$ rpki-client -vvf repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft File: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft (raw, json) Hash identifier: mN4rL2tSALWVDAF+BReP4awhT87BVo/k0JdLzMRa8Jc= Subject key identifier: 01:E3:BE:CD:AA:13:C9:16:12:1A:CB:59:A2:34:AD:21:48:61:65:FD Authority key identifier: A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 Certificate issuer: /CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66 Certificate serial: 7F5384C6625AC3968CB1C9D1222A4FCAF2149E60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft Manifest number: 0209 Signing time: Sun 19 Oct 2025 02:02:23 +0000 Manifest this update: Sun 19 Oct 2025 01:57:23 +0000 Manifest next update: Wed 22 Oct 2025 11:35:23 +0000 Files and hashes: 1: 3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa (hash: TA90bkE55ZETm7aG8neqT5bIm1Ztp4RfdpQNAXifiyc=) 2: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl (hash: dh9bPpw7KNd6wVydbrSpsni6vDX9h1kX0IFQfABV0BE=) 3: 3130332e3135392e3131332e302f32342d3234203d3e20313431363032.roa (hash: DTA7XaMvO6/yJH95Q2H4dcuyJyFkTQZvJ4qtwIMhRBo=) 4: 3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa (hash: KkOi57cp3QYrSPg3L4piWw9fN5UZON52i91Hq3Yxv3k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 11:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:53:84:c6:62:5a:c3:96:8c:b1:c9:d1:22:2a:4f:ca:f2:14:9e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66 Validity Not Before: Oct 19 01:57:23 2025 GMT Not After : Oct 22 11:35:23 2025 GMT Subject: CN=01E3BECDAA13C916121ACB59A234AD21486165FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:99:c0:f6:c4:7e:e9:e2:67:ad:2e:15:f9:7d: 68:f8:da:08:aa:33:71:08:c9:9a:d4:86:f4:a1:6c: a4:8e:6e:58:06:1e:d6:cd:9e:02:5d:60:b7:fc:9c: 68:f7:49:68:79:23:46:6d:19:18:5d:f8:f0:36:62: d2:c5:f1:35:67:0c:fe:eb:15:ef:9e:b2:0a:bf:89: ad:54:06:69:f0:bb:c3:26:13:24:f6:ba:5a:01:b9: 18:5d:33:f7:e3:c1:62:42:60:d0:c8:24:86:40:37: 53:41:67:18:6c:42:31:df:45:83:a9:f1:27:2a:81: da:1b:0e:12:ba:6e:9b:d4:56:c8:48:19:e0:d1:aa: 17:80:b9:fa:27:33:8d:5e:86:8a:c7:5a:a8:c5:18: f9:67:88:c7:fa:ae:f9:09:31:6f:05:6c:5d:47:c8: 05:66:f4:d8:06:e8:92:3e:ea:31:73:9e:c2:08:7a: 01:cb:f2:43:b8:5e:60:f7:ac:93:0b:c0:31:41:53: 28:71:87:01:b3:f0:f1:fb:24:5a:6e:57:a6:ba:a3: 4c:d1:71:68:8c:20:f4:92:37:62:69:26:cf:b8:44: 1f:40:8a:f8:b4:92:47:29:c4:c5:31:22:54:ef:c0: 0a:19:45:8e:45:9a:a0:89:c8:66:4a:50:01:0a:d9: 77:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E3:BE:CD:AA:13:C9:16:12:1A:CB:59:A2:34:AD:21:48:61:65:FD X509v3 