$ rpki-client -vvf repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft File: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft (raw, json) Hash identifier: VzuO+XeKSBBqE2lVF2RuOakGwRpcuxlqfDu1QlsX2nU= Subject key identifier: B8:05:18:35:8F:E3:80:1F:8D:3A:0C:1B:86:E3:55:1F:CF:9B:9E:7D Authority key identifier: A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 Certificate issuer: /CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Certificate serial: 0E1288CB59FF289F1B54D1D0F20D1078230967C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft Manifest number: EF Signing time: Tue 04 Nov 2025 10:42:16 +0000 Manifest this update: Tue 04 Nov 2025 10:37:16 +0000 Manifest next update: Fri 07 Nov 2025 19:11:16 +0000 Files and hashes: 1: 3136302e32302e3132352e302f32342d3234203d3e20313532373830.roa (hash: aD8d9MEtPA6KCQQfGq4r1uZ3wsc7mkQ1NJevQSM4M3Q=) 2: 3136302e32302e3132342e302f32332d3233203d3e20313532373830.roa (hash: 5RUEcjZWV4Zm8Cu7Ldj94h1BNUsKLWrbbvXJVqSNnAU=) 3: 3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa (hash: K/IR3tQ/B2ym6+3pMgc6lpdo/zlib36G9pC4/9bpSkY=) 4: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl (hash: Ld+yP2dSNE4mF6fjsF1R01yhM3EauzBXLLFrKfR/MMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:12:88:cb:59:ff:28:9f:1b:54:d1:d0:f2:0d:10:78:23:09:67:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Validity Not Before: Nov 4 10:37:16 2025 GMT Not After : Nov 7 19:11:16 2025 GMT Subject: CN=B80518358FE3801F8D3A0C1B86E3551FCF9B9E7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ff:2b:ee:0a:6b:6e:04:48:3d:be:97:a5:76: a8:6b:03:64:e2:28:e9:b3:4f:0c:9c:17:d7:b8:a9: 68:1e:54:cd:14:f0:76:70:88:b0:f1:72:d7:2f:ca: 78:81:ca:d8:ac:a6:fe:c0:0b:3d:92:55:25:c8:75: 57:de:59:31:47:74:f0:d1:a5:91:e3:84:66:90:e4: 6d:4c:33:3d:4f:7b:3d:5a:c6:fc:9e:41:e2:f0:8d: 45:95:85:9d:fb:1e:c2:5b:62:c4:71:5e:e4:c0:9d: d7:20:1f:71:25:df:6f:fd:73:e5:18:75:f6:a1:5e: 71:48:c1:d7:bc:e1:2e:b2:98:52:c4:ed:ea:73:b2: 47:a8:00:ad:dc:12:3a:24:6f:d1:36:c3:a8:b7:dd: 45:c2:86:0e:4c:03:6d:25:e1:94:ac:ee:09:44:2f: 0f:31:91:7c:ad:62:c3:02:08:00:69:3e:6a:92:02: bf:24:b7:1b:cf:a1:aa:2c:66:2d:25:ee:9f:fd:f7: b1:00:ed:c2:ba:4c:73:b2:9e:e5:63:f3:9f:e1:67: 49:56:93:ce:90:3a:8d:c6:3b:9a:20:03:09:71:c0: 15:da:c3:be:9a:8b:99:90:4f:dc:fc:f8:28:74:2d: 5b:27:0d:79:ab:f4:41:79:03:75:8c:0a:c1:ff:2d: f3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:05:18:35:8F:E3:80:1F:8D:3A:0C:1B:86:E3:55:1F:CF:9B:9E:7D X509v3 Authority Key Identifier: