:11:c1:de:7f:6f:13:b6:bd:82:53:b3: 6c:ca:ae:7a:16:e3:c7:0d:25:98:f5:e1:a8:69:dd:3d:21:e6: d0:30:6b:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe9WrSNKPRDw1Kzx7/RgaNtNgxsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIyNzU1 MTRGNUVDRjAeFw0yNTExMDIyMTQ3MTZaFw0yNTExMDYwNjUyMTZaMDMxMTAvBgNV BAMTKEU4QjNDQzM2NDZGQTAyQkRDMTNERTQzOTFEMkEwNDMxNTM2RUVEOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO9WrjkpSFmq6yeKoardYTt4TK RuddSpOmTUjITsB46AY2aGOpYOBnvDoEYM9Wowhw/QWlLpKLD55GFvSBTCM/8wyo 78IQR4tCcuPaH3Cbbqx0iOfh05c94gPfkgdqqVrvm+Zk4JXzdtwQonWDKqTA+aDz IIbTQT6XODKtGXyjseHbLj1vVzZTy1uwANKNNWPbnVJmGBG8Z2cnuz6fEe+Murad PwNfr1u79ERQ+zz52PqxllPHEP2UnnmD9QABIHS0IC+N6udvCmRoYqhn3bKINPwq jyysqhr5HOCYI/HoXiBvAS+ryXR3vJ+z6Qqfaasv4Oii9V/rORKWLop3dLYDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6LPMNkb6Ar3BPeQ5HSoEMVNu7YowHwYDVR0j BBgwFoAUfKPyxA/kU87iMK9ZSYWydVFPXs8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NmFkYWUyYS00N2I2LTRhZTUtOWMzZi0zZThjYjkyYTM5ODcvMC83Q0EzRjJDNDBG RTQ1M0NFRTIzMEFGNTk0OTg1QjI3NTUxNEY1RUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIyNzU1MTRG NUVDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTZhZGFlMmEtNDdiNi00YWU1LTlj M2YtM2U4Y2I5MmEzOTg3LzAvN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIy NzU1MTRGNUVDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ0GLlhslUSV9oqUaPkq82mvAS8e/tELWyaj Zns5ZjsHF/5BYtMrTUk7XIFX60XOYr3S5c9fqfUZ9+tCGWwLwwlm2+0ZwlThj5XR 7s7GfPeggXjNisGxrd19xlvKZW7oItyDTPsSNGWyEuo12JjEfTqYXEPBkCY3xt0q MX1YRS79bMkz61uo5b0VLEkmq+rC8FD24gBqKJbF7D3dtubwIdMOokvC9mQytidt 7lJXEYv0fWn9M41xO4/FVig06tADL6QzzDR9FmaoSLmvxmahl98yfTPgVHRn5Wib hPT77PkRwd5/bxO2vYJTs2zKrnoW48cNJZj14ahp3T0h5tAwa98= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:29 2025 by rpki-client