$ rpki-client -vvf repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft File: 7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft (raw, json) Hash identifier: Ct7XQjAz4bnzjxoM4pV4DkNUPScR1/+tRCRTSNPYHB4= Subject key identifier: CD:65:27:DB:67:47:28:EE:A9:11:2E:A0:6D:F9:C8:BC:87:80:CB:1C Authority key identifier: 7A:1D:19:2D:65:B7:EE:AD:C4:6A:B4:45:20:8C:C2:24:DC:E9:74:B6 Certificate issuer: /CN=7A1D192D65B7EEADC46AB445208CC224DCE974B6 Certificate serial: 79A681B4FB0B23A3577DD58917DFD9AF89E944FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft Manifest number: 0295 Signing time: Sat 01 Nov 2025 15:20:52 +0000 Manifest this update: Sat 01 Nov 2025 15:15:52 +0000 Manifest next update: Tue 04 Nov 2025 16:11:52 +0000 Files and hashes: 1: 7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl (hash: th6P0b0qEaZrA+ulPuc3wGYeoUPayRGWnkWPw4rQul8=) 2: 3130332e3134322e36312e302f32342d3234203d3e20313339333639.roa (hash: gQUi+SSlZWbgtxREEtY9XyZ6mEDQwkMmGKLNXyWWZlc=) 3: 3130332e3134322e36302e302f32342d3234203d3e20313339333639.roa (hash: bgLc0wXOVn9w5v/YbQRRsK2+epF0KGKuwlh4tr4ebCY=) 4: 3130332e3134322e36302e302f32332d3234203d3e20313339333639.roa (hash: pb2t7SBeTp32K0Tjh6odZI2irDPZNgzYkTCAyS4mxhU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 09:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:a6:81:b4:fb:0b:23:a3:57:7d:d5:89:17:df:d9:af:89:e9:44:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A1D192D65B7EEADC46AB445208CC224DCE974B6 Validity Not Before: Nov 1 15:15:52 2025 GMT Not After : Nov 4 16:11:52 2025 GMT Subject: CN=CD6527DB674728EEA9112EA06DF9C8BC8780CB1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b9:cc:27:0e:11:50:18:99:11:bc:e5:41:ce: 36:12:78:dd:3e:19:34:95:63:df:9b:d2:74:b3:26: ad:1e:c3:e6:93:c9:26:06:8a:cb:23:00:e7:9d:81: 74:50:46:42:ce:ba:a6:6e:fe:e3:e5:3f:0e:de:30: 98:76:2a:44:1f:18:1c:c6:e5:94:77:c5:a4:69:41: 2b:21:e0:b3:7c:12:68:78:00:89:18:69:ae:9e:b5: 0c:bd:ac:e8:f7:28:23:4c:61:2f:a9:47:cf:ea:a7: 7e:d0:0e:ea:76:98:dd:ad:e7:60:f5:84:66:69:cd: 7a:bc:87:b9:c0:da:23:65:b6:20:42:92:fd:20:1e: e4:9c:af:f5:09:2f:db:54:37:60:9f:fe:b4:ca:44: 11:5e:48:f5:e4:43:62:e2:3a:ea:d3:2b:14:7b:a5: 04:c6:3b:0a:f2:a1:dc:79:1d:10:db:b2:c5:a2:0d: 8e:b9:03:34:77:85:78:d3:53:7c:2f:97:52:c2:78: 0a:fc:9d:b0:98:85:02:0e:30:a1:8a:99:72:20:a7: bf:3b:da:17:bb:4e:fb:2f:58:12:83:85:bf:d9:31: 1f:cb:f0:a7:03:33:32:a8:f4:21:f6:84:75:c1:cc: 1f:bb:6e:68:c1:03:df:6d:2b:53:3e:7c:dd:7f:05: 91:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:65:27:DB:67:47:28:EE:A9:11:2E:A0:6D:F9:C8:BC:87:80:CB:1C X509v3 Authority Key Identifier: keyid:7A:1D:19:2D:65:B7:EE:AD:C4:6A:B4:45:20:8C:C2:24:DC:E9:74:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:2f:25:4d:62:45:ca:ab:7d:64:17:49:36:0f:18:f0:55:fd: 2b:69:af:fd:ee:fe:9c:10:a8:a2:46:e1:4e:a4:28:7d:ab:37: 21:dc:3c:02:67:57:6f:eb:8e:45:e6:3d:7e:a8:bb:dd:a1:a6: f9:9f:51:67:67:ad:25:78:49:8d:c9:03:28:f4:f2:32:bb:92: 70:2c:0c:8f:6b:bf:8b:21:66:bd:10:91:99:a1:67:c0:6a:e6: 93:a0:7d:7b:e0:c9:5d:96:d3:80:73:5a:fb:38:51:ab:2c:4e: 69:e1:3a:57:93:54:f0:d0:46:db:46:02:03:8a:a8:47:69:04: 4c:0a:41:6e:3e:b3:6d:51:19:7d:e9:55:1a:b4:48:fd:d2:8b: 02:82:d8:22:11:0a:5f:38:bb:c9:d7:58:e2:a7:66:aa:2d:7d: 17:a7:4a:c7:4c:e6:27:37:1b:4a:37:b9:ad:1b:54:94:0f:df: 43:db:70:7d:18:a1:56:8b:9e:7b:18:ba:ba:3c:1c:51:45:f8: 0e:15:79:01:58:05:c0:da:92:23:54:fc:72:1a:02:a8:7f:c5: 0f:c6:29:fd:d0:14:4a:50:5a:ed:30:60:65:6b:12:ee:6f:76: 1d:9c:88:38:6a:56:2c:7f:ed:68:a3:bb:91:c8:13:11:2d:ca: 20:00:31:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeaaBtPsLI6NXfdWJF9/Zr4npRPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ExRDE5MkQ2NUI3RUVBREM0NkFCNDQ1MjA4Q0MyMjRE Q0U5NzRCNjAeFw0yNTExMDExNTE1NTJaFw0yNTExMDQxNjExNTJaMDMxMTAvBgNV BAMTKENENjUyN0RCNjc0NzI4RUVBOTExMkVBMDZERjlDOEJDODc4MENCMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ucwnDhFQGJkRvOVBzjYSeN0+ GTSVY9+b0nSzJq0ew+aTySYGissjAOedgXRQRkLOuqZu/uPlPw7eMJh2KkQfGBzG 5ZR3xaRpQSsh4LN8Emh4AIkYaa6etQy9rOj3KCNMYS+pR8/qp37QDup2mN2t52D1 hGZpzXq8h7nA2iNltiBCkv0gHuScr/UJL9tUN2Cf/rTKRBFeSPXkQ2LiOurTKxR7 pQTGOwryodx5HRDbssWiDY65AzR3hXjTU3wvl1LCeAr8nbCYhQIOMKGKmXIgp787 2he7TvsvWBKDhb/ZMR/L8KcDMzKo9CH2hHXBzB+7bmjBA99tK1M+fN1/BZFpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzWUn22dHKO6pES6gbfnIvIeAyxwwHwYDVR0j BBgwFoAUeh0ZLWW37q3EarRFIIzCJNzpdLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzFiZjk4MC0yNGRhLTQ4NjUtYTk4OS0yZDQ0ODllM2E1MDUvMC83QTFEMTkyRDY1 QjdFRUFEQzQ2QUI0NDUyMDhDQzIyNERDRTk3NEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ExRDE5MkQ2NUI3RUVBREM0NkFCNDQ1MjA4Q0MyMjREQ0U5 NzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTcxYmY5ODAtMjRkYS00ODY1LWE5 ODktMmQ0NDg5ZTNhNTA1LzAvN0ExRDE5MkQ2NUI3RUVBREM0NkFCNDQ1MjA4Q0My MjREQ0U5NzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQvJU1iRcqrfWQXSTYPGPBV/Stpr/3u/pwQ qKJG4U6kKH2rNyHcPAJnV2/rjkXmPX6ou92hpvmfUWdnrSV4SY3JAyj08jK7knAs DI9rv4shZr0QkZmhZ8Bq5pOgfXvgyV2W04BzWvs4UassTmnhOleTVPDQRttGAgOK qEdpBEwKQW4+s21RGX3pVRq0SP3SiwKC2CIRCl84u8nXWOKnZqotfRenSsdM5ic3 G0o3ua0bVJQP30PbcH0YoVaLnnsYuro8HFFF+A4VeQFYBcDakiNU/HIaAqh/xQ/G Kf3QFEpQWu0wYGVrEu5vdh2ciDhqVix/7Wiju5HIExEtyiAAMak= -----END CERTIFICATE-----Generated at Sun Nov 2 00:32:16 2025 by rpki-client