$ rpki-client -vvf repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft File: A708865394D992A01D1736F0AB500E24889B7F34.mft (raw, json) Hash identifier: gMd+ciQ++fDotwPoLcHR28z+4pkhb7m6H2E86Xuu+lA= Subject key identifier: E5:67:DA:B1:D4:06:2B:E0:84:25:F5:54:BA:B1:4C:02:B7:A5:8A:6F Authority key identifier: A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34 Certificate issuer: /CN=A708865394D992A01D1736F0AB500E24889B7F34 Certificate serial: 62CD4C677903C416ECE0ABCD0A43D51B06F77934 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft Manifest number: 016E Signing time: Sun 19 Oct 2025 09:40:49 +0000 Manifest this update: Sun 19 Oct 2025 09:35:49 +0000 Manifest next update: Wed 22 Oct 2025 11:07:49 +0000 Files and hashes: 1: 3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa (hash: yL0gLS/lvq9j5h+L42yAYYctUM1Kqtv5bl12En0Z8dY=) 2: A708865394D992A01D1736F0AB500E24889B7F34.crl (hash: 5thnUVBahUMIAuyg1FUJPQC2BgjBzpz199SajXQ5zRQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 11:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:cd:4c:67:79:03:c4:16:ec:e0:ab:cd:0a:43:d5:1b:06:f7:79:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A708865394D992A01D1736F0AB500E24889B7F34 Validity Not Before: Oct 19 09:35:49 2025 GMT Not After : Oct 22 11:07:49 2025 GMT Subject: CN=E567DAB1D4062BE08425F554BAB14C02B7A58A6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cb:ba:1a:30:34:f2:30:b4:49:c0:ce:1d:57: cf:6f:c3:64:4a:7f:1f:92:89:a6:f5:f3:23:be:8d: 38:cc:11:90:bf:b6:83:2a:15:7f:4f:f5:91:84:4c: 9e:ab:6e:e5:84:a8:3e:90:d5:8f:5a:ee:e3:90:59: c2:5f:9a:6e:a1:9c:68:9e:42:4a:18:4f:62:10:d9: b5:44:3c:1b:31:38:29:8e:ea:cc:02:7f:3d:27:04: 05:35:aa:39:3e:4c:d3:56:db:d9:09:60:23:bc:fd: 1f:34:45:b4:b5:cb:29:77:f3:33:34:45:1a:99:2b: 0a:b5:75:33:54:9c:48:8f:d0:17:97:73:2f:bf:a7: 85:b6:88:6c:75:83:fc:67:dd:18:6f:66:27:22:36: 33:5c:ee:56:1b:a0:af:f9:87:3b:1a:2e:a2:57:47: 4f:3c:f5:d4:03:54:f6:29:26:2d:b1:b1:6b:b4:dc: 5e:b9:df:39:6d:4d:e7:5c:18:9a:5e:3d:b3:a8:37: 2c:ed:a3:e0:0e:e4:0d:94:ce:67:bd:81:db:a1:30: 2d:64:7c:bb:d1:ff:7f:25:f7:db:f2:e4:e0:a5:94: c1:6e:02:34:13:9b:87:5b:02:38:08:71:19:f5:dd: 47:6d:0c:97:72:dd:b1:a2:1f:63:82:ac:db:bd:86: 3b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:67:DA:B1:D4:06:2B:E0:84:25:F5:54:BA:B1:4C:02:B7:A5:8A:6F X509v3 Authority Key Identifier: keyid:A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ec:95:f6:09:be:e7:30:58:3d:09:1e:6d:54:8b:21:82:55: 