$ rpki-client -vvf repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft File: A0098405BC0A535E6E4D613793C362C743319143.mft (raw, json) Hash identifier: EKcjPzaWzMSaiD5++W9sK5RQIoZw5IBCyuusn58/ZDo= Subject key identifier: 19:A8:02:19:98:C5:BD:33:3B:43:C9:B2:C5:2E:B4:65:F9:AD:08:9E Authority key identifier: A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43 Certificate issuer: /CN=A0098405BC0A535E6E4D613793C362C743319143 Certificate serial: 2D0B16814A86648B1371E2E20D1A973262C1CA9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft Manifest number: DD Signing time: Sun 02 Nov 2025 03:21:04 +0000 Manifest this update: Sun 02 Nov 2025 03:16:04 +0000 Manifest next update: Wed 05 Nov 2025 09:21:04 +0000 Files and hashes: 1: 3130332e3135372e38312e302f32342d3234203d3e20313431313133.roa (hash: 7E801eHzByrlpX824SF5Bv9nBKvFuISx0tzFKJn/f5I=) 2: A0098405BC0A535E6E4D613793C362C743319143.crl (hash: UKUoCR26VeNZzY2nq0c3NcJ2DugfxIa4Dghxl1E2Mig=) 3: 323030313a6466353a313738303a3a2f34382d3438203d3e20313431313133.roa (hash: ULILjGfRQgoXvgl0tXvCQV4c2a3dPck8tfEpBWTuXWg=) 4: 3130332e3135372e38302e302f32342d3234203d3e20313431313133.roa (hash: Q6e0e1mxnvq7Z9cyA+57spYXR6whshtcuglsUxuXceY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 09:21:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:0b:16:81:4a:86:64:8b:13:71:e2:e2:0d:1a:97:32:62:c1:ca:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0098405BC0A535E6E4D613793C362C743319143 Validity Not Before: Nov 2 03:16:04 2025 GMT Not After : Nov 5 09:21:04 2025 GMT Subject: CN=19A8021998C5BD333B43C9B2C52EB465F9AD089E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ce:1a:cd:7e:b2:b8:29:c5:37:ef:09:c8:0d: d8:72:05:65:71:57:10:87:6a:cd:b6:13:38:23:9a: 44:6e:2d:46:7a:0e:81:a3:01:21:45:94:3a:dd:d5: e5:a3:84:4f:c8:38:22:e6:c2:9f:90:33:e5:4a:5e: fa:13:77:fb:78:90:61:13:d7:48:bb:43:01:75:6f: aa:89:d3:e6:ee:50:a0:1a:b4:d1:6e:9e:bd:46:06: 15:47:01:03:a5:85:e2:89:96:d4:4b:41:e3:32:51: 65:e7:bc:94:c8:29:30:f3:d1:4c:97:d5:cb:12:a2: 96:e0:bf:ed:a7:9d:c4:79:4d:86:82:82:3c:14:35: 47:c6:64:c7:a2:f3:65:e3:5b:9d:09:1d:ef:36:60: 42:ff:6d:ab:51:82:ea:e6:ac:c5:62:5c:e4:fa:b9: 3f:ce:7c:3e:6b:40:4d:97:90:0a:88:b0:1c:2a:53: 29:bf:c6:79:90:ad:6c:61:a6:02:e0:8f:ec:ba:2b: f2:80:f7:b1:a3:8f:f8:b8:2c:da:a9:c3:48:3b:5b: f4:ab:72:bb:bf:c2:db:db:5b:bc:69:9e:2d:9f:6c: 23:85:8c:b0:e7:8d:0d:3f:d4:21:d1:41:13:b3:90: 23:66:78:27:e7:af:80:7e:35:10:bc:7e:cf:f7:12: 76:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A8:02:19:98:C5:BD:33:3B:43:C9:B2:C5:2E:B4:65:F9:AD:08:9E