$ rpki-client -vvf repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.mft File: 7E9242F2F0756C1DB232479261838C3701005D48.mft (raw, json) Hash identifier: rW4gdxMdeIQlnm4+gURpmVU3OEGivV6FSAGjIQMi7Nw= Subject key identifier: 66:10:65:B8:AF:78:C5:9B:71:C6:7F:7A:31:13:DB:27:38:A6:6F:90 Authority key identifier: 7E:92:42:F2:F0:75:6C:1D:B2:32:47:92:61:83:8C:37:01:00:5D:48 Certificate issuer: /CN=7E9242F2F0756C1DB232479261838C3701005D48 Certificate serial: 2F9C21953877E0E02CF57D59DA9200F40FA256CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E9242F2F0756C1DB232479261838C3701005D48.cer Subject info access: rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.mft Manifest number: 0246 Signing time: Fri 31 Oct 2025 09:52:00 +0000 Manifest this update: Fri 31 Oct 2025 09:47:00 +0000 Manifest next update: Mon 03 Nov 2025 11:39:00 +0000 Files and hashes: 1: 7E9242F2F0756C1DB232479261838C3701005D48.crl (hash: o1K2rw545ab6io0gc2OIi25HoL1bFo2K1lgmEN7Q91k=) 2: 3130332e3138352e34382e302f32332d3234203d3e203538383230.roa (hash: sRruwoxKxC5v+4ajE2hcnIZkT8FBlsjjqaqL/hWChfA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.crl rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E9242F2F0756C1DB232479261838C3701005D48.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 11:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:9c:21:95:38:77:e0:e0:2c:f5:7d:59:da:92:00:f4:0f:a2:56:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E9242F2F0756C1DB232479261838C3701005D48 Validity Not Before: Oct 31 09:47:00 2025 GMT Not After : Nov 3 11:39:00 2025 GMT Subject: CN=661065B8AF78C59B71C67F7A3113DB2738A66F90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:76:f6:5f:4f:dd:77:39:52:2d:e8:d7:4b:b9: c5:b0:b9:c1:0e:8d:b4:3b:99:bf:1b:9b:52:86:d8: 28:56:33:71:4f:41:8d:16:04:2a:fd:7a:c2:c4:2e: 20:20:8a:83:64:f6:ca:fb:28:c4:5c:2f:e8:d1:95: 5b:28:bc:8b:7b:da:c2:d4:ce:b3:5e:1c:0d:10:39: 82:b5:65:44:8b:12:38:c3:61:46:d5:6b:c7:03:2f: cc:85:2d:0a:0b:dc:83:b0:3e:22:4c:82:c0:36:cb: 76:5f:6c:28:e6:34:78:be:3e:b9:8e:de:a7:93:42: c2:bf:80:b6:9c:09:74:45:c2:b7:54:6a:fe:c7:d7: d5:d1:97:60:cd:c5:d2:37:4e:fe:00:66:37:47:33: 3e:79:24:72:fc:69:ba:7f:d7:fb:f9:c5:e3:30:96: 3c:ff:8f:52:d7:df:44:15:42:22:6a:f7:58:27:6c: ef:4f:57:a6:72:f6:83:02:11:f0:bd:86:b6:d1:93: 18:e0:94:6b:6e:59:3c:46:49:f2:0d:45:05:30:5b: 99:17:00:b6:db:6a:54:ea:22:00:7e:1b:74:e1:bf: c8:8f:86:bc:e4:21:13:01:a8:89:27:b9:3e:01:71: 19:cd:8d:23:d0:03:b2:73:1b:6c:a9:1e:b1:a1:d8: fc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:10:65:B8:AF:78:C5:9B:71:C6:7F:7A:31:13:DB:27:38:A6:6F:90 X509v3 Authority Key Identifier: keyid:7E:92:42:F2:F0:75:6C:1D:B2:32:47:92:61:83:8C:37:01:00:5D:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E9242F2F0756C1DB232479261838C3701005D48.