$ rpki-client -vvf repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft File: A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft (raw, json) Hash identifier: jLe+cWk3ON0hmzUBkJyKsaoU8DCs1vbgRPCHvAKHof0= Subject key identifier: 0D:31:00:2C:64:4B:7F:E8:2B:1F:F7:8B:79:01:23:BF:94:84:C9:1E Authority key identifier: A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F Certificate issuer: /CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F Certificate serial: 3FDB8FFC9DC608E18FEABEE1FDF3C0181C7F1570 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft Manifest number: 01A8 Signing time: Sun 19 Oct 2025 10:00:41 +0000 Manifest this update: Sun 19 Oct 2025 09:55:41 +0000 Manifest next update: Wed 22 Oct 2025 14:39:41 +0000 Files and hashes: 1: 323430303a363463303a3a2f33322d3438203d3e20313336303535.roa (hash: nVKz/Z4lzOOXkiUaEAcb0AwZb+JTb9lrVFfeSZMfmCY=) 2: A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl (hash: Ozy4qS0qE8QDpNJcWUoT5HEkYG9Ot8vQ9B1TxnIAWiY=) 3: 3130332e38312e36342e302f32342d3234203d3e20313336303535.roa (hash: y3JEoAzXm85iAZbdeyBRtgaEYRsohXOZAIq9VTQKw9c=) 4: 3130332e38312e36342e302f32322d3234203d3e20313336303535.roa (hash: G2lV5U9+p39d6xSgHB2TJ310g1uTGGU7EbB7g2ly4zQ=) 5: 3130332e38312e36352e302f32342d3234203d3e20313336303535.roa (hash: Pd8St+ikqWO1fGrUN5HXXiSM76VpvJPSZDK4vFya57U=) 6: 3130332e38312e36372e302f32342d3234203d3e20313336303535.roa (hash: H8auSRebds2J33fqyI35g62j14OOISp/2tVGTFdwJS4=) 7: 3130332e38312e36362e302f32342d3234203d3e20313336303535.roa (hash: ydDiCNEc8GtyBNnN5/EnWTfulbTrIFBSv+6Rl5EThhQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 14:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:db:8f:fc:9d:c6:08:e1:8f:ea:be:e1:fd:f3:c0:18:1c:7f:15:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F Validity Not Before: Oct 19 09:55:41 2025 GMT Not After : Oct 22 14:39:41 2025 GMT Subject: CN=0D31002C644B7FE82B1FF78B790123BF9484C91E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:95:d5:e9:1c:c9:95:d2:ea:83:ef:1d:7f:a8: fc:d7:96:2e:43:85:51:98:65:d4:8c:26:16:fb:3a: ad:8a:11:74:e3:44:c6:f8:42:36:fa:b2:4c:b0:9a: 52:d5:2d:54:22:6c:0a:e0:3a:0c:f8:25:09:4f:4e: 44:f9:b7:56:91:a0:13:21:e7:88:64:06:08:a1:1f: 22:99:0f:15:30:34:f5:72:5d:3e:59:1b:e1:a2:d6: 7e:8a:23:f0:38:80:e6:f3:78:a2:ee:d4:cd:8b:9a: d0:62:eb:e6:be:9c:df:c0:e1:df:db:e0:69:80:e1: 5e:ad:d2:0a:b4:85:3b:96:de:23:11:e0:64:b0:7b: c0:4f:27:f5:d7:45:e7:ac:b4:6b:44:bb:4c:fe:7e: 82:90:db:a8:d0:69:2f:33:1d:a9:20:60:c7:07:86: 5c:04:3a:d6:6f:65:83:f3:04:54:c7:64:83:2e:45: 38:f3:c8:fa:fc:62:73:3b:11:1c:7d:6f:ba:16:13: ce:6f:bd:44:42:da:92:c0:61:62:39:fc:db:be:29: 7d:47:39:b9:7d:2c:3e:ed:8e:dc:77:7e:50:3b:0b: e9:f3:42:1f:18:10:c3:96:e4:a2:bb:d2:98:a0:f3: 