$ rpki-client -vvf repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft File: A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft (raw, json) Hash identifier: ud0roitqwYeNhGP3RUO0hU8fvGYJHbuTSEJ/90cvXEw= Subject key identifier: 49:AF:97:E8:5F:C7:A0:A5:54:7A:DA:7D:2A:90:DF:B6:1C:B9:EC:16 Authority key identifier: A3:5D:0D:09:67:27:FD:BE:2A:4E:ED:45:19:94:70:8E:CB:4A:5F:14 Certificate issuer: /CN=A35D0D096727FDBE2A4EED451994708ECB4A5F14 Certificate serial: 405BB3DBD79C18343426953C68DCE109F38DABA6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft Manifest number: 0139 Signing time: Mon 20 Oct 2025 00:32:10 +0000 Manifest this update: Mon 20 Oct 2025 00:27:10 +0000 Manifest next update: Thu 23 Oct 2025 03:12:10 +0000 Files and hashes: 1: 3130332e3134322e32302e302f32342d3234203d3e20313531353734.roa (hash: SrZZMNyD+weFJ6GOZ0htogUZ6HrLc/IW65Udx/Gnnmc=) 2: A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl (hash: BsPVdCWnZ8JHxumEXXpmsqVpAT8KLEhr8XYqGnE0O20=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:12:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:5b:b3:db:d7:9c:18:34:34:26:95:3c:68:dc:e1:09:f3:8d:ab:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A35D0D096727FDBE2A4EED451994708ECB4A5F14 Validity Not Before: Oct 20 00:27:10 2025 GMT Not After : Oct 23 03:12:10 2025 GMT Subject: CN=49AF97E85FC7A0A5547ADA7D2A90DFB61CB9EC16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d4:40:d1:e0:02:50:e0:0c:31:e7:ee:63:eb: 55:32:4c:bc:ff:23:34:3b:d0:10:be:7a:f4:0b:e2: ba:ff:5c:38:6e:f4:11:d2:df:09:09:55:48:5f:0c: 8c:e7:f8:dd:7b:10:dd:9d:e1:2e:20:a7:d4:a9:c8: e9:ee:cf:23:ae:e8:29:52:a2:45:b6:fa:eb:30:47: de:33:27:ac:f1:6f:81:39:bb:7a:e5:6c:be:8c:f5: 98:5f:2e:e8:a1:ac:c0:97:03:d6:0b:ef:81:21:8d: 84:9e:10:2a:55:07:35:1d:af:fb:f7:66:92:0d:cb: 89:0d:ab:18:07:d3:d1:0b:26:a2:e4:0a:56:e2:cf: 63:0a:59:a8:12:3b:21:47:77:eb:7f:c0:c1:ac:91: 7b:a1:75:67:e2:fe:30:16:a9:57:8b:31:57:97:2b: eb:d3:cb:e8:4e:f1:d5:84:0f:2a:6f:ae:00:0a:4d: d0:29:f4:f1:45:fa:0e:33:55:d4:bc:3f:45:fe:4f: f4:e9:81:74:bc:c3:28:d0:7d:df:86:f1:2c:d2:d3: 57:d4:38:9b:e4:0c:f3:f1:5e:62:83:1d:6a:53:ef: 9f:bf:22:61:a6:3b:4b:b5:3a:ca:45:99:09:d2:6b: 05:07:99:7d:c4:6f:54:a6:22:dc:39:73:4c:6a:ec: f9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AF:97:E8:5F:C7:A0:A5:54:7A:DA:7D:2A:90:DF:B6:1C:B9:EC:16 X509v3 Authority Key Identifier: keyid:A3:5D:0D:09:67:27:FD:BE:2A:4E:ED:45:19:94:70:8E:CB:4A:5F:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:3a:fb:a7:04:c7:70:90:64:67:7a:c7:ec:69:17:16:da:bd: 