$ rpki-client -vvf repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft File: 7433AB64571BE1827F0BC97ED291976B6E3429FA.mft (raw, json) Hash identifier: WEj1MsKk+A59yKETKupotqM2Myp8xgASdR5G6z33V2Y= Subject key identifier: 2E:95:04:D4:89:D4:5A:E6:F5:69:0E:32:6B:10:88:66:55:CB:81:7D Authority key identifier: 74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA Certificate issuer: /CN=7433AB64571BE1827F0BC97ED291976B6E3429FA Certificate serial: 23BF7AEEF6BCC8EC5577C2DFBEC300DDED0A59FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft Manifest number: 01B4 Signing time: Sun 19 Oct 2025 02:42:14 +0000 Manifest this update: Sun 19 Oct 2025 02:37:14 +0000 Manifest next update: Wed 22 Oct 2025 09:37:14 +0000 Files and hashes: 1: 3130332e37352e36332e302f32342d3234203d3e20313530353339.roa (hash: dt0M2E6hMVGXyd6wchuCJpbqgL7DjAEk9eGkYZfJTqo=) 2: 7433AB64571BE1827F0BC97ED291976B6E3429FA.crl (hash: ICmEaPdI0kK8mMvuQonfTOjm3D/aag8LUvWtOr6YIy0=) 3: 3130332e37352e36322e302f32342d3234203d3e20313530353339.roa (hash: Foo7ECvYM8eC5QdFLfci515Pz4pdcUotJYsrxOmUjnQ=) 4: 3130332e37352e36322e302f32332d3234203d3e20313530353339.roa (hash: LDOqOfl8+d8Lz+/c+0knmLxGK2Kr8P4Ti1sIU0L3/wo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.crl rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 09:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:bf:7a:ee:f6:bc:c8:ec:55:77:c2:df:be:c3:00:dd:ed:0a:59:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7433AB64571BE1827F0BC97ED291976B6E3429FA Validity Not Before: Oct 19 02:37:14 2025 GMT Not After : Oct 22 09:37:14 2025 GMT Subject: CN=2E9504D489D45AE6F5690E326B10886655CB817D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4e:4b:e6:6e:68:93:97:b0:b8:cb:34:f7:33: f3:67:44:69:66:89:56:fc:20:1b:cf:25:f0:e3:cc: c2:28:59:dd:74:c8:fe:0c:b7:90:04:0a:b0:33:3e: 4a:15:67:77:c8:7d:09:73:e4:d1:5f:ee:35:67:33: c9:05:61:62:4c:56:ed:10:0a:95:85:7f:12:be:50: 54:4e:a5:69:dd:ce:9e:91:70:b7:07:fc:ad:e7:6c: 5b:6a:29:cf:dc:4a:d1:a6:6a:cf:6e:38:9a:85:22: 0d:e5:b9:e0:f1:3f:28:96:09:90:43:ad:79:db:64: 9c:8f:74:85:84:6f:dc:e9:72:65:7c:54:6a:e2:49: 03:d9:04:f2:e5:8f:04:0c:be:d8:0d:80:23:f7:c2: 9c:db:28:46:33:c1:1f:bd:fe:9d:27:e5:78:7e:0d: 6d:f1:19:04:75:85:98:d9:35:81:9b:fb:b4:87:2a: ae:dd:cc:c1:72:7a:c5:6e:35:38:49:f6:8b:76:cb: 34:d8:df:a4:e7:b3:74:62:46:4d:83:7d:57:dc:bd: d5:14:0e:c1:2c:4a:bc:9d:44:7f:27:f9:4b:ed:50: 00:f7:e7:f0:8b:15:57:f6:af:18:a9:69:de:1f:c7: 90:55:e9:af:ee:9d:4e:c3:b8:b0:0b:2d:55:65:08: ac:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:95:04:D4:89:D4:5A:E6:F5:69:0E:32:6B:10:88:66:55:CB:81:7D