$ rpki-client -vvf repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft File: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft (raw, json) Hash identifier: 1BrFpC3kvjGAIa3bOc5UUgTYxfk+i/laq+mZVkqmOhw= Subject key identifier: FD:EF:EA:B8:67:C4:B3:53:97:AB:A5:76:20:9A:5C:07:A5:44:A3:51 Authority key identifier: A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A Certificate issuer: /CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A Certificate serial: 661AC7D00CD3D9BCEF6565EA64881D528B58A96B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft Manifest number: 01A7 Signing time: Sun 02 Nov 2025 01:22:12 +0000 Manifest this update: Sun 02 Nov 2025 01:17:12 +0000 Manifest next update: Wed 05 Nov 2025 06:51:12 +0000 Files and hashes: 1: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl (hash: ApF2TnPwJdAaHVbr6x4v4Yn1+GQL+zNTaMt9oxpF6Z0=) 2: 3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa (hash: lH+IV1VjfExz6EgaEksT/6x5pW3sOfiOZbcnKLG8hUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:1a:c7:d0:0c:d3:d9:bc:ef:65:65:ea:64:88:1d:52:8b:58:a9:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A Validity Not Before: Nov 2 01:17:12 2025 GMT Not After : Nov 5 06:51:12 2025 GMT Subject: CN=FDEFEAB867C4B35397ABA576209A5C07A544A351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:94:d5:c2:46:1b:f1:2b:1c:ff:21:ac:d5:f2: bf:ce:73:00:a9:76:59:d3:a2:da:8d:70:cb:9e:72: bb:02:ad:5c:a1:76:96:b7:51:a5:84:2f:2b:d8:c4: 9d:37:e0:ae:88:1c:64:63:14:5d:0d:7a:12:7c:d7: cf:b7:7f:30:49:14:54:9e:03:5a:c2:1b:07:31:48: c1:82:89:9d:8f:22:81:47:e8:bd:4a:e0:83:f3:e2: 91:86:df:c3:d5:82:9b:99:46:72:f6:53:0e:42:60: bd:7d:c2:13:07:33:84:6f:87:dc:85:7a:54:48:bb: 6e:7f:27:69:d0:0c:bf:c6:f5:08:5c:7b:c5:08:25: 14:73:e4:69:8a:03:fc:55:bd:7b:c3:2a:cd:68:6f: df:a9:e2:53:6a:92:c7:7c:8c:1b:24:5a:6d:0d:3b: 62:f1:e8:f6:30:c0:2a:b3:4b:4b:bf:24:9c:e3:8a: 01:73:c8:bf:e2:87:f7:cd:49:f1:08:68:60:98:67: c7:60:24:01:37:5e:26:bc:f0:cf:07:d9:06:3d:44: 0b:1a:e8:45:95:dd:3d:76:81:d0:97:af:70:15:14: 13:27:4a:69:8d:ce:27:ee:ea:d0:b9:38:29:98:bc: de:de:33:5f:bd:2a:d8:b6:4e:99:e2:12:2b:f0:79: aa:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:EF:EA:B8:67:C4:B3:53:97:AB:A5:76:20:9A:5C:07:A5:44:A3:51 X509v3 Authority Key Identifier: keyid:A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:4a:c8:9d:d9:2e:40:7e:31:00:2c:0a:f1:a0:8b:cc:00:d1: 7a:9e:50:ea:72:4c:c5:92:89:94:05:7b:7f:4e:03:b6:cd:1c: a3:f9:86:81:97:e2:9a:f1:3d:be:e7:3a:5a:da:2a:07:38:15: 02:03:0d:a1:94:49:81:83:c5:0e:21:a2:76:0c:d8:f1:a1:e9: 0c:d0:a2:1e:a9:72:1e:c8:fa:48:fc:6c:6a:a5:5b:bf:a8:4d: c0:53:70:65:9b:90:a7:f6:34:13:4c:5b:ae:68:21:6a:57:12: 77:21:e3:ff:71:b4:1c:62:66:19:89:70:87:7f:bb:d7:c2:7b: dc:c2:f8:35:99:ea:27:ed:09:87:43:ae:25:2c:0b:61:45:06: 0c:b0:07:64:aa:09:f6:d7:c3:f5:fc:64:e3:e8:b7:07:97:78: 20:9f:e6:16:a8:ac:fb:27:cb:6e:ac:6e:ba:fe:a0:84:ae:97: d7:af:0a:02:10:53:b4:a5:11:7d:85:e8:da:dc:2f:8d:df:62: 06:e8:39:f9:75:e0:22:8e:85:df:68:b1:87:22:93:a8:b6:ad: ab:10:97:58:a9:83:b4:06:5b:05:12:4f:bb:ec:78:dc:b5:58: 77:dc:9b:ec:dc:44:df:e1:21:01:8a:11:04:db:58:41:2b:44: 30:6f:a4:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZhrH0AzT2bzvZWXqZIgdUotYqWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4 RTVEQjMxQTAeFw0yNTExMDIwMTE3MTJaFw0yNTExMDUwNjUxMTJaMDMxMTAvBgNV BAMTKEZERUZFQUI4NjdDNEIzNTM5N0FCQTU3NjIwOUE1QzA3QTU0NEEzNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDElNXCRhvxKxz/IazV8r/OcwCp dlnTotqNcMuecrsCrVyhdpa3UaWELyvYxJ034K6IHGRjFF0NehJ818+3fzBJFFSe A1rCGwcxSMGCiZ2PIoFH6L1K4IPz4pGG38PVgpuZRnL2Uw5CYL19whMHM4Rvh9yF elRIu25/J2nQDL/G9Qhce8UIJRRz5GmKA/xVvXvDKs1ob9+p4lNqksd8jBskWm0N O2Lx6PYwwCqzS0u/JJzjigFzyL/ih/fNSfEIaGCYZ8dgJAE3Xia88M8H2QY9RAsa 6EWV3T12gdCXr3AVFBMnSmmNzifu6tC5OCmYvN7eM1+9Kti2TpniEivweap7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/e/quGfEs1OXq6V2IJpcB6VEo1EwHwYDVR0j BBgwFoAUpklXcV59zuw6fUwxdsyX7Y5dsxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTAxMjlhOC0yN2U4LTQwNDYtODk4OS04NjViMjU3ZWE2Y2EvMC9BNjQ5NTc3MTVF N0RDRUVDM0E3RDRDMzE3NkNDOTdFRDhFNURCMzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4RTVE QjMxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWEwMTI5YTgtMjdlOC00MDQ2LTg5 ODktODY1YjI1N2VhNmNhLzAvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3 RUQ4RTVEQjMxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFKyJ3ZLkB+MQAsCvGgi8wA0XqeUOpyTMWS iZQFe39OA7bNHKP5hoGX4prxPb7nOlraKgc4FQIDDaGUSYGDxQ4honYM2PGh6QzQ oh6pch7I+kj8bGqlW7+oTcBTcGWbkKf2NBNMW65oIWpXEnch4/9xtBxiZhmJcId/ u9fCe9zC+DWZ6iftCYdDriUsC2FFBgywB2SqCfbXw/X8ZOPotweXeCCf5haorPsn y26sbrr+oISul9evCgIQU7SlEX2F6NrcL43fYgboOfl14CKOhd9osYcik6i2rasQ l1ipg7QGWwUST7vseNy1WHfcm+zcRN/hIQGKEQTbWEErRDBvpNw= -----END CERTIFICATE-----Generated at Tue Nov 4 08:03:19 2025 by rpki-client