$ rpki-client -vvf repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft File: A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft (raw, json) Hash identifier: DECxBYbKbr0hG3qHiiUSQUNOPt4UUzHdxNo+WsV3uVU= Subject key identifier: 40:C6:1D:5B:E8:DA:75:32:C1:29:34:1B:22:10:EB:4F:F9:E0:AE:00 Authority key identifier: A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3 Certificate issuer: /CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3 Certificate serial: 0582CC451BD63A5A28796A46EC9931AE3B22AE56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft Manifest number: 011A Signing time: Sat 18 Oct 2025 16:21:34 +0000 Manifest this update: Sat 18 Oct 2025 16:16:34 +0000 Manifest next update: Wed 22 Oct 2025 00:52:34 +0000 Files and hashes: 1: 3130332e36392e3137392e302f32342d3234203d3e203538383136.roa (hash: NjYP2O6N1iJnHPEyiA3Qgp2TJYDJ3V6KTZzD7MIk/3s=) 2: 3130332e36392e3137372e302f32342d3234203d3e20313335343435.roa (hash: Wq79twJ+9YzQKBjwXi/sFlzpPqc/K91eUGfTowbwJEs=) 3: A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl (hash: EHIALO0GAoRMW2HUC6BHZS+NWWn6nDcrwaVAoYOAU/g=) 4: 3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa (hash: k5DZZSxuzgo1jgebHxJfNyOAsC2XzO0g4+9J83zsZZw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 00:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:82:cc:45:1b:d6:3a:5a:28:79:6a:46:ec:99:31:ae:3b:22:ae:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3 Validity Not Before: Oct 18 16:16:34 2025 GMT Not After : Oct 22 00:52:34 2025 GMT Subject: CN=40C61D5BE8DA7532C129341B2210EB4FF9E0AE00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:20:ea:42:66:78:af:18:ef:30:07:43:ab:17: 17:e0:cc:7b:80:ba:01:54:fc:9e:56:ae:97:62:da: 8e:b7:c3:7d:43:7c:c9:c3:3a:fd:87:b3:dd:85:01: c4:16:fa:d3:3a:85:4e:43:ea:f1:2b:0f:bd:e6:70: ff:cd:fd:60:d7:46:14:d0:93:07:6c:08:e5:53:15: 98:18:61:6d:99:2e:4e:52:c2:72:69:4d:6b:7d:d8: fb:55:9e:54:ec:ee:3f:88:62:66:9e:97:c0:ee:8c: 4a:6a:c4:6a:bb:b6:96:d2:10:b6:d8:24:21:82:f2: 60:a0:7c:f7:50:ed:0c:50:b1:96:c1:82:2b:6a:fc: ed:ed:f5:5c:a4:85:ef:e7:84:ff:d5:a9:b7:f9:6a: 8e:98:42:23:52:a2:6e:6a:90:32:6f:11:6d:4d:43: c6:48:8a:f4:00:60:9f:f8:0a:d3:a7:81:75:c4:e2: 8c:c1:79:85:7e:3c:14:31:fe:7b:8c:0c:82:d8:42: 7e:a7:24:2e:a2:27:04:89:7f:31:3e:34:df:eb:fc: 2a:e0:a8:12:15:7a:64:3b:de:b0:e5:ac:67:d1:6c: 2c:69:62:76:2f:d8:60:9b:0e:d3:d9:59:7d:66:4d: 04:df:80:c6:ee:62:9a:60:7d:13:0d:b9:34:57:32: ec:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C6:1D:5B:E8:DA:75:32:C1:29:34:1B:22:10:EB:4F:F9:E0:AE:00 X509v3 