$ rpki-client -vvf repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft File: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft (raw, json) Hash identifier: w38j2qp/cjy1s/JDy9bJxeC6Bxzkvlc8diVLNiu4ryo= Subject key identifier: 48:A3:FA:6E:D5:13:DC:CA:40:6E:57:1A:26:98:4A:2F:BD:C0:EA:97 Authority key identifier: A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA Certificate issuer: /CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Certificate serial: 0989DBB29EF65ADA6B2E8CC743AB5DCB64CB7931 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft Manifest number: C3 Signing time: Mon 03 Nov 2025 02:32:18 +0000 Manifest this update: Mon 03 Nov 2025 02:27:18 +0000 Manifest next update: Thu 06 Nov 2025 10:31:18 +0000 Files and hashes: 1: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl (hash: NrTlDnLJTkjOTLgVjOHjno3DBiufkpndEuM3GsPpV30=) 2: 3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa (hash: T0SEzE9YSldItn38GmkKf92LoaZ2oQZ49jDDO4h9Pog=) 3: 3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa (hash: Lhr2al1XwYOqujTNMwbvxurUmcC7+yc2oxsnrcYpuBo=) 4: 3136302e32322e3139382e302f32332d3233203d3e20313532383336.roa (hash: VUNIcQLLtJsrGFAzVMiImA2RepGLVIMfYYvCS/t2Ge0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:31:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:89:db:b2:9e:f6:5a:da:6b:2e:8c:c7:43:ab:5d:cb:64:cb:79:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Validity Not Before: Nov 3 02:27:18 2025 GMT Not After : Nov 6 10:31:18 2025 GMT Subject: CN=48A3FA6ED513DCCA406E571A26984A2FBDC0EA97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f8:27:40:20:61:c2:fb:b0:29:73:a0:fb:0f: e5:f7:d9:29:97:e0:e7:2e:12:3c:a5:cf:b0:36:a1: a8:3a:b3:f1:b3:9d:e1:34:b3:86:3a:69:a7:b6:5b: 52:81:ea:01:de:f5:a0:b7:12:c7:e4:df:44:e9:30: 83:94:b4:d4:f9:62:d9:3e:8f:c9:9b:4d:52:5b:09: 2c:de:63:a8:52:72:45:98:27:ea:80:60:7b:12:02: 1f:d7:b0:6b:e9:d8:35:ed:18:32:28:15:e8:32:f0: 08:18:7b:31:9f:d8:43:7b:2c:a7:0c:75:3e:68:2a: 7f:0d:ae:12:c6:68:8c:3e:c0:b4:32:17:4a:b9:63: 6b:c3:df:7b:8d:6e:cb:54:ab:19:41:a6:df:41:70: 55:28:7d:4d:c4:c2:ec:1b:ab:da:0e:0e:8f:c9:3d: 59:43:a6:8d:11:79:7e:e9:2c:25:78:1b:cd:82:a7: bf:47:fa:e9:dc:fa:40:37:8c:d9:ab:f9:c2:d7:88: 29:a0:7f:29:12:a5:69:73:4f:c5:fa:9c:06:a8:f6: 4e:74:4c:c3:75:7f:e8:9e:b8:72:56:a2:f2:ac:42: c2:3d:17:a7:6f:e3:ac:3c:33:d1:28:98:ce:13:85: 70:e8:62:57:55:a1:22:78:0c:f4:12:18:50:aa:06: ef:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A3:FA:6E:D5:13:DC:CA:40:6E:57:1A:26:98:4A:2F:BD:C0:EA:97 X509v3 Authority