$ rpki-client -vvf repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft File: A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft (raw, json) Hash identifier: T1EIpZPDSenQle6zlRLxObRnJqhklDD6mOktwm9g9Tk= Subject key identifier: D6:DD:E2:A0:F0:A4:82:F7:11:6B:99:F9:65:54:6A:23:0A:74:76:98 Authority key identifier: A2:05:D7:D4:B5:01:61:EC:6E:6D:73:C4:A1:D0:52:92:9C:7F:FC:42 Certificate issuer: /CN=A205D7D4B50161EC6E6D73C4A1D052929C7FFC42 Certificate serial: 3E26748FB4327F00ABF715DDC767E856FD715094 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft Manifest number: 01A7 Signing time: Sat 18 Oct 2025 19:31:07 +0000 Manifest this update: Sat 18 Oct 2025 19:26:07 +0000 Manifest next update: Wed 22 Oct 2025 01:04:07 +0000 Files and hashes: 1: 3130332e3130352e39322e302f32332d3234203d3e20313530393435.roa (hash: SpZC59e78RFSMTIi2T0VjoxX/8FXFEY34gXVgn2Wfv8=) 2: A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl (hash: RU1IY1UGt4ExWAo2CZib3FYYusgD2ycm3NtyQOw/KY8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 01:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:26:74:8f:b4:32:7f:00:ab:f7:15:dd:c7:67:e8:56:fd:71:50:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A205D7D4B50161EC6E6D73C4A1D052929C7FFC42 Validity Not Before: Oct 18 19:26:07 2025 GMT Not After : Oct 22 01:04:07 2025 GMT Subject: CN=D6DDE2A0F0A482F7116B99F965546A230A747698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0c:4b:b5:69:6c:2b:d7:d4:91:d1:48:e7:2d: c2:13:ef:4f:14:1d:a4:f7:80:ef:bb:d4:bc:bd:aa: 7b:dd:3b:ff:2d:ca:23:b6:d5:07:59:8f:bd:dc:3b: 9e:49:a8:85:27:9d:2b:be:df:dd:42:2d:86:c0:96: 02:67:9c:a3:19:8e:38:b0:1a:0d:a9:15:36:73:26: 5c:53:9e:ae:9b:ae:63:45:b8:da:df:bf:a0:9e:ed: 5e:db:38:6a:7c:d6:39:11:ff:a1:41:94:6f:39:c7: 3f:40:dd:b9:b8:3e:45:9a:64:dc:98:39:95:39:5e: 1a:74:89:4e:75:02:8c:b5:fd:d6:35:f2:29:7c:4b: 94:a2:78:d4:c6:9a:ed:3e:49:b4:06:29:0b:3b:35: 3c:12:a4:ec:32:e4:c7:34:4f:da:4e:ed:18:a5:e1: 91:71:52:d4:35:07:4f:0d:74:a5:8e:8d:9d:e1:a8: 9b:90:34:6e:28:f4:70:88:5d:42:41:fc:b7:2a:d1: 2b:6d:4b:fd:14:05:d7:a2:75:a6:13:46:83:5a:b7: 10:4a:63:95:00:9f:af:a1:35:70:ee:4c:fd:f2:aa: 8c:f5:fb:60:bd:e2:bb:b8:d4:ba:26:e8:bc:8f:1e: a9:86:9a:27:ff:88:57:93:fb:95:53:7e:da:a7:24: ac:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:DD:E2:A0:F0:A4:82:F7:11:6B:99:F9:65:54:6A:23:0A:74:76:98 X509v3 Authority Key Identifier: keyid:A2:05:D7:D4:B5:01:61:EC:6E:6D:73:C4:A1:D0:52:92:9C:7F:FC:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:7d:6c:bc:ba:1f:8a:76:36:1d:8b:1f:a0:55:73:7e:ee:22: 