$ rpki-client -vvf repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft File: A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft (raw, json) Hash identifier: fZYbTh/eLZFnLFZuUHVwhbHWQ9pBJXdFgyaaJk/Ovv4= Subject key identifier: 75:4B:39:1A:A8:22:13:30:E3:DC:25:D4:2C:C8:0F:43:CD:6D:94:B1 Authority key identifier: A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B Certificate issuer: /CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B Certificate serial: 560BF360DEB4CF3DB0F409777355362EC3A2C996 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft Manifest number: 0240 Signing time: Sun 19 Oct 2025 02:20:47 +0000 Manifest this update: Sun 19 Oct 2025 02:15:47 +0000 Manifest next update: Wed 22 Oct 2025 06:29:47 +0000 Files and hashes: 1: 3130332e3137342e3132312e302f32342d3234203d3e20313437303937.roa (hash: pLboy3es15Aee5R8ozV3T/lLrbC6yjQ2R9cCybdnsq4=) 2: 3130332e3137342e3132302e302f32342d3234203d3e20313437303937.roa (hash: PJJflVEuAqU1x1bzzs4n8zhyBWNQ4TBM8yQ5wwBc+Y8=) 3: 3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa (hash: j0lcRKDX7Zai080pL+d3IVmhJOqrL+V2aEhEgUdciuo=) 4: A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl (hash: r4f+y4dh0bjAqa25QYij9yLMKfMXsruvB7O/nRO85j8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 06:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:0b:f3:60:de:b4:cf:3d:b0:f4:09:77:73:55:36:2e:c3:a2:c9:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B Validity Not Before: Oct 19 02:15:47 2025 GMT Not After : Oct 22 06:29:47 2025 GMT Subject: CN=754B391AA8221330E3DC25D42CC80F43CD6D94B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:09:0d:5b:6d:78:dd:82:68:88:4a:17:32:39: 1d:a3:cc:84:43:72:3f:2a:25:ce:82:91:18:15:ff: 6c:0c:a0:69:35:b3:0d:a3:4f:04:95:d5:cb:41:49: 0d:8a:f0:ae:2c:66:19:95:68:9a:37:bf:a1:d7:7b: aa:f4:58:da:58:63:04:b9:bd:b0:12:8a:49:53:7f: 31:19:a5:16:18:45:ca:64:7c:5a:db:32:ea:d1:81: ab:5f:24:6a:16:07:5a:69:66:04:88:ff:60:3b:7a: 14:eb:ae:73:08:61:c7:d2:11:b7:73:a9:d9:18:0b: 53:1d:f8:05:85:b8:31:d9:41:2f:8b:cc:11:ce:81: 48:e4:e5:9a:39:7f:74:f4:81:83:85:ef:37:b0:54: 67:f9:6f:de:1f:f8:96:fe:93:e4:47:6d:e3:e3:8a: 67:a0:8e:e3:14:3c:b4:e1:60:37:19:41:1d:09:3f: 34:57:5f:fa:d3:51:99:c0:6b:e8:09:b9:5b:23:d8: 52:e1:73:4e:d3:86:18:f5:d3:04:d1:0f:94:e0:a1: 6a:65:73:d5:6d:b5:a6:3d:4b:63:ef:37:5c:b8:d0: 47:6c:15:11:54:fc:8b:89:c3:6f:ae:97:6d:6c:06: 54:e4:d8:e8:ef:12:7e:9f:a7:5f:6f:6c:f1:54:a2: cd:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:4B:39:1A:A8:22:13:30:E3:DC:25:D4:2C:C8:0F:43:CD:6D:94:B1 