$ rpki-client -vvf repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft File: A5D12164B9484E51D4BE4B03823526989B147558.mft (raw, json) Hash identifier: 527+x/qs5fWKok2dAcD4fRpex8iGHkXbGRtpsAygjuY= Subject key identifier: BC:DA:00:00:E5:2D:D4:67:22:91:77:34:AD:1E:F8:4B:F6:4E:A3:E8 Authority key identifier: A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58 Certificate issuer: /CN=A5D12164B9484E51D4BE4B03823526989B147558 Certificate serial: 289C4ABB7B86BB177E1AACCBFE5CF6E14833760D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft Manifest number: 0218 Signing time: Mon 20 Oct 2025 10:11:41 +0000 Manifest this update: Mon 20 Oct 2025 10:06:41 +0000 Manifest next update: Thu 23 Oct 2025 14:06:41 +0000 Files and hashes: 1: A5D12164B9484E51D4BE4B03823526989B147558.crl (hash: HbKOuLgH6cFlPat2yuNim5VW5rme0FOgxAXwzlHcF/k=) 2: 3130332e3139302e37362e302f32332d3234203d3e2034383030.roa (hash: AYXfpwSS/VcD/Xo07P+SgDxOWSZoEQ4Wu+i9pDga8RE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.crl rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:9c:4a:bb:7b:86:bb:17:7e:1a:ac:cb:fe:5c:f6:e1:48:33:76:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5D12164B9484E51D4BE4B03823526989B147558 Validity Not Before: Oct 20 10:06:41 2025 GMT Not After : Oct 23 14:06:41 2025 GMT Subject: CN=BCDA0000E52DD46722917734AD1EF84BF64EA3E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8b:3c:18:83:a7:58:b5:76:d7:fb:78:f8:c0: 2b:94:32:42:44:cf:da:c5:0d:bd:6e:0b:ae:af:a2: 0f:1b:48:28:d9:e9:a2:0b:90:b9:10:0c:d4:98:11: 93:43:68:ce:3e:f1:89:4e:b6:6c:cd:2d:01:f7:47: 02:95:09:67:e3:88:49:9f:7c:a3:b0:03:9a:07:18: 12:31:67:05:3f:aa:97:e8:ed:f8:0b:cb:38:25:24: 49:c8:2f:24:46:df:de:06:93:84:54:0f:48:21:e1: d1:42:47:99:1b:33:5c:14:6b:98:80:f9:e5:e4:58: 44:32:18:4f:3b:3d:63:57:31:67:88:3e:33:90:0a: 29:86:57:fc:1d:2d:86:e0:22:ba:4d:92:38:9c:da: da:bb:49:f3:3c:9d:fe:a2:95:89:24:e6:c5:08:49: 18:5c:93:2a:b5:21:5d:8b:de:61:d8:87:41:8a:65: a9:d8:5a:55:81:aa:11:29:72:39:51:ab:82:78:fe: f2:ca:53:00:ff:d0:c8:fe:7c:be:3e:6c:cd:ad:0b: e5:a5:88:b0:94:59:86:75:38:8c:e2:a3:5f:41:22: ce:6a:c9:d7:1b:f2:46:62:7d:07:6a:29:fa:16:16: 66:72:b0:f7:09:27:25:7d:5d:e7:dd:b3:b5:60:6d: 21:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DA:00:00:E5:2D:D4:67:22:91:77:34:AD:1E:F8:4B:F6:4E:A3:E8 X509v3 Authority Key Identifier: keyid:A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:39:b8:94:de:b7:60:fb:3a:b1:80:ed:0a:b7:d2:81:6a:40: 