$ rpki-client -vvf repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft File: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft (raw, json) Hash identifier: z9ypti0LTa+1zsDSHYU7Vw1lqmXg1eLYpTQPHCzAn64= Subject key identifier: 59:1D:01:66:8B:19:BD:E2:55:E2:B0:17:00:B1:36:AD:6A:D2:CC:9A Authority key identifier: A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 Certificate issuer: /CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66 Certificate serial: 6ADD50EDC06DE6F9EF9C1730401694A0AC9E8F54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft Manifest number: 0210 Signing time: Tue 04 Nov 2025 02:02:26 +0000 Manifest this update: Tue 04 Nov 2025 01:57:26 +0000 Manifest next update: Fri 07 Nov 2025 08:24:26 +0000 Files and hashes: 1: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl (hash: KvVfXMAZViUusOZGbdf6YsG3VQr5v49QLF0tSyCJteE=) 2: 3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa (hash: KkOi57cp3QYrSPg3L4piWw9fN5UZON52i91Hq3Yxv3k=) 3: 3130332e3135392e3131332e302f32342d3234203d3e20313431363032.roa (hash: DTA7XaMvO6/yJH95Q2H4dcuyJyFkTQZvJ4qtwIMhRBo=) 4: 3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa (hash: TA90bkE55ZETm7aG8neqT5bIm1Ztp4RfdpQNAXifiyc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:24:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:dd:50:ed:c0:6d:e6:f9:ef:9c:17:30:40:16:94:a0:ac:9e:8f:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66 Validity Not Before: Nov 4 01:57:26 2025 GMT Not After : Nov 7 08:24:26 2025 GMT Subject: CN=591D01668B19BDE255E2B01700B136AD6AD2CC9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6b:66:8f:fd:9f:de:c6:fb:94:21:5b:6f:9c: dc:66:cc:82:f2:c3:fa:3f:14:b9:86:d8:cf:ba:9f: 1d:75:d6:c2:5c:ad:c4:5a:16:02:9d:bf:4b:52:f4: b9:7d:31:40:15:04:06:26:cc:7a:c3:c7:75:d2:6d: 60:d3:e8:bb:db:5c:6d:9e:7a:93:b0:a0:7f:27:d2: 61:42:e9:25:12:ff:55:05:6f:ec:8c:a5:c7:8f:87: 97:49:f3:63:17:d5:d2:b5:8f:bb:e3:2c:4a:2d:86: c7:51:5a:09:18:22:0b:37:7b:27:94:27:26:6b:1e: 75:78:9c:c3:11:7a:79:36:eb:b7:a3:1a:a8:04:54: 7d:fc:0f:e3:01:0d:c1:3e:b1:aa:3e:66:08:64:2c: 73:6f:db:0f:7a:43:c2:b6:4a:e5:ba:05:d5:ef:23: 48:6c:3d:6e:63:e4:fd:18:c7:ef:71:9c:f0:22:ba: ff:02:8f:e3:db:aa:0c:34:c8:fb:91:89:7a:18:82: a3:70:7f:50:29:b3:34:93:d8:ba:d7:01:e2:ea:a1: 97:b3:4c:65:5b:82:dc:27:74:79:5c:2a:4e:3b:e8: 0c:69:e5:ed:d8:ed:df:04:99:c1:9a:c0:51:f5:04: ce:4e:de:fb:75:76:79:4b:33:49:e0:dc:dc:0c:67: 1b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:1D:01:66:8B:19:BD:E2:55:E2:B0:17:00:B1:36:AD:6A:D2:CC:9A X509v3 