$ rpki-client -vvf repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft File: A0098405BC0A535E6E4D613793C362C743319143.mft (raw, json) Hash identifier: 27TRo7SNJovHjjoQIZeyTrBxK9yPA2yaAbXpQjoL8r4= Subject key identifier: 9B:22:A5:36:04:F8:32:CA:68:F2:C8:80:DE:25:B0:97:F9:ED:5D:86 Authority key identifier: A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43 Certificate issuer: /CN=A0098405BC0A535E6E4D613793C362C743319143 Certificate serial: 5C20ACCFD3DBE2C916FEDAA9A6D4023032614D0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft Manifest number: D7 Signing time: Sun 19 Oct 2025 09:21:04 +0000 Manifest this update: Sun 19 Oct 2025 09:16:04 +0000 Manifest next update: Wed 22 Oct 2025 18:53:04 +0000 Files and hashes: 1: 3130332e3135372e38302e302f32342d3234203d3e20313431313133.roa (hash: Q6e0e1mxnvq7Z9cyA+57spYXR6whshtcuglsUxuXceY=) 2: A0098405BC0A535E6E4D613793C362C743319143.crl (hash: +aWTDy0wVrvROgoYMchkVrTtlMl3/+WW/N2+L+lk3Ho=) 3: 323030313a6466353a313738303a3a2f34382d3438203d3e20313431313133.roa (hash: ULILjGfRQgoXvgl0tXvCQV4c2a3dPck8tfEpBWTuXWg=) 4: 3130332e3135372e38312e302f32342d3234203d3e20313431313133.roa (hash: 7E801eHzByrlpX824SF5Bv9nBKvFuISx0tzFKJn/f5I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 18:53:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:20:ac:cf:d3:db:e2:c9:16:fe:da:a9:a6:d4:02:30:32:61:4d:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0098405BC0A535E6E4D613793C362C743319143 Validity Not Before: Oct 19 09:16:04 2025 GMT Not After : Oct 22 18:53:04 2025 GMT Subject: CN=9B22A53604F832CA68F2C880DE25B097F9ED5D86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:72:29:17:e4:61:5e:b1:71:d3:bc:08:68:7d: f2:b7:5a:1d:54:e4:47:c8:dd:c4:29:1f:fa:f1:e1: 58:ff:61:32:73:e3:b6:2d:b9:f5:c5:69:3e:35:42: 6e:e0:eb:e9:ca:bc:7c:e5:d7:6a:38:24:7a:62:49: 78:44:48:ff:13:8b:10:ea:f7:de:7b:45:28:2f:84: dc:b3:f9:1d:25:85:3d:7f:e1:51:ea:e7:1d:c8:8e: 8f:a4:dd:3c:c5:86:49:f0:4d:47:e7:c6:64:1c:c6: e8:27:03:9b:c3:1e:e2:36:ce:73:1c:61:2b:1e:ec: f4:a9:4d:3e:28:49:4b:bc:b3:c2:0d:ea:84:af:67: 9f:9b:4d:1d:70:8b:30:c8:1a:8c:dd:cc:07:f2:14: f2:94:dd:e4:cf:06:fc:04:7a:02:7d:2f:38:b7:61: 76:e2:9e:00:7c:4d:2a:86:3e:8b:fb:09:18:e9:0c: cd:f7:02:e1:98:8c:24:e0:55:f4:ec:58:df:2a:d6: 7e:f0:45:f2:f1:ec:cd:08:25:25:21:db:c7:ea:00: 44:cd:5d:66:0e:e5:d3:a7:e1:0d:8f:e2:95:e0:d0: fc:d9:2d:80:89:c5:86:9b:c7:c3:66:76:de:80:ce: 6f:6b:58:0a:a9:2f:eb:ac:08:7f:8e:a8:d1:7b:07: d0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:22:A5:36:04:F8:32:CA:68:F2:C8:80:DE:25:B0:97:F9:ED:5D:86 