34:3a:34:55:f8:b6:35:d6:d0:51:b1:d4:b9:9e:d0:cf:c2:cb: da:f3:6e:b6:92:b3:36:60:c2:11:10:bb:71:23:da:88:ca:0e: da:8c:17:31:f9:27:81:9d:c1:70:42:80:a5:f3:bc:73:87:5e: b2:b2:f8:c4:60:20:02:54:ca:1e:fb:29:4b:47:80:17:b1:5d: e7:e3:38:72:fe:6a:e4:e4:f4:91:ae:d8:65:10:fc:66:61:56: cf:15:ee:d2:0d:4b:24:d5:02:cf:a3:be:fe:7e:c8:c3:c8:47: 8c:4f:d9:d9:a7:af:69:e4:a5:8d:cb:b6:a7:fa:d2:69:c2:6d: 5e:b7:56:26:3d:60:0c:2c:71:cf:02:eb:73:ba:48:96:c1:c8: c7:d8:8d:e6:8d:4b:c4:22:61:66:69:5a:1d:37:7c:65:97:d0: 9a:a0:d4:40:68:5b:e3:70:df:ba:d1:02:f8:6b:2f:30:dc:a7: c2:9e:08:58:f0:68:bf:22:d0:10:f1:25:98:9a:86:f6:12:24: b2:3d:23:1f:fb:f1:4d:45:26:35:64:30:c9:9c:d0:24:1a:9d: d6:2a:ac:dd:98:e8:6a:db:90:c8:35:a5:45:9d:a1:a2:2b:e6: ac:d2:51:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKJxKu3uGuxd+GqzL/lz24Ugzdg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2OTg5 QjE0NzU1ODAeFw0yNTEwMjAxMDA2NDFaFw0yNTEwMjMxNDA2NDFaMDMxMTAvBgNV BAMTKEJDREEwMDAwRTUyREQ0NjcyMjkxNzczNEFEMUVGODRCRjY0RUEzRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5izwYg6dYtXbX+3j4wCuUMkJE z9rFDb1uC66vog8bSCjZ6aILkLkQDNSYEZNDaM4+8YlOtmzNLQH3RwKVCWfjiEmf fKOwA5oHGBIxZwU/qpfo7fgLyzglJEnILyRG394Gk4RUD0gh4dFCR5kbM1wUa5iA +eXkWEQyGE87PWNXMWeIPjOQCimGV/wdLYbgIrpNkjic2tq7SfM8nf6ilYkk5sUI SRhckyq1IV2L3mHYh0GKZanYWlWBqhEpcjlRq4J4/vLKUwD/0Mj+fL4+bM2tC+Wl iLCUWYZ1OIzio19BIs5qydcb8kZifQdqKfoWFmZysPcJJyV9Xefds7VgbSE7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvNoAAOUt1GcikXc0rR74S/ZOo+gwHwYDVR0j BBgwFoAUpdEhZLlITlHUvksDgjUmmJsUdVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTJjYWNjZi0zMjdlLTQyYmQtOWIzMS0wYTg3M2QyZTY2OTIvMC9BNUQxMjE2NEI5 NDg0RTUxRDRCRTRCMDM4MjM1MjY5ODlCMTQ3NTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2OTg5QjE0 NzU1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUyY2FjY2YtMzI3ZS00MmJkLTli MzEtMGE4NzNkMmU2NjkyLzAvQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2 OTg5QjE0NzU1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGc5uJTet2D7OrGA7Qq30oFqQDQ6NFX4tjXW 0FGx1Lme0M/Cy9rzbraSszZgwhEQu3Ej2ojKDtqMFzH5J4GdwXBCgKXzvHOHXrKy +MRgIAJUyh77KUtHgBexXefjOHL+auTk9JGu2GUQ/GZhVs8V7tINSyTVAs+jvv5+ yMPIR4xP2dmnr2nkpY3Ltqf60mnCbV63ViY9YAwscc8C63O6SJbByMfYjeaNS8Qi YWZpWh03fGWX0Jqg1EBoW+Nw37rRAvhrLzDcp8KeCFjwaL8i0BDxJZiahvYSJLI9 Ix/78U1FJjVkMMmc0CQandYqrN2Y6GrbkMg1pUWdoaIr5qzSUeQ= -----END CERTIFICATE-----Generated at Mon Oct 20 19:01:33 2025 by rpki-client