$ rpki-client -vvf repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft File: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft (raw, json) Hash identifier: /ZFjPnl+nOrdf45JYT4pt7BxCyP7POVXb6yhoqXlhBU= Subject key identifier: 7F:F2:C8:8E:D9:EF:8D:6A:50:85:3F:8E:68:B2:C9:DA:BB:9C:F5:F3 Authority key identifier: A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 Certificate issuer: /CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Certificate serial: 15EB2565D62DF123D9182574CB0BA68D3C19454D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft Manifest number: E8 Signing time: Sun 19 Oct 2025 08:12:17 +0000 Manifest this update: Sun 19 Oct 2025 08:07:17 +0000 Manifest next update: Wed 22 Oct 2025 16:39:17 +0000 Files and hashes: 1: 3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa (hash: K/IR3tQ/B2ym6+3pMgc6lpdo/zlib36G9pC4/9bpSkY=) 2: 3136302e32302e3132342e302f32332d3233203d3e20313532373830.roa (hash: 5RUEcjZWV4Zm8Cu7Ldj94h1BNUsKLWrbbvXJVqSNnAU=) 3: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl (hash: zBESfInkykT4qGQgbaX0+s6933vvdZw03MAzqJcEWSM=) 4: 3136302e32302e3132352e302f32342d3234203d3e20313532373830.roa (hash: aD8d9MEtPA6KCQQfGq4r1uZ3wsc7mkQ1NJevQSM4M3Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 16:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:eb:25:65:d6:2d:f1:23:d9:18:25:74:cb:0b:a6:8d:3c:19:45:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Validity Not Before: Oct 19 08:07:17 2025 GMT Not After : Oct 22 16:39:17 2025 GMT Subject: CN=7FF2C88ED9EF8D6A50853F8E68B2C9DABB9CF5F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d7:1f:5a:8c:20:29:f5:f4:a7:22:aa:38:db: c6:15:29:f9:d9:30:eb:0a:67:e4:8d:d6:91:fd:c2: ed:ee:1a:3d:5c:3c:88:ce:f9:fe:47:50:46:4f:f7: 14:52:13:79:e8:e6:9e:8f:90:05:28:69:8c:e7:03: 1e:34:eb:fd:d3:4e:75:ee:e3:8b:15:a3:29:d7:93: aa:2b:50:1e:bf:72:e6:ff:1e:77:5a:78:c5:1a:12: 5b:f0:cc:5e:2f:50:5b:db:ff:09:80:90:fe:22:ca: 65:b5:1d:06:88:67:75:da:3a:2a:86:c3:13:35:54: 14:ff:34:22:65:7d:eb:57:6d:af:e8:d5:10:2d:19: 79:2b:88:51:8e:33:ae:c8:cf:30:06:ae:37:cd:18: 6e:d8:e0:92:0a:fd:92:99:12:79:4d:c6:4d:6b:97: ab:78:b9:ea:13:87:b1:84:84:65:ac:20:5c:04:28: 97:b7:03:b2:6f:1f:6c:cc:8e:20:bf:ad:d1:86:91: 5b:e9:d1:84:1e:67:2a:be:55:a9:74:e8:97:cd:97: b4:5a:4c:fb:44:be:18:7a:32:29:ab:ad:60:0a:86: 83:97:4c:1b:ba:c8:ee:a4:ce:37:a2:85:bb:33:98: 3a:17:55:0b:41:ae:71:55:e3:5a:f3:70:15:6a:fa: dc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F2:C8:8E:D9:EF:8D:6A:50:85:3F:8E:68:B2:C9:DA:BB:9C:F5:F3 X509v3 