Key Identifier: keyid:A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:42:89:c2:6f:30:68:fe:da:27:5c:70:99:35:0d:8d:12:5c: 42:b2:34:2a:fa:6d:d2:6a:d3:42:d6:3e:84:27:fe:82:1a:1b: d0:5e:20:29:28:0f:74:9c:81:d5:8a:14:63:e1:24:6d:28:77: 22:08:90:ca:de:89:e1:dc:24:83:90:47:34:35:5f:6f:41:97: e6:10:44:27:e6:6f:6b:1d:46:2a:f9:3a:f7:05:99:47:61:67: 91:bc:6d:79:73:ad:1b:59:c0:fb:60:99:ac:76:be:38:2c:9b: 6f:a5:63:88:78:68:00:50:dd:e0:96:86:9f:fb:cc:fd:4c:8b: 5e:2d:62:25:5f:ac:9a:c2:3d:b5:0a:2e:c9:db:76:c5:9c:c3: 97:4a:19:a0:6e:6f:1f:45:26:a0:1b:bc:27:72:d3:3f:07:9e: c4:7b:28:3f:47:1e:25:4a:35:a2:07:bc:6b:8d:94:8d:3e:72: 97:81:85:71:12:39:f5:14:f8:96:45:8e:9f:25:d0:3c:ca:2f: cd:07:e7:49:7d:32:67:e2:fe:3c:aa:6c:5c:dc:0c:11:6c:c0: bd:08:72:13:66:b3:f0:c5:63:59:51:0e:a1:64:af:2e:6c:d9: 32:a6:bc:10:3b:85:81:2f:8a:5a:38:f6:c4:f8:b2:1e:26:33: b0:45:41:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCYnbsp72WtprLozHQ6tdy2TLeTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVCRjIz MEM1QjVGQTAeFw0yNTExMDMwMjI3MThaFw0yNTExMDYxMDMxMThaMDMxMTAvBgNV BAMTKDQ4QTNGQTZFRDUxM0RDQ0E0MDZFNTcxQTI2OTg0QTJGQkRDMEVBOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp+CdAIGHC+7Apc6D7D+X32SmX 4OcuEjylz7A2oag6s/GzneE0s4Y6aae2W1KB6gHe9aC3Esfk30TpMIOUtNT5Ytk+ j8mbTVJbCSzeY6hSckWYJ+qAYHsSAh/XsGvp2DXtGDIoFegy8AgYezGf2EN7LKcM dT5oKn8NrhLGaIw+wLQyF0q5Y2vD33uNbstUqxlBpt9BcFUofU3Ewuwbq9oODo/J PVlDpo0ReX7pLCV4G82Cp79H+unc+kA3jNmr+cLXiCmgfykSpWlzT8X6nAao9k50 TMN1f+ieuHJWovKsQsI9F6dv46w8M9EomM4ThXDoYldVoSJ4DPQSGFCqBu/TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSKP6btUT3MpAblcaJphKL73A6pcwHwYDVR0j BBgwFoAUp+bGLEfALuoyQi4TWQjr8jDFtfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjMwZTRhZS0zZTQ3LTQ1NDAtODIzYy01M2NhZjIyNjdiMzYvMC9BN0U2QzYyQzQ3 QzAyRUVBMzI0MjJFMTM1OTA4RUJGMjMwQzVCNUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVCRjIzMEM1 QjVGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWYzMGU0YWUtM2U0Ny00NTQwLTgy M2MtNTNjYWYyMjY3YjM2LzAvQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVC RjIzMEM1QjVGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVCicJvMGj+2idccJk1DY0SXEKyNCr6bdJq 00LWPoQn/oIaG9BeICkoD3ScgdWKFGPhJG0odyIIkMreieHcJIOQRzQ1X29Bl+YQ RCfmb2sdRir5OvcFmUdhZ5G8bXlzrRtZwPtgmax2vjgsm2+lY4h4aABQ3eCWhp/7 zP1Mi14tYiVfrJrCPbUKLsnbdsWcw5dKGaBubx9FJqAbvCdy0z8HnsR7KD9HHiVK NaIHvGuNlI0+cpeBhXESOfUU+JZFjp8l0DzKL80H50l9Mmfi/jyqbFzcDBFswL0I chNms/DFY1lRDqFkry5s2TKmvBA7hYEvilo49sT4sh4mM7BFQWA= -----END CERTIFICATE-----Generated at Wed Nov 5 02:07:32 2025 by rpki-client