$ rpki-client -vvf repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft File: A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft (raw, json) Hash identifier: 2MsBVQ4EyvYfDP0BOpz4pAXljFUNZadhzzjCjLGSrGU= Subject key identifier: 08:C4:BC:BD:66:A8:DD:83:59:0D:C8:5A:A7:4B:18:9B:C3:C9:7A:AB Authority key identifier: A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F Certificate issuer: /CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F Certificate serial: 6AAA5313B0D0BF4C098CD4F65D0F46D74557EA84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft Manifest number: 012E Signing time: Sun 19 Oct 2025 11:20:00 +0000 Manifest this update: Sun 19 Oct 2025 11:15:00 +0000 Manifest next update: Wed 22 Oct 2025 13:39:00 +0000 Files and hashes: 1: A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl (hash: hzW9ch1GdTUr2Rls1JQZH0v3r4vmT2C+maHPTqDVJf8=) 2: 3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa (hash: 1GcHJ2lyZakepkFB/Af5Gk+X5kDqZQ6u/Ah/ekHwIik=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:aa:53:13:b0:d0:bf:4c:09:8c:d4:f6:5d:0f:46:d7:45:57:ea:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F Validity Not Before: Oct 19 11:15:00 2025 GMT Not After : Oct 22 13:39:00 2025 GMT Subject: CN=08C4BCBD66A8DD83590DC85AA74B189BC3C97AAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d5:36:5c:09:67:17:8d:cb:ad:08:9b:af:2f: e7:fa:5b:d0:d6:4d:3e:7c:d0:7a:e5:8e:ab:20:6d: e8:84:de:28:4d:b2:aa:c2:98:92:7a:f3:67:06:f6: 1c:4d:dd:ae:a7:71:0e:51:76:e4:91:2c:ce:1f:0f: c4:dc:67:74:a1:8a:1d:ef:87:b5:02:03:08:91:fc: cb:12:4c:e3:10:4d:44:20:20:0f:bb:82:cc:55:6a: cc:0a:7a:d4:0f:cd:59:b0:69:d1:b7:fd:07:d1:78: d7:45:2b:3a:b7:c3:f3:7f:ea:01:25:37:02:43:28: 84:db:2c:45:c3:56:c1:d1:88:f6:ce:9d:fd:75:90: 75:4f:e8:47:84:a9:36:fa:32:5a:79:8a:39:ee:c4: a2:79:23:eb:61:93:b2:56:ae:93:a9:15:ca:6b:5f: 25:9f:8e:2c:1b:56:bd:6b:d4:72:48:1b:a7:bf:b6: 01:ac:7b:63:7b:df:95:fd:af:d5:f9:2c:5c:f8:63: e9:84:b4:5f:c8:95:05:e1:27:1c:14:82:c3:63:72: 98:2e:91:24:7e:bd:69:bd:b2:44:f6:17:6c:69:85: 55:b4:98:18:83:89:67:09:88:48:d4:2b:7c:42:37: a9:2e:cc:86:75:19:6f:e3:95:d6:58:4a:d1:39:da: 59:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C4:BC:BD:66:A8:DD:83:59:0D:C8:5A:A7:4B:18:9B:C3:C9:7A:AB X509v3 Authority Key Identifier: keyid:A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:dd:d9:c3:4b:35:6c:93:98:23:d1:98:f3:fe:d6:37:e9:93: ba:ca:19:4e:ae:9f:2e:bc:f5:56:5f:14:75:6c:8c:51:b1:48: cd:62:15:1e:a8:b8:57:76:12:24:04:55:d2:87:7e:9d:29:2d: 2b:12:d3:b3:25:76:28:00:40:08:89:2e:d3:5e:6f:20:8a:bd: d8:2b:98:2f:07:01:2f:06:78:de:69:ed:16:fd:53:b1:18:0d: 49:6e:fb:c5:2b:bc:96:4b:49:6e:44:d6:c9:28:19:78:05:df: e6:fc:54:56:18:4f:b5:7c:15:c1:c9:ea:a8:c7:e0:41:ab:ec: 26:3d:43:dd:c6:40:7f:03:11:5f:65:bb:9b:9e:4d:13:0d:2d: c7:83:7b:48:f0:ca:de:28:a8:ca:f1:2f:ff:c6:b2:70:0b:d5: 34:9e:21:67:2a:5d:c8:32:4c:9e:05:e3:4e:18:f4:12:f5:f9: 6d:de:ff:4f:26:84:84:24:49:15:ef:76:ef:cd:6c:6f:90:83: 83:fb:6f:f2:2f:56:28:31:86:c9:44:c6:d1:ce:dd:67:38:bb: dd:17:44:ad:5e:f5:bf:df:ff:6b:c2:96:d5:bf:3d:30:02:a3: ec:37:b7:41:50:39:9c:c1:a0:9a:77:cc:23:b6:04:2f:6f:cf: f6:b2:88:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaqpTE7DQv0wJjNT2XQ9G10VX6oQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VCQjJF MzI1MDcyRjAeFw0yNTEwMTkxMTE1MDBaFw0yNTEwMjIxMzM5MDBaMDMxMTAvBgNV BAMTKDA4QzRCQ0JENjZBOEREODM1OTBEQzg1QUE3NEIxODlCQzNDOTdBQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA1TZcCWcXjcutCJuvL+f6W9DW TT580HrljqsgbeiE3ihNsqrCmJJ682cG9hxN3a6ncQ5RduSRLM4fD8TcZ3Shih3v h7UCAwiR/MsSTOMQTUQgIA+7gsxVaswKetQPzVmwadG3/QfReNdFKzq3w/N/6gEl NwJDKITbLEXDVsHRiPbOnf11kHVP6EeEqTb6Mlp5ijnuxKJ5I+thk7JWrpOpFcpr XyWfjiwbVr1r1HJIG6e/tgGse2N735X9r9X5LFz4Y+mEtF/IlQXhJxwUgsNjcpgu kSR+vWm9skT2F2xphVW0mBiDiWcJiEjUK3xCN6kuzIZ1GW/jldZYStE52llpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCMS8vWao3YNZDchap0sYm8PJeqswHwYDVR0j BBgwFoAUpb/bHyQ2Ne7R4lGRxozrsuMlBy8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDM1NjM3NS04ZTI5LTQ0NzctYjAxMy1jNDQxNTBhMjVhMzEvMC9BNUJGREIxRjI0 MzYzNUVFRDFFMjUxOTFDNjhDRUJCMkUzMjUwNzJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VCQjJFMzI1 MDcyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzNTYzNzUtOGUyOS00NDc3LWIw MTMtYzQ0MTUwYTI1YTMxLzAvQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VC QjJFMzI1MDcyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3d2cNLNWyTmCPRmPP+1jfpk7rKGU6uny68 9VZfFHVsjFGxSM1iFR6ouFd2EiQEVdKHfp0pLSsS07MldigAQAiJLtNebyCKvdgr mC8HAS8GeN5p7Rb9U7EYDUlu+8UrvJZLSW5E1skoGXgF3+b8VFYYT7V8FcHJ6qjH 4EGr7CY9Q93GQH8DEV9lu5ueTRMNLceDe0jwyt4oqMrxL//GsnAL1TSeIWcqXcgy TJ4F404Y9BL1+W3e/08mhIQkSRXvdu/NbG+Qg4P7b/IvVigxhslExtHO3Wc4u90X RK1e9b/f/2vCltW/PTACo+w3t0FQOZzBoJp3zCO2BC9vz/ayiKQ= -----END CERTIFICATE-----Generated at Mon Oct 20 18:26:39 2025 by rpki-client