X509v3 Authority Key Identifier: keyid:A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:a0:7e:67:0f:7a:ff:18:3f:57:54:ed:1a:de:a1:48:dd:2d: 6c:6b:55:c9:b6:21:35:26:45:03:f8:95:02:75:c9:5c:aa:34: 70:11:bd:19:57:5b:20:e1:b5:ed:1f:7b:6e:85:b4:c5:44:0c: 0d:3c:e3:aa:9b:56:ea:4a:09:ae:69:bf:e3:73:c8:19:dd:a7: c5:0d:c7:a9:84:2e:61:07:75:b2:f0:02:cc:75:fc:0f:a4:55: 37:65:1d:a9:ee:f3:48:c4:9a:68:81:84:f1:53:c4:24:d8:c3: 68:8a:6e:76:2f:ef:77:32:58:27:ec:af:ce:f0:fc:19:7a:01: 35:c4:ff:f6:ab:94:09:ca:1c:d0:70:57:79:d6:16:49:7c:ef: f2:67:20:eb:88:9f:bb:09:66:23:a8:4c:09:90:b7:de:6a:57: de:47:37:4d:a8:54:b7:83:79:98:30:d6:69:3d:a3:46:3e:95: 3b:0e:9a:ef:94:d8:5e:80:8f:84:ae:d3:37:69:ad:f4:7c:5a: 03:74:5b:46:a9:b5:99:ad:ca:aa:6a:c3:1c:e0:ab:e0:68:4a: d6:34:b5:3e:af:af:b8:c4:13:39:ab:f8:cc:2b:08:94:80:c6: 89:13:f3:98:12:d1:ed:eb:16:60:72:37:27:d5:7a:8c:4a:89: 02:05:2c:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXCCsz9Pb4skW/tqpptQCMDJhTQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYyQzc0 MzMxOTE0MzAeFw0yNTEwMTkwOTE2MDRaFw0yNTEwMjIxODUzMDRaMDMxMTAvBgNV BAMTKDlCMjJBNTM2MDRGODMyQ0E2OEYyQzg4MERFMjVCMDk3RjlFRDVEODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpcikX5GFesXHTvAhoffK3Wh1U 5EfI3cQpH/rx4Vj/YTJz47YtufXFaT41Qm7g6+nKvHzl12o4JHpiSXhESP8TixDq 9957RSgvhNyz+R0lhT1/4VHq5x3Ijo+k3TzFhknwTUfnxmQcxugnA5vDHuI2znMc YSse7PSpTT4oSUu8s8IN6oSvZ5+bTR1wizDIGozdzAfyFPKU3eTPBvwEegJ9Lzi3 YXbingB8TSqGPov7CRjpDM33AuGYjCTgVfTsWN8q1n7wRfLx7M0IJSUh28fqAETN XWYO5dOn4Q2P4pXg0PzZLYCJxYabx8Nmdt6Azm9rWAqpL+usCH+OqNF7B9AFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmyKlNgT4Mspo8siA3iWwl/ntXYYwHwYDVR0j BBgwFoAUoAmEBbwKU15uTWE3k8Nix0MxkUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmNmN2M5ZS1mOGMzLTQwMTUtODgxYi1hMmMyMTgxOWQ2YjkvMC9BMDA5ODQwNUJD MEE1MzVFNkU0RDYxMzc5M0MzNjJDNzQzMzE5MTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYyQzc0MzMx OTE0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZjZjdjOWUtZjhjMy00MDE1LTg4 MWItYTJjMjE4MTlkNmI5LzAvQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYy Qzc0MzMxOTE0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABegfmcPev8YP1dU7RreoUjdLWxrVcm2ITUm RQP4lQJ1yVyqNHARvRlXWyDhte0fe26FtMVEDA0846qbVupKCa5pv+NzyBndp8UN x6mELmEHdbLwAsx1/A+kVTdlHanu80jEmmiBhPFTxCTYw2iKbnYv73cyWCfsr87w /Bl6ATXE//arlAnKHNBwV3nWFkl87/JnIOuIn7sJZiOoTAmQt95qV95HN02oVLeD eZgw1mk9o0Y+lTsOmu+U2F6Aj4Su0zdprfR8WgN0W0aptZmtyqpqwxzgq+BoStY0 tT6vr7jEEzmr+MwrCJSAxokT85gS0e3rFmByNyfVeoxKiQIFLJY= -----END CERTIFICATE-----Generated at Mon Oct 20 12:33:05 2025 by rpki-client