keyid:A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:f4:c1:01:0f:df:f5:10:28:50:69:b4:0a:7b:c0:c0:b8:11: 18:d0:87:56:4e:c9:e0:88:e7:a0:ec:c0:e2:39:1e:6f:a5:fc: 6f:b3:93:e5:f9:4c:e0:f9:46:24:35:7d:75:ed:f7:3f:db:55: ca:f8:ee:ff:1b:70:17:6d:fd:68:96:71:85:87:f4:9e:b8:a8: 31:28:19:a3:07:61:59:9d:f1:78:53:48:b7:e2:0d:52:6e:e8: 03:6f:7b:c5:82:2a:3e:1f:08:04:2c:be:31:be:de:7e:c5:67: 26:2e:ba:91:e9:da:6e:d2:7b:d3:aa:cc:f7:46:80:99:a4:e6: c2:da:51:e2:da:0d:bf:b9:0d:0f:6b:02:02:d6:5e:a8:b7:8d: 5f:df:98:8b:5a:a5:d9:f0:cb:21:76:9b:87:63:c8:c4:15:03: b2:51:58:38:b0:18:7b:63:7b:cc:8f:a8:a0:10:2c:69:97:01: d4:f2:53:79:61:ca:4e:72:1f:ac:27:7d:1e:4e:9c:8a:c2:76: 8a:92:40:19:75:97:fb:ae:8c:8d:b9:24:ce:d0:ae:f9:51:36: ce:c0:e0:13:6a:c4:67:d2:11:c4:09:ab:7e:92:ca:40:be:b8: e6:d9:9f:fe:b7:3b:60:d3:3a:d0:9a:fc:fb:f1:e9:9f:21:f4: 20:49:6c:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDhKIy1n/KJ8bVNHQ8g0QeCMJZ8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRC MDgyRDgxOTAeFw0yNTExMDQxMDM3MTZaFw0yNTExMDcxOTExMTZaMDMxMTAvBgNV BAMTKEI4MDUxODM1OEZFMzgwMUY4RDNBMEMxQjg2RTM1NTFGQ0Y5QjlFN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY/yvuCmtuBEg9vpeldqhrA2Ti KOmzTwycF9e4qWgeVM0U8HZwiLDxctcvyniBytispv7ACz2SVSXIdVfeWTFHdPDR pZHjhGaQ5G1MMz1Pez1axvyeQeLwjUWVhZ37HsJbYsRxXuTAndcgH3El32/9c+UY dfahXnFIwde84S6ymFLE7epzskeoAK3cEjokb9E2w6i33UXChg5MA20l4ZSs7glE Lw8xkXytYsMCCABpPmqSAr8ktxvPoaosZi0l7p/997EA7cK6THOynuVj85/hZ0lW k86QOo3GO5ogAwlxwBXaw76ai5mQT9z8+Ch0LVsnDXmr9EF5A3WMCsH/LfObAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuAUYNY/jgB+NOgwbhuNVH8+bnn0wHwYDVR0j BBgwFoAUo9dHZcHxePcsPNDeC2KH9LCC2BkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzU3OTIxZC1lZTE4LTQzNWMtOGI2ZS1lYmEyMjQxYjgzYWIvMC9BM0Q3NDc2NUMx RjE3OEY3MkMzQ0QwREUwQjYyODdGNEIwODJEODE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRCMDgy RDgxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM1NzkyMWQtZWUxOC00MzVjLThi NmUtZWJhMjI0MWI4M2FiLzAvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3 RjRCMDgyRDgxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFj0wQEP3/UQKFBptAp7wMC4ERjQh1ZOyeCI 56DswOI5Hm+l/G+zk+X5TOD5RiQ1fXXt9z/bVcr47v8bcBdt/WiWcYWH9J64qDEo GaMHYVmd8XhTSLfiDVJu6ANve8WCKj4fCAQsvjG+3n7FZyYuupHp2m7Se9OqzPdG gJmk5sLaUeLaDb+5DQ9rAgLWXqi3jV/fmItapdnwyyF2m4djyMQVA7JRWDiwGHtj e8yPqKAQLGmXAdTyU3lhyk5yH6wnfR5OnIrCdoqSQBl1l/uujI25JM7QrvlRNs7A 4BNqxGfSEcQJq36SykC+uObZn/63O2DTOtCa/Pvx6Z8h9CBJbJk= -----END CERTIFICATE-----Generated at Wed Nov 5 03:58:19 2025 by rpki-client