$ rpki-client -vvf repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft File: 7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft (raw, json) Hash identifier: n026CWzEbfnRmQpGdyD1S3sTlm02emaT8ijG5qQJzwA= Subject key identifier: 6E:ED:18:D2:21:E6:44:95:9E:91:DA:C3:61:BA:91:65:BA:08:FB:44 Authority key identifier: 7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3 Certificate issuer: /CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3 Certificate serial: 03FD2718081AF1D0AF0E7AC897348B9972DA86FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft Manifest number: 0209 Signing time: Tue 28 Oct 2025 18:32:12 +0000 Manifest this update: Tue 28 Oct 2025 18:27:12 +0000 Manifest next update: Sat 01 Nov 2025 04:37:12 +0000 Files and hashes: 1: 7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl (hash: rwLw23tm6rTLBXe0y4GERC/5MPgeFb9iljQlKk+AkBo=) 2: 3130332e32302e3130392e302f32342d3234203d3e20313439373037.roa (hash: 3msI/ygFttmp4PXSnBx54sTyPLJ5YCmXmK79NjZs9sY=) 3: 3130332e32302e3130382e302f32342d3234203d3e20313439373037.roa (hash: RC/WoQjd0AnGJGIfXrYxV2LmADFS4+Z04pTssF1Bamk=) 4: 3130332e32302e3130382e302f32332d3234203d3e20313439373037.roa (hash: GyJFRm5QBw0DVeVQuvzw8Fd9uB9Nai2ZZg9HhVjXTMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 04:37:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:fd:27:18:08:1a:f1:d0:af:0e:7a:c8:97:34:8b:99:72:da:86:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3 Validity Not Before: Oct 28 18:27:12 2025 GMT Not After : Nov 1 04:37:12 2025 GMT Subject: CN=6EED18D221E644959E91DAC361BA9165BA08FB44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2b:b4:03:98:4d:18:20:9a:0a:74:16:03:bb: 0f:5c:66:e7:5b:01:f2:7f:2d:82:72:5a:ee:f7:4d: c0:41:0f:1c:16:fe:6f:2e:20:04:36:04:d9:e3:b0: 64:9f:fe:8b:c5:93:58:c4:6a:62:c0:06:f1:93:77: fc:89:51:39:22:3f:0c:23:39:9e:96:86:99:36:0b: 0b:1e:88:9d:6a:cd:06:56:c5:ba:a9:a6:f0:27:23: 13:5d:8f:39:5f:dd:67:64:9b:41:1d:4b:13:72:5c: a5:10:b9:85:bf:e5:d1:11:92:0e:af:8b:62:46:d3: 79:86:68:34:cb:4b:45:ea:f9:cc:cb:17:77:aa:6b: 4c:08:7b:c2:20:2d:60:09:80:0d:fa:e9:1f:33:9e: 24:b7:e8:cc:df:0d:2c:27:4f:22:b1:52:2f:3d:4a: ae:9e:96:f6:fa:8a:13:55:29:b8:7b:d2:24:20:ac: 24:9d:e8:a2:54:06:1a:76:2b:34:84:1e:11:02:a9: 2b:20:b3:18:0a:0e:70:89:4e:a2:43:ec:e4:32:d5: 86:a9:08:c0:5c:06:70:8f:46:c0:8e:da:4d:55:84: ae:27:5c:7b:f9:96:23:f2:43:10:ad:49:2b:c7:9a: 10:4f:3e:45:a0:49:8a:66:61:ec:b2:c5:57:f6:e8: c4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:ED:18:D2:21:E6:44:95:9E:91:DA:C3:61:BA:91:65:BA:08:FB:44 