$ rpki-client -vvf repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft File: 7188210EAEFBA7947009E19B6219830752F542A9.mft (raw, json) Hash identifier: 6BfoWPN86GW66GSf4UEHbLwPlUDtDAUy3B7xljJfqlg= Subject key identifier: 50:A0:DA:27:6B:88:3B:02:EF:1D:48:65:C0:6F:6E:85:01:7F:7E:35 Authority key identifier: 71:88:21:0E:AE:FB:A7:94:70:09:E1:9B:62:19:83:07:52:F5:42:A9 Certificate issuer: /CN=7188210EAEFBA7947009E19B6219830752F542A9 Certificate serial: 21D7ACB00176ADD475691DC13D171EB52AFE139E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft Manifest number: 01BA Signing time: Mon 03 Nov 2025 01:01:08 +0000 Manifest this update: Mon 03 Nov 2025 00:56:08 +0000 Manifest next update: Thu 06 Nov 2025 02:27:08 +0000 Files and hashes: 1: 7188210EAEFBA7947009E19B6219830752F542A9.crl (hash: nM6KcV5IdGJ47n9sWMUoERMRmNEhSrWU7YtycRQ/TQk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.crl rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 02:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d7:ac:b0:01:76:ad:d4:75:69:1d:c1:3d:17:1e:b5:2a:fe:13:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7188210EAEFBA7947009E19B6219830752F542A9 Validity Not Before: Nov 3 00:56:08 2025 GMT Not After : Nov 6 02:27:08 2025 GMT Subject: CN=50A0DA276B883B02EF1D4865C06F6E85017F7E35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3b:ac:09:c7:33:3f:8f:a9:98:6e:32:9d:56: 27:a0:d4:b5:b6:45:83:40:0f:96:7f:36:5b:c9:0b: 0d:49:49:88:aa:ef:53:cd:9d:0f:b4:88:54:94:a8: d5:a2:be:a3:f8:a7:c7:4a:1d:26:5d:7d:68:e6:06: 7a:fc:72:5a:47:20:0b:ca:32:a8:80:77:45:17:01: 78:e0:98:f1:60:e4:c0:a3:42:ea:a0:92:80:52:7f: 9d:19:80:ea:b3:05:31:4e:7d:81:85:60:dd:e5:fc: 6e:6d:89:ab:a2:63:de:ed:ae:46:ae:41:6c:3f:0f: bb:74:bc:58:b9:7c:a4:e7:c7:8c:0f:1a:92:3b:cd: c3:34:cc:ad:8a:2a:4d:55:d1:2d:77:93:29:5b:a0: ed:33:b7:cf:86:d6:cf:88:47:bf:74:70:ed:7c:a8: 30:94:58:de:86:e5:b6:ca:b9:0c:ee:94:c2:44:55: eb:66:96:fe:ec:38:e0:7d:ec:19:f8:14:4d:d9:2d: 04:52:4e:47:43:da:8a:d1:cc:99:df:bb:a7:d0:ff: cd:9c:e1:f5:d7:af:8b:ba:0d:14:15:5c:6e:30:c7: ca:49:f1:eb:57:6f:22:f9:73:70:b9:83:77:d8:07: e0:f3:b2:03:4a:07:d8:0d:81:b0:3b:82:e3:94:23: 80:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A0:DA:27:6B:88:3B:02:EF:1D:48:65:C0:6F:6E:85:01:7F:7E:35 X509v3 Authority Key Identifier: keyid:71:88:21:0E:AE:FB:A7:94:70:09:E1:9B:62:19:83:07:52:F5:42:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:55:0f:2b:54:ea:35:60:f0:65:ed:a3:f6:b6:c8:77:08:61: df:48:83:f4:9f:f4:22:55:d7:d3:00:3e:bb:16:df:6a:f9:79: f9:6e:23:e8:be:c3:50:af:2f:ad:69:5e:4e:b6:45:0a:a2:2e: 21:e7:db:9a:0b:59:74:d8:73:b8:2f:3c:6b:a6:97:0a:58:61: 3c:96:c5:06:e9:1e:29:3f:79:44:65:09:39:2c:63:f1:e4:e4: 3f:48:37:7d:a5:ae:25:35:3b:80:e2:60:fb:6f:92:f4:c5:11: d2:b5:db:ab:79:31:c1:17:7b:f7:c3:35:01:bf:b3:41:0e:db: 20:40:6b:d2:d8:53:aa:69:53:f5:33:02:e2:5d:e0:2e:94:26: 4a:85:e5:63:9a:9e:bc:0f:51:0a:d8:ed:36:8b:66:ce:cb:97: 9d:57:10:5e:4a:78:15:82:26:d8:98:89:ee:f5:03:7f:9f:2b: a9:4d:5a:ae:08:b5:29:d5:fc:24:39:82:ee:13:35:a3:29:39: 62:af:50:6d:7b:be:dd:ab:56:03:44:1d:b4:4b:ff:47:82:66: 30:a4:35:1a:aa:bb:94:fd:fb:91:96:08:48:60:aa:4f:03:31: 1d:26:f3:15:10:0d:83:c0:d4:23:c2:15:45:e1:24:d7:e3:21: bd:78:57:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIdessAF2rdR1aR3BPRcetSr+E54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgzMDc1 MkY1NDJBOTAeFw0yNTExMDMwMDU2MDhaFw0yNTExMDYwMjI3MDhaMDMxMTAvBgNV BAMTKDUwQTBEQTI3NkI4ODNCMDJFRjFENDg2NUMwNkY2RTg1MDE3RjdFMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqO6wJxzM/j6mYbjKdVieg1LW2 RYNAD5Z/NlvJCw1JSYiq71PNnQ+0iFSUqNWivqP4p8dKHSZdfWjmBnr8clpHIAvK MqiAd0UXAXjgmPFg5MCjQuqgkoBSf50ZgOqzBTFOfYGFYN3l/G5tiauiY97trkau QWw/D7t0vFi5fKTnx4wPGpI7zcM0zK2KKk1V0S13kylboO0zt8+G1s+IR790cO18 qDCUWN6G5bbKuQzulMJEVetmlv7sOOB97Bn4FE3ZLQRSTkdD2orRzJnfu6fQ/82c 4fXXr4u6DRQVXG4wx8pJ8etXbyL5c3C5g3fYB+DzsgNKB9gNgbA7guOUI4BpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUKDaJ2uIOwLvHUhlwG9uhQF/fjUwHwYDVR0j BBgwFoAUcYghDq77p5RwCeGbYhmDB1L1QqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTdkN2IzOC1kNjZiLTQzYjMtOTFmYi00YmI5ZTY2MzdlMmEvMC83MTg4MjEwRUFF RkJBNzk0NzAwOUUxOUI2MjE5ODMwNzUyRjU0MkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgzMDc1MkY1 NDJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE3ZDdiMzgtZDY2Yi00M2IzLTkx ZmItNGJiOWU2NjM3ZTJhLzAvNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgz MDc1MkY1NDJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhVDytU6jVg8GXto/a2yHcIYd9Ig/Sf9CJV 19MAPrsW32r5efluI+i+w1CvL61pXk62RQqiLiHn25oLWXTYc7gvPGumlwpYYTyW xQbpHik/eURlCTksY/Hk5D9IN32lriU1O4DiYPtvkvTFEdK126t5McEXe/fDNQG/ s0EO2yBAa9LYU6ppU/UzAuJd4C6UJkqF5WOanrwPUQrY7TaLZs7Ll51XEF5KeBWC JtiYie71A3+fK6lNWq4ItSnV/CQ5gu4TNaMpOWKvUG17vt2rVgNEHbRL/0eCZjCk NRqqu5T9+5GWCEhgqk8DMR0m8xUQDYPA1CPCFUXhJNfjIb14V4g= -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:57 2025 by rpki-client