$ rpki-client -vvf repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft File: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft (raw, json) Hash identifier: dKriCwLn+wnABUoSNKB0itbMx9waA3HysJnwbMivnVk= Subject key identifier: 64:9C:86:35:AF:78:63:78:B1:A0:E0:3C:CB:35:82:58:48:C5:7A:C2 Authority key identifier: A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 Certificate issuer: /CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Certificate serial: 42F82536E87B39D6ECBDC6B54A4FFEE81D107444 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft Manifest number: 0520 Signing time: Sat 18 Oct 2025 09:41:15 +0000 Manifest this update: Sat 18 Oct 2025 09:36:15 +0000 Manifest next update: Tue 21 Oct 2025 21:07:15 +0000 Files and hashes: 1: 3130332e3130322e3131322e302f32332d3233203d3e20313336383536.roa (hash: cImcrO3baPtOL+e/L4Vtls4t8QA2B+RJ0Y24oBF6eXQ=) 2: 3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa (hash: SyaesZ8nYMgrpLoLtfvyAhCoVIqjKlqg+giBaGYZdJ8=) 3: 3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa (hash: m2IdeGJ3OKb2fcuJa67Ilt4MBVhM4mrbLE394lS8fh4=) 4: 3130332e3130322e3131332e302f32342d3234203d3e20313336383536.roa (hash: a/46ZLHY1uskWKK+dRVVv6QzmBB26BwgZ5pBVCqnJic=) 5: 3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa (hash: 1CN+jedfVpNb+gZQPhjGcg8dCw8FunfSINnOV1cGtHI=) 6: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl (hash: M/f1yur4GBsG4sRcZZ/jo+6hlr2yAIluBwj+fcSDIjg=) 7: 3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa (hash: vvBVAn5yEWZctbDHQUW8z9jMeSul4l1acqZ62AKnx68=) 8: 3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa (hash: Bt0nH3UAT/CLMsfvb2IBDFeUJ9UZn6YmMXytc9svV6w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 21:07:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f8:25:36:e8:7b:39:d6:ec:bd:c6:b5:4a:4f:fe:e8:1d:10:74:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Validity Not Before: Oct 18 09:36:15 2025 GMT Not After : Oct 21 21:07:15 2025 GMT Subject: CN=649C8635AF786378B1A0E03CCB35825848C57AC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e1:52:db:f2:08:82:92:4f:42:cd:59:66:dc: 62:41:9c:ff:11:6f:ba:62:66:c9:5b:e2:7d:a1:d2: 5a:1b:cf:7a:e3:a8:2d:2f:ee:f7:fc:44:9e:b0:b7: 50:1b:aa:90:93:04:d6:9e:62:12:c0:0f:b7:a0:2e: 11:8a:91:37:7b:c9:f7:6b:87:5a:90:69:75:66:58: 64:11:35:64:86:1b:bb:e4:37:c7:96:e1:cb:96:7a: 4d:2c:b8:69:ff:d8:56:6e:6b:ba:c7:93:b9:1a:c7: 2d:8e:c0:60:bf:0d:fb:09:e7:d5:ce:0e:21:0a:15: 66:19:a1:9d:80:af:3f:b3:38:0b:8a:06:b5:ee:1b: 9b:7b:0d:55:66:1f:a4:c1:18:c6:bd:50:90:5d:01: d4:37:92:08:48:ab:97:3b:92:eb:c6:b1:fa:7a:c7: 99:a1:73:70:2f:ae:d2:86:52:f5:be:4e:19:c2:6c: d6:a4:47:e7:a8:f1:2f:09:1c:7c:e9:1e:6c:90:0d: 80:ab:3b:97:77:9e:96:a3:36:c2:92:d4:ce:11:40: 43:7a:92:64:48:35:b8:2e:d5:70:b9:7d:b4:08:15: e6:f5:21:91:e7:c5:4a:cb:57:f8:5c:7a:b9:24:f5: c2:9d:dc:9b:c5:c1:da:4e:9d:e1:04:84:c7:40:de: fb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:9C:86:35:AF:78:63:78:B1:A0:E0:3C:CB:35:82:58:48:C5:7A:C2 X509v3 Authority Key Identifier: keyid:A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:fd:f5:a0:60:46:6d:24:2f:24:d7:d2:b7:6d:e6:2b:28:f3: 2f:43:50:cc:d3:1e:62:4d:09:89:99:f4:7d:b9:3a:7a:53:25: 60:bc:27:bd:e7:ea:b4:99:7b:17:77:2b:b4:64:ba:24:37:94: 3f:37:15:44:ee:7a:bc:e8:ee:c5:2d:8c:c5:ac:66:dd:a1:92: 05:c4:59:41:15:d5:da:3c:22:62:7c:50:b4:df:23:0d:d4:af: 5d:7d:dd:23:fa:d1:aa:b9:8c:4f:1f:9c:7a:58:8b:eb:2d:11: 7f:6b:c0:93:2b:09:14:3d:57:3a:fd:93:c1:68:d0:7c:3e:30: 57:f7:75:d6:01:85:21:d4:e1:df:f4:8c:a8:fa:d3:2c:6b:24: 90:c6:81:db:18:69:78:70:e4:cc:69:f6:bf:e9:4e:ee:5d:66: 5a:fa:e1:7d:00:e5:a5:ad:ab:35:ee:2d:e8:95:8c:93:88:da: 67:09:c9:04:ce:c5:d8:81:fd:eb:08:0a:19:0c:ab:e4:3e:59: 90:dd:0f:56:b9:90:7a:e1:82:70:d0:0e:fa:8d:34:a8:78:ec: 17:5b:75:97:fe:61:20:ee:0f:32:80:df:72:43:fd:3e:65:f7: 04:ed:10:5b:02:a4:d0:7b:23:58:72:c1:db:19:de:ab:1c:1a: 24:fc:04:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQvglNuh7Odbsvca1Sk/+6B0QdEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2Njgw MjdEMUI2MzAeFw0yNTEwMTgwOTM2MTVaFw0yNTEwMjEyMTA3MTVaMDMxMTAvBgNV BAMTKDY0OUM4NjM1QUY3ODYzNzhCMUEwRTAzQ0NCMzU4MjU4NDhDNTdBQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV4VLb8giCkk9CzVlm3GJBnP8R b7piZslb4n2h0lobz3rjqC0v7vf8RJ6wt1AbqpCTBNaeYhLAD7egLhGKkTd7yfdr h1qQaXVmWGQRNWSGG7vkN8eW4cuWek0suGn/2FZua7rHk7kaxy2OwGC/DfsJ59XO DiEKFWYZoZ2Arz+zOAuKBrXuG5t7DVVmH6TBGMa9UJBdAdQ3kghIq5c7kuvGsfp6 x5mhc3AvrtKGUvW+ThnCbNakR+eo8S8JHHzpHmyQDYCrO5d3npajNsKS1M4RQEN6 kmRINbgu1XC5fbQIFeb1IZHnxUrLV/hcerkk9cKd3JvFwdpOneEEhMdA3vsVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZJyGNa94Y3ixoOA8yzWCWEjFesIwHwYDVR0j BBgwFoAUoA28eMsvzW2pTcHgffpmaAJ9G2MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWM3YTQwNC1lYjNmLTRjZjEtOTlmOS04Mjc5NjE2NjFmMzEvMC9BMDBEQkM3OENC MkZDRDZEQTk0REMxRTA3REZBNjY2ODAyN0QxQjYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2NjgwMjdE MUI2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTVjN2E0MDQtZWIzZi00Y2YxLTk5 ZjktODI3OTYxNjYxZjMxLzAvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2 NjgwMjdEMUI2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/99aBgRm0kLyTX0rdt5iso8y9DUMzTHmJN CYmZ9H25OnpTJWC8J73n6rSZexd3K7RkuiQ3lD83FUTuerzo7sUtjMWsZt2hkgXE WUEV1do8ImJ8ULTfIw3Ur1193SP60aq5jE8fnHpYi+stEX9rwJMrCRQ9Vzr9k8Fo 0Hw+MFf3ddYBhSHU4d/0jKj60yxrJJDGgdsYaXhw5Mxp9r/pTu5dZlr64X0A5aWt qzXuLeiVjJOI2mcJyQTOxdiB/esIChkMq+Q+WZDdD1a5kHrhgnDQDvqNNKh47Bdb dZf+YSDuDzKA33JD/T5l9wTtEFsCpNB7I1hywdsZ3qscGiT8BDo= -----END CERTIFICATE-----Generated at Mon Oct 20 20:35:59 2025 by rpki-client