X509v3 Authority Key Identifier: keyid:74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:09:85:c2:86:26:de:91:1d:83:33:e9:5b:4c:33:29:69:99: 42:54:50:2e:00:8c:26:b1:a7:e4:4f:d2:f1:a1:ef:c9:fd:57: 91:cb:a2:bd:3f:04:33:41:a3:64:88:43:03:42:b5:16:7b:bb: 1b:a5:ab:e4:79:38:c0:28:1f:84:10:74:80:0b:04:69:e1:bf: 8e:fe:55:dc:05:7a:10:5d:51:29:ad:78:b3:2c:86:1d:5f:11: 85:b5:db:ea:2b:d6:80:a3:7f:3c:3e:09:86:d8:67:55:0a:f5: 7b:cf:61:25:cb:fc:db:2c:4d:d1:a9:1d:7d:5c:28:71:fe:2b: 32:33:bc:84:48:a2:d4:29:a5:7c:b9:fa:a5:06:5f:88:a0:d1: 07:56:a3:88:e9:ec:a1:a2:4a:aa:00:5f:f3:20:ab:a9:01:8a: bb:3e:4e:27:d5:03:3b:3c:08:86:d9:23:ba:9d:7f:d8:fe:7f: eb:7c:ea:eb:b0:c9:fa:f1:84:92:35:e6:07:42:14:82:6d:7e: 6d:d5:53:5a:ec:8a:66:1d:ce:41:1f:81:b4:59:53:43:7e:11: 90:a2:94:a4:e0:b3:97:b0:ec:35:f4:ab:d3:4e:b4:66:c4:d1: ff:59:b8:39:a5:8e:7f:56:7e:d1:65:af:d5:87:f5:4c:3e:e4: b0:5a:a5:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI7967va8yOxVd8LfvsMA3e0KWfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQzM0FCNjQ1NzFCRTE4MjdGMEJDOTdFRDI5MTk3NkI2 RTM0MjlGQTAeFw0yNTEwMTkwMjM3MTRaFw0yNTEwMjIwOTM3MTRaMDMxMTAvBgNV BAMTKDJFOTUwNEQ0ODlENDVBRTZGNTY5MEUzMjZCMTA4ODY2NTVDQjgxN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGTkvmbmiTl7C4yzT3M/NnRGlm iVb8IBvPJfDjzMIoWd10yP4Mt5AECrAzPkoVZ3fIfQlz5NFf7jVnM8kFYWJMVu0Q CpWFfxK+UFROpWndzp6RcLcH/K3nbFtqKc/cStGmas9uOJqFIg3lueDxPyiWCZBD rXnbZJyPdIWEb9zpcmV8VGriSQPZBPLljwQMvtgNgCP3wpzbKEYzwR+9/p0n5Xh+ DW3xGQR1hZjZNYGb+7SHKq7dzMFyesVuNThJ9ot2yzTY36Tns3RiRk2DfVfcvdUU DsEsSrydRH8n+UvtUAD35/CLFVf2rxipad4fx5BV6a/unU7DuLALLVVlCKzZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULpUE1InUWub1aQ4yaxCIZlXLgX0wHwYDVR0j BBgwFoAUdDOrZFcb4YJ/C8l+0pGXa240KfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2M4YTBjMy0zN2Y1LTQ2NjctYTQzMC02ZmExMTFkMzQzYWEvMC83NDMzQUI2NDU3 MUJFMTgyN0YwQkM5N0VEMjkxOTc2QjZFMzQyOUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQzM0FCNjQ1NzFCRTE4MjdGMEJDOTdFRDI5MTk3NkI2RTM0 MjlGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdjOGEwYzMtMzdmNS00NjY3LWE0 MzAtNmZhMTExZDM0M2FhLzAvNzQzM0FCNjQ1NzFCRTE4MjdGMEJDOTdFRDI5MTk3 NkI2RTM0MjlGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsJhcKGJt6RHYMz6VtMMylpmUJUUC4AjCax p+RP0vGh78n9V5HLor0/BDNBo2SIQwNCtRZ7uxulq+R5OMAoH4QQdIALBGnhv47+ VdwFehBdUSmteLMshh1fEYW12+or1oCjfzw+CYbYZ1UK9XvPYSXL/NssTdGpHX1c KHH+KzIzvIRIotQppXy5+qUGX4ig0QdWo4jp7KGiSqoAX/Mgq6kBirs+TifVAzs8 CIbZI7qdf9j+f+t86uuwyfrxhJI15gdCFIJtfm3VU1rsimYdzkEfgbRZU0N+EZCi lKTgs5ew7DX0q9NOtGbE0f9ZuDmljn9WftFlr9WH9Uw+5LBapRA= -----END CERTIFICATE-----Generated at Sun Oct 19 17:58:09 2025 by rpki-client