$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft File: A500108F09BF54E5603B5C1F6E6325A561FE7126.mft (raw, json) Hash identifier: lVDW+eacXe0MLqNeBhuHsPqfl3vsDptHFbOWHYO7hKs= Subject key identifier: 39:A6:F3:5A:D6:12:20:09:36:66:67:21:7B:DA:90:E2:1E:D2:4F:11 Authority key identifier: A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26 Certificate issuer: /CN=A500108F09BF54E5603B5C1F6E6325A561FE7126 Certificate serial: 23B12CB36CD00278A5963E48880699839BB56E36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft Manifest number: 051B Signing time: Sun 02 Nov 2025 18:12:21 +0000 Manifest this update: Sun 02 Nov 2025 18:07:21 +0000 Manifest next update: Thu 06 Nov 2025 04:55:21 +0000 Files and hashes: 1: 323030313a6466343a623130303a3a2f34382d3438203d3e20313337333331.roa (hash: N5WXqZ6Jw+zSS8rnedVuQEefp7BbCpCEzbN4PssNcrU=) 2: 3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa (hash: oiQrxAKU3WAq8WQAa4AsG/VSgBXo6JykRbhPhmfaGc4=) 3: A500108F09BF54E5603B5C1F6E6325A561FE7126.crl (hash: FdlPkGQhMQHbSNOrTKv50XXdFk3A08K6RjUDmwPuoY0=) 4: 3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa (hash: lIpuwQni1CJCCy7a6RQeBOueUSsNd+BwETQKPZ3/nzw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b1:2c:b3:6c:d0:02:78:a5:96:3e:48:88:06:99:83:9b:b5:6e:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A500108F09BF54E5603B5C1F6E6325A561FE7126 Validity Not Before: Nov 2 18:07:21 2025 GMT Not After : Nov 6 04:55:21 2025 GMT Subject: CN=39A6F35AD6122009366667217BDA90E21ED24F11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ba:84:0d:d1:fe:92:56:45:87:8a:a5:d4:6e: d3:15:32:df:18:fe:1d:c6:ba:d6:6c:44:7d:68:fe: c6:c5:2e:1b:02:47:bb:75:79:f3:af:57:00:98:62: 52:3c:39:df:78:77:ab:48:d3:5d:f0:d4:7b:20:4a: f3:3e:1b:b9:57:78:ed:16:77:49:95:a4:d3:73:d0: 21:fc:33:85:c3:f8:b4:6a:b9:e5:e3:94:d8:5f:d6: 55:e5:f1:b5:d2:19:a3:5d:79:62:97:73:e8:ae:3a: 5b:e5:8d:8e:6a:3e:79:07:d3:4c:e3:00:a9:d0:14: 33:54:1e:36:00:cc:f6:90:48:aa:a4:9b:ae:a8:a9: 23:4b:fd:63:4c:57:b6:25:39:1d:ac:1e:27:f1:df: a3:19:8e:8b:96:f3:04:ff:8a:a6:f9:23:2d:fe:11: 6c:92:60:a9:fd:ca:f8:42:94:05:55:7a:7b:15:25: b2:31:00:71:f8:a9:14:0e:29:b7:df:d8:20:ab:88: 11:06:d2:37:c9:dc:15:9c:1b:fc:31:4e:a1:d2:41: 11:95:fd:f3:52:56:34:bc:32:c2:12:aa:74:29:3f: 35:1f:61:b5:09:64:e6:ea:3d:2f:c9:ef:7f:47:65: 1d:b1:66:62:07:7c:5f:1f:6e:d3:39:3b:a1:89:39: d3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A6:F3:5A:D6:12:20:09:36:66:67:21:7B:DA:90:E2:1E:D2:4F:11 X509v3 Authority Key Identifier: keyid:A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:d7:47:a1:15:4b:76:dd:26:77:af:55:f0:b6:19:4c:62:7b: 11:c7:fc:7f:f5:ed:ba:7d:b0:e5:81:13:57:0d:11:32:fe:e6: 19:3a:b4:c7:c1:ca:d6:45:15:58:fd:9c:67:1b:3a:f6:bd:6f: 3a:5c:e6:9e:4d:26:44:a4:ba:51:66:52:9c:e9:e4:a9:f6:e7: 5f:1d:dd:67:7f:28:01:1e:12:41:43:4e:96:07:32:28:4d:08: f4:5e:17:16:e1:0e:b0:7a:fe:b8:97:22:fd:23:14:aa:8d:4d: 7b:03:9f:80:af:08:c1:e5:f1:b8:45:dc:13:f6:b5:18:e6:32: 90:54:a2:7d:90:3d:80:f9:fd:32:3c:53:54:fe:1a:71:e7:fb: 86:bc:b8:89:5b:9a:ca:d4:a5:e2:2e:5d:44:b4:3a:ef:d3:4a: d2:44:f1:0b:b3:15:e0:5f:80:0e:3c:5e:d4:10:3f:54:40:51: f7:3c:b2:b1:cd:8c:dc:8b:fa:88:64:3b:0c:63:f0:20:89:2f: ac:28:7e:90:d4:55:c7:2f:13:69:2c:89:11:8b:36:76:2c:e9: da:41:48:58:8e:ee:a3:e6:c9:8f:04:79:ef:b2:c3:b8:60:bc: 5b:03:d1:50:6f:08:c3:f1:95:68:5d:22:bf:22:1b:94:86:48: a7:99:88:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI7Ess2zQAnillj5IiAaZg5u1bjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1QTU2 MUZFNzEyNjAeFw0yNTExMDIxODA3MjFaFw0yNTExMDYwNDU1MjFaMDMxMTAvBgNV BAMTKDM5QTZGMzVBRDYxMjIwMDkzNjY2NjcyMTdCREE5MEUyMUVEMjRGMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCruoQN0f6SVkWHiqXUbtMVMt8Y /h3GutZsRH1o/sbFLhsCR7t1efOvVwCYYlI8Od94d6tI013w1HsgSvM+G7lXeO0W d0mVpNNz0CH8M4XD+LRqueXjlNhf1lXl8bXSGaNdeWKXc+iuOlvljY5qPnkH00zj AKnQFDNUHjYAzPaQSKqkm66oqSNL/WNMV7YlOR2sHifx36MZjouW8wT/iqb5Iy3+ EWySYKn9yvhClAVVensVJbIxAHH4qRQOKbff2CCriBEG0jfJ3BWcG/wxTqHSQRGV /fNSVjS8MsISqnQpPzUfYbUJZObqPS/J739HZR2xZmIHfF8fbtM5O6GJOdNvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOabzWtYSIAk2Zmche9qQ4h7STxEwHwYDVR0j BBgwFoAUpQAQjwm/VOVgO1wfbmMlpWH+cSYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmQ4MGQ5Ni1lZjFiLTQ0YjItOTAzYS03ZjZkYTk0MWE4MzYvMC9BNTAwMTA4RjA5 QkY1NEU1NjAzQjVDMUY2RTYzMjVBNTYxRkU3MTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1QTU2MUZF NzEyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZkODBkOTYtZWYxYi00NGIyLTkw M2EtN2Y2ZGE5NDFhODM2LzAvQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1 QTU2MUZFNzEyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIDXR6EVS3bdJnevVfC2GUxiexHH/H/17bp9 sOWBE1cNETL+5hk6tMfBytZFFVj9nGcbOva9bzpc5p5NJkSkulFmUpzp5Kn2518d 3Wd/KAEeEkFDTpYHMihNCPReFxbhDrB6/riXIv0jFKqNTXsDn4CvCMHl8bhF3BP2 tRjmMpBUon2QPYD5/TI8U1T+GnHn+4a8uIlbmsrUpeIuXUS0Ou/TStJE8QuzFeBf gA48XtQQP1RAUfc8srHNjNyL+ohkOwxj8CCJL6wofpDUVccvE2ksiRGLNnYs6dpB SFiO7qPmyY8Eee+yw7hgvFsD0VBvCMPxlWhdIr8iG5SGSKeZiPM= -----END CERTIFICATE-----Generated at Tue Nov 4 12:41:45 2025 by rpki-client