$ rpki-client -vvf repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft File: A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft (raw, json) Hash identifier: PV0dpzLSSZrKFBPkDJflZCoKMfE5UtoyvqtXFLV2228= Subject key identifier: 8A:1E:47:F2:8B:61:4E:0E:1E:B7:D7:35:01:96:6D:95:2F:6D:41:5F Authority key identifier: A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27 Certificate issuer: /CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27 Certificate serial: 5DE1A6191F888AB3CFA1913A7FFBCDB1522F82FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft Manifest number: 01A8 Signing time: Sun 19 Oct 2025 13:40:46 +0000 Manifest this update: Sun 19 Oct 2025 13:35:46 +0000 Manifest next update: Thu 23 Oct 2025 00:11:46 +0000 Files and hashes: 1: A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl (hash: uokwJW7U6kbVWtvwIZDJkXUlz1WtEJDIospywKAG5XU=) 2: 3130332e39392e32322e302f32342d3234203d3e20313530343636.roa (hash: 4sRqcnfl28Qx3qMYiueLtJEnTwO1spNjb24E7TCWt0k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 00:11:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e1:a6:19:1f:88:8a:b3:cf:a1:91:3a:7f:fb:cd:b1:52:2f:82:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27 Validity Not Before: Oct 19 13:35:46 2025 GMT Not After : Oct 23 00:11:46 2025 GMT Subject: CN=8A1E47F28B614E0E1EB7D73501966D952F6D415F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9e:16:a8:42:17:8e:04:2d:6c:de:95:c1:54: b6:e9:1e:55:7e:15:bc:a8:51:6b:74:e9:2b:05:db: 55:63:82:03:d9:d2:60:d2:1a:5a:e6:bb:c1:7e:a6: 16:2c:c5:37:82:7f:14:5a:62:2b:72:0e:64:76:82: c8:4a:5a:99:8f:4a:ec:ae:4a:15:5c:08:81:36:86: 5f:4f:47:49:80:11:da:b8:8f:61:84:c3:32:5a:67: 94:69:c2:f3:10:80:a8:ec:c0:c9:a4:1e:64:2b:77: fd:06:21:62:00:38:f6:82:51:da:b4:5c:b7:36:f4: 14:20:7d:a2:29:f9:a0:c0:3a:80:3f:78:8d:21:42: 14:cd:b7:0d:81:4f:cc:f4:d0:12:a2:2d:14:17:54: 2c:09:5b:87:e9:7e:28:86:b5:ed:b0:78:7b:2a:12: 40:dd:e1:50:25:df:f8:c8:ad:ba:c4:4e:5e:bf:b9: 61:ca:09:94:24:77:f0:2f:19:28:b2:0b:35:75:cc: 24:da:02:8f:e7:10:9d:b7:e0:e2:d5:57:05:f8:44: e3:77:1c:2e:e4:eb:48:9e:00:94:af:da:d0:c5:70: f4:8c:53:82:dc:89:65:b2:fa:f5:20:01:5a:dd:83: 14:5d:6f:72:6d:06:bd:5e:b0:95:f5:48:ed:27:a6: b0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1E:47:F2:8B:61:4E:0E:1E:B7:D7:35:01:96:6D:95:2F:6D:41:5F X509v3 Authority Key Identifier: keyid:A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:7a:b1:4a:13:b2:32:b9:51:72:a6:f3:92:9b:28:cf:ae:4d: 