$ rpki-client -vvf repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft File: 7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft (raw, json) Hash identifier: U/vTXfMt8Xk1y2kz4Gqva4nJI8J6U67e9c0HcUokswM= Subject key identifier: CD:15:D9:B3:99:52:CF:4D:4B:66:DF:0C:AB:B5:9F:5B:55:5A:ED:99 Authority key identifier: 78:25:A9:C3:0D:5A:EA:41:44:74:0E:9B:12:A3:C0:BC:60:E7:34:99 Certificate issuer: /CN=7825A9C30D5AEA4144740E9B12A3C0BC60E73499 Certificate serial: 68B65EA94E861FE1D7DE5E4FB1DD3F8EF1DFEF75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft Manifest number: 014B Signing time: Fri 17 Oct 2025 23:11:42 +0000 Manifest this update: Fri 17 Oct 2025 23:06:42 +0000 Manifest next update: Tue 21 Oct 2025 10:57:42 +0000 Files and hashes: 1: 323030313a6466323a666534303a3a2f34382d3438203d3e20313531353836.roa (hash: L1QXmmmYL7avongM7Z18LqYgTBveJl41ce19oTEBc90=) 2: 3130332e3131392e3233372e302f32342d3234203d3e20313531353836.roa (hash: 0CJAWZ02vSckzRoE57ZpZjjAeFM8kHecSgDHcs3TTPQ=) 3: 7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl (hash: X3nkrs84j2J5hxI1VjRSi4iklXSRVzA7RZTuVDnsoDE=) 4: 3130332e3131392e3233362e302f32332d3233203d3e20313531353836.roa (hash: YOGZVl1pxBeHfHLB3kw7JsNB/ueNC1i2F+bIqbAKZQY=) 5: 3130332e3131392e3233362e302f32342d3234203d3e20313531353836.roa (hash: AGikL5mf3R6SUcLntlNendJ/c7wVC1wVAVxWd0F74Ys=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 10:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:b6:5e:a9:4e:86:1f:e1:d7:de:5e:4f:b1:dd:3f:8e:f1:df:ef:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7825A9C30D5AEA4144740E9B12A3C0BC60E73499 Validity Not Before: Oct 17 23:06:42 2025 GMT Not After : Oct 21 10:57:42 2025 GMT Subject: CN=CD15D9B39952CF4D4B66DF0CABB59F5B555AED99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8b:a7:d9:9b:e0:64:be:47:42:31:8d:a2:26: c4:6e:ad:2a:f2:5c:32:1e:f1:4c:03:5f:80:b2:a9: 91:4c:ac:ee:03:fb:29:76:22:5f:ee:67:33:9d:8e: 89:73:a8:66:85:11:ca:50:4b:c8:5a:72:ab:1c:64: d6:66:e6:de:3e:b2:2f:dc:75:8c:92:a9:82:1e:2a: bf:51:e2:e1:32:45:70:bc:4e:4a:b4:1a:5c:48:a9: c6:7f:1e:7d:3e:f3:25:ce:36:18:b8:aa:7b:2f:6f: f6:e0:91:7a:22:cc:fe:08:ba:23:5e:5d:6f:5c:7a: 84:d0:8c:19:02:45:30:a0:82:66:69:19:77:5c:ef: 24:29:20:34:3e:e9:42:83:75:5b:3e:9d:13:e9:58: e8:12:2c:7a:25:9c:0c:ad:7d:61:22:02:ff:77:c2: 04:7a:2c:c9:f2:ce:45:32:a3:d7:42:10:2c:36:3e: f0:d9:e5:4f:bb:73:7a:da:90:7f:4a:96:4c:bc:89: 0e:2b:c2:18:10:c4:35:6d:af:58:17:24:37:d3:f1: f4:27:17:21:1a:97:e7:9e:ba:88:cc:93:72:3c:48: bd:3b:66:42:72:40:46:9d:78:79:ca:00:53:b0:1c: 2b:1a:81:f8:db:2a:6f:27:67:7b:e2:63:58:7b:d3: 93:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:15:D9:B3:99:52:CF:4D:4B:66:DF:0C:AB:B5:9F:5B:55:5A:ED:99 