$ rpki-client -vvf repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft File: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft (raw, json) Hash identifier: EbkS+w2DUQDMyL1fDUEobFS2i3WGHQtIoXWwj4kmLDE= Subject key identifier: C1:54:9E:96:C8:40:25:7A:89:87:DB:1E:46:0C:35:FA:40:13:B9:2A Authority key identifier: A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 Certificate issuer: /CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Certificate serial: 324F3AD42DB04843A47CE3E2C3689A1214906C5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft Manifest number: 0232 Signing time: Mon 03 Nov 2025 17:12:15 +0000 Manifest this update: Mon 03 Nov 2025 17:07:15 +0000 Manifest next update: Thu 06 Nov 2025 21:10:15 +0000 Files and hashes: 1: 34322e36322e3137372e302f32342d3234203d3e203535363930.roa (hash: wxamqcqZHFPZTXY3tFZjnjOjiDY+Ympi4Mw1SknW1jk=) 2: 34322e36322e3137382e302f32342d3234203d3e203535363930.roa (hash: pyuYjl7HJM3OX8EabIWp5/TJB6k8ueJKEta6KCZ5rHA=) 3: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl (hash: Ig3eCIt7yPHjV0VnHRs61/pNEA2jWI8dOT2xcn1d7vk=) 4: 34322e36322e3137392e302f32342d3234203d3e203535363930.roa (hash: cOnOzonkSjygqwY7wjbRR1C8zBB1AZouGk8x5uWWlJI=) 5: 34322e36322e3137362e302f32342d3234203d3e203535363930.roa (hash: dHv2E74rvnbHn93zKNwQZCdDaqywUU0cyjyj8Kme6Kk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 21:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:4f:3a:d4:2d:b0:48:43:a4:7c:e3:e2:c3:68:9a:12:14:90:6c:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Validity Not Before: Nov 3 17:07:15 2025 GMT Not After : Nov 6 21:10:15 2025 GMT Subject: CN=C1549E96C840257A8987DB1E460C35FA4013B92A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:36:cc:4a:98:d7:67:ca:76:de:28:7e:ad:58: 8a:f5:16:57:2f:fd:a4:55:8e:95:b5:59:27:a5:9a: 84:71:52:53:96:f9:1b:27:fa:87:cf:df:82:0e:a2: 65:1c:7b:06:ea:da:23:d7:b5:d4:1c:23:94:50:38: 67:7f:b3:0d:b0:28:1a:ce:a8:7d:ad:4b:39:a4:5e: bb:72:e3:cd:04:cb:d4:f5:38:07:44:d2:16:79:28: b7:91:82:1c:f9:b7:0f:69:30:d4:26:b5:8d:19:25: 2a:c8:ca:c3:1a:3c:91:0a:b8:f8:b9:a6:46:28:e8: f3:d8:39:43:a5:c3:8c:94:5b:be:8f:6b:0b:c9:b8: ec:b8:45:40:dd:99:74:ca:04:80:21:90:b3:06:32: 8e:36:09:ca:77:0d:62:e8:cf:d7:b3:4d:e2:cc:ec: 5b:27:a6:94:99:51:d9:76:24:ca:3c:8b:ec:46:44: 08:2f:d6:aa:b6:10:d8:f7:6d:98:de:96:62:3c:a6: a9:95:09:e2:cb:5a:ca:f7:d5:a4:f9:7e:3d:aa:2c: f9:7d:21:6b:7a:72:0f:ee:a9:38:4b:da:60:60:2e: ff:4e:08:44:b8:8b:85:33:db:c9:33:c7:21:6b:52: 55:1f:5d:7e:05:bd:fd:c1:22:6c:48:97:df:8e:70: 74:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:54:9E:96:C8:40:25:7A:89:87:DB:1E:46:0C:35:FA:40:13:B9:2A