$ rpki-client -vvf repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft File: 7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft (raw, json) Hash identifier: m73R+qg15Uvh8SvPcOjky1I0vJXZ0z4LIQ59W+ULxQg= Subject key identifier: 58:BF:9B:82:CF:3A:05:28:23:0E:F6:63:37:05:84:74:57:BF:B6:C4 Authority key identifier: 7A:6E:7F:E3:91:52:D1:CC:17:4F:69:22:14:3F:AA:EB:DC:95:FA:F5 Certificate issuer: /CN=7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5 Certificate serial: 2AFEEE263E30E12F6A6408284A8310D81B80D317 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft Manifest number: 0340 Signing time: Sun 02 Nov 2025 20:50:49 +0000 Manifest this update: Sun 02 Nov 2025 20:45:49 +0000 Manifest next update: Thu 06 Nov 2025 05:01:49 +0000 Files and hashes: 1: 3130332e3137322e3234312e302f32342d3234203d3e20313432343031.roa (hash: yN3b6aLARK75R5KMvUSuceVNjELLLGOMFIhCi2LU/yI=) 2: 3130332e3137322e3234302e302f32342d3234203d3e20313432343031.roa (hash: 18AbUsVhIGEQ6HCFJXdnQ22A4WQNqI+V6DxuOgi205k=) 3: 7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl (hash: 1P3z3EeoyMj0004MW+QAT33CJ+9+n5z7wvAr0i1/3V4=) 4: 3130332e3137322e3234302e302f32332d3233203d3e20313432343031.roa (hash: dQbf3sVA4jaVic2L+O9XI1H3j7ymjWLOW6r+meQnacg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 05:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:fe:ee:26:3e:30:e1:2f:6a:64:08:28:4a:83:10:d8:1b:80:d3:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5 Validity Not Before: Nov 2 20:45:49 2025 GMT Not After : Nov 6 05:01:49 2025 GMT Subject: CN=58BF9B82CF3A0528230EF6633705847457BFB6C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:15:15:0a:ee:2b:ec:df:21:0e:1b:0b:8a:e7: 7f:b2:04:cc:45:f7:a6:7d:12:24:45:e8:7e:8a:ad: f4:2b:d9:55:e7:76:68:a8:13:0f:b8:b1:12:2b:49: 6f:f9:bb:85:1c:34:7c:3e:b6:a1:c9:68:c5:a1:55: 2e:6a:28:30:79:22:d6:75:4a:16:7b:bd:44:c8:42: 15:b8:d4:55:f6:fb:9e:da:ce:30:fe:b5:cb:9a:8a: 95:de:d2:8a:45:8e:27:67:73:ca:de:74:8b:53:fc: 69:cd:e7:79:b1:5c:9c:36:93:7b:7a:f5:df:4b:a7: 31:1f:0e:bf:23:7a:28:08:7b:79:15:c2:94:43:a3: 51:91:cf:13:45:33:20:4f:08:8f:20:02:64:05:f5: 62:b6:7b:2a:4e:3c:75:b0:37:e2:41:76:7c:74:b8: a8:6b:52:53:af:d1:9e:85:1c:db:f6:1d:26:86:f3: c8:ca:61:d2:d4:6f:9b:6f:b8:9e:e5:e9:2e:d7:4a: 12:db:d6:89:d6:9a:2f:61:74:c8:0b:9a:37:a9:f5: d5:80:94:25:63:f4:16:b2:de:e4:b3:c9:62:7c:2d: 92:45:70:82:e5:94:9a:35:ca:69:6d:86:00:7d:de: e0:e6:04:c8:74:77:ca:79:cf:38:35:36:62:92:d1: ac:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:BF:9B:82:CF:3A:05:28:23:0E:F6:63:37:05:84:74:57:BF:B6:C4 X509v3 Authority Key