$ rpki-client -vvf repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft File: A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft (raw, json) Hash identifier: Ody3iZstFDlVLExEAGncvm91YeBZp8WPDmuOM2gmNeo= Subject key identifier: 78:E0:7C:EB:7F:F8:01:17:84:9D:8C:8C:68:09:FB:47:71:6B:8B:E4 Authority key identifier: A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48 Certificate issuer: /CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848 Certificate serial: 7E15C06AE0A1955310011D484147FC2769369AFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft Manifest number: FF Signing time: Mon 20 Oct 2025 15:52:23 +0000 Manifest this update: Mon 20 Oct 2025 15:47:23 +0000 Manifest next update: Fri 24 Oct 2025 03:38:23 +0000 Files and hashes: 1: 3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa (hash: sEObMlhse4CyL4oCmxoxoPLEseBLcDvbzgfCGrhTjW0=) 2: A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl (hash: a48QbYE0qXXXMrOvcIEnEZjLZqFVFsejNFwPj9sLL0Y=) 3: 3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa (hash: /VKdsaTHmCyGCE586MO51z4LSl8AS7ykHk2hmgDFEO4=) 4: 3130332e3235352e3136342e302f32342d3234203d3e20313531393934.roa (hash: +WwlmKdoXMg38Ivud82/QXjyd3ODqNLzlXpK9Yw3uY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:15:c0:6a:e0:a1:95:53:10:01:1d:48:41:47:fc:27:69:36:9a:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848 Validity Not Before: Oct 20 15:47:23 2025 GMT Not After : Oct 24 03:38:23 2025 GMT Subject: CN=78E07CEB7FF80117849D8C8C6809FB47716B8BE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d7:d9:20:7c:82:7a:a9:4f:6c:a5:21:c3:55: cc:60:3a:2b:9f:7e:c3:d7:72:55:0a:af:a2:13:17: 1c:64:0d:05:ad:e3:76:70:47:19:18:ce:3e:d4:cb: 4a:98:1f:17:f5:30:37:f2:53:ad:2a:30:af:0c:eb: d1:60:43:0e:e6:d3:9e:c5:47:03:76:d1:fa:9b:5e: 6f:87:13:58:55:d8:c4:93:54:91:cb:35:a4:52:05: 0c:02:1e:24:82:32:d4:70:af:15:33:99:33:a2:ed: b4:21:de:73:f4:f7:02:e4:88:b8:f7:df:a5:83:2e: 73:4b:e9:92:c1:24:4b:dd:97:de:b3:0f:4b:c2:5a: 3f:a2:09:47:bb:f2:16:2d:60:19:ac:45:e3:19:e3: dc:f5:b7:c4:e3:c9:3f:c0:00:7f:b9:0b:79:35:33: 28:58:c7:50:65:0a:22:f5:5e:c8:26:fd:df:64:3b: 01:da:f3:54:7b:bf:c3:97:f0:c3:95:6a:f0:44:f2: bf:06:b0:21:50:f2:15:70:cf:04:85:f6:51:84:d1: 00:25:dc:1e:07:15:75:86:78:5f:fe:bc:95:c8:35: 72:a0:c1:ee:b9:0b:a4:19:46:12:38:27:f3:0e:43: 57:a0:8d:d1:3e:f1:18:27:ad:e6:d5:9e:fb:69:0e: 97:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E0:7C:EB:7F:F8:01:17:84:9D:8C:8C:68:09:FB:47:71:6B:8B:E4 X509v3 Authority Key Identifier: keyid:A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:c2:24:f7:56:ac:38:60:1f:8e:30:fa:81:8e:73:5f:48:08: da:a5:3e:86:1e:2f:47:77:7b:a0:98:64:57:71:01:fc:84:6e: 08:6b:41:79:b0:3d:25:f8:bb:84:ea:74:3d:3a:ed:25:4f:ab: 07:28:00:8c:3d:85:40:4c:ff:0a:0d:1c:1e:85:12:57:af:70: 7c:9c:bc:20:59:b6:cb:90:80:13:a9:81:80:ad:e1:90:72:b4: 19:e9:13:b5:af:48:13:28:a1:1a:f0:e2:ab:35:b8:1e:91:6a: 1b:02:b1:59:ab:4c:3f:77:3d:12:0a:70:f4:58:75:2a:67:db: 7a:61:c6:5b:18:37:69:d0:0e:a1:1b:f9:c3:59:28:19:8f:5d: 78:a5:d7:c1:c0:bd:db:3f:b5:e1:87:aa:bb:f5:f6:c2:56:2c: 1d:c8:19:03:f4:d1:13:a2:b6:f3:4b:d5:37:2c:78:8e:a9:2d: b7:e8:67:02:ca:52:e1:d0:cb:fc:92:f2:69:c6:93:ce:85:24: b5:60:7c:f7:a6:2e:dd:8e:96:e9:7e:69:5f:b2:f7:56:aa:91: 0f:dc:9a:82:95:cd:b2:ae:f4:d6:65:55:68:c4:a5:5a:3d:c2: 1d:d8:bf:f5:56:3c:35:fd:e9:05:f8:1e:fb:89:23:05:a3:38: 3e:2b:87:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfhXAauChlVMQAR1IQUf8J2k2mvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2MUYx MDVFRjg0ODAeFw0yNTEwMjAxNTQ3MjNaFw0yNTEwMjQwMzM4MjNaMDMxMTAvBgNV BAMTKDc4RTA3Q0VCN0ZGODAxMTc4NDlEOEM4QzY4MDlGQjQ3NzE2QjhCRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT19kgfIJ6qU9spSHDVcxgOiuf fsPXclUKr6ITFxxkDQWt43ZwRxkYzj7Uy0qYHxf1MDfyU60qMK8M69FgQw7m057F RwN20fqbXm+HE1hV2MSTVJHLNaRSBQwCHiSCMtRwrxUzmTOi7bQh3nP09wLkiLj3 36WDLnNL6ZLBJEvdl96zD0vCWj+iCUe78hYtYBmsReMZ49z1t8TjyT/AAH+5C3k1 MyhYx1BlCiL1Xsgm/d9kOwHa81R7v8OX8MOVavBE8r8GsCFQ8hVwzwSF9lGE0QAl 3B4HFXWGeF/+vJXINXKgwe65C6QZRhI4J/MOQ1egjdE+8RgnrebVnvtpDpe9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeOB863/4AReEnYyMaAn7R3Fri+QwHwYDVR0j BBgwFoAUpNkJnDZdi7n6lqKlH6TGHxBe+EgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzQ3ZWY1Yy01YmJhLTRjZDEtOGRjOS0xNzNlMjc1MWY0ZjQvMC9BNEQ5MDk5QzM2 NUQ4QkI5RkE5NkEyQTUxRkE0QzYxRjEwNUVGODQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2MUYxMDVF Rjg0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M0N2VmNWMtNWJiYS00Y2QxLThk YzktMTczZTI3NTFmNGY0LzAvQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2 MUYxMDVFRjg0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXCJPdWrDhgH44w+oGOc19ICNqlPoYeL0d3 e6CYZFdxAfyEbghrQXmwPSX4u4TqdD067SVPqwcoAIw9hUBM/woNHB6FElevcHyc vCBZtsuQgBOpgYCt4ZBytBnpE7WvSBMooRrw4qs1uB6RahsCsVmrTD93PRIKcPRY dSpn23phxlsYN2nQDqEb+cNZKBmPXXil18HAvds/teGHqrv19sJWLB3IGQP00ROi tvNL1TcseI6pLbfoZwLKUuHQy/yS8mnGk86FJLVgfPemLt2Olul+aV+y91aqkQ/c moKVzbKu9NZlVWjEpVo9wh3Yv/VWPDX96QX4HvuJIwWjOD4rh4c= -----END CERTIFICATE-----Generated at Tue Oct 21 02:14:29 2025 by rpki-client