$ rpki-client -vvf repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft File: A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft (raw, json) Hash identifier: I1Kbo8vIj68BHmLkcrPuBkntUTm5HkYtuxz5kC17bPE= Subject key identifier: B0:9A:E6:D8:21:9C:F6:CA:84:B7:4E:12:4C:8C:5D:CE:03:F9:17:DE Authority key identifier: A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B Certificate issuer: /CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B Certificate serial: 0B6414FD2A88A87BE39B4D4327A232D0B71682AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft Manifest number: 04C7 Signing time: Sun 19 Oct 2025 23:00:37 +0000 Manifest this update: Sun 19 Oct 2025 22:55:37 +0000 Manifest next update: Thu 23 Oct 2025 10:05:37 +0000 Files and hashes: 1: A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl (hash: ZOBOUn5Eo3r3QPcalKXkc+cL4ep1anpfuvC+wBM3Ivw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:64:14:fd:2a:88:a8:7b:e3:9b:4d:43:27:a2:32:d0:b7:16:82:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B Validity Not Before: Oct 19 22:55:37 2025 GMT Not After : Oct 23 10:05:37 2025 GMT Subject: CN=B09AE6D8219CF6CA84B74E124C8C5DCE03F917DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5b:2c:ba:eb:46:22:0e:35:fa:dd:d0:cb:4a: 42:b1:e2:ee:fb:ec:de:c2:6d:53:9c:b0:74:9f:61: 81:8d:19:96:1c:e0:54:8f:33:a5:77:e0:6b:a0:48: 9f:80:f7:6c:6f:60:a8:01:79:37:43:a8:6c:6d:f5: 1a:41:ed:68:3a:b5:0f:98:58:96:00:b6:61:75:e7: 98:32:6c:45:a3:19:71:52:d3:5c:fb:1d:6d:47:a2: 1b:fe:7d:52:0e:86:f3:5f:2d:51:6e:5c:15:c7:3f: c0:72:44:45:f5:da:c5:cd:a7:2f:03:1b:86:c4:8c: 0f:d9:2e:58:ef:07:cb:ed:dc:09:42:1a:10:91:83: d6:a6:3b:53:96:46:fe:de:b4:77:b6:4a:fe:cc:70: 30:3b:cc:f5:59:f6:2f:f8:6e:08:44:b9:d0:a4:1e: c5:2a:64:f0:c4:05:0c:a1:c4:0f:c1:ab:4b:29:6e: 8f:eb:93:fe:59:e0:5d:48:5c:59:17:ca:db:63:2b: 8d:bd:2e:2b:fb:35:ea:b1:98:50:13:3b:d9:e5:04: b3:c8:fe:00:a7:9c:d4:bf:8e:4a:24:d8:bb:0b:84: ca:77:ea:24:19:a2:4a:58:5e:29:29:87:cc:e4:51: b1:c3:1a:e8:74:5d:78:36:1c:53:ff:e2:2f:26:96: 04:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9A:E6:D8:21:9C:F6:CA:84:B7:4E:12:4C:8C:5D:CE:03:F9:17:DE X509v3 Authority Key Identifier: keyid:A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:75:14:f3:1a:56:50:31:52:41:01:59:5e:d7:ad:10:4e:df: ad:a0:5d:96:fc:b6:78:ed:53:62:45:cb:1d:5c:f7:72:07:e6: e7:63:5d:86:6f:61:9e:ec:cc:6d:ba:a8:19:a3:81:4a:3a:a5: 38:d5:15:3b:c2:16:27:8a:48:8a:77:b2:a6:a3:92:ef:27:db: 84:e3:67:28:70:25:d1:90:6b:78:1e:21:9d:ea:dc:a8:b4:d0: ca:da:ac:82:97:90:5b:1f:be:2e:87:38:e3:e7:cb:75:01:f5: a6:be:e0:6b:69:21:ca:83:66:dd:4b:6f:a7:09:4d:d0:13:1a: 06:31:72:6b:83:8e:a6:c4:b0:b5:17:92:cb:f6:71:29:70:d4: 1e:29:28:c1:1f:72:10:85:f5:a7:ce:53:07:69:27:f2:ff:f4: e5:cc:d3:c1:83:ce:33:7b:d9:a0:c8:2e:45:e3:38:4e:24:08: 56:94:ea:fc:58:a0:7f:e0:f5:52:bb:fc:6e:2f:7b:c3:3c:0c: 3b:67:b0:f3:0b:d9:c7:0e:90:dd:f1:90:b5:c6:64:a9:b2:ab: 63:90:5b:fb:4c:22:7f:49:34:f9:e4:b5:45:91:b0:35:4d:98: a4:21:1a:4a:3e:63:94:b7:c5:47:08:8b:22:b0:54:d2:5e:53: fd:2a:17:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC2QU/SqIqHvjm01DJ6Iy0LcWgq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFDMkJB ODRCOUE2QjAeFw0yNTEwMTkyMjU1MzdaFw0yNTEwMjMxMDA1MzdaMDMxMTAvBgNV BAMTKEIwOUFFNkQ4MjE5Q0Y2Q0E4NEI3NEUxMjRDOEM1RENFMDNGOTE3REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCWyy660YiDjX63dDLSkKx4u77 7N7CbVOcsHSfYYGNGZYc4FSPM6V34GugSJ+A92xvYKgBeTdDqGxt9RpB7Wg6tQ+Y WJYAtmF155gybEWjGXFS01z7HW1Hohv+fVIOhvNfLVFuXBXHP8ByREX12sXNpy8D G4bEjA/ZLljvB8vt3AlCGhCRg9amO1OWRv7etHe2Sv7McDA7zPVZ9i/4bghEudCk HsUqZPDEBQyhxA/Bq0spbo/rk/5Z4F1IXFkXyttjK429Liv7NeqxmFATO9nlBLPI /gCnnNS/jkok2LsLhMp36iQZokpYXikph8zkUbHDGuh0XXg2HFP/4i8mlgT5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsJrm2CGc9sqEt04STIxdzgP5F94wHwYDVR0j BBgwFoAUo0nQfKsTvwZ7E9lemZgcK6hLmmswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWRmY2I0NC1hZTdhLTQ0MjMtYWU3ZC0wODY0OGJmMWRlYjEvMC9BMzQ5RDA3Q0FC MTNCRjA2N0IxM0Q5NUU5OTk4MUMyQkE4NEI5QTZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFDMkJBODRC OUE2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFkZmNiNDQtYWU3YS00NDIzLWFl N2QtMDg2NDhiZjFkZWIxLzAvQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFD MkJBODRCOUE2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIp1FPMaVlAxUkEBWV7XrRBO362gXZb8tnjt U2JFyx1c93IH5udjXYZvYZ7szG26qBmjgUo6pTjVFTvCFieKSIp3sqajku8n24Tj ZyhwJdGQa3geIZ3q3Ki00MrarIKXkFsfvi6HOOPny3UB9aa+4GtpIcqDZt1Lb6cJ TdATGgYxcmuDjqbEsLUXksv2cSlw1B4pKMEfchCF9afOUwdpJ/L/9OXM08GDzjN7 2aDILkXjOE4kCFaU6vxYoH/g9VK7/G4ve8M8DDtnsPML2ccOkN3xkLXGZKmyq2OQ W/tMIn9JNPnktUWRsDVNmKQhGko+Y5S3xUcIiyKwVNJeU/0qF6s= -----END CERTIFICATE-----Generated at Mon Oct 20 09:41:38 2025 by rpki-client