$ rpki-client -vvf repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft File: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft (raw, json) Hash identifier: PX2I2RTDXR9UmKVDCK0QXFZkhvTWiXsC6OBEtlyuehc= Subject key identifier: 1C:09:42:4F:B3:E8:F1:A6:EC:7F:CF:29:09:D3:D5:74:79:D1:EF:BB Authority key identifier: A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA Certificate issuer: /CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Certificate serial: 6023B9E1474D0469A28C43D596DFA515684275BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft Manifest number: BD Signing time: Mon 20 Oct 2025 14:42:15 +0000 Manifest this update: Mon 20 Oct 2025 14:37:15 +0000 Manifest next update: Thu 23 Oct 2025 19:41:15 +0000 Files and hashes: 1: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl (hash: Pi4yG5iwjlLWbb50B/ojd//i4C9hbf1BjlT2VUW9VPk=) 2: 3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa (hash: T0SEzE9YSldItn38GmkKf92LoaZ2oQZ49jDDO4h9Pog=) 3: 3136302e32322e3139382e302f32332d3233203d3e20313532383336.roa (hash: VUNIcQLLtJsrGFAzVMiImA2RepGLVIMfYYvCS/t2Ge0=) 4: 3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa (hash: Lhr2al1XwYOqujTNMwbvxurUmcC7+yc2oxsnrcYpuBo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:23:b9:e1:47:4d:04:69:a2:8c:43:d5:96:df:a5:15:68:42:75:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Validity Not Before: Oct 20 14:37:15 2025 GMT Not After : Oct 23 19:41:15 2025 GMT Subject: CN=1C09424FB3E8F1A6EC7FCF2909D3D57479D1EFBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3b:25:d3:b8:74:4e:df:80:b8:f6:3c:8d:5a: 62:0f:5d:55:01:e7:6e:07:dd:f1:a1:70:63:8d:ba: 3c:b6:fd:e6:d2:5c:32:5a:df:a1:8b:7b:61:9a:33: 89:53:4f:93:1b:07:17:32:86:f6:43:44:82:98:6e: c7:61:81:89:c0:d6:2b:09:7e:38:24:58:69:e7:ac: 15:6c:73:6d:24:8b:b1:2e:2a:d8:d9:9c:ce:89:f7: 2e:65:ac:ed:aa:6c:25:af:aa:cb:3f:e7:cb:c3:f5: 42:49:2e:73:d2:95:4e:9b:9e:c8:80:42:8f:01:0c: 01:97:93:27:06:f9:8a:46:3c:61:ed:5f:4f:09:7b: eb:4f:90:98:a0:08:67:dc:c3:34:49:99:ae:50:7e: 3d:03:39:9d:f1:12:70:d6:7f:15:0c:41:82:fc:8c: 6f:96:bd:f5:98:3c:e2:a0:ea:6e:ad:91:3d:4c:53: ed:ad:90:50:f5:17:7d:c9:bf:55:13:a6:1b:ab:fb: ab:66:3a:09:f9:7d:c9:61:ce:36:af:e6:e5:7e:25: 61:fb:a4:0a:af:dd:1f:88:63:4d:cd:6f:94:ec:86: e5:ac:92:eb:50:5d:95:92:52:15:2b:0e:8d:0b:c1: c1:86:70:9b:31:c1:a1:bd:8b:bb:31:5f:c5:28:a8: c8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:09:42:4F:B3:E8:F1:A6:EC:7F:CF:29:09:D3:D5:74:79:D1:EF:BB X509v3 Authority Key Identifier: