$ rpki-client -vvf repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft File: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft (raw, json) Hash identifier: pnlorUeQe5yWuEwP/qrClcvejBgIquTmGvj1s8334zc= Subject key identifier: 38:F0:3A:8B:A3:36:F1:B9:CA:A8:94:7A:8D:FE:15:7E:1F:EC:51:C8 Authority key identifier: 7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 Certificate issuer: /CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Certificate serial: 6CF2314DA3F4676EBC0C4D79E4AC0787CACDF835 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer Subject info access: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft Manifest number: 021A Signing time: Sat 18 Oct 2025 11:41:33 +0000 Manifest this update: Sat 18 Oct 2025 11:36:33 +0000 Manifest next update: Tue 21 Oct 2025 20:40:33 +0000 Files and hashes: 1: 3130332e3136372e3130352e302f32342d3234203d3e203338333230.roa (hash: t5DmPirQU+jLx9aHjmb/pgwv+a8S0p8w/q4YuXRMJQI=) 2: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl (hash: YS5sjSRkQ039jQxGfQeYDxhypyvqfjQakIGZAtt3NOk=) 3: 3130332e3136372e3130342e302f32342d3234203d3e20313339343130.roa (hash: cilQSsMRfqwA9LOmx5CPo41uuLBHWQ7Qq5S49MHRn2E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:40:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:f2:31:4d:a3:f4:67:6e:bc:0c:4d:79:e4:ac:07:87:ca:cd:f8:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Validity Not Before: Oct 18 11:36:33 2025 GMT Not After : Oct 21 20:40:33 2025 GMT Subject: CN=38F03A8BA336F1B9CAA8947A8DFE157E1FEC51C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1b:9e:05:50:a5:dc:98:6d:e4:89:0a:ed:32: 95:85:42:43:da:a5:eb:46:86:68:b3:f4:c2:ff:ee: ce:bf:20:bf:5d:da:61:ed:91:f7:30:33:29:e9:51: 59:63:54:60:8c:d4:9a:dd:92:59:82:63:98:b1:f5: 3c:a0:38:cd:9c:2b:91:27:a6:b8:ed:52:cb:d1:76: 55:a4:23:25:0f:35:e7:82:80:f8:3c:c1:d3:09:8b: 5a:f4:cc:50:a3:2c:fc:f7:4b:8e:e6:96:0c:0b:f2: cb:14:ea:86:ad:ca:f1:25:21:b2:53:06:c4:2b:1e: 65:c8:5e:cc:3c:48:ea:fe:3d:98:ad:df:9c:b5:de: b0:58:4a:b5:0b:e0:b0:36:28:f8:cf:42:df:87:13: 0b:41:19:44:8b:7e:7a:6c:77:f0:e0:15:02:c6:6f: 9e:c9:ba:4a:91:a2:bb:10:e9:e7:e6:34:25:c5:f1: 5a:38:94:bb:3f:3a:b8:ef:44:87:18:4e:aa:74:87: 27:60:f2:67:e5:d8:22:66:11:94:e4:73:4d:57:20: f3:24:52:e1:b4:c7:56:f7:ec:27:12:56:38:b3:60: 0f:38:5f:c6:46:76:c0:27:af:7c:48:0e:d4:1c:4f: d9:c9:63:8f:a8:7e:7f:bc:0b:8a:1f:73:b0:6b:7c: f7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F0:3A:8B:A3:36:F1:B9:CA:A8:94:7A:8D:FE:15:7E:1F:EC:51:C8 X509v3 Authority Key Identifier: keyid:7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:93:89:23:29:7c:97:b4:a7:b7:8a:2d:c8:8d:d2:41:98:ac: 4d:0d:04:4a:4e:2a:45:99:54:22:1f:3b:27:9a:9f:a4:26:87: 9c:3f:c7:14:c2:04:2d:0f:17:87:f5:59:1a:4a:7c:03:33:17: 13:3b:41:85:0a:44:eb:5c:41:3a:b3:63:ba:94:ed:07:12:2c: a2:ca:68:23:e6:a5:14:3e:22:03:95:7f:fc:41:29:ab:d7:5b: f0:6c:5a:e4:af:9a:18:4f:cf:39:55:88:75:4c:bc:77:6c:ad: a1:23:10:e8:32:0f:49:57:fe:47:e5:d0:ce:91:c2:6b:61:2b: 0f:a5:6f:d6:0b:7f:4b:d1:9a:41:f8:19:16:00:5d:c7:e1:9f: 1d:47:cb:69:29:74:82:6b:5c:81:f6:d2:8f:22:c1:ec:46:6c: 48:e8:12:70:17:e1:2e:23:32:d2:c3:a9:20:19:c2:70:c6:10: d2:1a:e8:96:49:72:cd:cd:ee:ba:ae:fa:7a:af:11:5a:81:40: e2:77:1b:26:2a:eb:38:47:d5:6a:53:76:e9:04:fb:ac:5f:0a: 8c:c3:e4:73:a7:06:e2:b0:c7:aa:20:10:5a:85:3e:99:61:de: 72:30:ee:c1:b4:2a:3d:f5:ad:cb:cb:97:4b:88:35:da:5c:65: c1:98:a7:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbPIxTaP0Z268DE155KwHh8rN+DUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUxMzc5 MkExNDU0NTAeFw0yNTEwMTgxMTM2MzNaFw0yNTEwMjEyMDQwMzNaMDMxMTAvBgNV BAMTKDM4RjAzQThCQTMzNkYxQjlDQUE4OTQ3QThERkUxNTdFMUZFQzUxQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnG54FUKXcmG3kiQrtMpWFQkPa petGhmiz9ML/7s6/IL9d2mHtkfcwMynpUVljVGCM1JrdklmCY5ix9TygOM2cK5En prjtUsvRdlWkIyUPNeeCgPg8wdMJi1r0zFCjLPz3S47mlgwL8ssU6oatyvElIbJT BsQrHmXIXsw8SOr+PZit35y13rBYSrUL4LA2KPjPQt+HEwtBGUSLfnpsd/DgFQLG b57JukqRorsQ6efmNCXF8Vo4lLs/OrjvRIcYTqp0hydg8mfl2CJmEZTkc01XIPMk UuG0x1b37CcSVjizYA84X8ZGdsAnr3xIDtQcT9nJY4+ofn+8C4ofc7BrfPf7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOPA6i6M28bnKqJR6jf4Vfh/sUcgwHwYDVR0j BBgwFoAUf+9r9T+jEioPCc70tAjhN5KhRUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDNlYmFiYi05OTlmLTRmM2UtODRjMS1iZjI3OWJmZTE3ODcvMC83RkVGNkJGNTNG QTMxMjJBMEYwOUNFRjRCNDA4RTEzNzkyQTE0NTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUxMzc5MkEx NDU0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAzZWJhYmItOTk5Zi00ZjNlLTg0 YzEtYmYyNzliZmUxNzg3LzAvN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUx Mzc5MkExNDU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFyTiSMpfJe0p7eKLciN0kGYrE0NBEpOKkWZ VCIfOyean6Qmh5w/xxTCBC0PF4f1WRpKfAMzFxM7QYUKROtcQTqzY7qU7QcSLKLK aCPmpRQ+IgOVf/xBKavXW/BsWuSvmhhPzzlViHVMvHdsraEjEOgyD0lX/kfl0M6R wmthKw+lb9YLf0vRmkH4GRYAXcfhnx1Hy2kpdIJrXIH20o8iwexGbEjoEnAX4S4j MtLDqSAZwnDGENIa6JZJcs3N7rqu+nqvEVqBQOJ3GyYq6zhH1WpTdukE+6xfCozD 5HOnBuKwx6ogEFqFPplh3nIw7sG0Kj31rcvLl0uINdpcZcGYp/w= -----END CERTIFICATE-----Generated at Sun Oct 19 15:43:41 2025 by rpki-client