$ rpki-client -vvf repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft File: A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft (raw, json) Hash identifier: U1bRwDfwpBQCYXuDQir6KUp5caMih7nReTiG+kOGMrk= Subject key identifier: FE:2C:D7:C4:77:30:8E:5F:A8:97:39:34:00:99:2E:8B:35:C4:98:4B Authority key identifier: A2:05:D7:D4:B5:01:61:EC:6E:6D:73:C4:A1:D0:52:92:9C:7F:FC:42 Certificate issuer: /CN=A205D7D4B50161EC6E6D73C4A1D052929C7FFC42 Certificate serial: 2F7B979C13ADE35183CC879FCF2EE6C37F4A64A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft Manifest number: 01AE Signing time: Mon 03 Nov 2025 06:21:06 +0000 Manifest this update: Mon 03 Nov 2025 06:16:06 +0000 Manifest next update: Thu 06 Nov 2025 10:40:06 +0000 Files and hashes: 1: 3130332e3130352e39322e302f32332d3234203d3e20313530393435.roa (hash: SpZC59e78RFSMTIi2T0VjoxX/8FXFEY34gXVgn2Wfv8=) 2: A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl (hash: NVtBfxzsbTXphfn5wiOpU7sxFbWmutA+WYMe+i/TY+Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:40:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:7b:97:9c:13:ad:e3:51:83:cc:87:9f:cf:2e:e6:c3:7f:4a:64:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A205D7D4B50161EC6E6D73C4A1D052929C7FFC42 Validity Not Before: Nov 3 06:16:06 2025 GMT Not After : Nov 6 10:40:06 2025 GMT Subject: CN=FE2CD7C477308E5FA897393400992E8B35C4984B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:df:0a:27:fc:a0:21:1e:09:f4:58:58:2f:bc: cf:4d:ca:75:4a:a6:52:52:7e:ed:9e:2a:97:3a:60: 1c:e3:d7:38:db:da:53:0c:e3:e2:c7:77:1a:a7:9a: 73:48:e6:23:36:ea:63:88:cf:48:62:65:ec:cc:8f: c9:db:4d:ca:5e:a7:d3:72:33:fd:bf:b9:34:0e:e8: 69:88:22:db:57:4c:01:9d:a1:44:65:59:c9:ac:5c: 32:b6:b3:b0:cb:6c:d5:bb:ea:4d:0e:03:05:2d:45: 38:7f:38:60:26:22:4a:2f:cf:76:9a:53:7f:49:6c: 4a:64:42:8c:0a:57:6b:d3:26:27:c8:e3:3e:b9:ce: 30:18:57:f9:31:f8:14:0e:0f:23:78:eb:a7:2e:14: 8c:3c:b1:ff:a5:0a:ac:ab:83:aa:96:ba:1a:49:1d: 87:12:79:eb:0a:e4:c3:dc:7d:0a:30:b4:a2:34:80: 07:bd:12:9c:ba:28:d8:67:04:1b:aa:f3:43:f0:59: 67:cd:df:b1:43:a7:11:36:b6:a0:bb:5e:ce:31:5b: 4d:5e:8e:a6:5e:2c:77:58:45:29:b8:75:92:52:7f: 9e:7a:b7:4b:96:26:86:15:51:2a:58:0f:99:22:d0: bd:42:15:02:47:63:54:96:e6:f4:b0:9e:4b:52:b8: da:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2C:D7:C4:77:30:8E:5F:A8:97:39:34:00:99:2E:8B:35:C4:98:4B X509v3 Authority Key Identifier: keyid:A2:05:D7:D4:B5:01:61:EC:6E:6D:73:C4:A1:D0:52:92:9C:7F:FC:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:09:b3:39:5f:1d:0d:03:0f:3e:92:5e:89:bb:7d:59:a7:0f: e2:37:00:ea:2c:20:15:49:6e:0c:27:ba:51:17:8a:20:62:7e: ed:0a:68:0a:bd:ea:25:02:f6:e9:75:c8:b3:9e:60:58:9c:1a: 49:dd:26:c0:a2:ec:d0:a5:7b:09:53:1e:25:d7:0c:8d:53:87: b8:f6:bd:f0:27:46:a5:47:4b:dc:82:05:2a:e5:56:9f:5e:30: bd:d9:5e:64:0f:a0:75:84:46:f3:9d:e1:52:50:4a:0d:bc:b8: c8:ee:23:9a:8c:66:04:ec:d1:7c:bc:dd:98:0c:8c:0f:99:d2: 98:7e:16:f3:09:14:f9:ef:d4:d4:e9:fe:be:55:d8:0d:b0:f5: bd:bf:4b:e4:f5:1b:75:b4:58:f3:f4:11:84:4a:89:bf:97:c0: 66:dc:db:89:cd:78:b6:81:a2:61:2e:f7:b2:13:6d:58:ab:58: 4b:7b:d5:fd:00:5d:e9:0b:a6:6e:63:10:c0:02:f0:0e:58:a5: e6:68:03:8e:22:29:c7:7c:6e:97:41:df:cf:26:4e:08:68:62: eb:bb:73:df:67:0c:0e:39:ef:e2:88:fb:f0:3a:27:4a:d3:2a: ff:18:4c:ff:25:d2:9f:ff:e9:47:3d:7f:fd:4c:94:98:2d:3e: ea:0d:9d:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL3uXnBOt41GDzIefzy7mw39KZKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUyOTI5 QzdGRkM0MjAeFw0yNTExMDMwNjE2MDZaFw0yNTExMDYxMDQwMDZaMDMxMTAvBgNV BAMTKEZFMkNEN0M0NzczMDhFNUZBODk3MzkzNDAwOTkyRThCMzVDNDk4NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3won/KAhHgn0WFgvvM9NynVK plJSfu2eKpc6YBzj1zjb2lMM4+LHdxqnmnNI5iM26mOIz0hiZezMj8nbTcpep9Ny M/2/uTQO6GmIIttXTAGdoURlWcmsXDK2s7DLbNW76k0OAwUtRTh/OGAmIkovz3aa U39JbEpkQowKV2vTJifI4z65zjAYV/kx+BQODyN466cuFIw8sf+lCqyrg6qWuhpJ HYcSeesK5MPcfQowtKI0gAe9Epy6KNhnBBuq80PwWWfN37FDpxE2tqC7Xs4xW01e jqZeLHdYRSm4dZJSf556t0uWJoYVUSpYD5ki0L1CFQJHY1SW5vSwnktSuNojAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/izXxHcwjl+olzk0AJkuizXEmEswHwYDVR0j BBgwFoAUogXX1LUBYexubXPEodBSkpx//EIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzJiOGQyOC1mZjdjLTQ2OTItOTAxOC05NzU1YmE1MDkxNjgvMC9BMjA1RDdENEI1 MDE2MUVDNkU2RDczQzRBMUQwNTI5MjlDN0ZGQzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUyOTI5QzdG RkM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzcyYjhkMjgtZmY3Yy00NjkyLTkw MTgtOTc1NWJhNTA5MTY4LzAvQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUy OTI5QzdGRkM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsJszlfHQ0DDz6SXom7fVmnD+I3AOosIBVJ bgwnulEXiiBifu0KaAq96iUC9ul1yLOeYFicGkndJsCi7NClewlTHiXXDI1Th7j2 vfAnRqVHS9yCBSrlVp9eML3ZXmQPoHWERvOd4VJQSg28uMjuI5qMZgTs0Xy83ZgM jA+Z0ph+FvMJFPnv1NTp/r5V2A2w9b2/S+T1G3W0WPP0EYRKib+XwGbc24nNeLaB omEu97ITbVirWEt71f0AXekLpm5jEMAC8A5YpeZoA44iKcd8bpdB388mTghoYuu7 c99nDA457+KI+/A6J0rTKv8YTP8l0p//6Uc9f/1MlJgtPuoNnTI= -----END CERTIFICATE-----Generated at Tue Nov 4 01:58:36 2025 by rpki-client