$ rpki-client -vvf repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft File: A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft (raw, json) Hash identifier: TPBk/MpY60MI3MsT1RfuFPzmalLr4gzHjv/MKoxXN04= Subject key identifier: 8D:C3:9E:C0:C1:7D:6A:56:A2:36:78:80:88:F6:1E:CD:4F:8E:9A:C1 Authority key identifier: A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 Certificate issuer: /CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Certificate serial: 74800A133A18EC0FD6E54954A5340BF0E5850A5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft Manifest number: 019A Signing time: Sun 19 Oct 2025 11:11:16 +0000 Manifest this update: Sun 19 Oct 2025 11:06:16 +0000 Manifest next update: Wed 22 Oct 2025 17:29:16 +0000 Files and hashes: 1: 323430373a396538303a3a2f33322d3332203d3e203634323937.roa (hash: 8XW9fR3nJvKy312lXn4PWtXoN/9mgbLUR7iv4Mby3uc=) 2: 3130332e37372e3230342e302f32342d3234203d3e203634323937.roa (hash: BXSq9b95eC9MSwvxuZ/AcJL572zXX4pRx3/J1qctsOw=) 3: 3130332e37372e3230372e302f32342d3234203d3e203634323937.roa (hash: Ldzq0WjI5kxA0xwZ9j/+HkbFA7bRhcVP8vfijlAcxEw=) 4: 3130332e37372e3230342e302f32322d3232203d3e203634323937.roa (hash: DfpI3sfZfOso5gGyoS07WtJ/Jycy9ggknC4EuCpUXOM=) 5: A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl (hash: /6gqoaAOjq0vHMG6UA2DMs3cUnmphMe/bQuMs0nWBiA=) 6: 3130332e37372e3230352e302f32342d3234203d3e203634323937.roa (hash: NZ3zgpSngsIOBUBuxKD8qjF4IFrIt5WPsm16vJBokXQ=) 7: 3130332e37372e3230342e302f32332d3233203d3e203634323937.roa (hash: cOnqdPMFYbqbFi/FA6Q7dA8kJTzM3+iE0W1mSgXK4nI=) 8: 3130332e37372e3230362e302f32342d3234203d3e203634323937.roa (hash: qm6Wx8HHdMprTN2Xs+s/pxVtuwdrhpPAL17E7ApccPM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:29:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:80:0a:13:3a:18:ec:0f:d6:e5:49:54:a5:34:0b:f0:e5:85:0a:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Validity Not Before: Oct 19 11:06:16 2025 GMT Not After : Oct 22 17:29:16 2025 GMT Subject: CN=8DC39EC0C17D6A56A236788088F61ECD4F8E9AC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a8:f3:a3:76:61:06:fe:0a:0f:c5:52:b4:72: c9:74:a2:b9:37:17:a6:68:a2:cb:70:75:7d:94:5c: f0:9e:3b:f0:14:55:fd:20:cd:98:07:71:05:72:00: 4f:0f:c6:c2:80:bf:62:ce:51:a0:90:e5:97:c3:0a: 74:25:0b:8b:e3:45:c4:c1:22:f5:87:4e:04:f0:fe: 7e:6f:9d:07:40:43:f4:54:71:aa:93:b6:84:71:40: 00:dd:e3:99:67:69:59:ba:2b:4e:12:60:cd:af:2e: bf:bc:81:0a:a7:2e:60:1b:88:75:4c:86:8a:60:68: 96:af:91:50:65:30:15:53:a0:30:71:96:d9:f3:81: 89:5f:5e:36:5c:49:45:8a:f9:c5:91:09:33:e2:72: e7:78:dd:b5:c1:54:fd:d0:61:d9:7d:94:e3:25:e3: d5:2e:01:2b:1f:b7:ca:26:60:d3:28:ad:6b:0d:3f: 19:a2:48:0c:f9:70:b1:a2:7e:82:a4:4f:bd:cf:83: 32:93:27:ea:fe:4f:15:0e:b5:f7:bb:7f:3f:5b:97: e0:c4:cc:8f:95:37:83:c6:54:ae:30:bc:83:9b:c8: a8:b8:46:d6:02:3c:a6:97:85:9c:00:fd:c3:63:56: 09:30:fb:e4:66:14:5e:c3:45:08:d5:7f:17:4f:cf: 9d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C3:9E:C0:C1:7D:6A:56:A2:36:78:80:88:F6:1E:CD:4F:8E:9A:C1 X509v3 Authority Key Identifier: keyid:A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:15:99:78:79:65:7a:e5:f7:ad:98:4b:3c:b6:f4:22:cc:82: 75:4f:7e:ac:f4:81:e5:f7:92:44:7e:34:f0:7d:fd:12:65:a0: 72:93:02:f5:39:d2:59:21:84:09:20:c7:c7:0f:ad:fa:be:50: 4c:3a:14:a5:56:1b:da:bd:40:44:ef:d7:89:f0:79:de:0c:d9: 40:19:be:ac:9c:8e:4f:bd:39:81:63:da:36:9f:33:6e:72:bc: 86:f0:38:3b:50:0d:0b:69:da:8a:23:ea:53:d5:c7:7b:e7:44: c0:74:83:7d:c3:6d:85:04:0d:80:1e:3d:56:1a:1d:b9:64:fc: f1:51:5b:0d:f1:f4:82:f4:d6:2e:d2:fe:4f:2e:b0:2d:67:45: 34:0d:82:dd:8e:1f:6d:8b:ea:17:ed:cd:6a:0f:b4:37:09:aa: 34:b8:81:5f:54:11:f2:4c:6b:73:27:85:82:8b:97:51:f5:34: 89:c8:3f:de:88:b2:9d:43:e4:2f:84:00:83:a9:3a:c2:a5:ce: 51:c7:3c:3b:e1:4e:60:7f:e7:01:37:e8:2f:e3:92:65:9f:9f: fd:4a:f4:b3:ee:13:3d:bd:b6:f4:4e:25:90:2c:f5:c2:7b:b8: 34:ea:d7:51:eb:8d:03:85:6f:d6:ef:c4:fe:c5:21:25:d4:f9: 96:68:d4:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdIAKEzoY7A/W5UlUpTQL8OWFCl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2 MTBBRUM0OTAeFw0yNTEwMTkxMTA2MTZaFw0yNTEwMjIxNzI5MTZaMDMxMTAvBgNV BAMTKDhEQzM5RUMwQzE3RDZBNTZBMjM2Nzg4MDg4RjYxRUNENEY4RTlBQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmqPOjdmEG/goPxVK0csl0ork3 F6ZoostwdX2UXPCeO/AUVf0gzZgHcQVyAE8PxsKAv2LOUaCQ5ZfDCnQlC4vjRcTB IvWHTgTw/n5vnQdAQ/RUcaqTtoRxQADd45lnaVm6K04SYM2vLr+8gQqnLmAbiHVM hopgaJavkVBlMBVToDBxltnzgYlfXjZcSUWK+cWRCTPicud43bXBVP3QYdl9lOMl 49UuASsft8omYNMorWsNPxmiSAz5cLGifoKkT73PgzKTJ+r+TxUOtfe7fz9bl+DE zI+VN4PGVK4wvIObyKi4RtYCPKaXhZwA/cNjVgkw++RmFF7DRQjVfxdPz53DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjcOewMF9alaiNniAiPYezU+OmsEwHwYDVR0j BBgwFoAUp9G9ghE81yDFcq+ZqPspQGEK7EkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWRhN2I2YS00ZTFhLTQxZmYtYjhlYi04YzM2NGNkMjY0YjEvMC9BN0QxQkQ4MjEx M0NENzIwQzU3MkFGOTlBOEZCMjk0MDYxMEFFQzQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2MTBB RUM0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDlkYTdiNmEtNGUxYS00MWZmLWI4 ZWItOGMzNjRjZDI2NGIxLzAvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5 NDA2MTBBRUM0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJgVmXh5ZXrl962YSzy29CLMgnVPfqz0geX3 kkR+NPB9/RJloHKTAvU50lkhhAkgx8cPrfq+UEw6FKVWG9q9QETv14nwed4M2UAZ vqycjk+9OYFj2jafM25yvIbwODtQDQtp2ooj6lPVx3vnRMB0g33DbYUEDYAePVYa Hblk/PFRWw3x9IL01i7S/k8usC1nRTQNgt2OH22L6hftzWoPtDcJqjS4gV9UEfJM a3MnhYKLl1H1NInIP96Isp1D5C+EAIOpOsKlzlHHPDvhTmB/5wE36C/jkmWfn/1K 9LPuEz29tvROJZAs9cJ7uDTq11HrjQOFb9bvxP7FISXU+ZZo1AM= -----END CERTIFICATE-----Generated at Mon Oct 20 22:42:00 2025 by rpki-client