Authority Key Identifier: keyid:A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:4c:3f:9d:86:43:08:20:68:6f:71:0e:9b:39:f8:f5:ef:a7: d6:e5:3d:5b:5a:a0:ec:8f:57:7c:06:70:25:1e:00:a2:8d:2e: 35:1b:47:b2:ea:42:ea:c9:bb:4f:43:3c:89:9e:c4:35:35:30: 76:51:50:22:8d:0b:58:c9:c8:f9:c4:c7:c0:d7:a1:01:52:4f: 19:63:25:d8:f4:3a:5a:1c:d0:a2:10:f9:45:aa:89:96:b8:db: 26:d6:03:e5:7b:23:3f:4c:27:cc:bc:3c:6f:7a:6e:91:7c:18: 71:11:22:1b:a8:b9:c5:58:e4:0c:a0:53:e3:16:af:e1:a5:f9: 6a:1c:8e:f4:0f:18:c2:b5:05:5b:00:13:58:93:b7:25:d7:5b: 11:77:ff:11:98:0d:d4:4c:a8:e1:ae:2b:34:19:c9:e8:6b:44: 18:57:14:cc:a3:47:fc:ae:1e:94:36:d7:32:02:f6:ea:6a:f6: b1:92:8e:80:f1:9a:ec:a0:6e:2d:0d:d9:b7:f8:38:04:a1:32: bc:50:9d:c4:76:44:43:a6:f7:00:81:6a:b4:52:11:a8:18:c2: 51:aa:89:72:fc:b3:c4:2c:c3:20:a1:ff:e5:b5:e8:4a:d4:6a: 5e:cc:60:05:bd:47:a0:cd:f2:8e:61:94:31:51:4f:f5:d3:92: 86:07:0d:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUat1Q7cBt5vnvnBcwQBaUoKyej1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdBOThC Q0UyNkM2NjAeFw0yNTExMDQwMTU3MjZaFw0yNTExMDcwODI0MjZaMDMxMTAvBgNV BAMTKDU5MUQwMTY2OEIxOUJERTI1NUUyQjAxNzAwQjEzNkFENkFEMkNDOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpa2aP/Z/exvuUIVtvnNxmzILy w/o/FLmG2M+6nx111sJcrcRaFgKdv0tS9Ll9MUAVBAYmzHrDx3XSbWDT6LvbXG2e epOwoH8n0mFC6SUS/1UFb+yMpcePh5dJ82MX1dK1j7vjLEothsdRWgkYIgs3eyeU JyZrHnV4nMMRenk267ejGqgEVH38D+MBDcE+sao+ZghkLHNv2w96Q8K2SuW6BdXv I0hsPW5j5P0Yx+9xnPAiuv8Cj+Pbqgw0yPuRiXoYgqNwf1ApszST2LrXAeLqoZez TGVbgtwndHlcKk476Axp5e3Y7d8EmcGawFH1BM5O3vt1dnlLM0ng3NwMZxvjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWR0BZosZveJV4rAXALE2rWrSzJowHwYDVR0j BBgwFoAUoA6eIe6TJ/BZMK+d1YR6mLzibGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTk4ZjdmOC1lNzE1LTRiNzktYWYzMi0yZTUxNTQxYTM0ZmYvMC9BMDBFOUUyMUVF OTMyN0YwNTkzMEFGOURENTg0N0E5OEJDRTI2QzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdBOThCQ0Uy NkM2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE5OGY3ZjgtZTcxNS00Yjc5LWFm MzItMmU1MTU0MWEzNGZmLzAvQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdB OThCQ0UyNkM2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALtMP52GQwggaG9xDps5+PXvp9blPVtaoOyP V3wGcCUeAKKNLjUbR7LqQurJu09DPImexDU1MHZRUCKNC1jJyPnEx8DXoQFSTxlj Jdj0Oloc0KIQ+UWqiZa42ybWA+V7Iz9MJ8y8PG96bpF8GHERIhuoucVY5AygU+MW r+Gl+WocjvQPGMK1BVsAE1iTtyXXWxF3/xGYDdRMqOGuKzQZyehrRBhXFMyjR/yu HpQ21zIC9upq9rGSjoDxmuygbi0N2bf4OAShMrxQncR2REOm9wCBarRSEagYwlGq iXL8s8QswyCh/+W16ErUal7MYAW9R6DN8o5hlDFRT/XTkoYHDf4= -----END CERTIFICATE-----Generated at Tue Nov 4 12:53:19 2025 by rpki-client