X509v3 Authority Key Identifier: keyid:78:25:A9:C3:0D:5A:EA:41:44:74:0E:9B:12:A3:C0:BC:60:E7:34:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:53:cf:d3:6f:f1:cb:cc:db:3d:aa:85:df:4d:b2:37:b4:52: de:03:fb:a4:3e:aa:b9:0c:bf:18:0c:56:8c:88:47:cb:bd:27: 54:92:ed:60:5a:9a:7e:b6:c2:12:ec:33:b5:0b:2e:1f:e8:c6: c7:97:eb:9a:79:ce:23:54:ab:55:60:84:59:d0:25:b3:ef:fb: ca:64:8b:5e:89:d2:e7:fc:01:c1:b3:5e:e0:a6:35:3e:7b:82: 65:30:f1:e8:64:a5:ee:c7:8b:45:f5:02:f1:ac:60:db:b8:92: 1f:c7:79:af:8e:f5:a4:e3:0f:9c:1c:e9:15:92:8b:e9:e7:19: 3b:10:4f:9c:15:d5:a7:f2:39:cb:7d:54:5f:fd:e0:f3:0e:25: 90:49:16:58:b6:34:15:a3:41:59:f8:08:80:5f:19:16:a4:c7: c5:bd:ca:42:2b:62:e6:2e:53:e4:8f:39:e7:c2:59:32:05:e8: 3a:94:92:c9:ac:14:67:c8:23:b5:f8:10:03:fa:3e:17:b2:85: 2d:bf:9c:84:4b:14:33:a4:60:c4:af:b8:63:26:3b:64:87:0a: b9:81:06:87:05:95:ed:dc:09:a0:ae:74:11:d9:1f:1b:73:d2: 93:08:c3:bd:56:8b:62:c2:b5:f8:83:1b:f7:b1:4b:0b:a5:fc: 7e:5c:9b:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaLZeqU6GH+HX3l5Psd0/jvHf73UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgyNUE5QzMwRDVBRUE0MTQ0NzQwRTlCMTJBM0MwQkM2 MEU3MzQ5OTAeFw0yNTEwMTcyMzA2NDJaFw0yNTEwMjExMDU3NDJaMDMxMTAvBgNV BAMTKENEMTVEOUIzOTk1MkNGNEQ0QjY2REYwQ0FCQjU5RjVCNTU1QUVEOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAi6fZm+BkvkdCMY2iJsRurSry XDIe8UwDX4CyqZFMrO4D+yl2Il/uZzOdjolzqGaFEcpQS8hacqscZNZm5t4+si/c dYySqYIeKr9R4uEyRXC8Tkq0GlxIqcZ/Hn0+8yXONhi4qnsvb/bgkXoizP4IuiNe XW9ceoTQjBkCRTCggmZpGXdc7yQpIDQ+6UKDdVs+nRPpWOgSLHolnAytfWEiAv93 wgR6LMnyzkUyo9dCECw2PvDZ5U+7c3rakH9Klky8iQ4rwhgQxDVtr1gXJDfT8fQn FyEal+eeuojMk3I8SL07ZkJyQEadeHnKAFOwHCsagfjbKm8nZ3viY1h705MTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzRXZs5lSz01LZt8Mq7WfW1Va7ZkwHwYDVR0j BBgwFoAUeCWpww1a6kFEdA6bEqPAvGDnNJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDAwYjBjMi03ZWZkLTQyNzgtOThlNC1kNGY3YzI3M2VlYzIvMC83ODI1QTlDMzBE NUFFQTQxNDQ3NDBFOUIxMkEzQzBCQzYwRTczNDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzgyNUE5QzMwRDVBRUE0MTQ0NzQwRTlCMTJBM0MwQkM2MEU3 MzQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDAwMGIwYzItN2VmZC00Mjc4LTk4 ZTQtZDRmN2MyNzNlZWMyLzAvNzgyNUE5QzMwRDVBRUE0MTQ0NzQwRTlCMTJBM0Mw QkM2MEU3MzQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBTz9Nv8cvM2z2qhd9Nsje0Ut4D+6Q+qrkM vxgMVoyIR8u9J1SS7WBamn62whLsM7ULLh/oxseX65p5ziNUq1VghFnQJbPv+8pk i16J0uf8AcGzXuCmNT57gmUw8ehkpe7Hi0X1AvGsYNu4kh/Hea+O9aTjD5wc6RWS i+nnGTsQT5wV1afyOct9VF/94PMOJZBJFli2NBWjQVn4CIBfGRakx8W9ykIrYuYu U+SPOefCWTIF6DqUksmsFGfII7X4EAP6PheyhS2/nIRLFDOkYMSvuGMmO2SHCrmB BocFle3cCaCudBHZHxtz0pMIw71Wi2LCtfiDG/exSwul/H5cm9c= -----END CERTIFICATE-----Generated at Sun Oct 19 18:02:51 2025 by rpki-client