Authority Key Identifier: keyid:A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:5f:ca:bf:43:98:8a:bf:ed:f6:39:ec:0d:d6:b5:15:e5:c6: 49:da:65:39:7c:a3:48:20:ed:fc:fa:ff:de:2e:fe:e9:01:92: 46:da:31:6a:8f:fe:bb:48:fc:f4:67:9a:40:7c:c6:81:84:6c: 88:db:de:cd:d9:84:32:55:de:7b:3f:55:f2:1e:b0:8a:c8:c0: 17:8b:91:5e:70:78:c3:55:3f:3b:03:b7:b3:e1:af:70:8b:61: 31:6c:bd:20:0f:1e:61:47:f9:ee:1f:73:33:07:93:81:5b:d4: c5:ca:73:33:55:72:c9:e5:a1:62:84:78:dc:57:6d:fe:d2:4c: a4:a2:1d:53:82:97:4d:0e:af:00:09:31:b0:0e:4c:56:88:6c: 5d:cb:f8:fe:fb:61:f5:31:0e:94:78:83:8d:ba:c4:70:b7:c9: d1:ae:54:6f:6d:fb:86:07:c5:21:62:68:55:29:37:a1:a0:3f: 54:c4:c8:fa:cf:e8:60:c4:a7:d7:a1:0e:28:28:06:ba:6e:10: 67:45:20:87:d2:f5:7b:d7:bd:d9:bd:7b:ca:ec:4c:04:4d:b3: 4c:2d:1c:63:d4:bf:74:41:17:96:40:57:72:63:86:c1:8e:68: 05:06:68:7f:8d:63:60:59:d6:54:9d:c7:e0:dc:2a:47:1f:ea: eb:5f:ef:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf1OExmJaw5aMscnRIipPyvIUnmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdBOThC Q0UyNkM2NjAeFw0yNTEwMTkwMTU3MjNaFw0yNTEwMjIxMTM1MjNaMDMxMTAvBgNV BAMTKDAxRTNCRUNEQUExM0M5MTYxMjFBQ0I1OUEyMzRBRDIxNDg2MTY1RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCumcD2xH7p4metLhX5fWj42giq M3EIyZrUhvShbKSOblgGHtbNngJdYLf8nGj3SWh5I0ZtGRhd+PA2YtLF8TVnDP7r Fe+esgq/ia1UBmnwu8MmEyT2uloBuRhdM/fjwWJCYNDIJIZAN1NBZxhsQjHfRYOp 8ScqgdobDhK6bpvUVshIGeDRqheAufonM41ehorHWqjFGPlniMf6rvkJMW8FbF1H yAVm9NgG6JI+6jFznsIIegHL8kO4XmD3rJMLwDFBUyhxhwGz8PH7JFpuV6a6o0zR cWiMIPSSN2JpJs+4RB9Aivi0kkcpxMUxIlTvwAoZRY5FmqCJyGZKUAEK2XdjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAeO+zaoTyRYSGstZojStIUhhZf0wHwYDVR0j BBgwFoAUoA6eIe6TJ/BZMK+d1YR6mLzibGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTk4ZjdmOC1lNzE1LTRiNzktYWYzMi0yZTUxNTQxYTM0ZmYvMC9BMDBFOUUyMUVF OTMyN0YwNTkzMEFGOURENTg0N0E5OEJDRTI2QzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdBOThCQ0Uy NkM2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE5OGY3ZjgtZTcxNS00Yjc5LWFm MzItMmU1MTU0MWEzNGZmLzAvQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdB OThCQ0UyNkM2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALlfyr9DmIq/7fY57A3WtRXlxknaZTl8o0gg 7fz6/94u/ukBkkbaMWqP/rtI/PRnmkB8xoGEbIjb3s3ZhDJV3ns/VfIesIrIwBeL kV5weMNVPzsDt7Phr3CLYTFsvSAPHmFH+e4fczMHk4Fb1MXKczNVcsnloWKEeNxX bf7STKSiHVOCl00OrwAJMbAOTFaIbF3L+P77YfUxDpR4g426xHC3ydGuVG9t+4YH xSFiaFUpN6GgP1TEyPrP6GDEp9ehDigoBrpuEGdFIIfS9XvXvdm9e8rsTARNs0wt HGPUv3RBF5ZAV3JjhsGOaAUGaH+NY2BZ1lSdx+DcKkcf6utf720= -----END CERTIFICATE-----Generated at Mon Oct 20 09:20:32 2025 by rpki-client