Authority Key Identifier: keyid:A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:e3:d9:ea:64:83:9f:56:e9:a1:e8:ec:50:36:8f:e7:59:38: 7e:4e:1f:cc:9f:ba:81:e1:ac:03:9d:51:bc:66:01:47:35:75: f3:f7:bd:ee:b8:45:53:ea:bd:99:b0:82:e0:06:db:4e:a0:de: b3:f6:ce:be:21:c2:65:5b:97:6b:49:50:dc:1e:12:ea:15:3e: bc:7c:ec:1c:7e:f2:2e:72:44:35:c9:54:9a:6d:7e:73:20:2e: 6b:5a:da:99:ba:67:6c:34:7b:b5:2f:60:53:08:87:ce:7b:0a: 83:1d:70:36:82:2f:5f:73:14:67:16:00:e1:4c:e0:8c:a6:56: dd:5c:56:de:c9:a2:0b:db:48:23:3c:0c:e1:ae:72:81:20:54: ef:a0:ff:96:43:f1:6d:ec:61:e3:d7:bb:3e:f9:b7:2f:de:ee: 29:e9:29:de:64:8b:bf:5b:c1:25:bc:cd:20:11:e7:a2:2f:be: ab:c9:61:36:51:b8:90:6d:25:5d:53:ad:5b:08:31:35:61:91: 72:41:62:ce:c0:2d:73:23:b9:1f:e4:7d:58:77:97:2d:11:a0: 80:84:14:09:8a:09:47:24:19:94:87:e0:a9:95:eb:d8:ff:d7: 2a:31:e2:f1:00:82:35:93:17:90:e7:d3:b4:89:49:ec:51:23: 03:54:5c:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFeslZdYt8SPZGCV0ywumjTwZRU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRC MDgyRDgxOTAeFw0yNTEwMTkwODA3MTdaFw0yNTEwMjIxNjM5MTdaMDMxMTAvBgNV BAMTKDdGRjJDODhFRDlFRjhENkE1MDg1M0Y4RTY4QjJDOURBQkI5Q0Y1RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC81x9ajCAp9fSnIqo428YVKfnZ MOsKZ+SN1pH9wu3uGj1cPIjO+f5HUEZP9xRSE3no5p6PkAUoaYznAx406/3TTnXu 44sVoynXk6orUB6/cub/HndaeMUaElvwzF4vUFvb/wmAkP4iymW1HQaIZ3XaOiqG wxM1VBT/NCJlfetXba/o1RAtGXkriFGOM67IzzAGrjfNGG7Y4JIK/ZKZEnlNxk1r l6t4ueoTh7GEhGWsIFwEKJe3A7JvH2zMjiC/rdGGkVvp0YQeZyq+Val06JfNl7Ra TPtEvhh6MimrrWAKhoOXTBu6yO6kzjeihbszmDoXVQtBrnFV41rzcBVq+tzNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf/LIjtnvjWpQhT+OaLLJ2ruc9fMwHwYDVR0j BBgwFoAUo9dHZcHxePcsPNDeC2KH9LCC2BkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzU3OTIxZC1lZTE4LTQzNWMtOGI2ZS1lYmEyMjQxYjgzYWIvMC9BM0Q3NDc2NUMx RjE3OEY3MkMzQ0QwREUwQjYyODdGNEIwODJEODE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRCMDgy RDgxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM1NzkyMWQtZWUxOC00MzVjLThi NmUtZWJhMjI0MWI4M2FiLzAvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3 RjRCMDgyRDgxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJjj2epkg59W6aHo7FA2j+dZOH5OH8yfuoHh rAOdUbxmAUc1dfP3ve64RVPqvZmwguAG206g3rP2zr4hwmVbl2tJUNweEuoVPrx8 7Bx+8i5yRDXJVJptfnMgLmta2pm6Z2w0e7UvYFMIh857CoMdcDaCL19zFGcWAOFM 4IymVt1cVt7JogvbSCM8DOGucoEgVO+g/5ZD8W3sYePXuz75ty/e7inpKd5ki79b wSW8zSAR56IvvqvJYTZRuJBtJV1TrVsIMTVhkXJBYs7ALXMjuR/kfVh3ly0RoICE FAmKCUckGZSH4KmV69j/1yox4vEAgjWTF5Dn07SJSexRIwNUXPo= -----END CERTIFICATE-----Generated at Mon Oct 20 14:41:29 2025 by rpki-client