X509v3 Authority Key Identifier: keyid:A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:70:c4:4f:28:9d:2e:48:dd:bf:68:00:8f:94:a0:73:55:bd: ae:74:68:9d:4c:3f:ca:39:05:b5:bc:ee:9e:29:f8:7b:48:3c: a7:12:65:36:b1:ec:09:99:7e:83:4c:ed:53:8e:ef:41:8b:53: d6:dc:b2:77:f8:74:46:a1:ba:62:04:25:2b:07:37:76:23:22: e1:a3:1e:48:69:f4:4f:e8:72:b8:98:b8:bf:c3:9d:c8:b0:f2: 68:33:3a:e1:5d:32:72:c3:b9:f7:f8:28:ef:27:cc:4c:cd:93: c2:18:e0:6e:fe:f1:b6:f5:ce:f2:3e:9b:c6:4f:07:63:19:14: 2a:d4:a5:23:0c:12:8e:ec:79:66:36:e7:47:2d:ce:3d:b6:7f: 54:80:36:6c:be:de:51:e4:04:d9:54:78:2e:29:60:3c:b8:ac: bc:3f:e5:c2:01:4a:56:d7:8e:f4:fe:c4:bb:dd:1f:41:6f:e7: c6:8b:14:f1:4f:79:34:19:e0:98:46:56:11:78:41:07:1b:a8: 6a:15:4a:d1:71:05:02:07:41:28:58:44:e9:39:b9:db:92:13: bb:cf:4a:ff:50:78:20:59:54:14:c8:b5:48:2f:5c:33:b6:2a: e2:a4:d7:86:aa:d6:92:ce:41:fa:50:de:78:91:b5:00:fc:f4: b1:d2:62:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMk861C2wSEOkfOPiw2iaEhSQbFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1 Rjk5MzQ2NDAeFw0yNTExMDMxNzA3MTVaFw0yNTExMDYyMTEwMTVaMDMxMTAvBgNV BAMTKEMxNTQ5RTk2Qzg0MDI1N0E4OTg3REIxRTQ2MEMzNUZBNDAxM0I5MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSNsxKmNdnynbeKH6tWIr1Flcv /aRVjpW1WSelmoRxUlOW+Rsn+ofP34IOomUcewbq2iPXtdQcI5RQOGd/sw2wKBrO qH2tSzmkXrty480Ey9T1OAdE0hZ5KLeRghz5tw9pMNQmtY0ZJSrIysMaPJEKuPi5 pkYo6PPYOUOlw4yUW76PawvJuOy4RUDdmXTKBIAhkLMGMo42Ccp3DWLoz9ezTeLM 7FsnppSZUdl2JMo8i+xGRAgv1qq2ENj3bZjelmI8pqmVCeLLWsr31aT5fj2qLPl9 IWt6cg/uqThL2mBgLv9OCES4i4Uz28kzxyFrUlUfXX4Fvf3BImxIl9+OcHT5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwVSelshAJXqJh9seRgw1+kATuSowHwYDVR0j BBgwFoAUoN4hoDXPYBvL2dXJi9R92V+ZNGQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2Y4ZjZhNC04ZDg3LTRlZjMtYjRkYy01MmMyNWNiNTc3YzIvMC9BMERFMjFBMDM1 Q0Y2MDFCQ0JEOUQ1Qzk4QkQ0N0REOTVGOTkzNDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1Rjk5 MzQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdmOGY2YTQtOGQ4Ny00ZWYzLWI0 ZGMtNTJjMjVjYjU3N2MyLzAvQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdE RDk1Rjk5MzQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALhwxE8onS5I3b9oAI+UoHNVva50aJ1MP8o5 BbW87p4p+HtIPKcSZTax7AmZfoNM7VOO70GLU9bcsnf4dEahumIEJSsHN3YjIuGj Hkhp9E/ocriYuL/Dnciw8mgzOuFdMnLDuff4KO8nzEzNk8IY4G7+8bb1zvI+m8ZP B2MZFCrUpSMMEo7seWY250ctzj22f1SANmy+3lHkBNlUeC4pYDy4rLw/5cIBSlbX jvT+xLvdH0Fv58aLFPFPeTQZ4JhGVhF4QQcbqGoVStFxBQIHQShYROk5uduSE7vP Sv9QeCBZVBTItUgvXDO2KuKk14aq1pLOQfpQ3niRtQD89LHSYsA= -----END CERTIFICATE-----Generated at Tue Nov 4 19:00:11 2025 by rpki-client