$ rpki-client -vvf repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft File: 0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft (raw, json) Hash identifier: 8RpRNLwylRBX//oeHlddOx/2uYavhX09VfzGVw4wS28= Subject key identifier: 9B:B7:3A:4B:5E:45:25:DA:DA:2A:A4:D8:FB:BE:56:3A:FF:AB:98:F0 Authority key identifier: 0A:1D:E6:FD:88:BB:9E:F4:E3:49:C1:77:4D:A9:26:E4:23:26:47:96 Certificate issuer: /CN=0A1DE6FD88BB9EF4E349C1774DA926E423264796 Certificate serial: 428C46CE44CC0E93EC6DE4AF70C9322703846496 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft Manifest number: 0521 Signing time: Wed 05 Nov 2025 00:52:17 +0000 Manifest this update: Wed 05 Nov 2025 00:47:17 +0000 Manifest next update: Sat 08 Nov 2025 02:55:17 +0000 Files and hashes: 1: 0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl (hash: RuW6Vq3dHZAlk2h76zo7gEoOyisC4g+cDTxK9/08zA0=) 2: 323030313a6466343a343938303a3a2f34382d3438203d3e20313430343633.roa (hash: ALvwx2swtpbz8NGxp51wtfjrJRECE+XKLqFSLUrMbz4=) 3: 3130332e3135332e3133312e302f32342d3234203d3e20313430343633.roa (hash: qjM6zOskUgB5aVouJZ8bw8PRtPD9BsEaccD1Oe43xX4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 02:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:8c:46:ce:44:cc:0e:93:ec:6d:e4:af:70:c9:32:27:03:84:64:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1DE6FD88BB9EF4E349C1774DA926E423264796 Validity Not Before: Nov 5 00:47:17 2025 GMT Not After : Nov 8 02:55:17 2025 GMT Subject: CN=9BB73A4B5E4525DADA2AA4D8FBBE563AFFAB98F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:61:dc:53:6a:46:fa:ef:33:a6:e0:25:27:88: 80:f6:5f:b8:bd:a5:8e:e4:a3:24:7a:b6:8b:38:8d: dc:cb:8c:44:c8:4f:e2:56:d6:3d:9e:98:0b:94:af: 96:d9:bd:c8:4e:8a:89:87:0e:7b:18:09:b1:7a:29: 7c:14:35:3c:04:24:fc:5f:60:53:15:ad:3d:06:f5: 0d:42:18:70:bb:a5:03:17:4f:dc:33:f1:f0:4c:24: 5e:86:1d:64:84:ad:47:33:e7:ed:f5:c9:71:d9:c8: c6:e7:4a:8b:4b:a1:99:09:90:09:72:ee:bb:28:d2: 35:c0:af:cf:b4:f2:bd:43:ca:6f:aa:91:b6:69:c1: 01:35:67:77:61:62:bb:6d:3b:a6:ab:54:05:e8:4f: 31:9b:50:67:40:82:c4:2f:f3:86:a0:5c:3a:ec:fe: 4a:0e:51:6c:f4:6a:ff:d4:55:51:04:e0:b3:a7:1e: 3f:1d:37:03:11:fe:a1:49:9a:16:de:02:c4:ac:a5: 05:3f:1c:87:d5:11:08:25:6e:81:9d:e5:5b:b1:f7: 60:f9:39:57:43:89:9b:26:4b:ca:77:85:6a:0a:fa: 54:7c:4b:69:5c:09:ef:dd:c6:c4:68:9f:87:09:cf: 35:c6:5f:64:19:c6:da:51:65:29:46:1c:de:e1:7f: b9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B7:3A:4B:5E:45:25:DA:DA:2A:A4:D8:FB:BE:56:3A:FF:AB:98:F0 X509v3 Authority Key Identifier: