$ rpki-client -vvf repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft File: A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft (raw, json) Hash identifier: UBzK7/CnUW27bFKaTnnGbSNFTRq2Aat2AkBbPWVXo38= Subject key identifier: FE:CD:8C:08:C2:E6:2D:62:64:A5:39:B9:BB:89:F3:F8:43:24:B5:B9 Authority key identifier: A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27 Certificate issuer: /CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27 Certificate serial: 75ECFBE507049069F79E3536689322F56F750F68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft Manifest number: 01AF Signing time: Tue 04 Nov 2025 15:00:46 +0000 Manifest this update: Tue 04 Nov 2025 14:55:46 +0000 Manifest next update: Fri 07 Nov 2025 16:16:46 +0000 Files and hashes: 1: 3130332e39392e32322e302f32342d3234203d3e20313530343636.roa (hash: 4sRqcnfl28Qx3qMYiueLtJEnTwO1spNjb24E7TCWt0k=) 2: A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl (hash: IxNfCYoOX+2EGr/RvfXQUh6SkVA810CwMFklJlVX+Rs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ec:fb:e5:07:04:90:69:f7:9e:35:36:68:93:22:f5:6f:75:0f:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27 Validity Not Before: Nov 4 14:55:46 2025 GMT Not After : Nov 7 16:16:46 2025 GMT Subject: CN=FECD8C08C2E62D6264A539B9BB89F3F84324B5B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a4:3a:e5:d1:ee:e2:cd:e8:41:ff:3c:4f:86: 81:08:10:8b:78:66:ae:79:12:95:cb:1d:4a:c7:e5: 89:dd:b6:df:cd:d0:cf:3f:0c:62:71:7d:c3:f1:7b: 74:53:67:fb:c9:67:9d:c4:5b:5d:9a:65:61:12:22: b4:4b:af:3d:73:1a:4d:5f:fe:60:b1:9d:58:50:1b: fb:79:47:54:33:86:96:1b:fd:2e:16:c3:88:43:39: d6:b6:64:b9:dd:b3:34:c6:23:8c:95:20:40:91:5d: cb:3f:92:57:33:00:b0:6c:ac:9a:37:c4:6b:db:50: a9:da:96:7c:db:45:95:be:ac:d6:30:e1:e8:f9:17: 6c:ae:4d:99:98:ab:21:6a:ac:9d:0d:67:c5:fd:e1: 31:38:17:ba:29:31:9b:17:67:79:c0:45:f8:be:f2: 1e:35:41:8f:5f:37:59:30:29:ff:ac:4a:7f:5d:64: ce:39:ad:5f:9d:9d:5e:b4:3c:7c:61:88:a7:58:82: 5f:fa:96:15:9d:0c:bc:d9:34:46:96:ea:57:fa:2d: 31:c1:f2:08:46:1e:b9:df:a8:3e:34:34:bd:1a:e8: 72:20:15:31:67:e0:d3:13:1a:9b:2f:84:6c:37:d9: 25:58:a5:0b:f0:f7:d2:ee:6b:da:60:ea:64:66:b0: 4d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CD:8C:08:C2:E6:2D:62:64:A5:39:B9:BB:89:F3:F8:43:24:B5:B9 X509v3 Authority Key Identifier: keyid:A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:2b:d3:8d:d7:55:f2:20:85:f7:73:0e:d4:bc:c3:ec:75:54: ea:ae:e1:97:de:f1:b2:1c:f1:04:7b:e2:5e:ac:f8:70:92:41: 61:19:42:2c:a2:54:42:03:76:b7:7d:23:16:38:c1:29:71:99: b7:5a:99:4a:6c:bb:87:de:6d:7c:22:f4:2e:86:92:ee:4a:53: c5:00:c8:4f:57:09:53:53:73:71:fe:35:ab:5a:1b:04:47:ee: d9:90:45:15:fc:7d:0a:75:c8:cf:63:ed:c9:ad:81:d8:22:60: 87:bc:94:58:08:4f:1f:c7:e6:4c:89:87:aa:aa:37:33:8f:fc: cf:70:17:41:3a:2a:1e:09:9a:1f:76:77:cd:76:22:95:0f:ae: 16:4d:a8:a7:30:01:6a:4f:30:02:ba:59:30:7d:b3:17:ae:5b: 3a:aa:4b:1a:c7:e1:01:5b:b5:b8:a0:8f:6a:f9:40:13:17:dc: 24:19:d4:a7:10:c6:26:f6:01:ff:bb:7c:2e:8b:10:c1:17:54: 3d:f5:f2:bb:aa:e1:dd:70:df:28:6c:a4:ae:cb:b5:63:dc:e1: 03:ed:d7:90:4f:b2:d9:8e:74:8f:c7:76:c6:32:95:be:d6:ba: d5:c8:c0:f1:02:64:a5:02:2e:f1:ba:26:fd:b7:8a:70:6f:45: 21:eb:fb:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdez75QcEkGn3njU2aJMi9W91D2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0 QzY1QUEyNzAeFw0yNTExMDQxNDU1NDZaFw0yNTExMDcxNjE2NDZaMDMxMTAvBgNV BAMTKEZFQ0Q4QzA4QzJFNjJENjI2NEE1MzlCOUJCODlGM0Y4NDMyNEI1QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCspDrl0e7izehB/zxPhoEIEIt4 Zq55EpXLHUrH5Yndtt/N0M8/DGJxfcPxe3RTZ/vJZ53EW12aZWESIrRLrz1zGk1f /mCxnVhQG/t5R1QzhpYb/S4Ww4hDOda2ZLndszTGI4yVIECRXcs/klczALBsrJo3 xGvbUKnalnzbRZW+rNYw4ej5F2yuTZmYqyFqrJ0NZ8X94TE4F7opMZsXZ3nARfi+ 8h41QY9fN1kwKf+sSn9dZM45rV+dnV60PHxhiKdYgl/6lhWdDLzZNEaW6lf6LTHB 8ghGHrnfqD40NL0a6HIgFTFn4NMTGpsvhGw32SVYpQvw99Lua9pg6mRmsE3dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/s2MCMLmLWJkpTm5u4nz+EMktbkwHwYDVR0j BBgwFoAUodyqtbMgfC11aSg4o40dzUxlqicwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWYyNTYzNC1mNTgzLTQ2YmMtOWU4Yy0zMmRiNGNjYTM1YjYvMC9BMURDQUFCNUIz MjA3QzJENzU2OTI4MzhBMzhEMURDRDRDNjVBQTI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0QzY1 QUEyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFmMjU2MzQtZjU4My00NmJjLTll OGMtMzJkYjRjY2EzNWI2LzAvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFE Q0Q0QzY1QUEyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAr043XVfIghfdzDtS8w+x1VOqu4Zfe8bIc 8QR74l6s+HCSQWEZQiyiVEIDdrd9IxY4wSlxmbdamUpsu4febXwi9C6Gku5KU8UA yE9XCVNTc3H+NataGwRH7tmQRRX8fQp1yM9j7cmtgdgiYIe8lFgITx/H5kyJh6qq NzOP/M9wF0E6Kh4Jmh92d812IpUPrhZNqKcwAWpPMAK6WTB9sxeuWzqqSxrH4QFb tbigj2r5QBMX3CQZ1KcQxib2Af+7fC6LEMEXVD318ruq4d1w3yhspK7LtWPc4QPt 15BPstmOdI/HdsYylb7WutXIwPECZKUCLvG6Jv23inBvRSHr+xs= -----END CERTIFICATE-----Generated at Tue Nov 4 16:45:15 2025 by rpki-client