Authority Key Identifier: keyid:A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:d3:de:13:7c:25:a0:40:b9:bb:fb:72:46:d6:e0:a2:47:80: e5:61:6b:ba:3b:33:f6:ba:f8:fd:5f:26:9d:3e:19:62:89:74: 75:64:d6:81:97:0f:b2:e5:b5:5d:2c:eb:b6:74:21:5f:56:1c: 8e:5d:5a:c0:9e:ce:e5:5a:2d:7a:e0:d7:d5:d1:1c:02:39:9a: b8:cc:0b:7d:b6:49:a5:17:0a:c2:df:5e:76:9a:c8:b2:8a:c1: be:15:2c:42:f3:a6:ab:5f:4e:c7:ec:8e:f2:c5:2e:34:92:1d: f4:80:56:43:e6:b7:6a:cd:e7:e9:14:e5:e1:ca:29:f7:85:09: 39:53:59:73:1d:cd:cb:71:cb:2f:3f:ba:78:84:69:07:9d:ec: 55:a5:a6:d3:19:f0:e9:18:1d:62:4e:4e:9c:fd:fb:19:29:31: 8b:87:87:de:ec:14:f5:b2:50:59:05:55:33:54:35:80:78:fb: 61:e2:67:0c:c7:a6:a5:38:a5:ef:96:f1:00:ba:c8:34:cd:a5: e1:5f:c6:19:d0:25:7e:56:60:d0:6c:63:4f:99:9e:10:84:05: 6d:88:90:c1:40:f0:b4:3d:c3:38:0c:d3:86:98:99:2b:ba:fe: 31:10:6c:ac:18:18:0c:26:cd:9b:a5:42:e0:2d:63:18:4d:89: c6:b1:d5:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBYLMRRvWOlooeWpG7JkxrjsirlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZEODNC MERDOTdEMzAeFw0yNTEwMTgxNjE2MzRaFw0yNTEwMjIwMDUyMzRaMDMxMTAvBgNV BAMTKDQwQzYxRDVCRThEQTc1MzJDMTI5MzQxQjIyMTBFQjRGRjlFMEFFMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUIOpCZnivGO8wB0OrFxfgzHuA ugFU/J5Wrpdi2o63w31DfMnDOv2Hs92FAcQW+tM6hU5D6vErD73mcP/N/WDXRhTQ kwdsCOVTFZgYYW2ZLk5SwnJpTWt92PtVnlTs7j+IYmael8DujEpqxGq7tpbSELbY JCGC8mCgfPdQ7QxQsZbBgitq/O3t9Vykhe/nhP/Vqbf5ao6YQiNSom5qkDJvEW1N Q8ZIivQAYJ/4CtOngXXE4ozBeYV+PBQx/nuMDILYQn6nJC6iJwSJfzE+NN/r/Crg qBIVemQ73rDlrGfRbCxpYnYv2GCbDtPZWX1mTQTfgMbuYppgfRMNuTRXMuz3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQMYdW+jadTLBKTQbIhDrT/ngrgAwHwYDVR0j BBgwFoAUoPSuu+BFsJwWlTeCrzBtg7Dcl9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGM3N2VlZS05YmNjLTQwMWUtOGY0ZC01ZjIzNjc1NjI3NTcvMC9BMEY0QUVCQkUw NDVCMDlDMTY5NTM3ODJBRjMwNkQ4M0IwREM5N0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZEODNCMERD OTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhjNzdlZWUtOWJjYy00MDFlLThm NGQtNWYyMzY3NTYyNzU3LzAvQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZE ODNCMERDOTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjT3hN8JaBAubv7ckbW4KJHgOVha7o7M/a6 +P1fJp0+GWKJdHVk1oGXD7LltV0s67Z0IV9WHI5dWsCezuVaLXrg19XRHAI5mrjM C322SaUXCsLfXnaayLKKwb4VLELzpqtfTsfsjvLFLjSSHfSAVkPmt2rN5+kU5eHK KfeFCTlTWXMdzctxyy8/uniEaQed7FWlptMZ8OkYHWJOTpz9+xkpMYuHh97sFPWy UFkFVTNUNYB4+2HiZwzHpqU4pe+W8QC6yDTNpeFfxhnQJX5WYNBsY0+ZnhCEBW2I kMFA8LQ9wzgM04aYmSu6/jEQbKwYGAwmzZulQuAtYxhNicax1RU= -----END CERTIFICATE-----Generated at Mon Oct 20 20:43:33 2025 by rpki-client