X509v3 Authority Key Identifier: keyid:A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:75:ee:e7:0b:a6:de:8b:3e:6b:80:11:d6:aa:65:c8:0d:0d: 20:9b:d7:46:9e:52:da:71:ac:05:ab:0c:7e:a2:70:ae:08:ba: 97:10:9d:59:da:f5:1d:24:3b:1e:78:f9:1d:f0:d9:f6:4c:2e: 13:95:1d:80:7c:1f:bb:3b:c7:78:1b:95:7f:ae:cb:3a:59:04: ef:2a:ca:9f:72:8c:6e:dc:e6:34:33:29:78:e4:4e:45:6a:ef: 13:00:a4:f6:d7:bb:81:29:f2:f4:f6:8c:4c:e9:74:76:9b:b8: 6d:de:b7:ec:41:4e:1d:ea:ed:b9:21:db:7e:c6:87:c7:3f:b5: dd:81:8a:16:63:28:90:ff:73:11:76:cd:e5:44:22:5b:a6:39: f6:f8:be:1b:47:28:91:18:f3:99:c5:c8:83:cc:b3:08:1d:02: 96:b1:f8:cf:38:16:9b:19:57:bc:f3:bf:7a:1b:0b:24:3a:4d: 80:ad:79:a2:86:6b:8e:a1:d6:8d:cd:4e:70:bb:5b:0a:22:70: 9e:63:97:55:9d:9b:90:96:80:56:2a:dc:42:6f:fd:1a:fb:ef: 9c:a2:cd:d2:5d:6e:52:a0:2b:14:15:b7:3d:95:4b:d1:f8:51: 78:f9:b8:47:4a:41:01:6d:45:e0:7d:95:27:0f:f5:b9:66:d5: b4:6c:32:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVgvzYN60zz2w9Al3c1U2LsOiyZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0OUU3 QTgwQ0Y0QjAeFw0yNTEwMTkwMjE1NDdaFw0yNTEwMjIwNjI5NDdaMDMxMTAvBgNV BAMTKDc1NEIzOTFBQTgyMjEzMzBFM0RDMjVENDJDQzgwRjQzQ0Q2RDk0QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeCQ1bbXjdgmiIShcyOR2jzIRD cj8qJc6CkRgV/2wMoGk1sw2jTwSV1ctBSQ2K8K4sZhmVaJo3v6HXe6r0WNpYYwS5 vbASiklTfzEZpRYYRcpkfFrbMurRgatfJGoWB1ppZgSI/2A7ehTrrnMIYcfSEbdz qdkYC1Md+AWFuDHZQS+LzBHOgUjk5Zo5f3T0gYOF7zewVGf5b94f+Jb+k+RHbePj imegjuMUPLThYDcZQR0JPzRXX/rTUZnAa+gJuVsj2FLhc07Thhj10wTRD5TgoWpl c9VttaY9S2PvN1y40EdsFRFU/IuJw2+ul21sBlTk2OjvEn6fp19vbPFUos33AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdUs5GqgiEzDj3CXULMgPQ81tlLEwHwYDVR0j BBgwFoAUoLUbxax8lXN6JL1qKNgknnqAz0swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmIyMDUxNS04ZDdjLTQ0NWMtYmZmNy1iYWJkNTI2NTc4MGYvMC9BMEI1MUJDNUFD N0M5NTczN0EyNEJENkEyOEQ4MjQ5RTdBODBDRjRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0OUU3QTgw Q0Y0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZiMjA1MTUtOGQ3Yy00NDVjLWJm ZjctYmFiZDUyNjU3ODBmLzAvQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0 OUU3QTgwQ0Y0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKV17ucLpt6LPmuAEdaqZcgNDSCb10aeUtpx rAWrDH6icK4IupcQnVna9R0kOx54+R3w2fZMLhOVHYB8H7s7x3gblX+uyzpZBO8q yp9yjG7c5jQzKXjkTkVq7xMApPbXu4Ep8vT2jEzpdHabuG3et+xBTh3q7bkh237G h8c/td2BihZjKJD/cxF2zeVEIlumOfb4vhtHKJEY85nFyIPMswgdApax+M84FpsZ V7zzv3obCyQ6TYCteaKGa46h1o3NTnC7WwoicJ5jl1Wdm5CWgFYq3EJv/Rr775yi zdJdblKgKxQVtz2VS9H4UXj5uEdKQQFtReB9lScP9blm1bRsMiA= -----END CERTIFICATE-----Generated at Mon Oct 20 16:54:57 2025 by rpki-client