$ rpki-client -vvf repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft File: A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft (raw, json) Hash identifier: MJ7rC+sCE71leSqlYv+Np004dHyfnk+ZWGz4oLYNzRU= Subject key identifier: 04:49:54:F5:2F:58:61:D8:54:B0:10:9D:9C:9C:31:A0:4F:6F:F2:BC Authority key identifier: A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3 Certificate issuer: /CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3 Certificate serial: 5EF663F7293140048A07AF51D4022BEF5CDC839F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft Manifest number: 0121 Signing time: Tue 04 Nov 2025 02:31:34 +0000 Manifest this update: Tue 04 Nov 2025 02:26:34 +0000 Manifest next update: Fri 07 Nov 2025 11:00:34 +0000 Files and hashes: 1: 3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa (hash: k5DZZSxuzgo1jgebHxJfNyOAsC2XzO0g4+9J83zsZZw=) 2: A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl (hash: f44fP7GJYtlgS3wK19klSITgrlqJkTD8aerLYh90PS8=) 3: 3130332e36392e3137392e302f32342d3234203d3e203538383136.roa (hash: NjYP2O6N1iJnHPEyiA3Qgp2TJYDJ3V6KTZzD7MIk/3s=) 4: 3130332e36392e3137372e302f32342d3234203d3e20313335343435.roa (hash: Wq79twJ+9YzQKBjwXi/sFlzpPqc/K91eUGfTowbwJEs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 11:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:f6:63:f7:29:31:40:04:8a:07:af:51:d4:02:2b:ef:5c:dc:83:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3 Validity Not Before: Nov 4 02:26:34 2025 GMT Not After : Nov 7 11:00:34 2025 GMT Subject: CN=044954F52F5861D854B0109D9C9C31A04F6FF2BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e4:ab:f1:53:83:19:10:57:f2:3a:f7:37:9f: 3f:3f:9f:be:c0:f7:69:86:20:c4:04:4d:af:76:df: 81:27:ea:1a:2e:18:b3:cb:7f:1b:84:3f:dd:19:70: 9f:5e:41:18:b9:78:68:a6:1d:15:21:b2:2e:75:a8: 26:b4:34:8c:9b:5e:5e:ec:ed:03:74:bb:e4:dc:3e: 62:07:79:de:70:8a:a9:8e:5e:04:12:61:81:d1:71: 29:2d:cf:28:b0:ee:9b:91:17:85:62:74:dd:9e:ef: 69:34:2c:da:8f:98:e0:bb:50:4a:ae:c9:b5:84:a2: 2f:3a:fc:26:6a:db:c1:ac:80:6e:26:a8:d8:fc:5a: 9d:af:b2:07:47:c4:42:bc:56:c7:52:11:23:de:c1: c7:64:6a:8a:2a:50:cc:3a:ae:b7:84:0d:cc:e8:47: 6d:18:94:dd:ea:b7:fa:f0:16:fa:f3:c2:b1:cb:73: a0:ff:9a:ce:16:53:ed:cc:4c:31:c7:75:76:f6:81: 58:ce:9a:cf:d6:f8:80:8b:27:7e:82:0e:ed:e6:a5: 10:38:18:8b:99:ff:3b:3f:30:bc:52:d6:c2:e5:ae: a0:03:6d:b5:e8:88:6a:47:d7:9a:dc:a6:41:e1:7b: b4:5d:61:0b:c5:4c:70:60:31:95:0c:2f:27:dc:23: 6c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:49:54:F5:2F:58:61:D8:54:B0:10:9D:9C:9C:31:A0:4F:6F:F2:BC X509v3 