$ rpki-client -vvf repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft File: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft (raw, json) Hash identifier: oVBMUTN80WruLPENzsX5nitn0LXq2oE+AX69aY4Uu2A= Subject key identifier: A8:35:8F:3B:1C:8D:22:98:64:30:9D:B4:C0:03:C6:D9:E7:91:E6:92 Authority key identifier: A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A Certificate issuer: /CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Certificate serial: 503E95510F0667D8481C747A39A6570C242E909B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft Manifest number: 01CE Signing time: Sun 19 Oct 2025 16:01:31 +0000 Manifest this update: Sun 19 Oct 2025 15:56:31 +0000 Manifest next update: Thu 23 Oct 2025 02:22:31 +0000 Files and hashes: 1: 3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa (hash: ucCbwXx4y4Y9tjJj1wWolRQrWsXSQxItRBf8rwecRXg=) 2: 3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa (hash: cp5AZz8jsj7lkSzSuyAiGgYK8cjqibH/qG2rGgK+9is=) 3: 3130332e3139302e36332e302f32342d3234203d3e20313439383938.roa (hash: zf/PohLzFCJiUqI9Mgfrev7PucURzdNsl2RNcKVdXxg=) 4: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl (hash: mCzpEctJyLis/8KWQNlfyGUrb/8BNc/cEUTjq4ldHwA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 02:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:3e:95:51:0f:06:67:d8:48:1c:74:7a:39:a6:57:0c:24:2e:90:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Validity Not Before: Oct 19 15:56:31 2025 GMT Not After : Oct 23 02:22:31 2025 GMT Subject: CN=A8358F3B1C8D229864309DB4C003C6D9E791E692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0d:43:51:ff:41:37:23:53:0d:dd:05:30:2b: 39:de:5e:db:19:e1:dc:4e:85:ea:da:6e:df:3e:e3: 40:75:7e:c5:d4:0d:78:56:b5:13:0b:7f:63:ba:0d: ca:14:a1:87:1f:c2:6f:e2:9d:e4:67:d0:4d:83:1e: 46:92:46:97:9a:d1:5b:94:e3:a4:1f:02:b5:ae:e3: 56:11:bf:d2:9b:ba:84:ae:e2:d9:ba:69:53:cc:16: 59:a3:12:31:17:27:5d:a0:19:2f:03:81:cd:44:43: 3b:4a:fe:16:3a:e2:61:e0:53:1e:38:bf:9c:81:df: aa:d2:6c:d7:cb:77:22:7e:4c:eb:a6:f4:94:61:33: 51:d4:59:cc:ae:cf:36:98:7f:07:e6:01:62:28:7f: 1b:b0:66:82:58:b6:e6:e0:68:b7:29:08:4e:e0:87: 78:ab:f3:52:40:a3:57:ef:87:ec:22:cd:9c:33:0f: c7:6b:54:f6:3a:b9:a0:e4:56:2b:cb:42:ae:e9:90: ea:4b:27:7a:ed:62:81:1f:82:a4:83:13:0c:ac:42: 9b:54:f3:7b:42:37:02:36:62:54:41:b0:41:1f:f3: 8f:2c:a2:fb:0a:f7:40:76:e4:5d:59:bf:1e:a7:a1: 59:04:ed:25:06:80:3a:cd:40:28:e1:00:28:fe:bb: 73:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:35:8F:3B:1C:8D:22:98:64:30:9D:B4:C0:03:C6:D9:E7:91:E6:92 X509v3 