$ rpki-client -vvf repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft File: 7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft (raw, json) Hash identifier: JxeFngjGhOqmvofNEp5DDh7IwaYPMKkymwk/WU8bYuA= Subject key identifier: 03:CE:F3:E4:73:0E:91:BD:A2:7B:BD:9B:0A:C2:06:BC:2F:19:5E:41 Authority key identifier: 73:76:92:2C:93:BF:66:7F:FB:BD:AF:07:35:AE:73:D1:45:1B:08:C2 Certificate issuer: /CN=7376922C93BF667FFBBDAF0735AE73D1451B08C2 Certificate serial: 06729768FB7B645E0DA46AA6BF002499F1CCDC29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft Manifest number: 0517 Signing time: Sat 15 Nov 2025 11:40:57 +0000 Manifest this update: Sat 15 Nov 2025 11:35:57 +0000 Manifest next update: Tue 18 Nov 2025 14:21:57 +0000 Files and hashes: 1: 3130332e38392e3136352e302f32342d3234203d3e20313333383030.roa (hash: 0V79HEBuKR1jbK8PkSQwyA4BziEgKvO+/ItR4BkRmQg=) 2: 3130332e38392e3135342e302f32342d3234203d3e20313333383030.roa (hash: 21L4D1hu21+7UR3Mn3cvc8Jhs/U+RaE8nhEhhkQ5YEA=) 3: 3130332e38392e3136342e302f32342d3234203d3e20313333383030.roa (hash: +2SP7VdADvevew0k00TuxJ1WZ3WZFkGqu4JZIMGxgpw=) 4: 3130332e372e3137362e302f32342d3234203d3e20313336303830.roa (hash: pULFJZ+nbfV5jOVZtN4jB+N6TsIyKwD9xJ39aFL57ak=) 5: 7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl (hash: /iJNI9oNwBCk1/EjLEticNCm0gz0N4mF6KPForhGV5Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Nov 2025 14:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:72:97:68:fb:7b:64:5e:0d:a4:6a:a6:bf:00:24:99:f1:cc:dc:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7376922C93BF667FFBBDAF0735AE73D1451B08C2 Validity Not Before: Nov 15 11:35:57 2025 GMT Not After : Nov 18 14:21:57 2025 GMT Subject: CN=03CEF3E4730E91BDA27BBD9B0AC206BC2F195E41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:26:3e:f5:41:85:a3:c3:da:42:64:0c:a5:8b: 3d:07:fd:d3:5f:e8:61:88:41:10:fc:d5:81:db:19: 98:87:b5:90:aa:92:ab:1c:06:98:a4:7a:0c:8f:26: e8:2a:1c:f4:d0:df:eb:12:41:3b:83:11:c2:24:33: 1b:a3:e3:49:47:39:95:7e:c4:55:76:ec:a6:b0:5f: 48:af:38:27:a1:97:04:c7:e0:65:0a:d1:ab:de:a2: ef:db:20:6e:49:61:b3:6c:f9:69:34:9e:8b:df:50: 3e:24:ff:e1:07:b9:96:51:e1:9b:66:44:2b:a8:d9: 4f:b3:97:c1:cd:ca:85:0a:40:fe:f9:f3:ce:77:53: ba:a9:36:ae:05:5a:76:66:13:60:0c:ad:09:ca:bb: fb:22:84:79:7b:d0:d6:39:3e:69:b6:cc:7b:1b:db: 8f:54:a7:72:1c:80:71:28:da:9a:79:2a:96:8f:ff: e3:c4:ad:82:34:72:e7:11:a0:cd:e5:7d:9e:42:9e: d9:09:46:9e:47:1b:5e:55:86:1f:86:90:0d:0a:11: 65:66:4c:f2:cd:73:36:02:65:29:5b:6d:57:0e:d0: e4:15:6e:3b:fa:ad:7f:41:a0:73:22:f5:1b:a8:3a: c3:6f:06:53:33:db:cc:ec:7a:ae:66:ae:43:d9:49: 06:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:CE:F3:E4:73:0E:91:BD:A2:7B:BD:9B:0A:C2:06:BC:2F:19:5E:41 