Authority Key Identifier: keyid:A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:16:fa:d6:41:30:cc:75:fc:1f:04:ef:94:1a:17:3a:75:dd: 64:65:70:ff:80:bc:bb:89:59:a0:a6:62:79:d2:75:5e:b2:2c: 73:03:35:da:f1:bc:f9:b9:e2:53:cf:56:a4:8d:fc:15:04:d8: 01:5a:7a:14:79:a9:aa:8b:bf:fd:04:29:da:3d:2b:9d:e2:bc: 17:cf:ac:f7:01:ae:b4:b7:6d:f7:b4:bc:1b:5d:4f:30:08:81: fb:08:29:c4:d3:55:79:8e:09:71:a7:3b:62:86:46:46:8d:59: 7f:96:54:e5:58:14:3c:7c:3c:18:52:d3:fe:50:b5:c8:f3:60: 95:e1:a9:0a:7e:69:9f:c9:11:81:aa:d1:6f:65:15:9d:4e:43: 97:aa:b5:53:93:c7:ed:3c:ab:97:77:17:15:3d:1d:be:a5:5e: fb:a8:f1:0a:5d:66:db:1a:35:52:b1:9b:98:fe:27:e5:87:6c: 45:03:a2:63:be:cc:a7:a9:75:81:de:0b:d7:ae:51:09:d1:1e: ac:81:d8:1c:c0:00:ee:d5:2a:49:e5:32:fe:b5:cd:df:8c:26: c1:fc:27:54:84:ec:9c:73:dd:91:77:20:4e:a9:38:d7:7b:fc: 6f:5d:e1:01:62:d6:74:5e:f4:a0:53:5a:5f:69:b9:09:bd:6a: 9e:52:12:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXvZj9ykxQASKB69R1AIr71zcg58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZEODNC MERDOTdEMzAeFw0yNTExMDQwMjI2MzRaFw0yNTExMDcxMTAwMzRaMDMxMTAvBgNV BAMTKDA0NDk1NEY1MkY1ODYxRDg1NEIwMTA5RDlDOUMzMUEwNEY2RkYyQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe5KvxU4MZEFfyOvc3nz8/n77A 92mGIMQETa9234En6houGLPLfxuEP90ZcJ9eQRi5eGimHRUhsi51qCa0NIybXl7s 7QN0u+TcPmIHed5wiqmOXgQSYYHRcSktzyiw7puRF4VidN2e72k0LNqPmOC7UEqu ybWEoi86/CZq28GsgG4mqNj8Wp2vsgdHxEK8VsdSESPewcdkaooqUMw6rreEDczo R20YlN3qt/rwFvrzwrHLc6D/ms4WU+3MTDHHdXb2gVjOms/W+ICLJ36CDu3mpRA4 GIuZ/zs/MLxS1sLlrqADbbXoiGpH15rcpkHhe7RdYQvFTHBgMZUMLyfcI2wRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBElU9S9YYdhUsBCdnJwxoE9v8rwwHwYDVR0j BBgwFoAUoPSuu+BFsJwWlTeCrzBtg7Dcl9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGM3N2VlZS05YmNjLTQwMWUtOGY0ZC01ZjIzNjc1NjI3NTcvMC9BMEY0QUVCQkUw NDVCMDlDMTY5NTM3ODJBRjMwNkQ4M0IwREM5N0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZEODNCMERD OTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhjNzdlZWUtOWJjYy00MDFlLThm NGQtNWYyMzY3NTYyNzU3LzAvQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZE ODNCMERDOTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0W+tZBMMx1/B8E75QaFzp13WRlcP+AvLuJ WaCmYnnSdV6yLHMDNdrxvPm54lPPVqSN/BUE2AFaehR5qaqLv/0EKdo9K53ivBfP rPcBrrS3bfe0vBtdTzAIgfsIKcTTVXmOCXGnO2KGRkaNWX+WVOVYFDx8PBhS0/5Q tcjzYJXhqQp+aZ/JEYGq0W9lFZ1OQ5eqtVOTx+08q5d3FxU9Hb6lXvuo8QpdZtsa NVKxm5j+J+WHbEUDomO+zKepdYHeC9euUQnRHqyB2BzAAO7VKknlMv61zd+MJsH8 J1SE7Jxz3ZF3IE6pONd7/G9d4QFi1nRe9KBTWl9puQm9ap5SEtk= -----END CERTIFICATE-----Generated at Tue Nov 4 19:25:42 2025 by rpki-client