X509v3 Authority Key Identifier: keyid:7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:5f:d9:6a:44:eb:ae:69:2a:de:69:89:c3:7c:2e:fc:8d:0b: 2f:33:28:12:2c:04:ae:6e:fb:e7:c8:dd:ca:f9:19:43:5c:e4: cb:9a:f9:e4:fb:03:96:08:bc:93:8c:69:99:74:60:f5:63:64: 79:78:95:31:c0:4d:e0:b2:30:75:ae:1b:36:49:11:31:64:82: 5d:02:40:5e:ce:78:38:cc:df:d1:fe:54:6b:d0:2c:d1:14:a8: 55:b2:2c:a6:68:23:5b:74:26:17:0f:0c:d7:fd:fb:e9:d0:b4: 6d:21:02:43:1f:1d:35:70:f0:38:ed:0f:64:82:e3:77:93:ba: 38:e7:88:ba:3f:3c:c7:c5:37:0a:5e:e3:87:17:23:f5:4d:1f: 27:83:f6:34:4b:ca:84:6a:cc:a7:4a:68:de:7a:20:1d:8a:82: 3a:ca:27:70:b6:7d:e4:cb:09:b7:c0:0e:ef:9b:0d:21:9d:58: 81:5e:11:02:6f:98:1a:49:08:2e:d0:f4:ec:59:66:d3:83:a9: d8:8e:1c:19:a1:e5:4b:09:0e:83:00:8a:64:d3:f2:64:cb:5e: b6:19:1b:72:ce:f4:f9:17:3a:30:9f:bd:ca:d2:ec:c5:36:36: e8:1f:01:1b:bf:84:79:6e:74:0f:04:3d:6b:36:b6:b6:f1:08: e1:c0:b8:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA/0nGAga8dCvDnrIlzSLmXLahvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1 MDMyMzFCMzAeFw0yNTEwMjgxODI3MTJaFw0yNTExMDEwNDM3MTJaMDMxMTAvBgNV BAMTKDZFRUQxOEQyMjFFNjQ0OTU5RTkxREFDMzYxQkE5MTY1QkEwOEZCNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTK7QDmE0YIJoKdBYDuw9cZudb AfJ/LYJyWu73TcBBDxwW/m8uIAQ2BNnjsGSf/ovFk1jEamLABvGTd/yJUTkiPwwj OZ6Whpk2CwseiJ1qzQZWxbqppvAnIxNdjzlf3Wdkm0EdSxNyXKUQuYW/5dERkg6v i2JG03mGaDTLS0Xq+czLF3eqa0wIe8IgLWAJgA366R8zniS36MzfDSwnTyKxUi89 Sq6elvb6ihNVKbh70iQgrCSd6KJUBhp2KzSEHhECqSsgsxgKDnCJTqJD7OQy1Yap CMBcBnCPRsCO2k1VhK4nXHv5liPyQxCtSSvHmhBPPkWgSYpmYeyyxVf26MR3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbu0Y0iHmRJWekdrDYbqRZboI+0QwHwYDVR0j BBgwFoAUeiFvI9iiKPu49WPsFd92/VAyMbMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2M2YmQ3My1mOWJkLTRmNWEtOWM1OS1mYmVhMWJkODM0NzMvMC83QTIxNkYyM0Q4 QTIyOEZCQjhGNTYzRUMxNURGNzZGRDUwMzIzMUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1MDMy MzFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNjNmJkNzMtZjliZC00ZjVhLTlj NTktZmJlYTFiZDgzNDczLzAvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2 RkQ1MDMyMzFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBf2WpE665pKt5picN8LvyNCy8zKBIsBK5u ++fI3cr5GUNc5Mua+eT7A5YIvJOMaZl0YPVjZHl4lTHATeCyMHWuGzZJETFkgl0C QF7OeDjM39H+VGvQLNEUqFWyLKZoI1t0JhcPDNf9++nQtG0hAkMfHTVw8DjtD2SC 43eTujjniLo/PMfFNwpe44cXI/VNHyeD9jRLyoRqzKdKaN56IB2KgjrKJ3C2feTL CbfADu+bDSGdWIFeEQJvmBpJCC7Q9OxZZtODqdiOHBmh5UsJDoMAimTT8mTLXrYZ G3LO9PkXOjCfvcrS7MU2NugfARu/hHludA8EPWs2trbxCOHAuNk= -----END CERTIFICATE-----Generated at Thu Oct 30 14:59:06 2025 by rpki-client