$ rpki-client -vvf repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft File: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft (raw, json) Hash identifier: T2FUl3vXrLeqJm6yEt1TL9uHtx05vKjBtq3d6buF1o4= Subject key identifier: AC:65:02:43:61:23:4F:37:1F:95:C4:F3:E5:E7:50:12:BF:19:CA:9F Authority key identifier: 0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 Certificate issuer: /CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Certificate serial: 638B2C5F29A9225B7783060BFDD0BE183A20989C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft Manifest number: CA Signing time: Mon 03 Nov 2025 10:51:08 +0000 Manifest this update: Mon 03 Nov 2025 10:46:08 +0000 Manifest next update: Thu 06 Nov 2025 13:10:08 +0000 Files and hashes: 1: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl (hash: qLlXA3CD+//lJmEMnIOjxFIcjAwTCP92ozuv0JKUfJU=) 2: 3136302e32322e3230352e302f32342d3234203d3e20313337333136.roa (hash: 8dognkJ+3KqI8Zy3SbY9osu6X0L9/9P5xv+FtLtMt+4=) 3: 3136302e32322e3230342e302f32342d3234203d3e20313337333136.roa (hash: Zh8n/dPr3gHP9KgajNV0z2AsOCpEwb2affZu8V5L6qs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 13:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:8b:2c:5f:29:a9:22:5b:77:83:06:0b:fd:d0:be:18:3a:20:98:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Validity Not Before: Nov 3 10:46:08 2025 GMT Not After : Nov 6 13:10:08 2025 GMT Subject: CN=AC65024361234F371F95C4F3E5E75012BF19CA9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:53:2f:2d:22:6b:89:7f:ab:39:ff:97:df:3e: c1:ff:0d:2d:13:6d:7b:64:99:d6:1e:db:73:96:aa: 54:be:ae:fc:86:af:47:1e:08:4d:93:23:62:62:ae: d3:6f:de:2d:43:29:98:fe:7a:06:2e:3f:38:cf:f3: 97:47:68:3b:03:1a:1a:3a:7c:5c:40:99:e1:6c:fa: a1:67:ee:52:e5:f4:f3:c1:7c:f5:3c:03:6a:97:8d: 10:34:01:eb:5b:48:35:a3:cf:b9:b2:ca:fa:51:d2: 82:52:08:35:f4:0a:cc:fd:af:13:d7:08:d7:86:f7: 7a:3a:f1:1a:41:df:12:ad:b7:63:4d:ad:58:1f:fe: 60:ff:35:c2:82:42:45:d2:4c:32:39:a0:1f:ec:7b: da:93:7b:b6:99:cb:4b:2f:bf:85:29:f0:db:84:e7: 1a:f0:d1:7b:26:a3:19:45:1f:f2:be:28:8e:b3:c8: 9b:ec:43:54:4b:c7:cd:44:28:05:e8:1c:d6:41:66: 4f:19:2c:f5:84:ee:aa:56:ad:49:92:96:f8:db:8f: 55:5a:75:fb:1c:4e:c5:74:bd:76:a4:f8:9a:42:07: 8d:49:05:b7:30:6c:18:d6:13:15:7c:aa:6c:b5:eb: d8:c1:a5:06:5d:3b:8e:df:b3:72:79:a1:96:c3:f0: 17:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:65:02:43:61:23:4F:37:1F:95:C4:F3:E5:E7:50:12:BF:19:CA:9F X509v3 Authority Key Identifier: keyid:0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:9d:86:b2:08:18:82:59:07:4d:e4:6f:80:83:a7:e2:27:7e: 45:ed:95:7b:64:88:d7:17:89:37:8d:3e:26:f3:18:83:dc:34: d0:8f:0b:b6:02:f4:d8:12:d6:c6:c0:f2:0f:6c:82:f1:a3:aa: 31:58:29:52:2a:75:c1:07:dd:a0:d7:e3:d2:20:9e:73:48:46: e2:8d:fa:64:3f:6d:dd:4f:cc:89:87:c0:04:34:31:4c:6f:57: d6:87:d5:80:bb:b5:01:19:96:5a:e1:93:4c:72:bc:e1:59:ef: 52:83:da:61:9b:4c:d7:73:2b:9d:22:d6:a5:a4:fd:59:aa:f2: 4b:80:f0:2b:01:df:df:e2:34:b1:6a:50:b1:e3:f0:cc:5a:48: a5:21:ed:0d:06:b0:cf:5f:dc:fc:73:4e:73:c4:24:38:f4:f6: 40:7c:99:8c:86:10:95:59:81:d2:e8:7c:c3:ea:fb:f6:e7:e2: 36:f5:3c:35:08:1c:6b:76:c5:90:53:77:32:fe:21:1f:45:56: cc:39:2f:08:42:12:54:3d:15:cc:60:7c:a8:c6:37:bc:e4:20: 2c:8b:ef:a2:4e:37:63:75:a9:d5:d0:c0:dd:59:25:57:e5:70: fc:ae:76:85:23:bb:37:db:9e:31:17:dd:75:fb:b6:89:00:4c: ea:6f:ba:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY4ssXympIlt3gwYL/dC+GDogmJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFG MDYwMzYxMjAeFw0yNTExMDMxMDQ2MDhaFw0yNTExMDYxMzEwMDhaMDMxMTAvBgNV BAMTKEFDNjUwMjQzNjEyMzRGMzcxRjk1QzRGM0U1RTc1MDEyQkYxOUNBOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Uy8tImuJf6s5/5ffPsH/DS0T bXtkmdYe23OWqlS+rvyGr0ceCE2TI2JirtNv3i1DKZj+egYuPzjP85dHaDsDGho6 fFxAmeFs+qFn7lLl9PPBfPU8A2qXjRA0AetbSDWjz7myyvpR0oJSCDX0Csz9rxPX CNeG93o68RpB3xKtt2NNrVgf/mD/NcKCQkXSTDI5oB/se9qTe7aZy0svv4Up8NuE 5xrw0XsmoxlFH/K+KI6zyJvsQ1RLx81EKAXoHNZBZk8ZLPWE7qpWrUmSlvjbj1Va dfscTsV0vXak+JpCB41JBbcwbBjWExV8qmy169jBpQZdO47fs3J5oZbD8Bf3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrGUCQ2EjTzcflcTz5edQEr8Zyp8wHwYDVR0j BBgwFoAUChv85nYdi3+yCffPntGz2vBgNhIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzFiNGMzOC03NzQ3LTQ1ZmMtYTU5MC1jYWM1MjE2M2Q1MzgvMC8wQTFCRkNFNjc2 MUQ4QjdGQjIwOUY3Q0Y5RUQxQjNEQUYwNjAzNjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFGMDYw MzYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMxYjRjMzgtNzc0Ny00NWZjLWE1 OTAtY2FjNTIxNjNkNTM4LzAvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIz REFGMDYwMzYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGdhrIIGIJZB03kb4CDp+InfkXtlXtkiNcX iTeNPibzGIPcNNCPC7YC9NgS1sbA8g9sgvGjqjFYKVIqdcEH3aDX49IgnnNIRuKN +mQ/bd1PzImHwAQ0MUxvV9aH1YC7tQEZllrhk0xyvOFZ71KD2mGbTNdzK50i1qWk /Vmq8kuA8CsB39/iNLFqULHj8MxaSKUh7Q0GsM9f3PxzTnPEJDj09kB8mYyGEJVZ gdLofMPq+/bn4jb1PDUIHGt2xZBTdzL+IR9FVsw5LwhCElQ9FcxgfKjGN7zkICyL 76JON2N1qdXQwN1ZJVflcPyudoUjuzfbnjEX3XX7tokATOpvut4= -----END CERTIFICATE-----Generated at Wed Nov 5 07:50:58 2025 by rpki-client