$ rpki-client -vvf repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft File: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft (raw, json) Hash identifier: rg+RQpY8AEj24ETRX+M8gqsDXwWa45YaGiOlM7Qxp9g= Subject key identifier: EF:7C:65:80:C4:E2:3A:3F:92:58:AF:9C:C1:85:87:67:85:1E:07:64 Authority key identifier: 7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 Certificate issuer: /CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Certificate serial: 10D41940E0CA0E7AAB82ABA10FBE7856D3E4AAE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft Manifest number: 0240 Signing time: Thu 30 Oct 2025 12:50:02 +0000 Manifest this update: Thu 30 Oct 2025 12:45:02 +0000 Manifest next update: Mon 03 Nov 2025 00:39:02 +0000 Files and hashes: 1: 3130332e3138302e35382e302f32332d3233203d3e2039333431.roa (hash: lr7nUWH/7raRlFDZhAD65ANTChYQYYLQIg/z8dK94J4=) 2: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl (hash: eu3S8jH6yu2Sf8ylsdYAsJHswaCCHjl20r5QrHJTt2Q=) 3: 3130332e3138302e35382e302f32342d3234203d3e2039333431.roa (hash: FdloWvzwT5E7bV0h2MrBbwdyadkn1oI1JIyg7UwS1zQ=) 4: 3130332e3138302e35392e302f32342d3234203d3e2039333431.roa (hash: i2rSOVglupsSuL0ZoSXVd/tHmiF7pW8+dps3wslED5c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 20:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d4:19:40:e0:ca:0e:7a:ab:82:ab:a1:0f:be:78:56:d3:e4:aa:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Validity Not Before: Oct 30 12:45:02 2025 GMT Not After : Nov 3 00:39:02 2025 GMT Subject: CN=EF7C6580C4E23A3F9258AF9CC1858767851E0764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a0:97:11:92:09:81:30:5f:7a:24:c0:b0:f3: 07:8b:3e:66:9b:43:a7:e0:1c:5e:2d:4f:bf:ec:ab: 85:d1:5b:f1:cb:bf:6a:92:de:0d:77:3f:70:ba:25: 2f:a0:dd:01:58:8c:98:a4:cd:5b:6d:ab:4b:ce:06: c7:5e:44:5d:de:9f:bc:56:6b:64:65:a0:c2:f9:1a: b0:00:04:b9:d1:e9:3d:80:31:ca:a8:ed:a2:88:3a: 70:20:f2:59:36:50:48:62:cc:cb:5a:43:a5:41:26: 73:67:51:cb:ad:41:b4:d3:f2:9a:ae:60:f5:25:a3: 43:2b:9d:26:0a:5b:e8:97:ad:9a:13:b4:b4:e2:73: 4a:10:94:53:cc:24:a4:c9:e4:c8:00:38:ae:59:a4: 88:69:4e:ae:0d:38:4a:1a:65:4b:5f:9a:ad:f5:06: 95:e0:86:cd:25:16:d9:6e:48:e7:2f:1c:bf:36:77: e4:42:1d:5d:26:ee:ad:f6:d0:a2:de:94:2a:70:bb: fb:04:1f:e8:63:e3:86:da:78:6b:94:0d:26:78:a0: 5b:da:3a:22:90:88:16:e8:00:46:7e:da:ba:31:53: 83:f8:c2:3c:2e:4c:db:1e:15:37:50:bc:28:90:d3: f6:ea:38:f6:7b:4d:9f:03:97:86:5d:49:fb:19:f1: 11:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:7C:65:80:C4:E2:3A:3F:92:58:AF:9C:C1:85:87:67:85:1E:07:64 X509v3 