$ rpki-client -vvf repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft File: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft (raw, json) Hash identifier: Luo5DHKJEV32TWyeP9Sei+ns3lYxmoaHsV1JorMRvTA= Subject key identifier: CF:A8:2A:20:76:33:00:20:A6:CF:98:A2:F3:7A:E9:74:D3:87:CF:B8 Authority key identifier: A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 Certificate issuer: /CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Certificate serial: 1204DB6E752758C4184EB0353D0A7C41888E2D06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft Manifest number: 0235 Signing time: Mon 03 Nov 2025 23:31:42 +0000 Manifest this update: Mon 03 Nov 2025 23:26:42 +0000 Manifest next update: Fri 07 Nov 2025 07:07:42 +0000 Files and hashes: 1: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl (hash: 2PqVDZ+R1F1nSuOH+UlZgI2S5OiW4HimPXzjtjgoHhA=) 2: 3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa (hash: cb90IgbeRY+ZdV0xSX9073GatqTysUS22puie2fiUX0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:04:db:6e:75:27:58:c4:18:4e:b0:35:3d:0a:7c:41:88:8e:2d:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Validity Not Before: Nov 3 23:26:42 2025 GMT Not After : Nov 7 07:07:42 2025 GMT Subject: CN=CFA82A2076330020A6CF98A2F37AE974D387CFB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:58:59:92:a2:ff:96:95:4a:b5:9a:c6:bf:f3: 26:3e:a9:9f:e4:48:32:e6:3f:d4:d3:58:39:6e:ab: 05:69:7f:c3:32:e1:02:7b:0a:eb:cf:4e:4e:5f:6b: c9:b8:b6:49:f6:97:0c:94:b9:4a:31:73:ab:a6:77: fb:8d:e2:cc:d3:18:e9:63:72:cf:50:11:88:79:b9: 88:13:9b:fb:21:cc:4c:26:3d:ef:be:b5:53:21:d7: f7:a5:1d:f5:8d:bd:3e:4e:22:1a:5c:86:17:e8:4a: da:24:d7:6c:10:7e:11:1a:4c:94:0c:26:4e:dd:ab: db:fb:b8:87:2b:35:9f:85:3a:a0:df:61:33:41:74: 45:63:c5:67:e4:4f:c9:a3:db:28:7a:38:b6:bf:f2: e1:55:fd:f7:de:3f:bb:e2:a8:a9:5d:73:ba:6d:4e: 47:9a:e2:cc:64:bd:13:0e:79:8f:44:63:e8:d3:37: a6:4a:7a:a1:18:6f:6c:7d:55:f2:1b:e4:c5:84:90: 3a:db:19:77:2d:8c:4f:81:2f:b8:42:c5:7d:74:93: 31:8e:0d:32:79:b9:c4:4d:57:a4:c5:f1:4c:52:fd: 08:86:69:8d:6a:cb:91:ba:14:88:8c:c8:48:70:7f: 43:5f:35:5b:e0:72:ab:6a:01:02:64:7f:5e:05:65: c9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A8:2A:20:76:33:00:20:A6:CF:98:A2:F3:7A:E9:74:D3:87:CF:B8 X509v3 Authority Key Identifier: keyid:A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:27:03:bc:b7:2e:ff:00:00:4a:ab:8f:ee:67:71:2f:f2:aa: c8:0c:2f:9e:4f:7e:da:a1:ea:ce:da:db:39:45:36:3d:3d:cd: 13:b4:1d:a8:10:0e:05:69:b9:38:a7:2b:6c:58:02:68:ab:3a: 80:44:6b:23:1e:46:b5:9f:14:e0:ba:77:16:e4:92:74:c4:23: 04:12:72:82:26:5f:d9:08:97:a1:c3:df:64:68:19:df:42:c4: dc:3d:61:90:76:43:4f:41:23:d2:14:59:83:4f:0e:40:04:f9: ef:bb:b7:d8:30:dd:80:f0:b4:a8:ef:b5:37:27:51:4e:6c:ba: 47:a1:4c:e7:c5:4a:45:be:5d:5b:02:9d:15:c9:9e:43:e3:56: 1f:b1:dd:33:b4:3a:ac:b7:b4:80:01:28:d6:08:43:85:85:df: 85:d7:6a:51:bd:3b:f7:51:26:b4:b8:7f:98:ab:25:cc:ec:9a: 40:16:73:67:bd:11:c8:92:5e:63:7c:56:f2:df:20:e0:89:1c: fe:43:04:11:6e:fa:54:88:30:10:ad:cb:c6:98:1e:49:1c:c4: a4:3c:da:a2:3d:0c:c9:4b:d4:a2:cc:1b:5c:2b:4c:15:01:51: 7e:9d:6f:a0:1c:53:3d:15:31:fd:b5:70:18:9e:7f:33:8b:62: 4e:63:b4:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEgTbbnUnWMQYTrA1PQp8QYiOLQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgz MkU5QUU4MTAeFw0yNTExMDMyMzI2NDJaFw0yNTExMDcwNzA3NDJaMDMxMTAvBgNV BAMTKENGQTgyQTIwNzYzMzAwMjBBNkNGOThBMkYzN0FFOTc0RDM4N0NGQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSWFmSov+WlUq1msa/8yY+qZ/k SDLmP9TTWDluqwVpf8My4QJ7CuvPTk5fa8m4tkn2lwyUuUoxc6umd/uN4szTGOlj cs9QEYh5uYgTm/shzEwmPe++tVMh1/elHfWNvT5OIhpchhfoStok12wQfhEaTJQM Jk7dq9v7uIcrNZ+FOqDfYTNBdEVjxWfkT8mj2yh6OLa/8uFV/ffeP7viqKldc7pt Tkea4sxkvRMOeY9EY+jTN6ZKeqEYb2x9VfIb5MWEkDrbGXctjE+BL7hCxX10kzGO DTJ5ucRNV6TF8UxS/QiGaY1qy5G6FIiMyEhwf0NfNVvgcqtqAQJkf14FZckVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz6gqIHYzACCmz5ii83rpdNOHz7gwHwYDVR0j BBgwFoAUpJaES1tDvTji9P1uvSUtKDLproEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDY0OWM0Ny1kZmMzLTRhMjAtYjViNC04Nzk2NzVlNWRiOTIvMC9BNDk2ODQ0QjVC NDNCRDM4RTJGNEZENkVCRDI1MkQyODMyRTlBRTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgzMkU5 QUU4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA2NDljNDctZGZjMy00YTIwLWI1 YjQtODc5Njc1ZTVkYjkyLzAvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJE MjgzMkU5QUU4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYnA7y3Lv8AAEqrj+5ncS/yqsgML55Pftqh 6s7a2zlFNj09zRO0HagQDgVpuTinK2xYAmirOoBEayMeRrWfFOC6dxbkknTEIwQS coImX9kIl6HD32RoGd9CxNw9YZB2Q09BI9IUWYNPDkAE+e+7t9gw3YDwtKjvtTcn UU5sukehTOfFSkW+XVsCnRXJnkPjVh+x3TO0Oqy3tIABKNYIQ4WF34XXalG9O/dR JrS4f5irJczsmkAWc2e9EciSXmN8VvLfIOCJHP5DBBFu+lSIMBCty8aYHkkcxKQ8 2qI9DMlL1KLMG1wrTBUBUX6db6AcUz0VMf21cBiefzOLYk5jtD0= -----END CERTIFICATE-----Generated at Tue Nov 4 23:25:20 2025 by rpki-client