keyid:0A:1D:E6:FD:88:BB:9E:F4:E3:49:C1:77:4D:A9:26:E4:23:26:47:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:62:a3:be:42:4b:99:ad:90:3b:ba:26:ad:71:83:29:4d:9e: 2e:86:5f:54:87:16:91:48:73:72:21:a2:d4:09:03:6c:d9:9b: 34:af:9a:1c:5c:21:3b:c3:83:be:f7:1f:30:c6:86:ab:8a:9c: c8:5b:fb:54:21:26:53:88:3b:fd:1f:2e:0f:74:0c:92:71:fc: da:34:39:30:c0:64:c0:5f:fe:1d:0a:a6:3e:1f:48:7f:05:92: 07:96:f2:d8:77:b7:bf:96:5f:78:f8:06:15:c2:41:f2:4f:09: f4:1f:a6:82:82:3f:7a:2f:fb:22:59:ca:76:fe:0e:d6:2b:76: 3d:9c:70:ff:c0:1d:54:73:80:5a:4f:7e:19:81:43:7b:d6:a1: f6:3f:00:6a:38:30:5d:e8:75:58:2b:e0:01:1e:96:07:98:fa: 17:79:6d:55:b6:ca:eb:55:20:44:31:d8:47:51:7c:ae:8e:1d: 49:46:a9:6a:3e:63:d3:4d:cb:0d:9e:2d:75:98:eb:a6:23:90: 8d:19:5a:c1:f2:2d:d6:1c:7d:99:65:72:19:fe:71:b1:f6:37: 1c:fd:43:08:4a:4c:fe:96:bf:a4:5d:ee:c6:67:e5:22:22:27: 1a:02:4b:db:92:db:ec:a1:b8:54:b5:b3:3a:47:6e:4e:2e:28: 82:55:43:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQoxGzkTMDpPsbeSvcMkyJwOEZJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2RTQy MzI2NDc5NjAeFw0yNTExMDUwMDQ3MTdaFw0yNTExMDgwMjU1MTdaMDMxMTAvBgNV BAMTKDlCQjczQTRCNUU0NTI1REFEQTJBQTREOEZCQkU1NjNBRkZBQjk4RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcYdxTakb67zOm4CUniID2X7i9 pY7koyR6tos4jdzLjETIT+JW1j2emAuUr5bZvchOiomHDnsYCbF6KXwUNTwEJPxf YFMVrT0G9Q1CGHC7pQMXT9wz8fBMJF6GHWSErUcz5+31yXHZyMbnSotLoZkJkAly 7rso0jXAr8+08r1Dym+qkbZpwQE1Z3dhYrttO6arVAXoTzGbUGdAgsQv84agXDrs /koOUWz0av/UVVEE4LOnHj8dNwMR/qFJmhbeAsSspQU/HIfVEQglboGd5Vux92D5 OVdDiZsmS8p3hWoK+lR8S2lcCe/dxsRon4cJzzXGX2QZxtpRZSlGHN7hf7lXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm7c6S15FJdraKqTY+75WOv+rmPAwHwYDVR0j BBgwFoAUCh3m/Yi7nvTjScF3Takm5CMmR5YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTFlMGJkNy0yODFhLTRlYmEtYjk4Yy04MjkzOTMyN2RkZDcvMC8wQTFERTZGRDg4 QkI5RUY0RTM0OUMxNzc0REE5MjZFNDIzMjY0Nzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2RTQyMzI2 NDc5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWExZTBiZDctMjgxYS00ZWJhLWI5 OGMtODI5MzkzMjdkZGQ3LzAvMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2 RTQyMzI2NDc5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFio75CS5mtkDu6Jq1xgylNni6GX1SHFpFI c3IhotQJA2zZmzSvmhxcITvDg773HzDGhquKnMhb+1QhJlOIO/0fLg90DJJx/No0 OTDAZMBf/h0Kpj4fSH8FkgeW8th3t7+WX3j4BhXCQfJPCfQfpoKCP3ov+yJZynb+ DtYrdj2ccP/AHVRzgFpPfhmBQ3vWofY/AGo4MF3odVgr4AEelgeY+hd5bVW2yutV IEQx2EdRfK6OHUlGqWo+Y9NNyw2eLXWY66YjkI0ZWsHyLdYcfZllchn+cbH2Nxz9 QwhKTP6Wv6Rd7sZn5SIiJxoCS9uS2+yhuFS1szpHbk4uKIJVQ4Y= -----END CERTIFICATE-----Generated at Wed Nov 5 05:47:33 2025 by rpki-client