$ rpki-client -vvf repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft File: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft (raw, json) Hash identifier: 444buU/kPGhSpIj5qpBiJjKSvLlTY+0g+TZp3Ib4n80= Subject key identifier: 01:19:6E:4E:1D:86:D3:39:50:E3:E6:F9:24:6E:51:EC:EC:F6:8F:EB Authority key identifier: A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28 Certificate issuer: /CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728 Certificate serial: 07C721BF76743BB2DECE5E87A14F726B02BF4605 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft Manifest number: 01C3 Signing time: Tue 04 Nov 2025 17:11:34 +0000 Manifest this update: Tue 04 Nov 2025 17:06:34 +0000 Manifest next update: Sat 08 Nov 2025 04:54:34 +0000 Files and hashes: 1: 3130332e36332e32362e302f32342d3234203d3e20313338303839.roa (hash: a/XQ8MdxKUzSfIKR4TnLCUk6wo8og+MExbugEiLWe3U=) 2: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl (hash: h3GM6vdMCzcbJkE4BPoVXM6rQpIZu32WNerTTu5+PuE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 00:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:c7:21:bf:76:74:3b:b2:de:ce:5e:87:a1:4f:72:6b:02:bf:46:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728 Validity Not Before: Nov 4 17:06:34 2025 GMT Not After : Nov 8 04:54:34 2025 GMT Subject: CN=01196E4E1D86D33950E3E6F9246E51ECECF68FEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:29:b0:6c:d0:66:ba:2f:52:e6:fa:04:32:25: 10:04:44:63:f4:0b:a0:64:5c:9e:2b:9c:6a:b9:d9: 4f:a2:2a:75:7b:0d:8c:23:31:36:b3:a3:ab:9a:76: 66:f2:8c:2e:98:0b:cd:16:a3:85:2a:34:c9:69:fb: 44:b9:ba:37:36:82:a1:bd:ab:a0:13:bf:7a:61:a1: eb:f0:92:de:58:8b:2e:15:cd:09:3d:82:de:b3:2a: 83:fb:92:aa:07:99:a0:8c:73:97:68:90:71:a6:8a: 0e:00:6f:5e:03:5c:af:38:37:b1:b7:94:f2:a8:c2: f7:2e:89:47:ef:5d:08:b8:a4:90:75:c2:fb:52:f2: cc:b2:b4:60:e2:2e:f5:00:fa:79:bc:8b:b7:53:23: e7:d3:53:81:e1:46:77:96:9e:ea:f4:51:20:9b:23: b2:7d:87:67:f2:b9:7a:cf:06:a9:2f:07:10:72:ef: 08:cc:d1:de:9d:83:4b:ae:85:d9:de:bf:63:02:ed: e4:de:d3:9c:23:3d:cc:07:87:8f:50:81:ca:43:4c: 5b:75:4c:48:22:7d:0d:0d:92:c6:b0:a7:cb:87:23: b4:6a:48:af:8a:42:51:db:38:03:b1:5c:71:a7:dc: 6a:1f:e0:91:a0:01:db:f1:03:1e:65:ed:b9:36:47: a6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:19:6E:4E:1D:86:D3:39:50:E3:E6:F9:24:6E:51:EC:EC:F6:8F:EB X509v3 Authority Key Identifier: keyid:A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:41:16:d3:3e:e9:16:56:5c:2f:60:75:fd:3a:26:50:79:92: 20:33:3b:9b:b3:25:6d:cf:8b:d6:93:e9:ab:41:d9:d4:bb:6c: 34:84:d9:51:a7:91:a4:6f:27:23:24:55:75:f4:07:41:45:36: e1:fe:46:03:60:87:38:f9:b1:28:7d:8c:75:1f:18:f7:cd:92: 59:f2:6d:aa:f7:ab:6c:bc:99:64:1c:bc:5e:8a:5e:23:97:8b: 6f:57:80:31:2d:85:fe:97:93:be:81:35:64:77:7b:f5:fc:7b: 15:01:4c:ef:b9:e7:62:e5:c9:de:07:5d:80:10:26:95:d7:55: 3f:2c:27:f5:ed:60:b0:16:db:dd:13:81:2e:ce:23:7f:36:45: 30:5a:4d:46:90:58:1f:12:c9:2a:e4:41:d7:52:94:be:bb:87: c0:b4:c5:46:01:72:9d:1b:dc:85:19:7f:f5:c9:e9:20:80:6b: a9:14:be:d4:3e:b5:39:e0:dd:0c:c2:70:01:6b:cd:c0:ec:16: cb:8e:dd:48:cf:d6:ee:75:20:4e:9e:08:c4:80:da:9d:48:9c: 36:7a:95:30:6c:60:e6:11:91:41:cc:1d:48:f3:51:ea:50:03: 2e:58:1d:b4:12:69:27:23:3d:6b:fe:d3:c1:16:e8:cb:00:b3: e4:25:86:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB8chv3Z0O7Lezl6HoU9yawK/RgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1QzNG OTcyMjcyODAeFw0yNTExMDQxNzA2MzRaFw0yNTExMDgwNDU0MzRaMDMxMTAvBgNV BAMTKDAxMTk2RTRFMUQ4NkQzMzk1MEUzRTZGOTI0NkU1MUVDRUNGNjhGRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzKbBs0Ga6L1Lm+gQyJRAERGP0 C6BkXJ4rnGq52U+iKnV7DYwjMTazo6uadmbyjC6YC80Wo4UqNMlp+0S5ujc2gqG9 q6ATv3phoevwkt5Yiy4VzQk9gt6zKoP7kqoHmaCMc5dokHGmig4Ab14DXK84N7G3 lPKowvcuiUfvXQi4pJB1wvtS8syytGDiLvUA+nm8i7dTI+fTU4HhRneWnur0USCb I7J9h2fyuXrPBqkvBxBy7wjM0d6dg0uuhdnev2MC7eTe05wjPcwHh49QgcpDTFt1 TEgifQ0Nksawp8uHI7RqSK+KQlHbOAOxXHGn3Gof4JGgAdvxAx5l7bk2R6bZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUARluTh2G0zlQ4+b5JG5R7Oz2j+swHwYDVR0j BBgwFoAUp9g+6HA7vVnNyqViKts1w/lyJygwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWE2Y2VhZi1kNjhjLTRkY2ItODI2Ny1mZDFhNTNkOTk5ODgvMC9BN0Q4M0VFODcw M0JCRDU5Q0RDQUE1NjIyQURCMzVDM0Y5NzIyNzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1QzNGOTcy MjcyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhNmNlYWYtZDY4Yy00ZGNiLTgy NjctZmQxYTUzZDk5OTg4LzAvQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1 QzNGOTcyMjcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAERBFtM+6RZWXC9gdf06JlB5kiAzO5uzJW3P i9aT6atB2dS7bDSE2VGnkaRvJyMkVXX0B0FFNuH+RgNghzj5sSh9jHUfGPfNklny bar3q2y8mWQcvF6KXiOXi29XgDEthf6Xk76BNWR3e/X8exUBTO+552Llyd4HXYAQ JpXXVT8sJ/XtYLAW290TgS7OI382RTBaTUaQWB8SySrkQddSlL67h8C0xUYBcp0b 3IUZf/XJ6SCAa6kUvtQ+tTng3QzCcAFrzcDsFsuO3UjP1u51IE6eCMSA2p1InDZ6 lTBsYOYRkUHMHUjzUepQAy5YHbQSaScjPWv+08EW6MsAs+Qlhtw= -----END CERTIFICATE-----Generated at Wed Nov 5 02:55:43 2025 by rpki-client