$ rpki-client -vvf repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft File: 0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft (raw, json) Hash identifier: iFwlYtxgZ1WoX0ci8Y5tqwb0ePl+Ym7RyQgSySzshns= Subject key identifier: 97:43:CD:05:8A:01:89:C7:B1:CA:33:1D:C3:A3:42:AC:BB:D4:A6:3D Authority key identifier: 01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04 Certificate issuer: /CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804 Certificate serial: 28902339108D6609D45F687C8677DE754EE8B242 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft Manifest number: 01E0 Signing time: Tue 04 Nov 2025 10:50:53 +0000 Manifest this update: Tue 04 Nov 2025 10:45:53 +0000 Manifest next update: Fri 07 Nov 2025 19:57:53 +0000 Files and hashes: 1: 3130332e33352e3135332e302f32342d3234203d3e2039333431.roa (hash: 4gA0Ayh4wc+enuZjfM5cvXtF4KS/wz/Vl+eaNQabdGI=) 2: 0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl (hash: FDnuEBq2Uorwz3Q50rYUqebVEiEMd0BDwYFnbQJDaPs=) 3: 3130332e33352e3135322e302f32342d3234203d3e2039333431.roa (hash: U/yDn1W4jZEF4S0Nu+KZGK93oXQkpj5Y66m25j//fks=) 4: 3130332e33352e3135322e302f32332d3233203d3e2039333431.roa (hash: 7pJK2Nu09mDb/KW48/x7bS6pMakC4PmiTUB5vEr70Gk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:90:23:39:10:8d:66:09:d4:5f:68:7c:86:77:de:75:4e:e8:b2:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804 Validity Not Before: Nov 4 10:45:53 2025 GMT Not After : Nov 7 19:57:53 2025 GMT Subject: CN=9743CD058A0189C7B1CA331DC3A342ACBBD4A63D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ea:3e:8c:62:29:d6:31:e5:3c:97:d7:7a:32: 4f:37:77:ce:c6:f7:26:6e:e2:16:24:6a:55:71:5b: cd:2a:f5:ae:01:11:43:72:6f:18:da:be:56:88:03: 6c:80:03:43:02:89:24:c7:30:aa:75:ae:c8:c1:10: 3d:00:18:70:33:b6:e4:30:9b:49:7c:e3:06:b1:a0: 7e:08:20:00:f5:1f:84:fc:ca:49:a2:1e:5e:22:3f: aa:b5:d0:92:20:d8:46:60:e1:5a:33:df:90:34:31: 72:20:43:de:f0:a9:b6:87:c0:85:ff:a2:00:41:e8: 83:89:1a:f3:7c:f1:33:54:4c:f5:fb:ab:77:ab:8a: e0:04:79:37:80:fe:a4:ae:c6:48:fa:0a:a7:da:0f: 68:a5:b3:2b:2a:2e:b4:12:62:f1:76:f5:6a:3b:ae: be:e2:96:5d:94:c6:6b:c3:e8:48:3f:5d:62:94:7a: 91:59:e2:fe:10:e0:11:ce:d2:15:af:fe:1d:ee:2c: 07:d9:f6:8f:6c:67:c4:a1:d2:91:bc:93:03:60:4e: c3:58:4c:8d:46:be:66:af:85:63:35:f0:df:c9:20: fa:c8:9c:42:ed:29:8b:36:fe:99:a6:c9:48:2d:8a: 10:e7:e9:4d:03:00:a6:eb:f7:06:7a:44:61:ab:70: 6b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:43:CD:05:8A:01:89:C7:B1:CA:33:1D:C3:A3:42:AC:BB:D4:A6:3D X509v3 Authority Key Identifier: keyid:01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:fb:1d:25:67:13:b5:43:4d:b0:70:81:48:71:90:95:f0:b8: df:73:dc:aa:e7:2a:2e:eb:bc:ae:69:84:23:87:a9:5d:1d:9a: ef:c1:de:33:d8:06:fc:6a:ae:cd:b8:9e:f7:e6:b3:b8:5e:03: b9:0b:c6:3a:13:a2:3d:ab:df:f4:26:f7:9e:a6:60:7e:be:d6: b6:e1:03:d4:9c:98:ce:de:5d:e3:cb:d4:2b:4f:05:e6:64:82: 55:46:20:cc:86:9a:59:ba:b4:28:36:34:10:a2:97:98:b6:50: 8f:0e:d5:86:9f:f7:c7:a0:8c:f1:96:b8:8e:48:91:5b:a6:9a: 2b:e2:ca:f9:54:51:f9:47:b4:54:43:d2:6a:e9:10:2b:cd:32: d6:70:ce:67:db:43:06:c4:44:51:4a:4e:8f:4e:ab:6a:31:7a: 42:8c:cc:51:62:c5:e2:72:44:e6:79:ef:bb:50:54:1c:96:61: 03:34:72:3a:ab:a0:80:2e:79:27:0f:17:af:38:91:e2:9a:75: 21:a2:e3:6f:9b:35:6d:c4:13:44:a4:91:59:22:5b:99:ca:0e: 41:22:34:41:2b:c2:6f:63:7a:1f:ac:3b:98:aa:c9:83:d8:1a: 53:86:28:70:ec:f2:3b:33:95:b6:a7:1d:c4:ce:63:f7:40:63: 0a:6d:8a:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKJAjORCNZgnUX2h8hnfedU7oskIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZEQ0VE MEE1NzgwNDAeFw0yNTExMDQxMDQ1NTNaFw0yNTExMDcxOTU3NTNaMDMxMTAvBgNV BAMTKDk3NDNDRDA1OEEwMTg5QzdCMUNBMzMxREMzQTM0MkFDQkJENEE2M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO6j6MYinWMeU8l9d6Mk83d87G 9yZu4hYkalVxW80q9a4BEUNybxjavlaIA2yAA0MCiSTHMKp1rsjBED0AGHAztuQw m0l84waxoH4IIAD1H4T8ykmiHl4iP6q10JIg2EZg4Voz35A0MXIgQ97wqbaHwIX/ ogBB6IOJGvN88TNUTPX7q3eriuAEeTeA/qSuxkj6CqfaD2ilsysqLrQSYvF29Wo7 rr7ill2UxmvD6Eg/XWKUepFZ4v4Q4BHO0hWv/h3uLAfZ9o9sZ8Sh0pG8kwNgTsNY TI1GvmavhWM18N/JIPrInELtKYs2/pmmyUgtihDn6U0DAKbr9wZ6RGGrcGurAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl0PNBYoBicexyjMdw6NCrLvUpj0wHwYDVR0j BBgwFoAUAQCn9sTVjDhn+c7X59RtztCleAQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDg4NTUyNS1jYjBmLTQ2YTAtODI1My0wNDJkN2Q3YWZmMzgvMC8wMTAwQTdGNkM0 RDU4QzM4NjdGOUNFRDdFN0Q0NkRDRUQwQTU3ODA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZEQ0VEMEE1 NzgwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ4ODU1MjUtY2IwZi00NmEwLTgy NTMtMDQyZDdkN2FmZjM4LzAvMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZE Q0VEMEE1NzgwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFv7HSVnE7VDTbBwgUhxkJXwuN9z3KrnKi7r vK5phCOHqV0dmu/B3jPYBvxqrs24nvfms7heA7kLxjoToj2r3/Qm956mYH6+1rbh A9ScmM7eXePL1CtPBeZkglVGIMyGmlm6tCg2NBCil5i2UI8O1Yaf98egjPGWuI5I kVummiviyvlUUflHtFRD0mrpECvNMtZwzmfbQwbERFFKTo9Oq2oxekKMzFFixeJy ROZ577tQVByWYQM0cjqroIAueScPF684keKadSGi42+bNW3EE0SkkVkiW5nKDkEi NEErwm9jeh+sO5iqyYPYGlOGKHDs8jszlbanHcTOY/dAYwptiiU= -----END CERTIFICATE-----Generated at Tue Nov 4 12:39:05 2025 by rpki-client