X509v3 Authority Key Identifier: keyid:A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:10:8b:fd:3d:16:0f:83:a9:b1:30:c5:d0:3e:30:f9:f9:c5: 3b:29:48:48:b0:10:1d:57:52:3a:1a:9c:d9:e8:9d:ff:cf:90: c5:33:23:81:d0:14:83:ed:24:63:35:ea:8e:38:ad:8f:e3:b4: 6e:ad:e6:bc:41:cd:24:d9:a2:7d:66:70:90:ce:d2:08:26:e3: 68:02:92:27:4d:79:88:16:62:e3:39:93:9a:86:31:11:ca:ea: 05:36:54:eb:82:26:2b:43:9c:8e:86:32:0b:0a:a7:02:2e:56: b2:56:eb:5e:53:9e:5c:2e:07:92:c7:e0:48:30:6d:06:ce:4c: 4c:46:4c:b1:55:48:52:a1:38:bf:88:b6:d1:12:ec:2c:02:9e: 87:1b:4a:37:fe:67:09:f9:ce:81:17:1f:4e:dd:9d:a1:c8:24: 8e:83:38:cb:6f:5b:77:3b:eb:de:35:bd:af:a7:ab:bd:34:f0: c0:9c:29:7c:56:7c:c4:93:23:ba:67:5f:2e:7d:07:9c:a7:05: 20:b3:e8:a1:57:01:5e:29:d7:15:63:a5:74:86:72:4a:48:b3: 3c:9a:83:6b:15:aa:90:fb:16:c7:36:4d:f9:2c:a2:2f:c7:4d: 53:11:1c:f1:9c:6c:c4:f7:d7:20:8f:7a:13:bd:75:69:90:8f: 36:cc:ec:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULQsWgUqGZIsTceLiDRqXMmLByp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYyQzc0 MzMxOTE0MzAeFw0yNTExMDIwMzE2MDRaFw0yNTExMDUwOTIxMDRaMDMxMTAvBgNV BAMTKDE5QTgwMjE5OThDNUJEMzMzQjQzQzlCMkM1MkVCNDY1RjlBRDA4OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQzhrNfrK4KcU37wnIDdhyBWVx VxCHas22EzgjmkRuLUZ6DoGjASFFlDrd1eWjhE/IOCLmwp+QM+VKXvoTd/t4kGET 10i7QwF1b6qJ0+buUKAatNFunr1GBhVHAQOlheKJltRLQeMyUWXnvJTIKTDz0UyX 1csSopbgv+2nncR5TYaCgjwUNUfGZMei82XjW50JHe82YEL/batRgurmrMViXOT6 uT/OfD5rQE2XkAqIsBwqUym/xnmQrWxhpgLgj+y6K/KA97Gjj/i4LNqpw0g7W/Sr cru/wtvbW7xpni2fbCOFjLDnjQ0/1CHRQROzkCNmeCfnr4B+NRC8fs/3EnYnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGagCGZjFvTM7Q8myxS60ZfmtCJ4wHwYDVR0j BBgwFoAUoAmEBbwKU15uTWE3k8Nix0MxkUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmNmN2M5ZS1mOGMzLTQwMTUtODgxYi1hMmMyMTgxOWQ2YjkvMC9BMDA5ODQwNUJD MEE1MzVFNkU0RDYxMzc5M0MzNjJDNzQzMzE5MTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYyQzc0MzMx OTE0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZjZjdjOWUtZjhjMy00MDE1LTg4 MWItYTJjMjE4MTlkNmI5LzAvQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYy Qzc0MzMxOTE0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkQi/09Fg+DqbEwxdA+MPn5xTspSEiwEB1X UjoanNnonf/PkMUzI4HQFIPtJGM16o44rY/jtG6t5rxBzSTZon1mcJDO0ggm42gC kidNeYgWYuM5k5qGMRHK6gU2VOuCJitDnI6GMgsKpwIuVrJW615TnlwuB5LH4Egw bQbOTExGTLFVSFKhOL+IttES7CwCnocbSjf+Zwn5zoEXH07dnaHIJI6DOMtvW3c7 6941va+nq7008MCcKXxWfMSTI7pnXy59B5ynBSCz6KFXAV4p1xVjpXSGckpIszya g2sVqpD7Fsc2Tfksoi/HTVMRHPGcbMT31yCPehO9dWmQjzbM7Lw= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:52 2025 by rpki-client