$ rpki-client -vvf repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft File: 7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft (raw, json) Hash identifier: U6geyIodnJ+F9ihy+PQzP9xyYh3sz5KGeXqO38PAHDk= Subject key identifier: CB:04:89:4B:13:E0:F8:2E:26:B5:FD:62:80:82:B4:98:05:C6:B4:E1 Authority key identifier: 7C:4E:AC:B6:A8:C8:C7:27:6D:4C:EB:86:DC:DC:A3:E7:F4:68:A7:93 Certificate issuer: /CN=7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793 Certificate serial: 5D4AEA8EA5CF84ABCAA0AF196D2EE3A88AFB6346 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft Manifest number: 0101 Signing time: Mon 03 Nov 2025 22:40:47 +0000 Manifest this update: Mon 03 Nov 2025 22:35:46 +0000 Manifest next update: Fri 07 Nov 2025 08:53:46 +0000 Files and hashes: 1: 3135372e32302e3231322e302f32332d3234203d3e20313532343135.roa (hash: rbjJyAwc8hNNHHozNUZcHui2yrJ3XRP3MxmsmjgubzQ=) 2: 7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.crl (hash: eZhpzSptaB6cmfSR4tYZd1AHQn9ueVRpfh7wWuKO9Fo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.crl rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:4a:ea:8e:a5:cf:84:ab:ca:a0:af:19:6d:2e:e3:a8:8a:fb:63:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793 Validity Not Before: Nov 3 22:35:46 2025 GMT Not After : Nov 7 08:53:46 2025 GMT Subject: CN=CB04894B13E0F82E26B5FD628082B49805C6B4E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:79:21:c6:bc:7d:ca:b0:ee:30:b8:95:db:84: c9:28:fb:fa:29:ba:2f:d5:00:f6:44:22:97:27:6b: f3:98:90:21:23:29:b8:0d:75:8a:e6:1f:82:74:49: 5e:a3:0d:43:db:52:74:2a:fc:f4:9b:75:11:72:ee: 03:bb:72:e4:d7:83:05:3b:11:be:75:ba:7b:27:d1: ca:2c:27:e8:b6:47:41:a3:b5:6f:75:4a:94:fd:e0: 7a:2f:9c:24:b4:31:01:c8:41:fc:d3:25:8a:f5:c0: cc:b9:ee:d0:aa:e4:ed:2a:3a:7b:cb:28:b6:5c:a1: 54:63:aa:5c:d7:8f:89:63:1b:c4:2e:16:31:3f:e6: f1:01:73:60:1e:6f:83:18:c7:14:08:7c:bf:27:b8: e2:9a:57:e8:ec:e5:34:64:34:27:c5:98:57:58:f6: 0f:85:74:5b:f5:dd:32:29:8f:0e:e9:ae:78:82:a9: af:a0:77:82:5e:2d:16:4c:a8:7e:88:bd:40:b8:bb: 9d:ae:36:f2:ad:60:33:5f:64:a5:cb:d3:4c:23:33: 21:89:55:3c:76:d0:c7:b4:30:00:94:20:94:54:2a: a1:1b:0f:a0:d4:b5:71:80:c9:07:01:ea:47:4b:92: ec:1b:9b:ce:fd:8b:0e:39:01:e3:ef:35:0f:29:3e: a9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:04:89:4B:13:E0:F8:2E:26:B5:FD:62:80:82:B4:98:05:C6:B4:E1 X509v3 Authority Key Identifier: keyid:7C:4E:AC:B6:A8:C8:C7:27:6D:4C:EB:86:DC:DC:A3:E7:F4:68:A7:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:70:e3:ad:0e:62:f5:be:ef:e1:f9:b4:8c:7e:0b:fe:16:80: 