Identifier: keyid:7A:6E:7F:E3:91:52:D1:CC:17:4F:69:22:14:3F:AA:EB:DC:95:FA:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:67:33:95:07:ec:c3:92:e4:5b:a5:81:ee:bf:c0:7d:ed:ed: b8:e6:c0:70:1f:8e:bf:cf:60:35:80:89:42:87:c0:de:8f:38: f8:4f:00:9d:fe:ea:ec:ad:80:ec:c9:eb:20:b9:22:bc:44:9b: f4:5c:94:20:b8:cb:90:1d:b8:73:de:a6:d1:f0:23:c1:a5:10: 0d:26:09:74:03:c7:cc:67:5e:39:80:63:e4:49:85:a2:5c:e4: 44:d2:b2:b4:05:30:2b:2d:18:d4:38:11:c1:54:ad:40:0e:14: e9:aa:99:b3:5c:bc:66:d9:09:63:c4:db:ff:f0:f4:4c:29:93: 38:9c:6a:05:d3:cb:46:90:8a:60:fa:a1:e5:39:f9:29:03:f3: ad:d7:03:a3:42:9c:05:df:38:2e:9f:de:45:13:f1:fc:b6:47: 81:29:47:f6:c8:62:8a:46:27:20:4e:75:17:df:db:f9:4e:65: cc:01:67:57:25:56:7a:e3:9c:b6:be:7b:f2:bc:0b:8b:05:5f: 5d:b4:72:08:65:14:5d:82:27:1d:58:ab:53:aa:79:d2:4d:85: 30:73:97:a4:d1:e0:c8:07:37:16:dc:d1:6e:82:fd:c9:be:c0: f4:bd:a2:09:dd:d2:0d:a3:47:ab:bb:4d:80:ab:6b:73:63:74: 6b:52:ef:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKv7uJj4w4S9qZAgoSoMQ2BuA0xcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFBRUJE Qzk1RkFGNTAeFw0yNTExMDIyMDQ1NDlaFw0yNTExMDYwNTAxNDlaMDMxMTAvBgNV BAMTKDU4QkY5QjgyQ0YzQTA1MjgyMzBFRjY2MzM3MDU4NDc0NTdCRkI2QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEFRUK7ivs3yEOGwuK53+yBMxF 96Z9EiRF6H6KrfQr2VXndmioEw+4sRIrSW/5u4UcNHw+tqHJaMWhVS5qKDB5ItZ1 ShZ7vUTIQhW41FX2+57azjD+tcuaipXe0opFjidnc8redItT/GnN53mxXJw2k3t6 9d9LpzEfDr8jeigIe3kVwpRDo1GRzxNFMyBPCI8gAmQF9WK2eypOPHWwN+JBdnx0 uKhrUlOv0Z6FHNv2HSaG88jKYdLUb5tvuJ7l6S7XShLb1onWmi9hdMgLmjep9dWA lCVj9Bay3uSzyWJ8LZJFcILllJo1ymlthgB93uDmBMh0d8p5zzg1NmKS0ax7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWL+bgs86BSgjDvZjNwWEdFe/tsQwHwYDVR0j BBgwFoAUem5/45FS0cwXT2kiFD+q69yV+vUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTJjMTM4Yy0yZTI0LTQ5ZjUtOGFkYS0wMDI3Y2JhN2YxNzgvMC83QTZFN0ZFMzkx NTJEMUNDMTc0RjY5MjIxNDNGQUFFQkRDOTVGQUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFBRUJEQzk1 RkFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjEyYzEzOGMtMmUyNC00OWY1LThh ZGEtMDAyN2NiYTdmMTc4LzAvN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFB RUJEQzk1RkFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdnM5UH7MOS5Fulge6/wH3t7bjmwHAfjr/P YDWAiUKHwN6POPhPAJ3+6uytgOzJ6yC5IrxEm/RclCC4y5AduHPeptHwI8GlEA0m CXQDx8xnXjmAY+RJhaJc5ETSsrQFMCstGNQ4EcFUrUAOFOmqmbNcvGbZCWPE2//w 9EwpkzicagXTy0aQimD6oeU5+SkD863XA6NCnAXfOC6f3kUT8fy2R4EpR/bIYopG JyBOdRff2/lOZcwBZ1clVnrjnLa+e/K8C4sFX120cghlFF2CJx1Yq1OqedJNhTBz l6TR4MgHNxbc0W6C/cm+wPS9ognd0g2jR6u7TYCra3NjdGtS79U= -----END CERTIFICATE-----Generated at Tue Nov 4 11:27:10 2025 by rpki-client