$ rpki-client -vvf repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft File: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft (raw, json) Hash identifier: HcvGHXUodZIyCngagYMvXmIbCDMS0O731i/Nx6vsiGA= Subject key identifier: 34:47:E6:2B:E9:99:DB:85:40:FA:26:58:72:B7:C7:88:A9:D4:60:86 Authority key identifier: A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 Certificate issuer: /CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Certificate serial: 5F14FE08A4DBADD99E62285E5D6A0E49D0AA7ADA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft Manifest number: 0527 Signing time: Mon 03 Nov 2025 12:11:13 +0000 Manifest this update: Mon 03 Nov 2025 12:06:13 +0000 Manifest next update: Thu 06 Nov 2025 18:11:13 +0000 Files and hashes: 1: 3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa (hash: m2IdeGJ3OKb2fcuJa67Ilt4MBVhM4mrbLE394lS8fh4=) 2: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl (hash: uWynizWE57W+TIalrzpAnOhRmzXRAke5xAOoQMwI/Cc=) 3: 3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa (hash: SyaesZ8nYMgrpLoLtfvyAhCoVIqjKlqg+giBaGYZdJ8=) 4: 3130332e3130322e3131332e302f32342d3234203d3e20313336383536.roa (hash: a/46ZLHY1uskWKK+dRVVv6QzmBB26BwgZ5pBVCqnJic=) 5: 3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa (hash: 1CN+jedfVpNb+gZQPhjGcg8dCw8FunfSINnOV1cGtHI=) 6: 3130332e3130322e3131322e302f32332d3233203d3e20313336383536.roa (hash: cImcrO3baPtOL+e/L4Vtls4t8QA2B+RJ0Y24oBF6eXQ=) 7: 3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa (hash: vvBVAn5yEWZctbDHQUW8z9jMeSul4l1acqZ62AKnx68=) 8: 3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa (hash: Bt0nH3UAT/CLMsfvb2IBDFeUJ9UZn6YmMXytc9svV6w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 18:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:14:fe:08:a4:db:ad:d9:9e:62:28:5e:5d:6a:0e:49:d0:aa:7a:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Validity Not Before: Nov 3 12:06:13 2025 GMT Not After : Nov 6 18:11:13 2025 GMT Subject: CN=3447E62BE999DB8540FA265872B7C788A9D46086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1e:b5:af:2b:21:ec:5c:ea:a6:ac:68:cc:09: 0a:8b:6e:d8:e7:e0:f3:16:4e:2e:d2:2b:35:c3:c8: 2d:a0:a6:60:30:97:51:05:85:44:80:7a:50:a6:24: 69:b6:46:2d:26:93:7c:59:91:5b:05:3f:ed:47:1a: 3e:78:4c:e2:e6:df:3d:4d:1a:4b:a0:89:88:0c:fb: 07:f3:15:0b:5e:73:72:7a:3c:12:94:f0:88:50:0c: 75:6f:53:30:72:32:c0:86:c7:74:ea:21:33:cb:21: ed:dd:91:25:92:13:62:3b:34:f9:c5:d4:d8:d3:f3: 3e:36:59:33:52:13:cd:46:d1:4e:70:a0:25:09:cb: 82:9c:9b:45:c2:ee:5b:58:19:40:b2:74:f1:e4:a0: dc:7a:90:15:b7:e3:b6:94:c4:95:ec:b6:45:c7:5d: 03:42:5c:3c:be:f5:d9:4e:0b:04:ab:62:dd:c5:bf: e2:53:e2:20:0b:5a:a3:6d:de:e5:1b:9a:f7:00:0e: 09:a3:ae:1a:31:4f:5b:59:78:a7:ce:a6:31:d0:18: 46:74:69:e8:0d:74:70:da:f8:02:a3:ad:0b:fd:42: