$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft File: 7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft (raw, json) Hash identifier: fGAzoORK46xVNu0XRGe4ouVoUbJyYRCk7Psc4DyT++o= Subject key identifier: 78:33:8D:D4:E9:C5:E8:17:82:6F:9C:A6:99:AC:B0:EA:4E:04:59:83 Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33 Certificate issuer: /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733 Certificate serial: 49D468638715A9448B198FBAADB70AFD6578F15E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft Manifest number: 0538 Signing time: Mon 03 Nov 2025 23:12:05 +0000 Manifest this update: Mon 03 Nov 2025 23:07:05 +0000 Manifest next update: Fri 07 Nov 2025 05:25:05 +0000 Files and hashes: 1: 3130332e3132342e3133362e302f32342d3234203d3e20313338303839.roa (hash: BQTtvc745IuKZaE72oqsQIokxS6D/NEUcrmFIac+agM=) 2: 323430333a653063303a3a2f33322d3438203d3e20313338303839.roa (hash: IDS7wT53F/9d+GGxnBDomzis7H+va5MBv/3bGTQques=) 3: 3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa (hash: qQ/OJJBLuknzR6dOBM+bTowxaxIwEUGdeh8g4k+xMHc=) 4: 323430333a653063303a3a2f34382d3438203d3e20313338303839.roa (hash: 56yoy1pZXhES0/QXKkOUvjrn9k9A+/MhvPggVyF266U=) 5: 3130332e3132342e3133382e302f32342d3234203d3e20313338303839.roa (hash: J/jPlTXp+kWKv5LyWjv+I0N1cAy55yAD17Rj2NwYkPM=) 6: 323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa (hash: NEhivRqvBCnBURZf09iLRn6F9NwBbv/MNUQSDs4qTsQ=) 7: 3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa (hash: vPo4xg80UOtB6VJUwA4UWFKXU9vTxzV/7Yqjm3eG2dU=) 8: 323430333a653063303a3a2f33322d3332203d3e20313338303839.roa (hash: N0fiZGpp7G4AcyGQiECW3/6Q5p0a7A1fAhfbX9FH1ms=) 9: 7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl (hash: 5PsJDXodeNIJh5knU0di+fUcvy1ri44lUE/NdrRs1AY=) 10: 3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa (hash: UkRWHYHFSXJQvTnbIud8PmlndW+kHrowErEkvw8GIIU=) 11: 3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa (hash: KTTSzhJyEe2+3+LNGtWkObwsWEdVtFCSQXuEdew12yU=) 12: 323430333a653063303a323a3a2f34382d3438203d3e20313338303839.roa (hash: 7qX9WcxP/RC8tMcJg/P60OwjJ/UboqeJrbX2Ange7f0=) 13: 3130332e3132342e3133362e302f32322d3234203d3e20313338303839.roa (hash: 0fYEP8T/Nnelfp7GTy05C/LwRW0usrD9PvaWq6iCxUk=) 14: 323430333a653063303a313a3a2f34382d3438203d3e20313338303839.roa (hash: H7BZrybLTpX0NJFsDuTjqzH8VF1huH+0BD/mvn2lSto=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 05:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d4:68:63:87:15:a9:44:8b:19:8f:ba:ad:b7:0a:fd:65:78:f1:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733 Validity Not Before: Nov 3 23:07:05 2025 GMT Not After : Nov 7 05:25:05 2025 GMT Subject: CN=78338DD4E9C5E817826F9CA699ACB0EA4E045983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:78:bf:6a:63:d5:95:d0:90:0d:48:23:51:27: 72:eb:a5:4b:21:a0:8a:03:d8:62:ce:b5:3a:6f:66: 68:ca:e6:7f:35:89:3b:c7:66:06:dc:c2:c9:8f:39: fb:33:35:c6:89:ca:3a:b8:e1:7b:d1:8f:d9:e8:68: a4:52:30:96:c4:d9:ac:7f:82:75:19:23:47:0f:16: f5:bf:13:82:b1:16:68:df:14:cb:d6:47:c9:f2:bc: 88:0e:6c:f4:6a:fd:4e:63:13:61:77:f5:83:06:2b: 