$ rpki-client -vvf repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft File: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft (raw, json) Hash identifier: wqvu0nnH7i2VhtqKwyj/kJ2SZen3WoT173j82GNAwng= Subject key identifier: 0F:AF:10:99:A1:1A:46:D0:4D:5E:F6:14:C4:B8:D3:D6:A6:05:EB:79 Authority key identifier: A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A Certificate issuer: /CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Certificate serial: 6A851F44A87694138DF4BF881CE165522B5749B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft Manifest number: 01D5 Signing time: Mon 03 Nov 2025 22:21:31 +0000 Manifest this update: Mon 03 Nov 2025 22:16:31 +0000 Manifest next update: Fri 07 Nov 2025 04:34:31 +0000 Files and hashes: 1: 3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa (hash: ucCbwXx4y4Y9tjJj1wWolRQrWsXSQxItRBf8rwecRXg=) 2: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl (hash: 7hA/XssXOUWNfwJTD9eiIu2QMFa52QaLVnr6Yy8NBFY=) 3: 3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa (hash: cp5AZz8jsj7lkSzSuyAiGgYK8cjqibH/qG2rGgK+9is=) 4: 3130332e3139302e36332e302f32342d3234203d3e20313439383938.roa (hash: zf/PohLzFCJiUqI9Mgfrev7PucURzdNsl2RNcKVdXxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 04:34:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:85:1f:44:a8:76:94:13:8d:f4:bf:88:1c:e1:65:52:2b:57:49:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Validity Not Before: Nov 3 22:16:31 2025 GMT Not After : Nov 7 04:34:31 2025 GMT Subject: CN=0FAF1099A11A46D04D5EF614C4B8D3D6A605EB79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:79:f6:c3:56:97:03:8c:85:d0:f1:d7:15:8c: 9c:89:ec:40:72:04:97:b0:46:de:39:b5:71:ba:1b: ba:e8:0d:72:ef:b9:94:b0:90:67:46:99:ef:7d:7f: 53:58:a5:fa:9a:e7:c0:b8:02:bb:69:be:12:bf:ab: ec:98:38:99:4e:01:94:d8:4b:9d:a1:65:05:36:55: f2:69:73:f0:c5:e4:ec:68:f6:71:66:7c:62:6d:b9: 4d:04:cd:43:8e:3a:8c:10:3a:14:6f:66:e7:90:2d: ee:3f:6c:6f:c6:90:f3:d7:40:d4:bf:4c:43:69:43: 9b:1b:96:e9:9b:ba:f8:63:63:a3:43:63:be:95:7e: 65:f6:64:be:3a:f7:db:f1:a5:8e:6a:70:52:00:68: 7c:e1:80:19:00:ef:7d:31:11:c2:36:aa:b7:be:cf: 80:88:7f:45:ae:c1:0f:cf:4a:f2:5d:f4:6c:01:bb: 52:f7:ed:be:cd:de:13:49:d3:1a:d1:72:df:b1:25: ed:39:51:79:b6:7e:de:da:b4:9f:00:b9:bb:58:fe: 62:e7:30:42:f8:ba:1a:db:a8:85:c8:c6:fa:85:c5: c0:9b:dd:bb:47:fb:d6:54:fd:92:36:fe:5a:ae:ba: 35:ed:44:0e:49:0e:4f:0a:9d:d2:4e:08:0a:c7:68: 4b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:AF:10:99:A1:1A:46:D0:4D:5E:F6:14:C4:B8:D3:D6:A6:05:EB:79 X509v3 