$ rpki-client -vvf repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft File: 0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft (raw, json) Hash identifier: cOE6JZh2cTFpBgrT+EUhHbtLGXn5oh9cRTKiVI2VWXA= Subject key identifier: 63:28:D5:D1:47:8F:F4:0F:59:54:A1:BC:79:00:FF:30:49:6A:73:E7 Authority key identifier: 01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04 Certificate issuer: /CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804 Certificate serial: 326DDE7D01B22E923D15E9E1CD308F9905912D05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft Manifest number: 01D9 Signing time: Sun 19 Oct 2025 18:50:55 +0000 Manifest this update: Sun 19 Oct 2025 18:45:55 +0000 Manifest next update: Wed 22 Oct 2025 23:22:55 +0000 Files and hashes: 1: 0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl (hash: v0gkiK/Q9PZ8FHnXanDgOd9kctR7N7Et3AwNaOF093M=) 2: 3130332e33352e3135322e302f32332d3233203d3e2039333431.roa (hash: 7pJK2Nu09mDb/KW48/x7bS6pMakC4PmiTUB5vEr70Gk=) 3: 3130332e33352e3135332e302f32342d3234203d3e2039333431.roa (hash: 4gA0Ayh4wc+enuZjfM5cvXtF4KS/wz/Vl+eaNQabdGI=) 4: 3130332e33352e3135322e302f32342d3234203d3e2039333431.roa (hash: U/yDn1W4jZEF4S0Nu+KZGK93oXQkpj5Y66m25j//fks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 23:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:6d:de:7d:01:b2:2e:92:3d:15:e9:e1:cd:30:8f:99:05:91:2d:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804 Validity Not Before: Oct 19 18:45:55 2025 GMT Not After : Oct 22 23:22:55 2025 GMT Subject: CN=6328D5D1478FF40F5954A1BC7900FF30496A73E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c9:0b:78:a7:e2:3a:a8:36:6c:f6:5d:5d:e2: b8:1c:b7:91:70:82:0d:24:ea:c2:60:01:f8:92:7a: e7:20:f3:8a:e1:aa:b5:e1:9a:c9:dc:b2:9e:39:b2: 45:07:11:33:6f:c7:6b:99:4b:91:1b:39:dd:11:84: 3a:61:8d:41:a7:41:f1:aa:96:ab:e0:ea:13:fd:45: e6:17:10:74:c5:66:fc:88:ee:6f:a5:ff:41:db:0c: e5:43:42:a0:ff:ec:50:92:f1:0d:b5:26:21:ed:6d: 7f:50:29:62:2a:e5:dc:fc:f4:5e:c8:11:85:3e:f0: eb:f7:52:d0:a5:4b:ef:46:cb:cf:7f:86:45:b4:2d: bd:52:a8:ab:c0:b6:4e:8c:93:75:d7:e4:cf:9f:4e: db:77:91:44:d9:6c:86:a9:b9:24:15:36:a7:d5:8e: 59:4d:f7:80:9e:12:89:5f:7e:79:12:a3:c6:57:57: ca:ac:a0:79:30:c9:77:47:6c:6e:d1:2a:3e:f7:9e: 32:33:a4:44:60:eb:de:6d:12:e7:bb:5e:ee:f4:0d: 08:f0:b3:88:76:97:23:aa:f3:99:57:a6:5c:5d:79: c9:63:ed:42:97:da:9d:71:a1:c4:ee:3c:20:27:ef: 07:f8:f4:e5:a0:aa:e5:eb:8b:87:85:6a:05:35:6a: 47:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:28:D5:D1:47:8F:F4:0F:59:54:A1:BC:79:00:FF:30:49:6A:73:E7 X509v3 