$ rpki-client -vvf repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft File: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft (raw, json) Hash identifier: GBOhcS+Zh8B4zMMeljKZpgIwnzNYRLlSBnGuN5AN1Lc= Subject key identifier: 93:6F:23:97:0D:17:09:D1:31:F0:59:AD:8C:EC:9F:03:B9:14:0B:B4 Authority key identifier: A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A Certificate issuer: /CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A Certificate serial: 7222A24DAF953DB9A7C50745A7ECB2AA5E94E033 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft Manifest number: 01A1 Signing time: Sun 19 Oct 2025 13:22:10 +0000 Manifest this update: Sun 19 Oct 2025 13:17:10 +0000 Manifest next update: Thu 23 Oct 2025 01:18:10 +0000 Files and hashes: 1: 3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa (hash: lH+IV1VjfExz6EgaEksT/6x5pW3sOfiOZbcnKLG8hUk=) 2: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl (hash: WXgjmKToXWZax0p3ZF15oU3krCYUgZsTD7ek8xwRIIU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 01:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:22:a2:4d:af:95:3d:b9:a7:c5:07:45:a7:ec:b2:aa:5e:94:e0:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A Validity Not Before: Oct 19 13:17:10 2025 GMT Not After : Oct 23 01:18:10 2025 GMT Subject: CN=936F23970D1709D131F059AD8CEC9F03B9140BB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:17:24:f4:4a:56:22:3a:e1:d2:f0:b2:5d:f7: d0:f1:53:78:41:cf:ac:75:62:a9:e7:5a:1f:5c:59: 9f:76:ec:c3:be:e6:7c:7c:76:bf:3f:a2:50:65:d9: 97:0f:5e:1a:80:27:cc:73:b9:fb:24:5b:c3:ba:1d: 33:03:df:ef:e8:bc:d9:51:33:a8:c2:07:49:a9:18: 14:7e:96:f0:82:fc:cf:e1:1c:6b:34:f5:88:ff:dd: 76:05:e2:6c:df:43:05:4d:fa:40:f1:db:8b:b1:9b: 56:b2:b4:12:07:e7:22:ca:62:04:34:04:62:9a:58: 40:2f:81:f1:1e:9b:76:6b:86:20:8a:23:b5:57:b9: 90:f8:05:b8:fe:85:db:62:d6:e0:ae:7a:4f:f1:39: 5a:e5:64:b7:e1:08:23:8d:d6:d8:c9:3e:3f:83:fc: 0d:c0:29:26:79:2d:7b:b5:3c:f1:7d:c6:43:fd:45: 3e:29:7b:35:1c:e7:ff:fc:d0:10:17:50:d6:39:be: 9e:9d:c2:13:e0:7d:13:af:85:a2:e3:0d:fd:10:53: 04:83:5f:51:44:46:78:27:92:42:53:8d:f4:3e:9f: 00:bb:37:35:1e:03:7b:f1:de:c3:78:d8:44:d7:65: 09:33:db:95:53:92:9d:ef:27:8b:23:80:88:3a:0d: 5a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:6F:23:97:0D:17:09:D1:31:F0:59:AD:8C:EC:9F:03:B9:14:0B:B4 X509v3 Authority Key Identifier: keyid:A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:96:54:b1:03:d8:58:79:a2:ff:0b:39:c8:87:d6:77:ff:13: 42:39:f2:e2:37:5a:36:1b:38:9f:e9:88:c6:cc:2b:25:7d:c3: 6f:00:bc:5b:09:4c:30:a7:66:39:0a:4b:fe:45:cf:ad:ab:54: 32:56:f2:d4:3f:27:2d:8a:d6:ac:27:18:4e:f2:12:e5:80:cb: a4:b7:5c:ce:99:ec:59:25:8f:7b:33:26:60:a0:9c:95:f1:2c: ad:51:a9:4c:97:48:ad:e7:24:2b:79:e0:80:e6:b7:e1:2e:7e: 26:73:bf:16:e7:02:12:94:fd:3c:6e:7d:f0:d0:db:d4:bf:42: b6:52:7c:01:3b:9a:68:23:f6:6f:4b:29:6b:21:8f:59:32:41: ce:95:09:f3:0f:f2:0c:38:55:b6:f5:87:d3:7b:1b:f6:46:98: 6b:6b:32:bb:cf:d9:62:4b:0c:1f:56:53:3b:05:92:e7:ac:3d: 7d:d9:80:d3:e0:a5:10:0c:f7:e8:a4:76:53:ce:c5:d5:d9:29: 20:9b:67:c1:b2:05:46:59:6d:d6:cf:16:82:cd:d8:ab:a6:48: b5:e5:bc:33:4b:18:92:60:8f:60:95:6e:2e:19:e6:d1:f3:24: 60:1d:e1:7c:19:b8:d8:c7:ea:01:ba:3e:57:11:84:d4:e8:50: 9e:d0:6a:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUciKiTa+VPbmnxQdFp+yyql6U4DMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4 RTVEQjMxQTAeFw0yNTEwMTkxMzE3MTBaFw0yNTEwMjMwMTE4MTBaMDMxMTAvBgNV BAMTKDkzNkYyMzk3MEQxNzA5RDEzMUYwNTlBRDhDRUM5RjAzQjkxNDBCQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcFyT0SlYiOuHS8LJd99DxU3hB z6x1YqnnWh9cWZ927MO+5nx8dr8/olBl2ZcPXhqAJ8xzufskW8O6HTMD3+/ovNlR M6jCB0mpGBR+lvCC/M/hHGs09Yj/3XYF4mzfQwVN+kDx24uxm1aytBIH5yLKYgQ0 BGKaWEAvgfEem3ZrhiCKI7VXuZD4Bbj+hdti1uCuek/xOVrlZLfhCCON1tjJPj+D /A3AKSZ5LXu1PPF9xkP9RT4pezUc5//80BAXUNY5vp6dwhPgfROvhaLjDf0QUwSD X1FERngnkkJTjfQ+nwC7NzUeA3vx3sN42ETXZQkz25VTkp3vJ4sjgIg6DVrvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk28jlw0XCdEx8FmtjOyfA7kUC7QwHwYDVR0j BBgwFoAUpklXcV59zuw6fUwxdsyX7Y5dsxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTAxMjlhOC0yN2U4LTQwNDYtODk4OS04NjViMjU3ZWE2Y2EvMC9BNjQ5NTc3MTVF N0RDRUVDM0E3RDRDMzE3NkNDOTdFRDhFNURCMzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4RTVE QjMxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWEwMTI5YTgtMjdlOC00MDQ2LTg5 ODktODY1YjI1N2VhNmNhLzAvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3 RUQ4RTVEQjMxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFeWVLED2Fh5ov8LOciH1nf/E0I58uI3WjYb OJ/piMbMKyV9w28AvFsJTDCnZjkKS/5Fz62rVDJW8tQ/Jy2K1qwnGE7yEuWAy6S3 XM6Z7Fklj3szJmCgnJXxLK1RqUyXSK3nJCt54IDmt+EufiZzvxbnAhKU/TxuffDQ 29S/QrZSfAE7mmgj9m9LKWshj1kyQc6VCfMP8gw4Vbb1h9N7G/ZGmGtrMrvP2WJL DB9WUzsFkuesPX3ZgNPgpRAM9+ikdlPOxdXZKSCbZ8GyBUZZbdbPFoLN2KumSLXl vDNLGJJgj2CVbi4Z5tHzJGAd4XwZuNjH6gG6PlcRhNToUJ7Qarg= -----END CERTIFICATE-----Generated at Mon Oct 20 15:55:42 2025 by rpki-client