$ rpki-client -vvf repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft File: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft (raw, json) Hash identifier: qL4/dDoGXWxq5o6LWPhwmtEW2OMT3rS13T6hti3Xd9g= Subject key identifier: CB:3D:9D:96:C7:63:72:1C:C1:4A:53:31:60:DD:71:08:43:15:01:58 Authority key identifier: 0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 Certificate issuer: /CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Certificate serial: 1B9274C0F1C88DF68C99F48501AD0B2CEAA9BDCC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft Manifest number: 0125 Signing time: Sun 02 Nov 2025 06:31:00 +0000 Manifest this update: Sun 02 Nov 2025 06:26:00 +0000 Manifest next update: Wed 05 Nov 2025 10:45:00 +0000 Files and hashes: 1: 3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa (hash: 8OwVADfDElltpILpTKCgIU3iWPks4hxCwKGTSEJQw8w=) 2: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl (hash: e4EzuNATvxRZWAGSAlp53ZnZbtbbKNS68lzkZvUsMIE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 10:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:92:74:c0:f1:c8:8d:f6:8c:99:f4:85:01:ad:0b:2c:ea:a9:bd:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Validity Not Before: Nov 2 06:26:00 2025 GMT Not After : Nov 5 10:45:00 2025 GMT Subject: CN=CB3D9D96C763721CC14A533160DD710843150158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c6:7d:fb:b7:5a:78:cf:eb:03:97:d5:6b:ed: 92:4e:f4:c3:40:c9:26:68:0a:23:4a:de:ff:cf:aa: a7:73:85:9d:21:8c:39:9f:48:21:a2:78:07:bc:d7: cd:71:1c:67:db:e5:4b:ca:6c:bf:c9:8f:f0:cc:3a: 1c:72:78:2e:c5:76:48:24:1a:5b:68:84:a9:cc:0f: 83:5a:e2:79:b2:ad:8d:d5:4b:1a:a7:fe:ad:e0:3b: 69:92:92:cc:76:06:7c:fe:97:29:ba:2f:54:c9:d8: 87:da:24:f7:72:b3:9b:5a:b1:e5:08:2e:1b:3f:21: 9e:a2:c9:97:dc:6f:0d:ec:94:b3:c7:09:42:c5:ce: a9:53:b4:aa:5e:39:16:67:56:ae:9e:84:9e:dc:62: bb:eb:1b:47:98:a4:4a:9a:ca:a2:bf:63:33:63:4e: 50:26:b1:e4:d7:62:7f:22:3d:c4:5c:1a:80:29:8a: 4e:91:90:50:69:bf:67:e1:21:ba:67:0a:35:b3:47: b9:b7:79:ef:a0:89:3f:ce:a2:d4:f3:2d:a7:b3:f1: fd:75:12:9b:bf:ff:09:92:e1:53:6b:ab:21:3b:c8: a9:57:79:3a:93:df:03:fb:54:7a:51:4d:15:e0:d0: f3:17:a5:13:1a:da:b9:07:72:51:9e:b5:9f:6c:67: d2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3D:9D:96:C7:63:72:1C:C1:4A:53:31:60:DD:71:08:43:15:01:58 X509v3 Authority Key Identifier: keyid:0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:3e:1a:e3:b6:dc:ae:3c:7d:c9:c8:4e:c7:d6:0c:a6:4d:74: 57:ef:48:e4:b6:18:69:f4:9a:c4:b8:f5:ef:a6:39:77:56:8b: e7:6a:e6:d6:e4:db:43:d8:3a:87:72:f9:1b:9e:16:21:59:fd: 83:02:04:db:42:70:b3:49:7f:b3:7f:50:f7:17:e4:03:15:a2: 18:cb:01:f8:24:c1:bf:22:6c:43:15:d1:64:6f:86:72:25:63: 7f:81:5e:39:ee:9a:fc:fb:e0:89:1d:7a:07:df:93:02:0c:2b: 8c:0e:47:98:76:02:78:4f:82:f3:42:80:a2:49:a1:74:c6:7e: 15:52:29:d7:6a:a3:e3:15:15:9c:72:e8:1e:43:6b:9c:3d:b6: 43:da:f8:3c:7c:c4:07:5b:8e:75:1f:9c:94:ae:47:7b:7b:25: 2c:50:ac:41:75:a8:b6:b5:e7:6b:cd:92:e7:48:10:a0:8f:ba: fa:4a:a5:51:82:76:63:69:62:02:9d:e4:a7:21:13:c5:4d:4e: fb:37:ad:ae:84:c5:b8:59:e2:a7:98:6f:3c:54:69:6d:1a:b1: e4:d1:ad:c2:ed:ff:1f:2e:cd:95:a7:dc:df:0a:36:2d:27:23: 2e:2e:e4:21:f1:fd:a1:d6:ae:12:54:99:27:13:89:be:4a:a2: 7b:d2:e8:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG5J0wPHIjfaMmfSFAa0LLOqpvcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5 Q0Q0RUIyMDAeFw0yNTExMDIwNjI2MDBaFw0yNTExMDUxMDQ1MDBaMDMxMTAvBgNV BAMTKENCM0Q5RDk2Qzc2MzcyMUNDMTRBNTMzMTYwREQ3MTA4NDMxNTAxNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0xn37t1p4z+sDl9Vr7ZJO9MNA ySZoCiNK3v/PqqdzhZ0hjDmfSCGieAe8181xHGfb5UvKbL/Jj/DMOhxyeC7Fdkgk GltohKnMD4Na4nmyrY3VSxqn/q3gO2mSksx2Bnz+lym6L1TJ2IfaJPdys5taseUI Lhs/IZ6iyZfcbw3slLPHCULFzqlTtKpeORZnVq6ehJ7cYrvrG0eYpEqayqK/YzNj TlAmseTXYn8iPcRcGoApik6RkFBpv2fhIbpnCjWzR7m3ee+giT/OotTzLaez8f11 Epu//wmS4VNrqyE7yKlXeTqT3wP7VHpRTRXg0PMXpRMa2rkHclGetZ9sZ9IDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyz2dlsdjchzBSlMxYN1xCEMVAVgwHwYDVR0j BBgwFoAUCn4iLww8iRQ1FAT8BdsP3ZzU6yAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2YzNWE0Ny0yY2NlLTQ4N2YtYWEyNy1jOWU5ZGU2MzViZWMvMC8wQTdFMjIyRjBD M0M4OTE0MzUxNDA0RkMwNURCMEZERDlDRDRFQjIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5Q0Q0 RUIyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNmMzVhNDctMmNjZS00ODdmLWFh MjctYzllOWRlNjM1YmVjLzAvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBG REQ5Q0Q0RUIyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4+GuO23K48fcnITsfWDKZNdFfvSOS2GGn0 msS49e+mOXdWi+dq5tbk20PYOody+RueFiFZ/YMCBNtCcLNJf7N/UPcX5AMVohjL Afgkwb8ibEMV0WRvhnIlY3+BXjnumvz74IkdegffkwIMK4wOR5h2AnhPgvNCgKJJ oXTGfhVSKddqo+MVFZxy6B5Da5w9tkPa+Dx8xAdbjnUfnJSuR3t7JSxQrEF1qLa1 52vNkudIEKCPuvpKpVGCdmNpYgKd5KchE8VNTvs3ra6ExbhZ4qeYbzxUaW0aseTR rcLt/x8uzZWn3N8KNi0nIy4u5CHx/aHWrhJUmScTib5KonvS6Lg= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:49 2025 by rpki-client