$ rpki-client -vvf repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft File: A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft (raw, json) Hash identifier: rHS7pg6BrR5bWy4PbEpQjYE7cjtvwI1oFj2p8dQ/AW8= Subject key identifier: 5C:89:EF:1F:73:C8:6A:5B:98:91:C3:1C:2B:B3:03:FB:ED:E8:51:C6 Authority key identifier: A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5 Certificate issuer: /CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5 Certificate serial: 3050BBE740FC0AC04ABAC1EE5C6C4DB264A1C07F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft Manifest number: 01AD Signing time: Sun 02 Nov 2025 23:31:13 +0000 Manifest this update: Sun 02 Nov 2025 23:26:13 +0000 Manifest next update: Thu 06 Nov 2025 04:37:13 +0000 Files and hashes: 1: 3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa (hash: sALgAcrv6GTHzHXKVXP7PsSP+NYmqiEn9G9dF74k/j0=) 2: 3130332e3133392e3230372e302f32342d3234203d3e20313530353133.roa (hash: j6euL0Vp2FBJXahOIaUhC8x72rtC7wYxKwq9D/ZeZp8=) 3: A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl (hash: noOhPrIt2BS6vybSrXas/9xnh4nkDBrOFPly+L78On4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:50:bb:e7:40:fc:0a:c0:4a:ba:c1:ee:5c:6c:4d:b2:64:a1:c0:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5 Validity Not Before: Nov 2 23:26:13 2025 GMT Not After : Nov 6 04:37:13 2025 GMT Subject: CN=5C89EF1F73C86A5B9891C31C2BB303FBEDE851C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d0:e0:f6:0b:1e:17:12:f0:54:35:f8:26:ef: 71:24:83:c2:89:54:d9:46:81:c4:a5:56:e9:48:0d: 1f:56:39:d3:a4:99:e3:03:16:c5:05:72:10:83:50: 4c:14:01:e9:7f:f2:6c:cf:4e:80:ff:1d:38:9e:46: 80:d2:f6:36:60:7f:56:f2:61:0a:8a:1c:87:80:84: 87:47:aa:3a:2f:20:e0:14:dd:94:3c:ec:3c:19:76: da:57:18:0d:60:4d:c5:a7:12:11:9f:7d:05:d7:a5: 75:86:f0:05:74:ed:d5:9e:25:37:eb:24:24:03:17: 69:90:11:cb:fe:c9:8d:a0:0f:37:93:4a:a0:75:aa: ab:c2:49:65:24:f3:c5:2c:0b:5a:43:7b:c0:c7:8c: 54:93:57:d8:07:e9:7d:59:1b:99:97:d1:7d:0b:84: 3e:f4:bf:c6:67:73:b3:00:58:71:5f:9c:14:dd:35: 72:0e:01:d4:82:d6:fa:7d:7b:da:41:1f:f6:8a:8e: 3d:47:f6:84:e6:67:43:d3:19:10:0d:6c:00:88:22: f1:73:68:f5:e8:b5:8c:a3:9c:46:1b:bf:85:d1:ac: 3a:c4:0c:85:de:da:61:01:a3:e0:59:e9:cd:b3:3a: 0e:2b:c5:01:c0:be:73:67:52:33:83:0f:19:e6:ad: 22:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:89:EF:1F:73:C8:6A:5B:98:91:C3:1C:2B:B3:03:FB:ED:E8:51:C6 X509v3 Authority Key Identifier: keyid:A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:84:72:89:47:fe:ce:c3:7f:bb:55:5d:b2:22:7a:12:ac:64: 