$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft File: C0CDF72A73FE200131853E0EE6A9B33708242F09.mft (raw, json) Hash identifier: FjX4zK+upBYT74NHiMlBAkOdTWFQlV2bJDTnTIbQH+s= Subject key identifier: DD:94:89:E6:6E:0D:53:FB:05:D9:60:C0:80:F1:C6:12:08:EB:32:5B Authority key identifier: C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 Certificate issuer: /CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Certificate serial: 601672869B2503527E664C4F7A3A82D16061485B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft Manifest number: 7D Signing time: Tue 04 Nov 2025 09:11:11 +0000 Manifest this update: Tue 04 Nov 2025 09:06:11 +0000 Manifest next update: Fri 07 Nov 2025 12:06:11 +0000 Files and hashes: 1: 3130332e39302e36332e302f32342d3234203d3e203633353038.roa (hash: MULEUEHSyZpY9qn3SDe7sQnJLs4h5Mi7a94B5iOdQb8=) 2: C0CDF72A73FE200131853E0EE6A9B33708242F09.crl (hash: G13UFxWBDpe/xri/PeyLaCtBML7vlPilyi5ZBDUri4Y=) 3: 3130332e39302e36322e302f32342d3234203d3e203633353038.roa (hash: MeO0TR42bgLm6thq+jwgdjWKMy27/0uvvv2g1npnqFo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 12:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:16:72:86:9b:25:03:52:7e:66:4c:4f:7a:3a:82:d1:60:61:48:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Validity Not Before: Nov 4 09:06:11 2025 GMT Not After : Nov 7 12:06:11 2025 GMT Subject: CN=DD9489E66E0D53FB05D960C080F1C61208EB325B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:22:3e:dc:d2:c7:03:73:e9:e9:80:d7:d7:44: 1e:6d:57:b6:e5:7d:e2:f6:c4:5e:f6:32:c8:a4:96: c1:ff:80:61:1f:7f:54:85:18:73:8d:52:43:b0:a6: 82:7d:bc:d7:20:a3:4c:3a:c7:58:bb:04:2a:2f:02: b0:1a:bc:4a:39:5b:31:88:e5:ba:72:24:82:26:9d: 3a:79:99:d6:0d:d0:3f:79:8d:5e:1b:cd:1a:fa:ac: 91:67:41:b1:c6:d2:83:d8:66:f1:22:03:17:58:b8: 6b:b2:d4:92:e1:8e:17:97:95:57:a5:82:e7:81:1f: 68:cd:7b:60:a8:63:0f:d2:e1:aa:b1:3a:49:e7:02: 33:57:36:ae:ea:ae:3a:68:97:48:21:f2:1d:78:dc: c6:98:da:80:99:8a:eb:fa:99:5b:cf:ba:1b:f1:98: ac:f0:d4:b1:c1:7b:01:7e:ef:cd:5d:8a:08:c2:1b: 5d:ac:2c:02:81:b3:9e:b8:8f:8f:97:48:08:1e:75: 8b:31:b4:5e:33:d5:0e:94:66:18:13:dd:3b:43:e8: ab:8b:03:c3:c8:55:41:e0:cc:59:06:29:c8:c7:19: b8:78:0d:b3:e6:f3:91:de:65:58:bb:5c:37:9c:3d: c5:53:59:37:81:be:e0:95:70:4c:16:ee:03:5f:7a: c1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:94:89:E6:6E:0D:53:FB:05:D9:60:C0:80:F1:C6:12:08:EB:32:5B X509v3 Authority Key Identifier: keyid:C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:cd:6e:8c:72:b7:10:f9:e4:59:ba:b3:02:42:7b:41:52:56: 04:84:a5:e1:70:bd:30:46:43:02:de:19:92:cf:eb:ae:7d:37: 7e:ac:dd:fd:3b:e2:8b:c9:1a:f5:db:57:93:cb:89:b2:6c:48: 19:2e:14:b9:75:ad:70:58:d8:17:24:08:ec:54:6a:ef:31:41: 44:1d:dd:39:db:f6:c6:44:fe:cc:ad:28:71:a9:c9:4c:cb:b3: 41:17:f5:b3:7d:1f:72:a3:94:83:5b:c3:1b:bb:66:17:97:5e: 68:39:31:30:91:54:58:45:1c:ba:36:fd:62:f5:4c:c1:df:9f: fe:00:5e:06:9a:67:d7:18:73:ee:3c:c8:bf:ce:66:68:cf:6d: ab:a7:71:f5:7e:13:ca:9c:7d:79:fa:92:a0:54:84:30:4c:be: b1:81:4e:73:83:09:73:48:e6:6e:bd:8d:3c:a2:13:7f:38:2b: f8:8e:8f:99:98:46:40:e3:70:35:d2:91:d8:91:1e:b0:19:c6: 23:58:96:e0:e9:c9:4a:f3:8e:fd:42:34:8f:61:19:09:8e:76: 4c:3a:ff:55:c7:1b:f1:c4:8b:c3:53:68:3f:08:f2:f0:ac:d9: b6:4c:e8:bc:6a:b4:04:47:79:8a:c7:9c:d4:1d:86:38:cd:47: 74:e0:84:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYBZyhpslA1J+ZkxPejqC0WBhSFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcw ODI0MkYwOTAeFw0yNTExMDQwOTA2MTFaFw0yNTExMDcxMjA2MTFaMDMxMTAvBgNV BAMTKEREOTQ4OUU2NkUwRDUzRkIwNUQ5NjBDMDgwRjFDNjEyMDhFQjMyNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Ij7c0scDc+npgNfXRB5tV7bl feL2xF72MsiklsH/gGEff1SFGHONUkOwpoJ9vNcgo0w6x1i7BCovArAavEo5WzGI 5bpyJIImnTp5mdYN0D95jV4bzRr6rJFnQbHG0oPYZvEiAxdYuGuy1JLhjheXlVel gueBH2jNe2CoYw/S4aqxOknnAjNXNq7qrjpol0gh8h143MaY2oCZiuv6mVvPuhvx mKzw1LHBewF+781digjCG12sLAKBs564j4+XSAgedYsxtF4z1Q6UZhgT3TtD6KuL A8PIVUHgzFkGKcjHGbh4DbPm85HeZVi7XDecPcVTWTeBvuCVcEwW7gNfesHnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3ZSJ5m4NU/sF2WDAgPHGEgjrMlswHwYDVR0j BBgwFoAUwM33KnP+IAExhT4O5qmzNwgkLwkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Yzc1NDdmYy00OGQ0LTQxNjktYWUzMy1jYjQ1NGQ2ZDhiOTIvMC9DMENERjcyQTcz RkUyMDAxMzE4NTNFMEVFNkE5QjMzNzA4MjQyRjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcwODI0 MkYwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM3NTQ3ZmMtNDhkNC00MTY5LWFl MzMtY2I0NTRkNmQ4YjkyLzAvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIz MzcwODI0MkYwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLNboxytxD55Fm6swJCe0FSVgSEpeFwvTBG QwLeGZLP6659N36s3f074ovJGvXbV5PLibJsSBkuFLl1rXBY2BckCOxUau8xQUQd 3Tnb9sZE/sytKHGpyUzLs0EX9bN9H3KjlINbwxu7ZheXXmg5MTCRVFhFHLo2/WL1 TMHfn/4AXgaaZ9cYc+48yL/OZmjPbauncfV+E8qcfXn6kqBUhDBMvrGBTnODCXNI 5m69jTyiE384K/iOj5mYRkDjcDXSkdiRHrAZxiNYluDpyUrzjv1CNI9hGQmOdkw6 /1XHG/HEi8NTaD8I8vCs2bZM6LxqtARHeYrHnNQdhjjNR3TghL0= -----END CERTIFICATE-----Generated at Tue Nov 4 12:48:21 2025 by rpki-client