Authority Key Identifier: keyid:7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:80:1c:ee:18:62:6b:55:dc:ec:cd:99:13:df:1e:0a:b2:a3: 24:e6:5c:2b:54:a8:1c:57:7e:fb:5e:2c:c4:73:e2:05:2c:e1: 81:0a:66:ed:d7:46:7d:01:8a:15:1f:40:4a:2a:cd:ad:e9:76: 3b:40:e5:58:0c:59:54:ba:ba:1c:cf:85:e1:87:14:d7:ae:19: 02:33:f1:38:86:c9:e6:ea:c0:d3:94:63:05:1d:90:dc:45:52: 2f:10:83:e1:d5:3c:22:6e:d4:b1:37:2f:23:cb:e6:a1:34:df: 81:03:34:30:b6:8a:55:03:58:32:ba:fe:ba:aa:4c:51:0b:94: 55:72:a2:c4:28:60:7b:95:5e:e3:b2:4b:cb:13:5e:40:3f:68: e5:70:e8:3d:a6:12:ee:49:f8:ed:85:51:eb:64:1c:2c:2f:2c: fd:57:96:cc:ea:9b:b4:f2:93:3e:e6:a4:fe:be:2a:b1:fe:0d: 46:1a:6e:70:47:31:12:3c:38:00:2c:be:ad:5d:6c:82:66:e6: a8:db:20:9b:90:f6:6d:d2:e4:53:dc:d5:24:ee:fc:b4:5b:6e: 0a:01:e4:10:e9:4e:6d:59:36:26:fd:f7:a1:23:26:48:18:01: 1f:11:6e:42:88:4e:cf:e6:59:bf:e7:d2:62:cc:61:de:3d:2e: 1e:9d:d7:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUENQZQODKDnqrgquhD754VtPkquIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAw NjMyRUZENDAeFw0yNTEwMzAxMjQ1MDJaFw0yNTExMDMwMDM5MDJaMDMxMTAvBgNV BAMTKEVGN0M2NTgwQzRFMjNBM0Y5MjU4QUY5Q0MxODU4NzY3ODUxRTA3NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvoJcRkgmBMF96JMCw8weLPmab Q6fgHF4tT7/sq4XRW/HLv2qS3g13P3C6JS+g3QFYjJikzVttq0vOBsdeRF3en7xW a2RloML5GrAABLnR6T2AMcqo7aKIOnAg8lk2UEhizMtaQ6VBJnNnUcutQbTT8pqu YPUlo0MrnSYKW+iXrZoTtLTic0oQlFPMJKTJ5MgAOK5ZpIhpTq4NOEoaZUtfmq31 BpXghs0lFtluSOcvHL82d+RCHV0m7q320KLelCpwu/sEH+hj44baeGuUDSZ4oFva OiKQiBboAEZ+2roxU4P4wjwuTNseFTdQvCiQ0/bqOPZ7TZ8Dl4ZdSfsZ8RHhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU73xlgMTiOj+SWK+cwYWHZ4UeB2QwHwYDVR0j BBgwFoAUfvibRWktk+nKFdpM+dQ5MAYy79QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzFhODQ3ZC0yNTMxLTRkN2YtOTI0MS05Nzc3ODUwNjA1ZDYvMC83RUY4OUI0NTY5 MkQ5M0U5Q0ExNURBNENGOUQ0MzkzMDA2MzJFRkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAwNjMy RUZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTcxYTg0N2QtMjUzMS00ZDdmLTky NDEtOTc3Nzg1MDYwNWQ2LzAvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5 MzAwNjMyRUZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKAHO4YYmtV3OzNmRPfHgqyoyTmXCtUqBxX fvteLMRz4gUs4YEKZu3XRn0BihUfQEoqza3pdjtA5VgMWVS6uhzPheGHFNeuGQIz 8TiGyebqwNOUYwUdkNxFUi8Qg+HVPCJu1LE3LyPL5qE034EDNDC2ilUDWDK6/rqq TFELlFVyosQoYHuVXuOyS8sTXkA/aOVw6D2mEu5J+O2FUetkHCwvLP1Xlszqm7Ty kz7mpP6+KrH+DUYabnBHMRI8OAAsvq1dbIJm5qjbIJuQ9m3S5FPc1STu/LRbbgoB 5BDpTm1ZNib996EjJkgYAR8RbkKITs/mWb/n0mLMYd49Lh6d10Y= -----END CERTIFICATE-----Generated at Thu Oct 30 14:59:06 2025 by rpki-client