d2:7a:31:7e:c8:2a:fe:59:01:72:6a:5a:c8:ef:8b: e8:03:cb:c4:68:e5:b2:a8:34:4b:89:97:8a:c7:56: 0a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:47:E6:2B:E9:99:DB:85:40:FA:26:58:72:B7:C7:88:A9:D4:60:86 X509v3 Authority Key Identifier: keyid:A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:fa:d5:76:7b:ab:f0:77:45:72:39:66:c8:1b:2f:ee:52:fc: 89:b3:91:e9:d8:41:54:09:9f:8c:91:53:68:37:69:2a:c8:95: 16:ac:86:78:5e:9e:e2:e2:d2:de:0f:db:41:15:ec:db:4f:d6: bf:62:e9:14:41:ef:e0:c8:b8:0c:6d:5c:fb:24:16:b1:12:87: 3a:41:f9:8c:e0:7a:d8:55:2b:2a:cc:82:37:81:fc:bf:7e:6b: 0b:70:81:13:22:95:ac:9f:85:0e:37:9c:e8:63:c4:65:b5:c0: c7:68:41:41:1c:a8:67:b7:1b:9b:2d:ea:77:32:84:86:af:30: 26:aa:78:ce:ad:98:ce:82:9e:8b:d8:24:2b:8b:86:6b:d0:4f: e0:ab:97:5e:e1:e4:36:32:52:bc:23:bb:c9:21:ba:c7:d0:6c: cc:ed:8c:61:51:26:6a:15:85:7e:dc:bf:74:a8:ea:c5:de:8f: a9:70:52:27:64:18:e4:c2:a8:32:09:06:3f:70:01:8a:dd:0d: 5f:a9:ba:1d:a6:d4:26:21:43:0c:50:07:01:1e:28:26:bf:a4: ec:72:36:b6:1b:76:6e:6f:27:83:c9:8f:f2:35:74:a5:a2:f9: c8:d2:04:43:1c:79:73:e7:05:db:e0:83:6e:84:81:1a:a5:31: b2:b0:1c:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXxT+CKTbrdmeYiheXWoOSdCqetowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2Njgw MjdEMUI2MzAeFw0yNTExMDMxMjA2MTNaFw0yNTExMDYxODExMTNaMDMxMTAvBgNV BAMTKDM0NDdFNjJCRTk5OURCODU0MEZBMjY1ODcyQjdDNzg4QTlENDYwODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPHrWvKyHsXOqmrGjMCQqLbtjn 4PMWTi7SKzXDyC2gpmAwl1EFhUSAelCmJGm2Ri0mk3xZkVsFP+1HGj54TOLm3z1N GkugiYgM+wfzFQtec3J6PBKU8IhQDHVvUzByMsCGx3TqITPLIe3dkSWSE2I7NPnF 1NjT8z42WTNSE81G0U5woCUJy4Kcm0XC7ltYGUCydPHkoNx6kBW347aUxJXstkXH XQNCXDy+9dlOCwSrYt3Fv+JT4iALWqNt3uUbmvcADgmjrhoxT1tZeKfOpjHQGEZ0 aegNdHDa+AKjrQv9QtJ6MX7IKv5ZAXJqWsjvi+gDy8Ro5bKoNEuJl4rHVgpTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNEfmK+mZ24VA+iZYcrfHiKnUYIYwHwYDVR0j BBgwFoAUoA28eMsvzW2pTcHgffpmaAJ9G2MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWM3YTQwNC1lYjNmLTRjZjEtOTlmOS04Mjc5NjE2NjFmMzEvMC9BMDBEQkM3OENC MkZDRDZEQTk0REMxRTA3REZBNjY2ODAyN0QxQjYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2NjgwMjdE MUI2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTVjN2E0MDQtZWIzZi00Y2YxLTk5 ZjktODI3OTYxNjYxZjMxLzAvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2 NjgwMjdEMUI2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIb61XZ7q/B3RXI5ZsgbL+5S/ImzkenYQVQJ n4yRU2g3aSrIlRashnhenuLi0t4P20EV7NtP1r9i6RRB7+DIuAxtXPskFrEShzpB +YzgethVKyrMgjeB/L9+awtwgRMilayfhQ43nOhjxGW1wMdoQUEcqGe3G5st6ncy hIavMCaqeM6tmM6CnovYJCuLhmvQT+Crl17h5DYyUrwju8khusfQbMztjGFRJmoV hX7cv3So6sXej6lwUidkGOTCqDIJBj9wAYrdDV+puh2m1CYhQwxQBwEeKCa/pOxy NrYbdm5vJ4PJj/I1dKWi+cjSBEMceXPnBdvgg26EgRqlMbKwHIE= -----END CERTIFICATE-----Generated at Tue Nov 4 01:57:24 2025 by rpki-client