$ rpki-client -vvf repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft File: 7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft (raw, json) Hash identifier: 5bje1G5+jq36/fFzIxt1loSoii6wALvouIjaGmw2V/A= Subject key identifier: BC:C3:DC:73:B2:F8:F7:F6:59:C3:29:4A:1D:9F:0B:CD:CF:C4:D5:4D Authority key identifier: 7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49 Certificate issuer: /CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249 Certificate serial: 477500EDEECB681EC0EF564A18653D26C470F7BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft Manifest number: 050C Signing time: Sat 01 Nov 2025 23:30:38 +0000 Manifest this update: Sat 01 Nov 2025 23:25:38 +0000 Manifest next update: Wed 05 Nov 2025 10:07:38 +0000 Files and hashes: 1: 7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl (hash: dzYJ9m4ZgUH0gk3IvKP8zcyGM8yRAA1KiQR80VoKOQc=) 2: 3130332e3135302e34342e302f32332d3234203d3e20313430333838.roa (hash: 9wWnuvCPEe0C8U6UVGeFeb9Dd9afvhSHPrMKavtgge8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 10:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:75:00:ed:ee:cb:68:1e:c0:ef:56:4a:18:65:3d:26:c4:70:f7:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249 Validity Not Before: Nov 1 23:25:38 2025 GMT Not After : Nov 5 10:07:38 2025 GMT Subject: CN=BCC3DC73B2F8F7F659C3294A1D9F0BCDCFC4D54D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:54:f1:56:6d:2b:63:17:d9:4a:d3:d7:9f:6b: eb:76:8a:55:bd:07:2f:22:54:f1:87:e8:4d:85:ca: d4:62:5f:7c:a2:e6:29:cf:ff:13:56:07:7d:fa:6b: 15:e7:1c:9f:95:e1:51:7f:3f:00:f0:5e:5a:94:4a: d4:21:f3:8a:ac:fe:bf:8f:d3:56:81:40:e1:ea:e1: aa:cc:01:d7:4c:1c:4d:45:e6:fc:d5:8f:29:b2:d7: 1b:f3:10:a0:c3:42:14:03:8a:98:67:3c:76:25:11: da:4b:29:11:75:32:81:1d:48:78:7f:cc:b2:27:2a: 93:56:08:e2:8d:b7:9d:47:9f:4a:5f:b8:a5:06:4a: 5e:1c:85:e4:11:48:d6:cf:f4:c8:0e:60:01:ef:28: a4:c7:1e:53:c0:2d:ce:11:6f:57:a9:10:c9:6a:99: 01:72:14:c0:78:82:44:5a:29:8e:f5:22:96:b5:93: c7:b9:6e:df:71:57:59:d7:0b:c9:e0:5e:b5:61:ac: d8:6b:f4:f4:fb:c4:5d:72:8e:ba:83:cf:62:b5:0b: 61:39:87:2d:c5:97:53:3a:9f:a9:a9:f6:95:3e:b5: b5:5b:87:7b:9b:ff:1e:99:21:6f:34:5a:02:53:3e: c5:fe:f6:0e:ac:f6:1b:6e:46:14:b2:31:9f:f8:88: 7c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C3:DC:73:B2:F8:F7:F6:59:C3:29:4A:1D:9F:0B:CD:CF:C4:D5:4D X509v3 Authority Key Identifier: keyid:7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:92:ad:d5:d9:ba:ca:e2:cc:72:1f:41:d5:d5:b4:9c:c7:b3: a6:4c:d4:19:95:31:d5:aa:03:98:03:d4:0b:58:9b:cd:6e:79: 03:21:ef:b5:22:b7:40:f6:e2:1d:21:7c:c0:cc:7c:93:7e:84: 54:dd:88:c7:a2:a4:98:df:06:79:16:fe:9f:28:0b:39:e9:d7: 16:4f:43:15:12:da:99:2f:9e:80:03:86:f5:dc:6a:63:0e:56: 81:07:95:05:82:fc:75:f2:e6:05:5e:48:c2:a0:8b:8c:2e:14: 81:1d:32:8a:ee:18:67:44:61:8e:82:04:50:2c:0a:48:3a:4b: 9f:41:c3:18:b4:d3:49:2a:a1:cd:5d:ae:7d:ff:9d:c2:8b:71: a3:22:a5:7e:d5:b5:f6:6b:85:a7:42:64:5e:6a:8d:46:80:63: 66:39:8c:12:db:c4:d1:c5:62:da:9b:40:4c:0a:72:a1:39:39: a9:74:2a:eb:b5:c9:13:72:ae:f1:95:8d:12:58:2f:9b:61:1f: 20:e4:d3:47:5b:b0:e9:dd:f8:33:1a:48:5c:5b:f6:bb:1b:d0: 53:68:47:85:e6:e3:0f:e9:f9:7e:ce:03:27:2a:30:63:45:04: 63:06:8c:a0:27:37:a5:8b:b0:57:2b:54:e5:a1:8d:d6:bc:d7: 02:64:57:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR3UA7e7LaB7A71ZKGGU9JsRw978wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlFREU1 QThDRjI0OTAeFw0yNTExMDEyMzI1MzhaFw0yNTExMDUxMDA3MzhaMDMxMTAvBgNV BAMTKEJDQzNEQzczQjJGOEY3RjY1OUMzMjk0QTFEOUYwQkNEQ0ZDNEQ1NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUVPFWbStjF9lK09efa+t2ilW9 By8iVPGH6E2FytRiX3yi5inP/xNWB336axXnHJ+V4VF/PwDwXlqUStQh84qs/r+P 01aBQOHq4arMAddMHE1F5vzVjymy1xvzEKDDQhQDiphnPHYlEdpLKRF1MoEdSHh/ zLInKpNWCOKNt51Hn0pfuKUGSl4cheQRSNbP9MgOYAHvKKTHHlPALc4Rb1epEMlq mQFyFMB4gkRaKY71Ipa1k8e5bt9xV1nXC8ngXrVhrNhr9PT7xF1yjrqDz2K1C2E5 hy3Fl1M6n6mp9pU+tbVbh3ub/x6ZIW80WgJTPsX+9g6s9htuRhSyMZ/4iHw5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvMPcc7L49/ZZwylKHZ8Lzc/E1U0wHwYDVR0j BBgwFoAUfNUkBSRn8i3Y5X4Cocme3lqM8kkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGViNmVkZC1mMTNiLTQ5ZjAtYWQ4Ny02YjhlZTYxNGRjOGYvMC83Q0Q1MjQwNTI0 NjdGMjJERDhFNTdFMDJBMUM5OUVERTVBOENGMjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlFREU1QThD RjI0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDRlYjZlZGQtZjEzYi00OWYwLWFk ODctNmI4ZWU2MTRkYzhmLzAvN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlF REU1QThDRjI0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqSrdXZusrizHIfQdXVtJzHs6ZM1BmVMdWq A5gD1AtYm81ueQMh77Uit0D24h0hfMDMfJN+hFTdiMeipJjfBnkW/p8oCznp1xZP QxUS2pkvnoADhvXcamMOVoEHlQWC/HXy5gVeSMKgi4wuFIEdMoruGGdEYY6CBFAs Ckg6S59Bwxi000kqoc1drn3/ncKLcaMipX7VtfZrhadCZF5qjUaAY2Y5jBLbxNHF YtqbQEwKcqE5Oal0Kuu1yRNyrvGVjRJYL5thHyDk00dbsOnd+DMaSFxb9rsb0FNo R4Xm4w/p+X7OAycqMGNFBGMGjKAnN6WLsFcrVOWhjda81wJkV0A= -----END CERTIFICATE-----Generated at Tue Nov 4 03:15:58 2025 by rpki-client