65:2b:4c:8a:b8:67:d4:ef:cc:7c:a2:2e:98:20:34:a4:b2:63: 81:f7:e0:66:35:a9:08:7f:33:40:2f:ab:31:43:32:3e:8c:48: 74:80:af:58:48:3f:7e:d3:36:d5:c7:63:2a:2f:b7:a3:9c:23: 06:8f:00:b0:51:b9:b2:a2:b3:d0:57:0a:47:c6:65:dd:8c:8c: 50:9b:ea:70:19:94:f0:d9:5c:3e:12:4a:a4:49:51:81:6a:1a: 65:0e:cf:d9:a8:94:5e:20:e1:b1:cf:20:c9:0b:9d:bb:34:d8: cd:12:80:68:26:1c:b5:9e:cf:3d:6d:17:c9:8a:19:69:a1:c2: 5d:61:49:e7:5d:db:49:f7:61:c5:b3:c4:79:43:e9:8b:0d:0d: 94:3e:1f:1c:87:81:43:d0:59:42:dd:1d:bc:a7:b0:a1:88:00: f6:8b:64:b6:09:e8:b9:d8:0e:2e:f4:dc:bf:ca:5e:ca:fe:53: f8:a6:34:c2:35:dc:52:f0:02:62:a3:73:2d:f9:82:df:0d:67: 4c:29:7f:76:25:91:5d:ef:d1:41:d5:bd:f5:d1:5d:07:c5:1b: f1:df:04:72:00:54:6b:46:27:9c:ee:c3:cc:fe:28:64:b7:20: 80:44:e2:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPiZ0j7QyfwCr9xXdx2foVv1xUJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUyOTI5 QzdGRkM0MjAeFw0yNTEwMTgxOTI2MDdaFw0yNTEwMjIwMTA0MDdaMDMxMTAvBgNV BAMTKEQ2RERFMkEwRjBBNDgyRjcxMTZCOTlGOTY1NTQ2QTIzMEE3NDc2OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFDEu1aWwr19SR0UjnLcIT708U HaT3gO+71Ly9qnvdO/8tyiO21QdZj73cO55JqIUnnSu+391CLYbAlgJnnKMZjjiw Gg2pFTZzJlxTnq6brmNFuNrfv6Ce7V7bOGp81jkR/6FBlG85xz9A3bm4PkWaZNyY OZU5Xhp0iU51Aoy1/dY18il8S5SieNTGmu0+SbQGKQs7NTwSpOwy5Mc0T9pO7Ril 4ZFxUtQ1B08NdKWOjZ3hqJuQNG4o9HCIXUJB/Lcq0SttS/0UBdeidaYTRoNatxBK Y5UAn6+hNXDuTP3yqoz1+2C94ru41Lom6LyPHqmGmif/iFeT+5VTftqnJKzJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1t3ioPCkgvcRa5n5ZVRqIwp0dpgwHwYDVR0j BBgwFoAUogXX1LUBYexubXPEodBSkpx//EIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzJiOGQyOC1mZjdjLTQ2OTItOTAxOC05NzU1YmE1MDkxNjgvMC9BMjA1RDdENEI1 MDE2MUVDNkU2RDczQzRBMUQwNTI5MjlDN0ZGQzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUyOTI5QzdG RkM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzcyYjhkMjgtZmY3Yy00NjkyLTkw MTgtOTc1NWJhNTA5MTY4LzAvQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUy OTI5QzdGRkM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF19bLy6H4p2Nh2LH6BVc37uImUrTIq4Z9Tv zHyiLpggNKSyY4H34GY1qQh/M0AvqzFDMj6MSHSAr1hIP37TNtXHYyovt6OcIwaP ALBRubKis9BXCkfGZd2MjFCb6nAZlPDZXD4SSqRJUYFqGmUOz9molF4g4bHPIMkL nbs02M0SgGgmHLWezz1tF8mKGWmhwl1hSedd20n3YcWzxHlD6YsNDZQ+HxyHgUPQ WULdHbynsKGIAPaLZLYJ6LnYDi703L/KXsr+U/imNMI13FLwAmKjcy35gt8NZ0wp f3YlkV3v0UHVvfXRXQfFG/HfBHIAVGtGJ5zuw8z+KGS3IIBE4uQ= -----END CERTIFICATE-----Generated at Mon Oct 20 14:57:28 2025 by rpki-client