83:b5:56:6c:14:c7:fd:fb:1a:86:c7:a9:1e:40:52:2d:54:4b: 7e:4d:02:8c:47:1c:1f:5a:2f:97:55:dc:e5:65:0c:1b:e1:ae: bb:60:a4:85:c8:f4:20:40:31:c9:be:ec:65:d3:2f:5c:bf:9e: 0e:56:0e:12:30:43:59:c4:19:96:7a:1e:2c:37:28:7c:96:e3: d3:eb:54:fb:23:29:02:66:4d:75:fe:14:fd:f7:e3:9b:f2:05: 04:f8:a4:7e:fb:82:2c:2b:de:2f:d4:e2:e7:41:48:a0:2f:50: 43:72:6c:73:1e:c5:8a:24:68:b5:c9:8a:ca:cd:7d:d5:86:d4: 42:41:c6:de:6a:f9:bc:63:d7:5d:27:0e:2f:81:56:69:be:33: 7f:cf:f8:ea:98:71:5b:32:43:9b:b0:0c:c3:fa:1f:be:22:75: 58:91:6d:fa:68:13:cc:cf:b6:22:37:19:b4:7c:8c:8d:b7:8e: 7d:81:7f:bd:38:da:c4:12:c6:7d:ad:ff:29:c2:0b:ce:2b:f0: e3:ba:e6:95:7a:8f:59:60:84:00:47:bc:7f:d7:65:08:c5:d7: 54:f9:66:5e:3e:85:6c:8e:6b:05:ca:3d:31:64:c2:90:2b:6d: 12:3f:4e:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXUrqjqXPhKvKoK8ZbS7jqIr7Y0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0RUFDQjZBOEM4QzcyNzZENENFQjg2RENEQ0EzRTdG NDY4QTc5MzAeFw0yNTExMDMyMjM1NDZaFw0yNTExMDcwODUzNDZaMDMxMTAvBgNV BAMTKENCMDQ4OTRCMTNFMEY4MkUyNkI1RkQ2MjgwODJCNDk4MDVDNkI0RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1eSHGvH3KsO4wuJXbhMko+/op ui/VAPZEIpcna/OYkCEjKbgNdYrmH4J0SV6jDUPbUnQq/PSbdRFy7gO7cuTXgwU7 Eb51unsn0cosJ+i2R0GjtW91SpT94HovnCS0MQHIQfzTJYr1wMy57tCq5O0qOnvL KLZcoVRjqlzXj4ljG8QuFjE/5vEBc2Aeb4MYxxQIfL8nuOKaV+js5TRkNCfFmFdY 9g+FdFv13TIpjw7prniCqa+gd4JeLRZMqH6IvUC4u52uNvKtYDNfZKXL00wjMyGJ VTx20Me0MACUIJRUKqEbD6DUtXGAyQcB6kdLkuwbm879iw45AePvNQ8pPqldAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUywSJSxPg+C4mtf1igIK0mAXGtOEwHwYDVR0j BBgwFoAUfE6stqjIxydtTOuG3Nyj5/Rop5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2I0N2FiNi1kMWYxLTRkMmUtOWNmYy04MDg0YTRiYWNmMGIvMC83QzRFQUNCNkE4 QzhDNzI3NkQ0Q0VCODZEQ0RDQTNFN0Y0NjhBNzkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0M0RUFDQjZBOEM4QzcyNzZENENFQjg2RENEQ0EzRTdGNDY4 QTc5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNiNDdhYjYtZDFmMS00ZDJlLTlj ZmMtODA4NGE0YmFjZjBiLzAvN0M0RUFDQjZBOEM4QzcyNzZENENFQjg2RENEQ0Ez RTdGNDY4QTc5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALlw460OYvW+7+H5tIx+C/4WgIO1VmwUx/37 GobHqR5AUi1US35NAoxHHB9aL5dV3OVlDBvhrrtgpIXI9CBAMcm+7GXTL1y/ng5W DhIwQ1nEGZZ6Hiw3KHyW49PrVPsjKQJmTXX+FP3345vyBQT4pH77giwr3i/U4udB SKAvUENybHMexYokaLXJisrNfdWG1EJBxt5q+bxj110nDi+BVmm+M3/P+OqYcVsy Q5uwDMP6H74idViRbfpoE8zPtiI3GbR8jI23jn2Bf7042sQSxn2t/ynCC84r8OO6 5pV6j1lghABHvH/XZQjF11T5Zl4+hWyOawXKPTFkwpArbRI/Tnc= -----END CERTIFICATE-----Generated at Wed Nov 5 22:41:23 2025 by rpki-client