36:58:b7:7a:9b:cf:7f:64:50:08:f9:4a:ba:b5:6d:ce:a0:22: b0:df:00:b0:c4:1f:96:05:e0:73:c6:b1:ae:af:4c:0a:70:50: 4b:f2:34:aa:de:28:f5:f0:24:f0:dd:65:1e:d3:51:a2:4c:f8: 73:d7:92:94:65:43:a7:da:b3:28:de:60:bb:d6:d6:cc:04:9a: 22:db:57:97:0e:e3:32:35:0a:5b:3f:ff:b5:1f:2c:2f:da:51: 03:a8:9e:8a:25:14:0e:f7:5a:4f:d5:75:9b:ee:44:2d:81:e8: 1a:14:ea:a1:68:0a:1e:02:85:2b:16:ac:ef:88:c6:45:43:df: 10:e8:f1:67:e3:d4:09:7c:dc:a7:16:c8:78:a9:f7:62:9e:cf: f3:a6:ea:05:1b:fb:6a:96:72:18:61:a7:65:f1:f2:4a:c0:24: 0b:a3:25:56:e8:54:8b:10:a9:9c:2a:14:2b:50:74:fb:ab:db: d8:81:96:a1:9c:35:c3:bc:a7:61:36:85:6d:d2:93:b5:d7:c3: eb:35:fb:4f:ec:96:03:f6:29:68:dd:ba:fc:58:c1:db:28:fe: 81:ba:b4:7e:c0:bc:4a:14:93:75:9e:77:a7:05:00:2d:0d:d1: 83:70:ce:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYs1MZ3kDxBbs4KvNCkPVGwb3eTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4 ODlCN0YzNDAeFw0yNTEwMTkwOTM1NDlaFw0yNTEwMjIxMTA3NDlaMDMxMTAvBgNV BAMTKEU1NjdEQUIxRDQwNjJCRTA4NDI1RjU1NEJBQjE0QzAyQjdBNThBNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXy7oaMDTyMLRJwM4dV89vw2RK fx+Siab18yO+jTjMEZC/toMqFX9P9ZGETJ6rbuWEqD6Q1Y9a7uOQWcJfmm6hnGie QkoYT2IQ2bVEPBsxOCmO6swCfz0nBAU1qjk+TNNW29kJYCO8/R80RbS1yyl38zM0 RRqZKwq1dTNUnEiP0BeXcy+/p4W2iGx1g/xn3RhvZiciNjNc7lYboK/5hzsaLqJX R0889dQDVPYpJi2xsWu03F653zltTedcGJpePbOoNyzto+AO5A2Uzme9gduhMC1k fLvR/38l99vy5OCllMFuAjQTm4dbAjgIcRn13UdtDJdy3bGiH2OCrNu9hjtRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5WfasdQGK+CEJfVUurFMArelim8wHwYDVR0j BBgwFoAUpwiGU5TZkqAdFzbwq1AOJIibfzQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjBjN2EzNy01ZDE5LTRjNWMtOTMwMS1hMTRhN2YxODVjOTIvMC9BNzA4ODY1Mzk0 RDk5MkEwMUQxNzM2RjBBQjUwMEUyNDg4OUI3RjM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4ODlC N0YzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYwYzdhMzctNWQxOS00YzVjLTkz MDEtYTE0YTdmMTg1YzkyLzAvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBF MjQ4ODlCN0YzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/slfYJvucwWD0JHm1UiyGCVTZYt3qbz39k UAj5Srq1bc6gIrDfALDEH5YF4HPGsa6vTApwUEvyNKreKPXwJPDdZR7TUaJM+HPX kpRlQ6fasyjeYLvW1swEmiLbV5cO4zI1Cls//7UfLC/aUQOonoolFA73Wk/VdZvu RC2B6BoU6qFoCh4ChSsWrO+IxkVD3xDo8Wfj1Al83KcWyHip92Kez/Om6gUb+2qW chhhp2Xx8krAJAujJVboVIsQqZwqFCtQdPur29iBlqGcNcO8p2E2hW3Sk7XXw+s1 +0/slgP2KWjduvxYwdso/oG6tH7AvEoUk3Wed6cFAC0N0YNwzks= -----END CERTIFICATE-----Generated at Mon Oct 20 09:29:07 2025 by rpki-client