0a:f0:bb:af:46:ca:78:2e:3a:51:a2:af:1f:c4:ab: 76:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:31:00:2C:64:4B:7F:E8:2B:1F:F7:8B:79:01:23:BF:94:84:C9:1E X509v3 Authority Key Identifier: keyid:A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:26:7c:6d:9e:38:e8:22:c5:23:62:4a:b0:e9:8f:06:73:ca: e7:da:6d:09:da:2a:9b:c8:d6:89:9b:99:fc:a6:bd:06:06:5f: a3:4f:0d:b5:7c:97:75:a9:77:9a:e5:86:53:e8:6f:8d:32:31: 10:05:cd:dc:67:09:12:c8:28:f4:ea:76:70:2a:05:c3:3b:e0: 44:7f:b1:f4:9a:be:b0:2e:27:64:12:3c:96:bc:7b:c6:db:ec: 06:9d:f6:07:1c:64:17:7e:19:a6:f6:75:18:cc:18:3d:5b:4c: 07:b2:46:4a:64:21:6c:df:41:a6:68:b9:2e:58:f7:63:23:fa: 13:17:db:2f:84:17:1a:c1:3f:0c:d8:d1:27:60:8c:68:d7:ce: bb:fe:9b:ca:e0:d4:4c:71:77:ac:eb:56:d3:55:95:33:52:d5: 06:1f:89:73:7b:98:a2:13:3f:db:51:06:c6:9a:fc:9a:1f:0e: e2:25:f1:19:d0:06:78:71:a2:96:69:66:ab:cf:09:e3:f8:95: a3:eb:e7:c4:80:23:1c:21:aa:88:71:7f:b2:7c:f9:8f:60:76: 0b:ec:ad:b5:19:19:c0:26:82:fb:a9:65:fc:62:75:5f:6a:7e: 20:b9:f0:a4:72:af:c4:38:cf:15:37:19:44:0b:d4:aa:db:d5: 74:37:2d:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP9uP/J3GCOGP6r7h/fPAGBx/FXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBQzQ5QzRGNTVCRjVENEFGM0Q0MjEwNEE4QTVFQzFG MjEyM0U2RjAeFw0yNTEwMTkwOTU1NDFaFw0yNTEwMjIxNDM5NDFaMDMxMTAvBgNV BAMTKDBEMzEwMDJDNjQ0QjdGRTgyQjFGRjc4Qjc5MDEyM0JGOTQ4NEM5MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuldXpHMmV0uqD7x1/qPzXli5D hVGYZdSMJhb7Oq2KEXTjRMb4Qjb6skywmlLVLVQibArgOgz4JQlPTkT5t1aRoBMh 54hkBgihHyKZDxUwNPVyXT5ZG+Gi1n6KI/A4gObzeKLu1M2LmtBi6+a+nN/A4d/b 4GmA4V6t0gq0hTuW3iMR4GSwe8BPJ/XXReestGtEu0z+foKQ26jQaS8zHakgYMcH hlwEOtZvZYPzBFTHZIMuRTjzyPr8YnM7ERx9b7oWE85vvURC2pLAYWI5/Nu+KX1H Obl9LD7tjtx3flA7C+nzQh8YEMOW5KK70pig8wrwu69GynguOlGirx/Eq3Y5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDTEALGRLf+grH/eLeQEjv5SEyR4wHwYDVR0j BBgwFoAUpKxJxPVb9dSvPUIQSopewfISPm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzI4MDQwMC05NjU0LTRkNDUtODg4Yi05MDY3YmFkYTE5MGIvMC9BNEFDNDlDNEY1 NUJGNUQ0QUYzRDQyMTA0QThBNUVDMUYyMTIzRTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTRBQzQ5QzRGNTVCRjVENEFGM0Q0MjEwNEE4QTVFQzFGMjEy M0U2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcyODA0MDAtOTY1NC00ZDQ1LTg4 OGItOTA2N2JhZGExOTBiLzAvQTRBQzQ5QzRGNTVCRjVENEFGM0Q0MjEwNEE4QTVF QzFGMjEyM0U2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8mfG2eOOgixSNiSrDpjwZzyufabQnaKpvI 1ombmfymvQYGX6NPDbV8l3Wpd5rlhlPob40yMRAFzdxnCRLIKPTqdnAqBcM74ER/ sfSavrAuJ2QSPJa8e8bb7Aad9gccZBd+Gab2dRjMGD1bTAeyRkpkIWzfQaZouS5Y 92Mj+hMX2y+EFxrBPwzY0SdgjGjXzrv+m8rg1Exxd6zrVtNVlTNS1QYfiXN7mKIT P9tRBsaa/JofDuIl8RnQBnhxopZpZqvPCeP4laPr58SAIxwhqohxf7J8+Y9gdgvs rbUZGcAmgvupZfxidV9qfiC58KRyr8Q4zxU3GUQL1Krb1XQ3LeU= -----END CERTIFICATE-----Generated at Mon Oct 20 16:14:48 2025 by rpki-client