Authority Key Identifier: keyid:01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c1:19:76:21:79:91:d0:2e:a2:7e:33:c3:60:9f:98:d4:83: ec:87:02:ce:1d:4e:65:e5:b1:4e:f5:64:b0:b2:80:69:94:85: 7f:cf:92:ad:3d:01:d0:1f:35:0e:42:07:72:5c:8b:dd:08:2d: 1c:86:1d:5e:7b:d5:e6:86:19:fb:7c:16:ed:73:59:32:9a:02: 13:34:54:ee:ab:9e:69:61:06:a1:c6:b0:4d:f7:7d:bc:9b:69: d0:1e:79:dd:6d:1d:3e:fb:39:9c:4d:79:6e:7a:25:f4:a6:97: 45:c9:28:c8:bc:50:e1:57:a1:28:a4:7d:df:0d:cf:dd:b2:bb: 11:de:94:27:2f:4b:07:c6:5b:7d:20:99:7a:51:20:7b:d1:c5: cc:0c:be:54:29:9f:db:2a:1f:97:3d:83:2e:85:5e:00:5e:6b: 39:83:96:3f:a8:91:a7:0d:fe:23:a3:c5:f3:9d:20:1e:6c:df: 1c:c3:c2:91:e9:2a:f6:55:d1:50:17:b7:00:59:38:4f:f3:dd: 39:b6:b9:d9:de:50:91:2c:6c:2d:39:a3:a6:e5:4e:01:1d:3e: ce:69:18:1e:5e:0b:f2:0b:b2:38:f9:d4:a8:e7:ed:72:ca:9a: e5:ec:a7:10:ba:ae:c6:8f:40:c6:51:b7:8a:fd:8a:39:cc:aa: f4:5c:1d:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMm3efQGyLpI9FenhzTCPmQWRLQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZEQ0VE MEE1NzgwNDAeFw0yNTEwMTkxODQ1NTVaFw0yNTEwMjIyMzIyNTVaMDMxMTAvBgNV BAMTKDYzMjhENUQxNDc4RkY0MEY1OTU0QTFCQzc5MDBGRjMwNDk2QTczRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtyQt4p+I6qDZs9l1d4rgct5Fw gg0k6sJgAfiSeucg84rhqrXhmsncsp45skUHETNvx2uZS5EbOd0RhDphjUGnQfGq lqvg6hP9ReYXEHTFZvyI7m+l/0HbDOVDQqD/7FCS8Q21JiHtbX9QKWIq5dz89F7I EYU+8Ov3UtClS+9Gy89/hkW0Lb1SqKvAtk6Mk3XX5M+fTtt3kUTZbIapuSQVNqfV jllN94CeEolffnkSo8ZXV8qsoHkwyXdHbG7RKj73njIzpERg695tEue7Xu70DQjw s4h2lyOq85lXplxdeclj7UKX2p1xocTuPCAn7wf49OWgquXri4eFagU1akflAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYyjV0UeP9A9ZVKG8eQD/MElqc+cwHwYDVR0j BBgwFoAUAQCn9sTVjDhn+c7X59RtztCleAQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDg4NTUyNS1jYjBmLTQ2YTAtODI1My0wNDJkN2Q3YWZmMzgvMC8wMTAwQTdGNkM0 RDU4QzM4NjdGOUNFRDdFN0Q0NkRDRUQwQTU3ODA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZEQ0VEMEE1 NzgwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ4ODU1MjUtY2IwZi00NmEwLTgy NTMtMDQyZDdkN2FmZjM4LzAvMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZE Q0VEMEE1NzgwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvBGXYheZHQLqJ+M8Ngn5jUg+yHAs4dTmXl sU71ZLCygGmUhX/Pkq09AdAfNQ5CB3Jci90ILRyGHV571eaGGft8Fu1zWTKaAhM0 VO6rnmlhBqHGsE33fbybadAeed1tHT77OZxNeW56JfSml0XJKMi8UOFXoSikfd8N z92yuxHelCcvSwfGW30gmXpRIHvRxcwMvlQpn9sqH5c9gy6FXgBeazmDlj+okacN /iOjxfOdIB5s3xzDwpHpKvZV0VAXtwBZOE/z3Tm2udneUJEsbC05o6blTgEdPs5p GB5eC/ILsjj51Kjn7XLKmuXspxC6rsaPQMZRt4r9ijnMqvRcHTE= -----END CERTIFICATE-----Generated at Mon Oct 20 10:02:48 2025 by rpki-client