$ rpki-client -vvf repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft File: 7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft (raw, json) Hash identifier: cQgvY9WgqcKLl+P+NYIRjv4gIz5o8Ex54KL0NP6f148= Subject key identifier: 43:E6:03:4A:4C:ED:99:07:74:04:D4:F4:FB:FC:49:68:53:4E:F1:42 Authority key identifier: 7A:BD:31:DD:82:8D:D5:8C:9D:91:18:00:21:90:3E:A0:4D:8E:B5:8E Certificate issuer: /CN=7ABD31DD828DD58C9D91180021903EA04D8EB58E Certificate serial: 77E17FF0EDAFAB7AAD8C08333B15F5A41B44A6FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ABD31DD828DD58C9D91180021903EA04D8EB58E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft Manifest number: DE Signing time: Mon 03 Nov 2025 20:21:31 +0000 Manifest this update: Mon 03 Nov 2025 20:16:31 +0000 Manifest next update: Fri 07 Nov 2025 08:07:31 +0000 Files and hashes: 1: 7ABD31DD828DD58C9D91180021903EA04D8EB58E.crl (hash: CwSsUjCkWGBEzTlf8zvmIS0plarmj4s/A/yxCLb17js=) 2: 3135372e36362e32302e302f32342d3234203d3e20313337333439.roa (hash: VWW2OjO2Nb0Oyhr5Vqe+VmM1lOl8RPUO1FTuyvBrHBg=) 3: 3135372e36362e32312e302f32342d3234203d3e20313431353932.roa (hash: 3IUGvQHYckh9j4psQSuGBFM7lfhV4EtYEKWC7HzE4TE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.crl rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ABD31DD828DD58C9D91180021903EA04D8EB58E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:e1:7f:f0:ed:af:ab:7a:ad:8c:08:33:3b:15:f5:a4:1b:44:a6:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ABD31DD828DD58C9D91180021903EA04D8EB58E Validity Not Before: Nov 3 20:16:31 2025 GMT Not After : Nov 7 08:07:31 2025 GMT Subject: CN=43E6034A4CED99077404D4F4FBFC4968534EF142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1c:d2:07:30:0e:ac:cc:87:b3:9f:e0:89:e9: d6:8e:a0:4f:72:e4:cb:57:fd:c5:44:f7:d6:ed:e1: 65:5b:dc:55:8c:76:09:eb:c8:9c:b0:1d:ed:87:dd: e3:24:42:49:3d:13:53:68:9d:ba:fb:cc:3c:64:5b: 6a:be:5f:5a:a9:40:8c:ac:a7:20:39:92:8d:07:66: 2e:90:e2:1f:1f:51:05:8b:27:da:f8:63:00:55:30: 40:9f:27:01:ba:da:5d:a4:17:08:85:3f:80:39:80: 2b:34:34:35:3b:61:02:b0:f0:57:d9:9d:92:65:1b: f3:2b:51:c3:a8:a0:44:73:8b:d1:d4:58:3d:f2:62: 38:07:2a:4d:19:b2:34:92:47:4b:16:c5:27:3f:fc: 26:80:42:c6:40:db:74:a6:87:e4:df:a3:0c:51:ce: e8:2d:cb:17:72:09:92:0f:10:04:a5:f7:93:c0:67: bd:7e:a4:06:57:b5:e9:81:bf:c1:e5:6a:3a:ef:61: dc:4f:ae:1d:ff:0c:25:cb:91:4f:0c:c0:e6:0a:9a: c9:2c:ed:5a:bc:fd:19:ea:9c:58:69:00:c6:e2:48: be:1e:16:06:e3:ac:3c:bd:b5:21:34:23:f3:64:06: d4:c6:40:1a:00:20:fd:21:ff:20:90:3d:ba:d7:96: 17:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E6:03:4A:4C:ED:99:07:74:04:D4:F4:FB:FC:49:68:53:4E:F1:42 X509v3 Authority Key Identifier: keyid:7A:BD:31:DD:82:8D:D5:8C:9D:91:18:00:21:90:3E:A0:4D:8E:B5:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ABD31DD828DD58C9D91180021903EA04D8EB58E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:27:3f:9c:3a:a6:b0:7f:ae:58:93:22:95:3c:d4:cc:fb:43: 2f:32:87:18:58:4b:78:0b:1c:c8:63:4f:95:de:30:53:b4:5c: 28:3a:0d:8a:7c:ba:fd:e6:59:67:bb:0e:cb:ff:46:65:b7:67: f3:23:e9:dc:b0:df:d0:39:c7:69:60:94:b1:98:a4:e3:8c:a9: 9f:e8:2b:8b:38:87:0b:30:c7:25:4d:18:e7:eb:ec:d6:f8:1f: 2d:7e:3f:0b:77:da:05:b9:31:ec:6a:57:b1:e1:38:5f:5d:e6: 89:47:ab:e1:83:31:0d:bb:02:9b:75:e4:ad:fe:4f:7d:90:3a: 05:10:c0:da:af:ef:5e:d9:45:43:e8:20:65:9d:a9:23:18:97: eb:3f:46:d9:de:f7:7d:e6:8e:9b:e4:55:6a:d3:fb:d4:de:68: 89:81:ea:1f:95:fa:12:3e:f3:56:b3:7c:24:e4:6b:cc:6e:f5: 11:99:7e:fb:74:24:7d:e5:0c:16:6a:47:03:0a:c1:6a:b6:7b: 63:c1:24:7e:c2:66:b5:6f:6b:14:d0:93:19:b8:7e:37:a0:db: 88:a7:4b:52:17:55:1b:84:88:9f:32:81:33:fc:e7:7f:84:c1: 2f:2d:da:4e:69:ae:6f:e2:57:58:e7:9d:97:84:c5:6f:d9:a7: a6:f9:3d:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd+F/8O2vq3qtjAgzOxX1pBtEpv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FCRDMxREQ4MjhERDU4QzlEOTExODAwMjE5MDNFQTA0 RDhFQjU4RTAeFw0yNTExMDMyMDE2MzFaFw0yNTExMDcwODA3MzFaMDMxMTAvBgNV BAMTKDQzRTYwMzRBNENFRDk5MDc3NDA0RDRGNEZCRkM0OTY4NTM0RUYxNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxHNIHMA6szIezn+CJ6daOoE9y 5MtX/cVE99bt4WVb3FWMdgnryJywHe2H3eMkQkk9E1Nonbr7zDxkW2q+X1qpQIys pyA5ko0HZi6Q4h8fUQWLJ9r4YwBVMECfJwG62l2kFwiFP4A5gCs0NDU7YQKw8FfZ nZJlG/MrUcOooERzi9HUWD3yYjgHKk0ZsjSSR0sWxSc//CaAQsZA23Smh+TfowxR zugtyxdyCZIPEASl95PAZ71+pAZXtemBv8HlajrvYdxPrh3/DCXLkU8MwOYKmsks 7Vq8/RnqnFhpAMbiSL4eFgbjrDy9tSE0I/NkBtTGQBoAIP0h/yCQPbrXlhcbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ+YDSkztmQd0BNT0+/xJaFNO8UIwHwYDVR0j BBgwFoAUer0x3YKN1YydkRgAIZA+oE2OtY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWY1ZWYxOC02ZmZhLTRkNjktOGMwYy0zNTE4Y2ZhODc1OGUvMC83QUJEMzFERDgy OERENThDOUQ5MTE4MDAyMTkwM0VBMDREOEVCNThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0FCRDMxREQ4MjhERDU4QzlEOTExODAwMjE5MDNFQTA0RDhF QjU4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVmNWVmMTgtNmZmYS00ZDY5LThj MGMtMzUxOGNmYTg3NThlLzAvN0FCRDMxREQ4MjhERDU4QzlEOTExODAwMjE5MDNF QTA0RDhFQjU4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwnP5w6prB/rliTIpU81Mz7Qy8yhxhYS3gL HMhjT5XeMFO0XCg6DYp8uv3mWWe7Dsv/RmW3Z/Mj6dyw39A5x2lglLGYpOOMqZ/o K4s4hwswxyVNGOfr7Nb4Hy1+Pwt32gW5MexqV7HhOF9d5olHq+GDMQ27Apt15K3+ T32QOgUQwNqv717ZRUPoIGWdqSMYl+s/Rtne933mjpvkVWrT+9TeaImB6h+V+hI+ 81azfCTka8xu9RGZfvt0JH3lDBZqRwMKwWq2e2PBJH7CZrVvaxTQkxm4fjeg24in S1IXVRuEiJ8ygTP853+EwS8t2k5prm/iV1jnnZeExW/Zp6b5PWI= -----END CERTIFICATE-----Generated at Tue Nov 4 21:16:41 2025 by rpki-client