keyid:A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:eb:11:3a:d8:6a:1f:01:0e:83:7d:a5:a4:ae:bc:05:e6:0f: cd:a6:40:0c:55:94:cb:32:3a:ed:fd:a6:7f:9e:c9:01:9c:8b: 5f:3e:b7:7d:21:fd:70:c2:a8:f5:90:27:6b:79:e7:cd:b2:4e: 26:1d:b7:49:40:7f:60:5c:85:d5:99:d5:98:1f:9a:52:b5:9b: 95:a9:43:32:f7:33:d6:0e:fa:c8:a1:e2:90:6d:20:26:ae:b2: 8e:1f:59:a9:95:bb:ee:08:18:89:65:1b:d7:5a:ca:2d:9c:2e: 93:c4:38:81:5b:23:8c:26:1f:77:a7:f7:5f:fa:25:fa:f4:59: 59:91:2c:6f:08:25:bc:02:1a:23:81:49:42:25:09:c5:8b:4b: 22:0b:b3:21:dc:27:95:36:95:a6:7d:e6:b7:05:ac:ab:c4:f6: 08:33:cf:f1:9c:00:f2:e0:ea:63:6d:c0:76:94:af:4d:0f:e4: 77:58:7e:8f:09:d4:a2:37:49:90:31:67:96:05:b4:e8:59:c3: 01:3d:23:12:bf:f2:ba:fe:82:2d:d2:f8:41:62:6c:d3:07:30: 9f:a4:c6:ed:6e:eb:e5:f2:f8:cf:bb:95:88:0c:ef:38:65:22: 16:1c:10:ee:74:a6:75:07:68:5d:44:76:70:d7:06:1b:cb:da: 42:60:5f:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYCO54UdNBGmijEPVlt+lFWhCdbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVCRjIz MEM1QjVGQTAeFw0yNTEwMjAxNDM3MTVaFw0yNTEwMjMxOTQxMTVaMDMxMTAvBgNV BAMTKDFDMDk0MjRGQjNFOEYxQTZFQzdGQ0YyOTA5RDNENTc0NzlEMUVGQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4OyXTuHRO34C49jyNWmIPXVUB 524H3fGhcGONujy2/ebSXDJa36GLe2GaM4lTT5MbBxcyhvZDRIKYbsdhgYnA1isJ fjgkWGnnrBVsc20ki7EuKtjZnM6J9y5lrO2qbCWvqss/58vD9UJJLnPSlU6bnsiA Qo8BDAGXkycG+YpGPGHtX08Je+tPkJigCGfcwzRJma5Qfj0DOZ3xEnDWfxUMQYL8 jG+WvfWYPOKg6m6tkT1MU+2tkFD1F33Jv1UTphur+6tmOgn5fclhzjav5uV+JWH7 pAqv3R+IY03Nb5TshuWskutQXZWSUhUrDo0LwcGGcJsxwaG9i7sxX8UoqMhbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHAlCT7Po8absf88pCdPVdHnR77swHwYDVR0j BBgwFoAUp+bGLEfALuoyQi4TWQjr8jDFtfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjMwZTRhZS0zZTQ3LTQ1NDAtODIzYy01M2NhZjIyNjdiMzYvMC9BN0U2QzYyQzQ3 QzAyRUVBMzI0MjJFMTM1OTA4RUJGMjMwQzVCNUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVCRjIzMEM1 QjVGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWYzMGU0YWUtM2U0Ny00NTQwLTgy M2MtNTNjYWYyMjY3YjM2LzAvQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVC RjIzMEM1QjVGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHrETrYah8BDoN9paSuvAXmD82mQAxVlMsy Ou39pn+eyQGci18+t30h/XDCqPWQJ2t5582yTiYdt0lAf2BchdWZ1ZgfmlK1m5Wp QzL3M9YO+sih4pBtICauso4fWamVu+4IGIllG9dayi2cLpPEOIFbI4wmH3en91/6 Jfr0WVmRLG8IJbwCGiOBSUIlCcWLSyILsyHcJ5U2laZ95rcFrKvE9ggzz/GcAPLg 6mNtwHaUr00P5HdYfo8J1KI3SZAxZ5YFtOhZwwE9IxK/8rr+gi3S+EFibNMHMJ+k xu1u6+Xy+M+7lYgM7zhlIhYcEO50pnUHaF1EdnDXBhvL2kJgX4A= -----END CERTIFICATE-----Generated at Mon Oct 20 20:53:46 2025 by rpki-client