0b:8b:ea:c9:ba:6c:76:83:8d:20:f7:03:33:9f:4e:13:5c:c8: 8f:24:b0:1e:a8:55:aa:b4:cc:56:6f:60:10:6b:5c:c5:cc:42: 23:69:87:d7:33:f6:9f:b1:57:f8:e4:85:7a:f3:f3:1d:aa:24: 0a:8e:ba:53:83:e3:6b:42:76:2c:50:b6:a7:ac:05:67:1c:9d: 88:15:fa:b1:1f:df:20:b0:12:10:a2:48:d1:8d:c6:a2:23:79: 43:c3:6f:40:28:8f:a1:94:5a:d1:9f:6e:55:17:5c:0a:6f:90: e6:96:db:df:42:41:aa:c9:8f:83:ff:b5:14:ef:7c:92:c4:cf: c7:77:47:df:ca:67:b9:b8:10:49:6d:17:e4:66:83:0d:b0:7f: dd:99:b2:e1:a8:2f:98:c0:0a:e0:c6:96:18:cb:a8:47:6c:33: e9:b6:b8:78:41:fd:93:60:0a:81:2c:a7:9d:ab:62:26:69:06: 5a:7e:b8:c9:af:cf:f7:04:58:a5:9d:ee:f8:d2:89:a5:95:3f: 2a:68:0c:be:08:8a:c4:1d:ca:c3:e7:83:cf:9c:73:89:c9:cb: e5:5e:2a:c9:f5:f6:5d:6e:e3:ee:bf:fa:69:69:7c:ae:0e:11: 38:8c:87:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMFC750D8CsBKusHuXGxNsmShwH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1QjBG QTIyMzFGNTAeFw0yNTExMDIyMzI2MTNaFw0yNTExMDYwNDM3MTNaMDMxMTAvBgNV BAMTKDVDODlFRjFGNzNDODZBNUI5ODkxQzMxQzJCQjMwM0ZCRURFODUxQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE0OD2Cx4XEvBUNfgm73Ekg8KJ VNlGgcSlVulIDR9WOdOkmeMDFsUFchCDUEwUAel/8mzPToD/HTieRoDS9jZgf1by YQqKHIeAhIdHqjovIOAU3ZQ87DwZdtpXGA1gTcWnEhGffQXXpXWG8AV07dWeJTfr JCQDF2mQEcv+yY2gDzeTSqB1qqvCSWUk88UsC1pDe8DHjFSTV9gH6X1ZG5mX0X0L hD70v8Znc7MAWHFfnBTdNXIOAdSC1vp9e9pBH/aKjj1H9oTmZ0PTGRANbACIIvFz aPXotYyjnEYbv4XRrDrEDIXe2mEBo+BZ6c2zOg4rxQHAvnNnUjODDxnmrSK5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXInvH3PIaluYkcMcK7MD++3oUcYwHwYDVR0j BBgwFoAUoBtnFaWynyPTPHC05ZE1sPoiMfUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDkxMmM5Yi1kY2U0LTQwZTYtOTU4OC1kN2NhOGMzN2VmNGQvMC9BMDFCNjcxNUE1 QjI5RjIzRDMzQzcwQjRFNTkxMzVCMEZBMjIzMUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1QjBGQTIy MzFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ5MTJjOWItZGNlNC00MGU2LTk1 ODgtZDdjYThjMzdlZjRkLzAvQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1 QjBGQTIyMzFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALyEcolH/s7Df7tVXbIiehKsZAuL6sm6bHaD jSD3AzOfThNcyI8ksB6oVaq0zFZvYBBrXMXMQiNph9cz9p+xV/jkhXrz8x2qJAqO ulOD42tCdixQtqesBWccnYgV+rEf3yCwEhCiSNGNxqIjeUPDb0Aoj6GUWtGfblUX XApvkOaW299CQarJj4P/tRTvfJLEz8d3R9/KZ7m4EEltF+Rmgw2wf92ZsuGoL5jA CuDGlhjLqEdsM+m2uHhB/ZNgCoEsp52rYiZpBlp+uMmvz/cEWKWd7vjSiaWVPypo DL4IisQdysPng8+cc4nJy+VeKsn19l1u4+6/+mlpfK4OETiMhxc= -----END CERTIFICATE-----Generated at Tue Nov 4 23:03:13 2025 by rpki-client