$ rpki-client -vvf repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft File: A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft (raw, json) Hash identifier: PJTm0bn8lBIUfp9ykBwGqZDQDn78zDA66mAlBMmOaIY= Subject key identifier: 1D:6A:D3:95:7C:7F:F9:0F:CA:AE:92:C1:42:B1:8E:44:D4:D5:33:6A Authority key identifier: A7:49:66:24:0B:64:27:4B:90:EB:E0:6C:E0:EE:22:2C:3E:E9:C6:0E Certificate issuer: /CN=A74966240B64274B90EBE06CE0EE222C3EE9C60E Certificate serial: 6F292E64AFEB6A5E1A87D50685B29E780A08B6C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft Manifest number: 021A Signing time: Sun 02 Nov 2025 16:41:25 +0000 Manifest this update: Sun 02 Nov 2025 16:36:25 +0000 Manifest next update: Wed 05 Nov 2025 17:56:25 +0000 Files and hashes: 1: 3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa (hash: 5BGjTlG6kn0xa+zG7WIOf2FPOI4RcyC7jSjDUVIBLp8=) 2: A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl (hash: BEoTmxFbDSS5KZDWai8nbsR8xaYiHcayi5Cx57uslp0=) 3: 3130332e3138332e39342e302f32342d3234203d3e20313439343132.roa (hash: /432ui2qmqLAqTG2YzJyGFJbPM4fOVIctbLjFQr3ZFs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 17:56:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:29:2e:64:af:eb:6a:5e:1a:87:d5:06:85:b2:9e:78:0a:08:b6:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A74966240B64274B90EBE06CE0EE222C3EE9C60E Validity Not Before: Nov 2 16:36:25 2025 GMT Not After : Nov 5 17:56:25 2025 GMT Subject: CN=1D6AD3957C7FF90FCAAE92C142B18E44D4D5336A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c5:25:de:04:24:09:fb:8b:a4:db:49:df:0c: 79:e4:39:4e:8c:72:cf:82:19:51:8a:16:50:e1:c5: 22:99:c7:5d:f4:1d:7e:02:a6:02:14:41:b2:94:3c: 88:5a:3a:01:ef:72:d9:26:54:4d:e9:5b:e4:2c:4c: c5:1e:f8:32:af:b8:e1:4e:bf:50:3e:99:47:e2:02: 46:22:42:bb:30:aa:35:a1:d0:98:5a:44:3b:76:b6: 3b:78:0e:65:c1:89:12:1e:28:c7:14:4e:93:89:1f: bf:1c:44:3c:8e:8c:69:df:d3:7a:43:af:38:f1:7c: 2a:7c:f2:1d:cc:3d:06:71:a0:9e:5a:90:9f:dc:fb: ed:4e:f6:2b:3b:17:59:f7:c4:47:53:ac:fb:2d:b2: 4e:a6:04:95:18:d7:4f:d1:93:02:c7:46:77:41:60: 2a:f3:5e:c5:91:3e:5d:af:df:7a:3d:6a:ee:0c:cb: 38:29:67:83:74:ef:25:8d:01:fc:c8:10:aa:fc:1c: 2b:7f:bc:f3:31:b8:64:af:d9:90:5c:d7:33:6d:f9: 28:f1:d6:87:a8:fc:04:2c:05:a2:17:1a:2e:20:59: e2:87:44:95:7c:25:c7:a0:a8:2e:bc:b8:bc:44:1a: 9e:40:13:8a:81:6b:1b:51:09:b4:f9:43:52:b1:a2: d1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6A:D3:95:7C:7F:F9:0F:CA:AE:92:C1:42:B1:8E:44:D4:D5:33:6A X509v3 Authority Key Identifier: keyid:A7:49:66:24:0B:64:27:4B:90:EB:E0:6C:E0:EE:22:2C:3E:E9:C6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:bc:28:d9:87:1d:68:f3:dd:5c:db:d4:2a:5a:24:a8:c2:9e: 3d:cb:86:3a:4f:02:0b:f9:27:d0:cd:6a:9c:6e:ed:e6:1d:7c: 3b:25:cc:d1:3f:ec:be:b7:5e:26:52:04:f5:ac:07:7b:f0:be: 69:a7:b7:db:59:5c:e2:33:1b:bc:6c:a3:b1:0b:42:d3:3d:1b: 0c:e0:dd:75:1f:d1:1a:6d:02:b1:e8:fe:8c:15:5f:83:25:22: 91:1a:40:40:8a:8c:b0:c3:3f:18:ba:db:fa:0b:32:0c:46:d8: ed:ae:e1:78:96:4c:69:87:1d:dc:4b:64:9d:e0:64:0e:aa:71: 55:3c:b5:df:0a:20:70:36:ac:f5:04:3a:43:d8:c2:30:47:7b: 25:a2:51:99:83:44:fd:7a:36:4d:92:af:d5:7e:55:1d:f1:21: 06:28:2e:1d:cf:e0:d5:fc:f5:cb:d4:e4:9d:ce:db:5b:83:7b: 35:45:05:ff:41:c9:01:ad:94:89:d0:52:77:6b:e5:d9:ac:94: ff:ac:60:b1:23:77:d4:54:7c:b7:ff:ca:fb:4d:16:79:bc:50: 8c:96:f7:21:7f:e6:d3:cb:3f:01:95:35:18:22:96:3c:8b:63: 67:a2:70:e3:6d:62:2e:5e:81:0b:f2:29:3e:fa:5e:16:58:a3: e1:23:22:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbykuZK/ral4ah9UGhbKeeAoItscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc0OTY2MjQwQjY0Mjc0QjkwRUJFMDZDRTBFRTIyMkMz RUU5QzYwRTAeFw0yNTExMDIxNjM2MjVaFw0yNTExMDUxNzU2MjVaMDMxMTAvBgNV BAMTKDFENkFEMzk1N0M3RkY5MEZDQUFFOTJDMTQyQjE4RTQ0RDRENTMzNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvxSXeBCQJ+4uk20nfDHnkOU6M cs+CGVGKFlDhxSKZx130HX4CpgIUQbKUPIhaOgHvctkmVE3pW+QsTMUe+DKvuOFO v1A+mUfiAkYiQrswqjWh0JhaRDt2tjt4DmXBiRIeKMcUTpOJH78cRDyOjGnf03pD rzjxfCp88h3MPQZxoJ5akJ/c++1O9is7F1n3xEdTrPstsk6mBJUY10/RkwLHRndB YCrzXsWRPl2v33o9au4MyzgpZ4N07yWNAfzIEKr8HCt/vPMxuGSv2ZBc1zNt+Sjx 1oeo/AQsBaIXGi4gWeKHRJV8JcegqC68uLxEGp5AE4qBaxtRCbT5Q1KxotFvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHWrTlXx/+Q/KrpLBQrGORNTVM2owHwYDVR0j BBgwFoAUp0lmJAtkJ0uQ6+Bs4O4iLD7pxg4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGRjMTI4My0xY2UyLTQxYTUtYWZlNi1mMGJlMzFlOWIxMGQvMC9BNzQ5NjYyNDBC NjQyNzRCOTBFQkUwNkNFMEVFMjIyQzNFRTlDNjBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc0OTY2MjQwQjY0Mjc0QjkwRUJFMDZDRTBFRTIyMkMzRUU5 QzYwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBkYzEyODMtMWNlMi00MWE1LWFm ZTYtZjBiZTMxZTliMTBkLzAvQTc0OTY2MjQwQjY0Mjc0QjkwRUJFMDZDRTBFRTIy MkMzRUU5QzYwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACO8KNmHHWjz3Vzb1CpaJKjCnj3LhjpPAgv5 J9DNapxu7eYdfDslzNE/7L63XiZSBPWsB3vwvmmnt9tZXOIzG7xso7ELQtM9Gwzg 3XUf0RptArHo/owVX4MlIpEaQECKjLDDPxi62/oLMgxG2O2u4XiWTGmHHdxLZJ3g ZA6qcVU8td8KIHA2rPUEOkPYwjBHeyWiUZmDRP16Nk2Sr9V+VR3xIQYoLh3P4NX8 9cvU5J3O21uDezVFBf9ByQGtlInQUndr5dmslP+sYLEjd9RUfLf/yvtNFnm8UIyW 9yF/5tPLPwGVNRgiljyLY2eicONtYi5egQvyKT76XhZYo+EjIoY= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:37 2025 by rpki-client