Authority Key Identifier: keyid:A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:7b:b1:61:f3:65:f8:b8:bc:12:7c:ee:35:6b:d8:18:93:0d: 88:65:2f:24:ea:b7:ea:a4:89:da:10:25:3c:1a:57:15:c9:25: 55:70:55:a4:c5:93:3c:d4:41:04:a9:58:6c:d8:67:40:08:1e: e6:99:b2:70:f2:c5:c6:16:48:03:72:76:f3:ff:3b:72:50:2a: 5b:fd:2f:cf:93:76:57:92:7c:61:f9:59:32:16:dd:2b:93:26: a7:e4:d9:75:b6:fe:a5:d3:c4:37:b0:18:3d:01:23:7c:e5:6a: 71:57:69:7f:32:06:f9:87:73:dc:a7:fd:8c:f1:97:32:51:34: be:71:79:dc:84:5d:fe:09:2a:d2:09:83:08:5a:53:71:a0:7b: 4e:e6:42:86:4b:28:50:da:b0:70:e3:ec:79:e1:28:98:aa:ba: 5a:a9:7a:7b:b7:0f:74:e8:da:6f:86:10:93:e1:43:fb:0c:62: ca:b9:82:0d:e5:f8:77:e5:6b:da:d9:85:3a:ff:fb:1c:cd:98: b4:04:c1:55:47:60:0b:f5:eb:d0:3a:1a:1f:7c:27:4a:6e:42: ee:f1:63:34:7d:09:7b:99:48:59:00:5e:53:3b:14:92:31:dc: f4:31:ac:7b:f6:fa:d4:7e:f7:10:58:cf:2f:ee:0c:1b:d7:14: c2:ff:40:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUD6VUQ8GZ9hIHHR6OaZXDCQukJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAx NzdBMEY4QTAeFw0yNTEwMTkxNTU2MzFaFw0yNTEwMjMwMjIyMzFaMDMxMTAvBgNV BAMTKEE4MzU4RjNCMUM4RDIyOTg2NDMwOURCNEMwMDNDNkQ5RTc5MUU2OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJDUNR/0E3I1MN3QUwKzneXtsZ 4dxOherabt8+40B1fsXUDXhWtRMLf2O6DcoUoYcfwm/ineRn0E2DHkaSRpea0VuU 46QfArWu41YRv9KbuoSu4tm6aVPMFlmjEjEXJ12gGS8Dgc1EQztK/hY64mHgUx44 v5yB36rSbNfLdyJ+TOum9JRhM1HUWcyuzzaYfwfmAWIofxuwZoJYtubgaLcpCE7g h3ir81JAo1fvh+wizZwzD8drVPY6uaDkVivLQq7pkOpLJ3rtYoEfgqSDEwysQptU 83tCNwI2YlRBsEEf848sovsK90B25F1Zvx6noVkE7SUGgDrNQCjhACj+u3MLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqDWPOxyNIphkMJ20wAPG2eeR5pIwHwYDVR0j BBgwFoAUp9U+tUUer4rKtjhIf73rQBd6D4owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjIwYjQyMy1kZDVkLTQ0OGYtYmJkMy0wNDUzMGVjMTcxNWQvMC9BN0Q1M0VCNTQ1 MUVBRjhBQ0FCNjM4NDg3RkJERUI0MDE3N0EwRjhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAxNzdB MEY4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYyMGI0MjMtZGQ1ZC00NDhmLWJi ZDMtMDQ1MzBlYzE3MTVkLzAvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVC NDAxNzdBMEY4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK97sWHzZfi4vBJ87jVr2BiTDYhlLyTqt+qk idoQJTwaVxXJJVVwVaTFkzzUQQSpWGzYZ0AIHuaZsnDyxcYWSANydvP/O3JQKlv9 L8+TdleSfGH5WTIW3SuTJqfk2XW2/qXTxDewGD0BI3zlanFXaX8yBvmHc9yn/Yzx lzJRNL5xedyEXf4JKtIJgwhaU3Gge07mQoZLKFDasHDj7HnhKJiqulqpenu3D3To 2m+GEJPhQ/sMYsq5gg3l+Hfla9rZhTr/+xzNmLQEwVVHYAv169A6Gh98J0puQu7x YzR9CXuZSFkAXlM7FJIx3PQxrHv2+tR+9xBYzy/uDBvXFML/QHo= -----END CERTIFICATE-----Generated at Mon Oct 20 13:06:06 2025 by rpki-client