84:9a:b9:90:94:2c:49:9d:bb:d3:b1:13:97:4c:70: 83:c0:4d:6d:c6:cc:e6:f4:6e:b7:b2:9b:fc:c4:a5: 11:3b:68:cf:d4:93:92:a1:ef:34:ea:9f:9f:07:e0: 6a:5c:99:d3:6f:74:11:ab:8a:6c:d1:04:b0:94:5a: 00:66:b4:2b:7d:0f:8d:77:5b:87:2c:8e:f1:98:9e: 49:9d:35:61:d9:ab:2c:33:14:d6:4c:85:5f:2b:89: d8:04:76:05:12:3c:28:1d:2b:ba:2c:98:58:cf:9d: be:1e:41:09:a1:af:65:04:f3:1d:d2:dd:f3:df:57: d5:35:df:76:cb:65:f2:aa:a7:1e:5b:aa:d3:01:94: 47:31:6f:d8:14:4d:08:b9:f3:c8:52:0e:f6:ae:c1: de:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:33:8D:D4:E9:C5:E8:17:82:6F:9C:A6:99:AC:B0:EA:4E:04:59:83 X509v3 Authority Key Identifier: keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:af:ff:08:26:3d:51:4e:ba:8f:78:26:52:e5:ae:69:2f:a8: ea:d9:fb:f3:80:95:51:bf:08:5b:2b:ff:1d:c3:4c:af:dc:4a: 97:d4:f0:7d:b5:2d:43:94:e4:c4:56:46:98:1b:a1:ef:9f:1c: 6c:30:85:9a:25:83:f8:fa:ab:60:f2:3a:3f:11:4d:12:0b:0d: ad:c7:33:a9:3f:46:09:07:61:f0:df:c5:a4:17:fd:65:90:3f: 27:35:ab:a5:df:0d:c2:4e:70:6c:e0:f7:aa:b9:a2:f7:76:27: 4a:58:26:6f:6c:92:52:ad:b4:23:93:07:d9:bc:2b:15:5a:55: ef:92:82:ff:0f:42:cf:6f:5c:35:13:d3:f6:8b:ac:cb:1f:9d: d5:2a:14:1e:03:5c:da:52:73:b8:1a:71:16:a6:56:13:92:8f: 1b:57:b3:43:33:57:36:da:73:07:30:9f:d8:e8:08:8f:52:6b: eb:10:59:9d:4f:f5:6a:eb:5b:f7:bd:54:67:4c:9b:53:e4:49: 40:c4:ef:e9:fa:cc:70:85:87:84:63:7a:d6:15:9d:81:6c:ae: a6:53:a3:53:c9:07:ef:d8:92:04:37:00:d3:1c:e9:ef:88:6d: 51:ea:5d:13:88:60:5c:1a:e1:3d:77:e7:c1:f1:3c:50:fb:42: bb:9d:41:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSdRoY4cVqUSLGY+6rbcK/WV48V4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVB RjcwRTczMzAeFw0yNTExMDMyMzA3MDVaFw0yNTExMDcwNTI1MDVaMDMxMTAvBgNV BAMTKDc4MzM4REQ0RTlDNUU4MTc4MjZGOUNBNjk5QUNCMEVBNEUwNDU5ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWeL9qY9WV0JANSCNRJ3LrpUsh oIoD2GLOtTpvZmjK5n81iTvHZgbcwsmPOfszNcaJyjq44XvRj9noaKRSMJbE2ax/ gnUZI0cPFvW/E4KxFmjfFMvWR8nyvIgObPRq/U5jE2F39YMGK4SauZCULEmdu9Ox E5dMcIPATW3GzOb0breym/zEpRE7aM/Uk5Kh7zTqn58H4GpcmdNvdBGrimzRBLCU WgBmtCt9D413W4csjvGYnkmdNWHZqywzFNZMhV8ridgEdgUSPCgdK7osmFjPnb4e QQmhr2UE8x3S3fPfV9U133bLZfKqpx5bqtMBlEcxb9gUTQi588hSDvauwd6bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeDON1OnF6BeCb5ymmayw6k4EWYMwHwYDVR0j BBgwFoAUfU8NAHtgE0mWrDGYueW3Hq9w5zMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWJhNGU1OS1mYjMxLTQxYjUtODhlNy0wYjJjZWQxZjIwMWMvMC83RDRGMEQwMDdC NjAxMzQ5OTZBQzMxOThCOUU1QjcxRUFGNzBFNzMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVBRjcw RTczMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFiYTRlNTktZmIzMS00MWI1LTg4 ZTctMGIyY2VkMWYyMDFjLzAvN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3 MUVBRjcwRTczMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISv/wgmPVFOuo94JlLlrmkvqOrZ+/OAlVG/ CFsr/x3DTK/cSpfU8H21LUOU5MRWRpgboe+fHGwwhZolg/j6q2DyOj8RTRILDa3H M6k/RgkHYfDfxaQX/WWQPyc1q6XfDcJOcGzg96q5ovd2J0pYJm9sklKttCOTB9m8 KxVaVe+Sgv8PQs9vXDUT0/aLrMsfndUqFB4DXNpSc7gacRamVhOSjxtXs0MzVzba cwcwn9joCI9Sa+sQWZ1P9WrrW/e9VGdMm1PkSUDE7+n6zHCFh4RjetYVnYFsrqZT o1PJB+/YkgQ3ANMc6e+IbVHqXROIYFwa4T1358HxPFD7QrudQUU= -----END CERTIFICATE-----Generated at Wed Nov 5 21:30:25 2025 by rpki-client