Authority Key Identifier: keyid:A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:7e:48:67:51:4d:cb:dd:d9:d6:3d:1f:ac:e7:a8:06:b4:25: 4f:ee:c3:c2:be:bd:c7:c7:be:27:eb:61:3a:4a:f1:e7:0b:0e: 05:24:f8:82:54:b1:b5:82:4f:8b:31:4b:91:90:ed:7c:63:99: 1b:6a:42:d8:ec:37:fa:19:54:30:60:2e:32:89:50:6e:e0:01: 33:f6:0c:e5:12:cf:fd:df:32:fe:a4:cf:4b:45:a1:0c:fa:7c: 1a:94:ac:44:a0:5f:52:f4:8d:3f:70:73:19:bb:9d:f2:92:60: 3b:f3:f5:8f:f0:33:55:6d:e4:f8:b2:61:2c:2c:63:19:d2:05: 76:87:34:95:3b:05:3b:9e:fe:2d:98:ae:2c:20:87:d6:d5:f3: fb:20:cb:d9:c0:8f:39:2c:b2:4c:16:1b:60:00:41:20:ca:97: a7:ab:07:d4:1d:c1:2f:01:1f:ca:ce:4d:42:56:c0:d4:68:94: 7a:36:09:b0:cd:fc:66:a0:f1:9e:e6:0e:24:ac:f3:9e:ea:20: 3a:23:6f:0b:5b:e6:c3:69:0a:fd:c9:a2:2c:82:f4:a2:ac:3f: 6a:9a:70:4e:9e:f9:cc:40:93:8f:7e:0e:9c:4d:d1:07:5f:33: d3:48:c7:0d:34:30:e6:33:ec:6d:8b:ba:8c:f3:78:93:06:15: 11:2d:2d:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaoUfRKh2lBON9L+IHOFlUitXSbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAx NzdBMEY4QTAeFw0yNTExMDMyMjE2MzFaFw0yNTExMDcwNDM0MzFaMDMxMTAvBgNV BAMTKDBGQUYxMDk5QTExQTQ2RDA0RDVFRjYxNEM0QjhEM0Q2QTYwNUVCNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDefbDVpcDjIXQ8dcVjJyJ7EBy BJewRt45tXG6G7roDXLvuZSwkGdGme99f1NYpfqa58C4ArtpvhK/q+yYOJlOAZTY S52hZQU2VfJpc/DF5Oxo9nFmfGJtuU0EzUOOOowQOhRvZueQLe4/bG/GkPPXQNS/ TENpQ5sblumbuvhjY6NDY76VfmX2ZL4699vxpY5qcFIAaHzhgBkA730xEcI2qre+ z4CIf0WuwQ/PSvJd9GwBu1L37b7N3hNJ0xrRct+xJe05UXm2ft7atJ8AubtY/mLn MEL4uhrbqIXIxvqFxcCb3btH+9ZU/ZI2/lquujXtRA5JDk8KndJOCArHaEtdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD68QmaEaRtBNXvYUxLjT1qYF63kwHwYDVR0j BBgwFoAUp9U+tUUer4rKtjhIf73rQBd6D4owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjIwYjQyMy1kZDVkLTQ0OGYtYmJkMy0wNDUzMGVjMTcxNWQvMC9BN0Q1M0VCNTQ1 MUVBRjhBQ0FCNjM4NDg3RkJERUI0MDE3N0EwRjhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAxNzdB MEY4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYyMGI0MjMtZGQ1ZC00NDhmLWJi ZDMtMDQ1MzBlYzE3MTVkLzAvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVC NDAxNzdBMEY4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJ+SGdRTcvd2dY9H6znqAa0JU/uw8K+vcfH vifrYTpK8ecLDgUk+IJUsbWCT4sxS5GQ7XxjmRtqQtjsN/oZVDBgLjKJUG7gATP2 DOUSz/3fMv6kz0tFoQz6fBqUrESgX1L0jT9wcxm7nfKSYDvz9Y/wM1Vt5PiyYSws YxnSBXaHNJU7BTue/i2Yriwgh9bV8/sgy9nAjzksskwWG2AAQSDKl6erB9QdwS8B H8rOTUJWwNRolHo2CbDN/Gag8Z7mDiSs857qIDojbwtb5sNpCv3JoiyC9KKsP2qa cE6e+cxAk49+DpxN0QdfM9NIxw00MOYz7G2LuozzeJMGFREtLQg= -----END CERTIFICATE-----Generated at Wed Nov 5 14:30:38 2025 by rpki-client