$ rpki-client -vvf repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft File: A603F8DE41A0C254133C531FFB98C664160BB962.mft (raw, json) Hash identifier: djQnmNCS0M/mFX7wkUw5HJbsj/dZ+71YxirW+BKYlQw= Subject key identifier: 2B:ED:7C:56:BD:2F:63:ED:5A:3F:B2:52:97:EA:19:03:0E:6F:92:3D Authority key identifier: A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 Certificate issuer: /CN=A603F8DE41A0C254133C531FFB98C664160BB962 Certificate serial: 049856CEB39F2534AFFA6564939AAC81B741F996 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft Manifest number: DF Signing time: Sun 02 Nov 2025 20:21:36 +0000 Manifest this update: Sun 02 Nov 2025 20:16:36 +0000 Manifest next update: Thu 06 Nov 2025 08:02:36 +0000 Files and hashes: 1: A603F8DE41A0C254133C531FFB98C664160BB962.crl (hash: J0EGEqkMvrmkr+2M19ge972TRvYc5QG3NnbLTSVy1VM=) 2: 3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa (hash: A4SxOCYpMsvPg6bxzwOZR5xlNJbTnvovMLUlr03+yjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 08:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:98:56:ce:b3:9f:25:34:af:fa:65:64:93:9a:ac:81:b7:41:f9:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A603F8DE41A0C254133C531FFB98C664160BB962 Validity Not Before: Nov 2 20:16:36 2025 GMT Not After : Nov 6 08:02:36 2025 GMT Subject: CN=2BED7C56BD2F63ED5A3FB25297EA19030E6F923D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f7:4f:67:6c:e5:e3:6a:4c:f4:96:7a:8e:70: 94:3e:92:d9:88:c8:72:14:a0:23:43:b3:e0:a3:cf: e8:41:4a:18:6f:0e:d9:03:cd:a9:1c:33:4e:94:4e: 16:3b:1e:7d:a4:15:af:d1:54:fe:01:2b:58:13:e9: 79:f2:e2:da:1c:eb:4c:80:ad:8e:74:e5:c2:24:40: c5:e5:45:1a:05:da:d4:57:05:a4:06:0c:ef:f7:da: f1:22:f7:bd:e4:a4:08:e1:6b:74:f5:d8:78:14:24: 52:99:e5:8c:3a:aa:86:8e:65:12:75:45:69:4e:0a: 82:6a:e7:db:8f:bc:c3:a4:69:04:65:71:88:9e:dc: 3e:e3:f5:58:e8:7b:3a:a3:7e:84:88:d9:88:70:51: a8:8c:d9:81:99:cc:ff:ac:f3:d4:2c:7b:13:47:16: d3:a6:53:c8:4e:2f:6b:db:19:9f:b5:41:aa:dc:b6: 0f:c2:ef:f2:5b:a0:62:8a:55:1f:89:97:78:33:89: e7:ee:9d:fe:f2:a2:e8:4f:6a:5e:7b:6d:9b:21:cb: 89:5b:82:1d:a4:98:a8:5e:cb:2f:16:cc:fa:64:40: e2:a1:3b:2f:5c:10:00:81:3b:21:ce:0e:10:a1:f0: bc:3a:9c:b2:80:54:38:fa:55:0a:ab:86:c0:b2:6b: df:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:ED:7C:56:BD:2F:63:ED:5A:3F:B2:52:97:EA:19:03:0E:6F:92:3D X509v3 Authority Key Identifier: keyid:A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:67:fb:f4:d5:15:42:c1:5c:e1:6e:db:1c:b7:ce:a0:d7:73: 4d:ab:f7:fb:a2:0e:b3:4c:6a:60:67:27:b3:a9:2b:40:c1:c9: fc:aa:80:1b:a5:55:ac:db:db:b5:73:52:a2:0c:97:fb:3d:88: da:7a:22:ca:e6:88:0e:27:e0:d7:16:d0:2d:93:e7:a4:6e:7c: 7f:46:15:11:69:37:47:0f:a8:94:2d:f2:c7:a6:80:46:3f:d1: ad:c7:af:14:48:a9:54:2c:a5:d1:6b:27:02:49:a8:d3:70:c7: 13:5f:05:d1:29:95:ff:09:44:dd:55:5b:b9:74:cd:4a:70:0b: eb:4e:06:0b:9a:b0:0d:c0:70:0e:36:3c:3e:14:5b:3e:7a:3b: e3:c3:98:3d:c0:fc:ba:59:f1:c3:39:c9:b9:4f:dd:c0:09:a1: 03:6f:53:8b:2b:88:0a:44:4e:ae:c6:f2:f1:66:fa:31:ae:67: 98:fc:1e:9f:54:c9:5a:81:b0:a5:17:8a:bd:e6:8a:30:96:b8: 5c:59:00:fc:ee:dd:39:35:66:16:be:62:e9:7a:67:02:80:b0: 3d:1f:ec:4b:94:3f:6a:02:e5:1a:57:62:1d:8a:10:12:17:0c: d3:30:00:29:21:23:4c:ee:ad:28:04:23:dd:9a:79:8a:e5:df: b0:1c:df:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBJhWzrOfJTSv+mVkk5qsgbdB+ZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2NjQx NjBCQjk2MjAeFw0yNTExMDIyMDE2MzZaFw0yNTExMDYwODAyMzZaMDMxMTAvBgNV BAMTKDJCRUQ3QzU2QkQyRjYzRUQ1QTNGQjI1Mjk3RUExOTAzMEU2RjkyM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6909nbOXjakz0lnqOcJQ+ktmI yHIUoCNDs+Cjz+hBShhvDtkDzakcM06UThY7Hn2kFa/RVP4BK1gT6Xny4toc60yA rY505cIkQMXlRRoF2tRXBaQGDO/32vEi973kpAjha3T12HgUJFKZ5Yw6qoaOZRJ1 RWlOCoJq59uPvMOkaQRlcYie3D7j9VjoezqjfoSI2YhwUaiM2YGZzP+s89QsexNH FtOmU8hOL2vbGZ+1Qarctg/C7/JboGKKVR+Jl3gziefunf7youhPal57bZshy4lb gh2kmKheyy8WzPpkQOKhOy9cEACBOyHODhCh8Lw6nLKAVDj6VQqrhsCya99jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK+18Vr0vY+1aP7JSl+oZAw5vkj0wHwYDVR0j BBgwFoAUpgP43kGgwlQTPFMf+5jGZBYLuWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OWI4MTUyZS1hYTg2LTRkOGEtODFkYS1lNzEwODZiMjk1NmMvMC9BNjAzRjhERTQx QTBDMjU0MTMzQzUzMUZGQjk4QzY2NDE2MEJCOTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2NjQxNjBC Qjk2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzAvQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2 NjQxNjBCQjk2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVn+/TVFULBXOFu2xy3zqDXc02r9/uiDrNM amBnJ7OpK0DByfyqgBulVazb27VzUqIMl/s9iNp6IsrmiA4n4NcW0C2T56RufH9G FRFpN0cPqJQt8semgEY/0a3HrxRIqVQspdFrJwJJqNNwxxNfBdEplf8JRN1VW7l0 zUpwC+tOBguasA3AcA42PD4UWz56O+PDmD3A/LpZ8cM5yblP3cAJoQNvU4sriApE Tq7G8vFm+jGuZ5j8Hp9UyVqBsKUXir3mijCWuFxZAPzu3Tk1Zha+Yul6ZwKAsD0f 7EuUP2oC5RpXYh2KEBIXDNMwACkhI0zurSgEI92aeYrl37Ac36w= -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:05 2025 by rpki-client