2a:6d:67:e1:55:75:8c:f1:a5:93:7b:e0:5e:6f:c9:9c:01:b4: 88:7a:63:c7:9e:cd:f9:0b:9e:7a:47:60:83:dc:c5:9d:fe:b7: e3:43:c7:17:2d:36:5c:43:ee:f4:08:3a:db:4b:71:db:e1:02: b8:6b:c8:4a:b7:10:d2:10:d3:f5:92:27:b8:9d:f7:e7:c5:d7: 7b:4f:4e:42:17:23:ea:af:58:33:b3:4e:ae:8b:88:5e:c9:d8: 2c:8f:1d:9c:65:26:a3:7d:9b:58:f4:0b:75:f6:49:d6:65:42: 83:81:03:64:42:74:47:14:58:b3:f5:d0:8b:5a:55:08:d6:69: 49:34:38:73:b3:75:c6:85:fc:a7:ce:cf:70:d9:60:b5:da:9d: 87:90:05:42:ae:c5:fa:6d:92:03:e1:cc:89:43:78:45:cd:8e: 9e:cc:d9:b8:c0:9d:da:96:91:dc:4a:fb:58:23:3b:20:0c:42: 0f:b2:14:75:3e:54:e7:29:0f:3f:e0:d5:66:30:02:15:c7:ac: e0:8a:0e:41:c3:19:b3:f6:a1:d4:e3:b7:fb:74:07:65:fb:8a: a5:68:52:13:77:eb:66:a4:77:92:bd:4c:70:4c:dd:de:3d:18: 33:a0:53:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQFuz29ecGDQ0JpU8aNzhCfONq6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcwOEVD QjRBNUYxNDAeFw0yNTEwMjAwMDI3MTBaFw0yNTEwMjMwMzEyMTBaMDMxMTAvBgNV BAMTKDQ5QUY5N0U4NUZDN0EwQTU1NDdBREE3RDJBOTBERkI2MUNCOUVDMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn1EDR4AJQ4Awx5+5j61UyTLz/ IzQ70BC+evQL4rr/XDhu9BHS3wkJVUhfDIzn+N17EN2d4S4gp9SpyOnuzyOu6ClS okW2+uswR94zJ6zxb4E5u3rlbL6M9ZhfLuihrMCXA9YL74EhjYSeECpVBzUdr/v3 ZpINy4kNqxgH09ELJqLkClbiz2MKWagSOyFHd+t/wMGskXuhdWfi/jAWqVeLMVeX K+vTy+hO8dWEDypvrgAKTdAp9PFF+g4zVdS8P0X+T/TpgXS8wyjQfd+G8SzS01fU OJvkDPPxXmKDHWpT75+/ImGmO0u1OspFmQnSawUHmX3Eb1SmItw5c0xq7PkhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSa+X6F/HoKVUetp9KpDfthy57BYwHwYDVR0j BBgwFoAUo10NCWcn/b4qTu1FGZRwjstKXxQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZGVlZjIxOC0wZDliLTRkMGQtYTVjNS1mODMyYjhlYjVhYmEvMC9BMzVEMEQwOTY3 MjdGREJFMkE0RUVENDUxOTk0NzA4RUNCNEE1RjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcwOEVDQjRB NUYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmRlZWYyMTgtMGQ5Yi00ZDBkLWE1 YzUtZjgzMmI4ZWI1YWJhLzAvQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcw OEVDQjRBNUYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGY6+6cEx3CQZGd6x+xpFxbavSptZ+FVdYzx pZN74F5vyZwBtIh6Y8eezfkLnnpHYIPcxZ3+t+NDxxctNlxD7vQIOttLcdvhArhr yEq3ENIQ0/WSJ7id9+fF13tPTkIXI+qvWDOzTq6LiF7J2CyPHZxlJqN9m1j0C3X2 SdZlQoOBA2RCdEcUWLP10ItaVQjWaUk0OHOzdcaF/KfOz3DZYLXanYeQBUKuxfpt kgPhzIlDeEXNjp7M2bjAndqWkdxK+1gjOyAMQg+yFHU+VOcpDz/g1WYwAhXHrOCK DkHDGbP2odTjt/t0B2X7iqVoUhN362akd5K9THBM3d49GDOgU34= -----END CERTIFICATE-----Generated at Mon Oct 20 09:28:21 2025 by rpki-client