X509v3 Authority Key Identifier: keyid:73:76:92:2C:93:BF:66:7F:FB:BD:AF:07:35:AE:73:D1:45:1B:08:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:25:c0:aa:30:22:73:b4:ce:a5:7e:f7:ec:b1:2d:68:b5:75: 9e:e2:a5:d9:f1:88:b9:54:4e:39:ed:95:cf:b0:b6:ef:e2:77: 74:3f:e9:f9:f3:9f:0c:9c:2a:3c:8c:ed:ca:1f:11:8d:fe:ea: ce:42:59:b8:2f:cf:df:b9:56:40:2c:71:da:70:89:6e:c7:47: c6:40:de:2e:99:52:52:e9:cf:6f:69:12:cd:1f:10:2e:aa:7d: c4:d0:bb:c9:8e:cc:1a:11:46:48:2e:fd:9c:ae:3f:3e:2c:22: 9e:e9:87:47:dc:ed:b1:e0:59:ba:b1:de:2e:31:e2:ff:5b:94: a8:04:14:26:92:c9:2a:60:7c:6e:60:6c:e2:dd:6e:80:d2:08: 8a:c8:7e:24:f1:3d:cc:be:4c:71:27:71:cf:23:74:4f:97:d0: 57:09:c7:d0:c2:67:3e:c9:48:35:5c:27:f2:38:bc:6e:ba:18: e4:5a:f3:c0:e2:6f:24:49:be:39:c5:28:7a:f3:34:69:ca:d3: 8a:ea:9d:80:28:c6:60:c6:a0:6f:3b:4b:d7:b5:18:4e:f8:a3: 6f:02:e7:a7:5d:34:75:1a:18:ae:87:cc:6b:03:43:95:d5:d6: 17:90:e9:ac:4f:2d:00:3d:34:f0:22:98:56:b7:15:53:83:4c: 1e:44:aa:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBnKXaPt7ZF4NpGqmvwAkmfHM3CkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTczRDE0 NTFCMDhDMjAeFw0yNTExMTUxMTM1NTdaFw0yNTExMTgxNDIxNTdaMDMxMTAvBgNV BAMTKDAzQ0VGM0U0NzMwRTkxQkRBMjdCQkQ5QjBBQzIwNkJDMkYxOTVFNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyJj71QYWjw9pCZAyliz0H/dNf 6GGIQRD81YHbGZiHtZCqkqscBpikegyPJugqHPTQ3+sSQTuDEcIkMxuj40lHOZV+ xFV27KawX0ivOCehlwTH4GUK0aveou/bIG5JYbNs+Wk0novfUD4k/+EHuZZR4Ztm RCuo2U+zl8HNyoUKQP758853U7qpNq4FWnZmE2AMrQnKu/sihHl70NY5Pmm2zHsb 249Up3IcgHEo2pp5KpaP/+PErYI0cucRoM3lfZ5CntkJRp5HG15Vhh+GkA0KEWVm TPLNczYCZSlbbVcO0OQVbjv6rX9BoHMi9RuoOsNvBlMz28zseq5mrkPZSQZlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA87z5HMOkb2ie72bCsIGvC8ZXkEwHwYDVR0j BBgwFoAUc3aSLJO/Zn/7va8HNa5z0UUbCMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDE3NmRkZC1hOTgwLTQzZDYtOTRhNy05NWVlZGE1Mzk2NjUvMC83Mzc2OTIyQzkz QkY2NjdGRkJCREFGMDczNUFFNzNEMTQ1MUIwOEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTczRDE0NTFC MDhDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQxNzZkZGQtYTk4MC00M2Q2LTk0 YTctOTVlZWRhNTM5NjY1LzAvNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTcz RDE0NTFCMDhDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEIlwKowInO0zqV+9+yxLWi1dZ7ipdnxiLlU Tjntlc+wtu/id3Q/6fnznwycKjyM7cofEY3+6s5CWbgvz9+5VkAscdpwiW7HR8ZA 3i6ZUlLpz29pEs0fEC6qfcTQu8mOzBoRRkgu/ZyuPz4sIp7ph0fc7bHgWbqx3i4x 4v9blKgEFCaSySpgfG5gbOLdboDSCIrIfiTxPcy+THEncc8jdE+X0FcJx9DCZz7J SDVcJ/I4vG66GORa88DibyRJvjnFKHrzNGnK04rqnYAoxmDGoG87S9e1GE74o28C 56ddNHUaGK6HzGsDQ5XV1heQ6axPLQA9NPAimFa3FVODTB5EqhU= -----END CERTIFICATE-----Generated at Sun Nov 16 07:44:11 2025 by rpki-client