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:21:bd:cd:47:03:48:85:13:9d:59:5f:d7:aa:71:55:aa:32: 33:92:6e:7c:1f:7c:ab:5b:12:bc:05:70:10:60:c5:c5:cb:c1: e7:e7:0f:5e:7b:b7:63:b1:60:67:9e:4d:92:ce:9e:78:ec:66: 61:79:5f:e7:51:1f:ad:a1:93:3a:86:01:1e:98:ea:b3:c8:90: 4c:a5:7a:dc:b9:21:9f:d9:b2:90:c4:b2:8a:4e:04:45:4f:b2: 85:75:f9:25:51:45:f0:38:df:65:f0:e1:1f:80:57:d3:6c:a5: 44:35:04:7c:b8:b1:fe:16:09:88:0e:d8:f4:f3:9c:5e:77:42: 96:84:34:22:d9:46:5c:0b:18:ee:9e:bc:9b:eb:1e:bc:11:d6: f1:5f:a4:5d:48:d7:a7:5c:d1:c1:4c:39:73:d6:c6:db:f7:44: ab:e1:a1:ba:6b:25:7f:6e:37:0f:d3:7b:87:53:58:9c:29:a7: 4b:bd:af:50:92:cd:b0:1a:30:7f:3c:82:f5:b2:df:4b:14:6d: f3:09:d1:30:9f:88:49:e4:4e:1d:4e:18:63:ec:71:c5:e8:9e: 9f:a9:cb:81:86:95:25:03:0e:d5:65:f1:5c:26:0c:41:27:de: d1:bf:e5:a3:30:ec:f3:5b:01:2e:79:64:a5:fa:76:a4:1a:f5: 69:bd:61:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL5whlTh34OAs9X1Z2pIA9A+iVswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U5MjQyRjJGMDc1NkMxREIyMzI0NzkyNjE4MzhDMzcw MTAwNUQ0ODAeFw0yNTEwMzEwOTQ3MDBaFw0yNTExMDMxMTM5MDBaMDMxMTAvBgNV BAMTKDY2MTA2NUI4QUY3OEM1OUI3MUM2N0Y3QTMxMTNEQjI3MzhBNjZGOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOdvZfT913OVIt6NdLucWwucEO jbQ7mb8bm1KG2ChWM3FPQY0WBCr9esLELiAgioNk9sr7KMRcL+jRlVsovIt72sLU zrNeHA0QOYK1ZUSLEjjDYUbVa8cDL8yFLQoL3IOwPiJMgsA2y3ZfbCjmNHi+PrmO 3qeTQsK/gLacCXRFwrdUav7H19XRl2DNxdI3Tv4AZjdHMz55JHL8abp/1/v5xeMw ljz/j1LX30QVQiJq91gnbO9PV6Zy9oMCEfC9hrbRkxjglGtuWTxGSfINRQUwW5kX ALbbalTqIgB+G3Thv8iPhrzkIRMBqIknuT4BcRnNjSPQA7JzG2ypHrGh2PxhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZhBluK94xZtxxn96MRPbJzimb5AwHwYDVR0j BBgwFoAUfpJC8vB1bB2yMkeSYYOMNwEAXUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTk2ODhhOS1lNzhkLTRhYmEtODNiYy01MTc4Njc5MTIwYWQvMC83RTkyNDJGMkYw NzU2QzFEQjIzMjQ3OTI2MTgzOEMzNzAxMDA1RDQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U5MjQyRjJGMDc1NkMxREIyMzI0NzkyNjE4MzhDMzcwMTAw NUQ0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk5Njg4YTktZTc4ZC00YWJhLTgz YmMtNTE3ODY3OTEyMGFkLzAvN0U5MjQyRjJGMDc1NkMxREIyMzI0NzkyNjE4MzhD MzcwMTAwNUQ0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJIhvc1HA0iFE51ZX9eqcVWqMjOSbnwffKtb ErwFcBBgxcXLwefnD157t2OxYGeeTZLOnnjsZmF5X+dRH62hkzqGAR6Y6rPIkEyl ety5IZ/ZspDEsopOBEVPsoV1+SVRRfA432Xw4R+AV9NspUQ1BHy4sf4WCYgO2PTz nF53QpaENCLZRlwLGO6evJvrHrwR1vFfpF1I16dc0cFMOXPWxtv3RKvhobprJX9u Nw/Te4dTWJwpp0u9r1CSzbAaMH88gvWy30sUbfMJ0TCfiEnkTh1OGGPsccXonp+p y4GGlSUDDtVl8VwmDEEn3tG/5aMw7PNbAS55ZKX6dqQa9Wm9YcU= -----END CERTIFICATE-----Generated at Sun Nov 2 06:25:46 2025 by rpki-client