$ rpki-client -vvf repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.mft File: 7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.mft (raw, json) Hash identifier: GzKnHbmNgjn9VIl19OqjeP+o9YmCbQRYk7VpJdLjJSk= Subject key identifier: 38:DE:0D:47:B4:40:90:7B:DD:08:1D:66:BC:A7:C6:31:49:CC:4E:79 Authority key identifier: 73:65:D5:B1:AE:30:C5:B6:45:0A:FD:DE:98:BA:23:1F:96:2A:6C:26 Certificate issuer: /CN=7365D5B1AE30C5B6450AFDDE98BA231F962A6C26 Certificate serial: 2E95879F40F2A8AD56AD4C1732804FDCC78B6B81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.mft Manifest number: 0175 Signing time: Sat 18 Oct 2025 15:50:58 +0000 Manifest this update: Sat 18 Oct 2025 15:45:58 +0000 Manifest next update: Tue 21 Oct 2025 15:56:58 +0000 Files and hashes: 1: 3130332e3233342e31382e302f32342d3234203d3e20313531353036.roa (hash: OR1t4IQS/xyvZZqdpeuC2pHKP+AjsN9yFmbMgs+eujs=) 2: 7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.crl (hash: 38T8l+yOhIighwB+5vSqFx/6qW2W+ceOP22CttNtUl4=) 3: 3130332e3233342e31382e302f32332d3233203d3e20313531353036.roa (hash: WfEJ9vF4jc0Zx7Acd4sKIoyTrc+nMSAchl082ejeiOg=) 4: 3130332e3233342e31392e302f32342d3234203d3e20313531353036.roa (hash: KyUIZC7TjXTI6QS0grqhp1GxQ/Om/oaFfi+alLTVI8o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.crl rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:95:87:9f:40:f2:a8:ad:56:ad:4c:17:32:80:4f:dc:c7:8b:6b:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7365D5B1AE30C5B6450AFDDE98BA231F962A6C26 Validity Not Before: Oct 18 15:45:58 2025 GMT Not After : Oct 21 15:56:58 2025 GMT Subject: CN=38DE0D47B440907BDD081D66BCA7C63149CC4E79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d3:5d:04:bb:2d:f4:37:f7:4d:dd:be:48:8e: 7c:dc:fa:48:42:5f:0d:1e:83:8f:20:73:14:c7:6e: a1:e7:a8:f8:9a:2c:34:a6:70:03:c3:91:db:bf:00: 54:54:46:9e:c8:d6:98:cf:67:7a:72:1f:33:6a:19: 76:3b:1a:b4:ef:24:81:a8:e1:e8:5a:d1:8d:c5:c3: 01:eb:f5:52:12:8a:48:42:ab:bc:2e:a9:25:da:ca: 7e:0c:6a:62:5d:e0:29:e6:e7:e6:fe:18:4f:01:fd: cd:94:26:d7:ad:67:4e:c0:56:4b:a9:0a:9a:c3:e1: 5a:74:cb:cc:a9:63:a5:04:a1:0a:74:f6:a7:47:09: 7a:5c:c6:b5:3c:67:85:80:2e:b7:6d:e7:d2:f5:01: 2e:06:1a:bf:e6:e1:90:a7:2f:36:1b:c4:94:dc:0c: 1e:ac:06:b5:a4:50:4a:18:6f:e6:92:07:8c:10:77: 4b:68:0a:b8:d7:25:4f:ea:50:1f:24:44:e6:ed:89: b8:40:af:d3:2d:35:ee:06:32:7d:93:52:9e:5b:3a: bb:2f:1a:06:13:d2:0c:9d:3d:7a:42:6d:8b:74:2a: a8:54:1c:fa:7f:26:f6:62:15:32:29:37:a3:aa:f0: 6f:ad:62:ac:ed:24:42:52:71:41:e2:1a:67:6c:3b: dc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DE:0D:47:B4:40:90:7B:DD:08:1D:66:BC:A7:C6:31:49:CC:4E:79 X509v3 Authority Key Identifier: keyid:73:65:D5:B1:AE:30:C5:B6:45:0A:FD:DE:98:BA:23:1F:96:2A:6C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:97:4b:c0:51:70:11:f1:0f:ab:2f:d8:62:41:8a:a5:5e:b6: ec:b0:db:68:f3:d4:2d:41:d1:2f:80:dd:fd:c3:ff:51:2f:32: 66:2b:9e:1b:3e:3c:0c:5d:cb:a1:35:6f:c3:f3:f1:f8:7a:88: 4e:66:c4:3e:20:29:71:ea:df:18:2b:69:ec:f0:a7:55:f7:d6: b9:f7:48:48:b3:94:35:3d:d3:b8:6f:3f:40:a2:f5:cf:3a:d6: 1d:4a:ac:c7:5c:79:80:30:df:59:84:2d:02:da:7a:6d:0b:54: 25:80:7a:e1:84:e1:50:66:8e:56:21:aa:12:4c:2b:35:b9:91: 24:3a:fb:cd:d0:53:85:ce:24:66:79:5a:8c:70:50:14:d5:a9: bf:c5:6f:ce:26:ef:a9:7c:e2:95:c8:73:86:d9:7e:71:6f:34: 52:de:ce:dd:da:cc:c5:e0:c3:4a:81:a9:d8:47:9a:07:a8:f7: 82:7f:a1:e4:34:be:5b:17:65:29:c1:9e:55:e0:7b:14:63:d1: b2:40:5e:e0:a2:61:ce:03:f1:0e:3e:0c:09:6c:f1:02:41:36: d9:02:72:6d:87:e8:c9:ec:9b:88:7c:79:bb:2c:20:47:27:a9: 8d:80:4f:b9:35:0f:1f:c4:6e:ea:c5:b9:e8:73:f4:39:f7:2c: 77:79:48:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULpWHn0DyqK1WrUwXMoBP3MeLa4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM2NUQ1QjFBRTMwQzVCNjQ1MEFGRERFOThCQTIzMUY5 NjJBNkMyNjAeFw0yNTEwMTgxNTQ1NThaFw0yNTEwMjExNTU2NThaMDMxMTAvBgNV BAMTKDM4REUwRDQ3QjQ0MDkwN0JERDA4MUQ2NkJDQTdDNjMxNDlDQzRFNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp010Euy30N/dN3b5Ijnzc+khC Xw0eg48gcxTHbqHnqPiaLDSmcAPDkdu/AFRURp7I1pjPZ3pyHzNqGXY7GrTvJIGo 4eha0Y3FwwHr9VISikhCq7wuqSXayn4MamJd4Cnm5+b+GE8B/c2UJtetZ07AVkup CprD4Vp0y8ypY6UEoQp09qdHCXpcxrU8Z4WALrdt59L1AS4GGr/m4ZCnLzYbxJTc DB6sBrWkUEoYb+aSB4wQd0toCrjXJU/qUB8kRObtibhAr9MtNe4GMn2TUp5bOrsv GgYT0gydPXpCbYt0KqhUHPp/JvZiFTIpN6Oq8G+tYqztJEJScUHiGmdsO9wzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUON4NR7RAkHvdCB1mvKfGMUnMTnkwHwYDVR0j BBgwFoAUc2XVsa4wxbZFCv3emLojH5YqbCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODgzMjljYS1lOGY3LTRkM2QtYWNlNC04MDdmOGFhNThhZTAvMC83MzY1RDVCMUFF MzBDNUI2NDUwQUZEREU5OEJBMjMxRjk2MkE2QzI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzM2NUQ1QjFBRTMwQzVCNjQ1MEFGRERFOThCQTIzMUY5NjJB NkMyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg4MzI5Y2EtZThmNy00ZDNkLWFj ZTQtODA3ZjhhYTU4YWUwLzAvNzM2NUQ1QjFBRTMwQzVCNjQ1MEFGRERFOThCQTIz MUY5NjJBNkMyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+XS8BRcBHxD6sv2GJBiqVetuyw22jz1C1B 0S+A3f3D/1EvMmYrnhs+PAxdy6E1b8Pz8fh6iE5mxD4gKXHq3xgraezwp1X31rn3 SEizlDU907hvP0Ci9c861h1KrMdceYAw31mELQLaem0LVCWAeuGE4VBmjlYhqhJM KzW5kSQ6+83QU4XOJGZ5WoxwUBTVqb/Fb84m76l84pXIc4bZfnFvNFLezt3azMXg w0qBqdhHmgeo94J/oeQ0vlsXZSnBnlXgexRj0bJAXuCiYc4D8Q4+DAls8QJBNtkC cm2H6Mnsm4h8ebssIEcnqY2AT7k1Dx/EburFuehz9Dn3LHd5SFw= -----END CERTIFICATE-----Generated at Sun Oct 19 18:07:52 2025 by rpki-client