$ rpki-client -vvf repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft File: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft (raw, json) Hash identifier: 2RTqhYLnk86tsP6TQqDgpO+X21n6P1+Ghn+w7ur+Kak= Subject key identifier: 9F:28:11:20:32:4F:1E:CB:6F:9C:5F:C3:B6:FB:3D:96:C3:C9:DB:DC Authority key identifier: 0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 Certificate issuer: /CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Certificate serial: 6C215AF9E8B9279213FBBCCC8B9E40B2F3D33E79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft Manifest number: 011F Signing time: Sun 19 Oct 2025 14:01:00 +0000 Manifest this update: Sun 19 Oct 2025 13:56:00 +0000 Manifest next update: Thu 23 Oct 2025 01:43:00 +0000 Files and hashes: 1: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl (hash: TtNwGxnszwwOUvy/revgSl7HWROBDSRRFdTDW/2zmps=) 2: 3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa (hash: 8OwVADfDElltpILpTKCgIU3iWPks4hxCwKGTSEJQw8w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 01:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:21:5a:f9:e8:b9:27:92:13:fb:bc:cc:8b:9e:40:b2:f3:d3:3e:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Validity Not Before: Oct 19 13:56:00 2025 GMT Not After : Oct 23 01:43:00 2025 GMT Subject: CN=9F281120324F1ECB6F9C5FC3B6FB3D96C3C9DBDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1c:d1:c1:e7:6d:02:2e:f3:b2:a0:6d:7c:f3: 9e:79:a9:79:3f:28:66:41:2c:b2:40:41:4c:86:25: 02:9e:a7:c9:e5:ad:84:e6:8c:c4:00:14:39:ca:c3: 5a:f3:0e:76:8b:c4:c2:39:cc:f9:db:11:21:e7:21: ce:38:2e:f6:22:95:43:f0:49:3f:c6:d3:84:e6:90: d9:3f:bf:6d:8e:74:e6:a9:b7:a3:8b:36:86:44:61: 1e:37:82:e3:c3:9a:b6:d7:82:6f:d6:61:8e:e5:1e: 2c:8b:56:3d:10:7c:83:4d:8b:37:26:18:cb:5f:c5: c5:bb:2a:e0:ac:1d:8f:3d:97:a3:49:46:ee:7d:72: 1f:4c:65:71:55:ed:cc:e6:ea:ed:87:9c:e4:a2:66: f2:5f:47:31:57:77:8c:7f:ab:04:f3:32:49:e4:b3: f5:44:d8:7e:c9:a2:1b:0c:94:f6:0a:06:b5:ff:01: 3b:2e:a9:ca:87:ad:b4:75:19:4a:37:4a:d5:c7:e4: 73:fe:61:52:91:af:1e:2b:67:e4:65:4d:78:f1:c6: 41:46:1b:30:b9:32:fb:8a:f5:b8:71:1b:f2:7c:30: 76:0d:d8:9e:08:75:15:d5:61:ff:66:d4:23:e0:91: ce:d7:92:3c:87:7d:c4:a3:35:4f:9b:fd:55:c9:85: c2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:28:11:20:32:4F:1E:CB:6F:9C:5F:C3:B6:FB:3D:96:C3:C9:DB:DC X509v3 Authority Key Identifier: keyid:0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:44:fe:b6:08:e1:09:71:60:e5:28:49:3a:69:92:82:64:8d: c5:26:56:95:6b:2f:a3:fa:c9:a8:d2:8d:45:b8:12:3b:3f:b5: a9:68:41:3f:2e:8c:8f:7a:a7:3b:9e:de:f7:4a:48:cd:83:56: 05:30:1b:71:4f:7f:22:91:ee:ce:b0:cd:57:00:67:ae:1f:b8: d2:1d:a6:27:2c:f9:6d:a4:2c:b2:3e:2a:32:31:11:15:f6:52: 35:42:04:1f:b3:6e:73:5a:25:f7:73:4d:30:05:65:7f:5b:39: fc:67:cf:67:f3:3c:78:70:c2:63:76:7e:b2:41:76:ed:cc:dd: aa:4e:33:6c:1b:13:33:25:1d:99:7b:9c:ba:36:4d:af:d4:44: f7:d0:be:47:8c:f1:c3:26:3b:37:12:dd:35:80:92:88:5b:04: 36:e2:ea:a4:54:37:73:2b:19:f7:ee:68:0d:56:b3:84:6a:bb: 98:5e:be:57:cb:30:36:97:d4:71:aa:01:80:64:8e:3a:5f:01: 23:72:49:d3:41:3b:55:34:00:27:8f:01:9b:b8:b6:bc:04:c1: 67:ea:df:0d:cd:ad:9a:07:7e:f2:0e:37:1d:f9:cf:f5:2a:60: 05:cf:67:c3:58:55:62:92:60:20:89:e8:2e:4b:71:ba:21:92: 3f:ff:77:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbCFa+ei5J5IT+7zMi55AsvPTPnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5 Q0Q0RUIyMDAeFw0yNTEwMTkxMzU2MDBaFw0yNTEwMjMwMTQzMDBaMDMxMTAvBgNV BAMTKDlGMjgxMTIwMzI0RjFFQ0I2RjlDNUZDM0I2RkIzRDk2QzNDOURCREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlHNHB520CLvOyoG188555qXk/ KGZBLLJAQUyGJQKep8nlrYTmjMQAFDnKw1rzDnaLxMI5zPnbESHnIc44LvYilUPw ST/G04TmkNk/v22OdOapt6OLNoZEYR43guPDmrbXgm/WYY7lHiyLVj0QfINNizcm GMtfxcW7KuCsHY89l6NJRu59ch9MZXFV7czm6u2HnOSiZvJfRzFXd4x/qwTzMknk s/VE2H7JohsMlPYKBrX/ATsuqcqHrbR1GUo3StXH5HP+YVKRrx4rZ+RlTXjxxkFG GzC5MvuK9bhxG/J8MHYN2J4IdRXVYf9m1CPgkc7XkjyHfcSjNU+b/VXJhcKLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnygRIDJPHstvnF/Dtvs9lsPJ29wwHwYDVR0j BBgwFoAUCn4iLww8iRQ1FAT8BdsP3ZzU6yAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2YzNWE0Ny0yY2NlLTQ4N2YtYWEyNy1jOWU5ZGU2MzViZWMvMC8wQTdFMjIyRjBD M0M4OTE0MzUxNDA0RkMwNURCMEZERDlDRDRFQjIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5Q0Q0 RUIyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNmMzVhNDctMmNjZS00ODdmLWFh MjctYzllOWRlNjM1YmVjLzAvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBG REQ5Q0Q0RUIyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZE/rYI4QlxYOUoSTppkoJkjcUmVpVrL6P6 yajSjUW4Ejs/taloQT8ujI96pzue3vdKSM2DVgUwG3FPfyKR7s6wzVcAZ64fuNId pics+W2kLLI+KjIxERX2UjVCBB+zbnNaJfdzTTAFZX9bOfxnz2fzPHhwwmN2frJB du3M3apOM2wbEzMlHZl7nLo2Ta/URPfQvkeM8cMmOzcS3TWAkohbBDbi6qRUN3Mr GffuaA1Ws4Rqu5hevlfLMDaX1HGqAYBkjjpfASNySdNBO1U0ACePAZu4trwEwWfq 3w3NrZoHfvIONx35z/UqYAXPZ8NYVWKSYCCJ6C5Lcbohkj//d4w= -----END CERTIFICATE-----Generated at Mon Oct 20 12:33:03 2025 by rpki-client