10:48:ca:4f:ae:12:dd:45:8b:ff:fd:18:16:a9:0b:da:5c:91: 28:83:1a:7f:4c:b6:fb:d3:a4:ba:e4:7e:40:eb:c0:8a:bc:4d: ef:e2:eb:4c:c5:a8:80:79:7d:aa:d8:d5:c7:32:fc:d0:13:5b: 76:59:18:b4:9a:0b:7b:fb:63:3a:c1:51:e5:c6:43:62:a2:e2: 04:a6:0f:b9:1a:12:44:55:74:55:d6:ec:05:67:ad:f5:25:10: 33:43:c2:ba:4d:f9:e0:28:91:07:85:4e:ac:f2:56:75:6e:d0: a3:0c:c2:d6:dd:fe:c2:31:9c:16:e6:ac:8e:48:b7:31:45:ab: fa:6a:c1:01:06:22:e3:42:2e:61:98:79:3c:72:d2:a7:2a:1d: 3d:1b:15:74:d4:cc:0e:95:0a:c8:98:22:0a:8d:04:17:7d:58: 40:07:3e:fa:8f:1f:e0:1c:93:95:43:ac:7e:ee:44:d1:d3:30: f4:e5:17:77:2a:e5:0c:b4:df:6a:aa:bb:d6:d2:e8:af:ab:41: a7:0a:49:7a:f3:9c:08:10:cf:69:0d:a1:d9:d3:83:41:9a:57: 3b:c2:08:db:f3:33:e9:0a:dc:cc:55:cb:df:3f:01:fd:67:0f: f2:ee:75:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXeGmGR+IirPPoZE6f/vNsVIvgv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0 QzY1QUEyNzAeFw0yNTEwMTkxMzM1NDZaFw0yNTEwMjMwMDExNDZaMDMxMTAvBgNV BAMTKDhBMUU0N0YyOEI2MTRFMEUxRUI3RDczNTAxOTY2RDk1MkY2RDQxNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMnhaoQheOBC1s3pXBVLbpHlV+ FbyoUWt06SsF21VjggPZ0mDSGlrmu8F+phYsxTeCfxRaYityDmR2gshKWpmPSuyu ShVcCIE2hl9PR0mAEdq4j2GEwzJaZ5RpwvMQgKjswMmkHmQrd/0GIWIAOPaCUdq0 XLc29BQgfaIp+aDAOoA/eI0hQhTNtw2BT8z00BKiLRQXVCwJW4fpfiiGte2weHsq EkDd4VAl3/jIrbrETl6/uWHKCZQkd/AvGSiyCzV1zCTaAo/nEJ234OLVVwX4RON3 HC7k60ieAJSv2tDFcPSMU4LciWWy+vUgAVrdgxRdb3JtBr1esJX1SO0nprDxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUih5H8othTg4et9c1AZZtlS9tQV8wHwYDVR0j BBgwFoAUodyqtbMgfC11aSg4o40dzUxlqicwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWYyNTYzNC1mNTgzLTQ2YmMtOWU4Yy0zMmRiNGNjYTM1YjYvMC9BMURDQUFCNUIz MjA3QzJENzU2OTI4MzhBMzhEMURDRDRDNjVBQTI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0QzY1 QUEyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFmMjU2MzQtZjU4My00NmJjLTll OGMtMzJkYjRjY2EzNWI2LzAvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFE Q0Q0QzY1QUEyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKx6sUoTsjK5UXKm85KbKM+uTRBIyk+uEt1F i//9GBapC9pckSiDGn9MtvvTpLrkfkDrwIq8Te/i60zFqIB5farY1ccy/NATW3ZZ GLSaC3v7YzrBUeXGQ2Ki4gSmD7kaEkRVdFXW7AVnrfUlEDNDwrpN+eAokQeFTqzy VnVu0KMMwtbd/sIxnBbmrI5ItzFFq/pqwQEGIuNCLmGYeTxy0qcqHT0bFXTUzA6V CsiYIgqNBBd9WEAHPvqPH+Ack5VDrH7uRNHTMPTlF3cq5Qy032qqu9bS6K+rQacK SXrznAgQz2kNodnTg0GaVzvCCNvzM+kK3MxVy98/Af1nD/LudeM= -----END CERTIFICATE-----Generated at Mon Oct 20 20:16:27 2025 by rpki-client