$ rpki-client -vvf repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft File: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft (raw, json) Hash identifier: n4empFbw2cxABdSHH6u+sBz0ZowTNyrAJm7DmFL0OPU= Subject key identifier: 88:3E:56:7A:D8:3A:D1:B3:6D:D8:B6:F9:75:0A:60:DE:23:67:E1:78 Authority key identifier: A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 Certificate issuer: /CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Certificate serial: 4FDF0785DCF750ABC7A641F9C98B2164A2FB674D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft Manifest number: 0135 Signing time: Sun 19 Oct 2025 00:51:23 +0000 Manifest this update: Sun 19 Oct 2025 00:46:23 +0000 Manifest next update: Wed 22 Oct 2025 11:14:23 +0000 Files and hashes: 1: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl (hash: iW2y8+Qh8pGLs9W+9bT1zDoiACqHlfoSFNfmBg2b0ZY=) 2: 3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa (hash: cossnBP1XdG0zEY8nTnjaUaCSRdcepAuP+Hq1t+V00c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 11:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:df:07:85:dc:f7:50:ab:c7:a6:41:f9:c9:8b:21:64:a2:fb:67:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Validity Not Before: Oct 19 00:46:23 2025 GMT Not After : Oct 22 11:14:23 2025 GMT Subject: CN=883E567AD83AD1B36DD8B6F9750A60DE2367E178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fa:07:72:78:09:ca:2e:c4:4b:94:cc:87:df: 80:4d:a1:73:a9:d8:b6:fc:ae:d8:27:00:e1:f8:fb: 6a:71:a0:cd:08:28:a6:55:85:fa:ef:35:32:e7:a4: 49:90:c4:39:93:2f:99:66:51:82:cc:a1:44:9d:44: 67:0a:72:ae:ad:b5:aa:dc:d8:bb:a3:a1:90:5b:c5: fc:3b:f6:96:db:ac:e5:d2:7d:60:c7:cc:2f:01:33: f2:ff:9a:0a:6b:e6:f6:9a:da:e6:4c:0c:35:bd:c9: 30:55:13:47:d8:be:29:52:d7:59:4d:df:5a:19:e9: b5:24:35:12:ae:95:33:7b:3d:ea:f3:ae:8f:b6:8d: 42:4d:bc:66:c1:44:ac:3e:18:d8:6b:7f:d0:e8:af: 91:86:9f:3b:5e:08:7c:b9:4d:19:99:11:3d:a3:f8: c3:3b:30:d6:36:78:cc:68:f0:51:65:50:f6:0f:a1: c2:05:fe:4e:51:80:0e:da:be:b9:8a:0d:b6:18:00: f4:83:4a:ae:55:d9:a7:9f:25:51:37:06:6a:7c:40: 73:90:ac:46:89:79:a5:fb:74:d8:83:30:1a:db:75: 22:d9:79:7d:11:60:36:de:7f:28:3d:24:bb:8d:14: fa:20:fd:0a:0a:3f:0a:ec:17:7e:94:eb:50:b5:2f: c0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:3E:56:7A:D8:3A:D1:B3:6D:D8:B6:F9:75:0A:60:DE:23:67:E1:78 X509v3 Authority Key Identifier: keyid:A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:9d:8d:12:b1:88:f5:35:db:23:39:39:64:eb:86:47:48:ed: 68:ea:e1:40:28:60:91:92:f6:8a:7a:79:2d:c0:94:e9:e5:85: fb:68:6c:f9:d4:d8:45:9b:16:86:f7:ec:3f:d9:8f:19:77:52: 74:8a:c9:ed:dd:3e:19:a0:6f:aa:d1:55:3d:18:f8:8f:78:df: 52:7e:6f:10:67:47:eb:eb:49:62:85:e3:ce:23:7a:43:80:ba: db:7f:26:6b:08:f1:4f:06:c8:57:df:66:5d:65:78:d5:5a:1f: b4:a0:7a:cf:bd:1b:c2:db:ef:9f:91:ce:f4:99:2e:af:7e:15: cf:a5:cc:ba:ad:5b:d3:84:26:19:6f:15:40:9d:ec:22:11:5d: 43:59:5c:15:03:b9:87:1d:db:f5:ab:ec:13:88:1a:84:b7:80: 80:ec:57:24:1b:f1:8e:3a:37:57:ab:60:c2:2c:48:9a:87:03: fa:53:55:3d:ec:b3:ea:f6:ea:95:86:3e:6f:77:7f:88:d2:00: d0:85:31:d0:f9:44:47:ec:99:8b:e7:2d:2b:49:2c:76:b1:e8: 40:94:e7:3a:f6:4c:5b:56:14:01:a1:6a:df:6e:d4:7a:cf:1f: 63:e4:1c:5d:a7:a3:c4:6a:2a:50:d2:b8:3f:d0:8f:34:a1:e1: ab:44:c4:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT98Hhdz3UKvHpkH5yYshZKL7Z00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdC QjVCMTI0NjAeFw0yNTEwMTkwMDQ2MjNaFw0yNTEwMjIxMTE0MjNaMDMxMTAvBgNV BAMTKDg4M0U1NjdBRDgzQUQxQjM2REQ4QjZGOTc1MEE2MERFMjM2N0UxNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi+gdyeAnKLsRLlMyH34BNoXOp 2Lb8rtgnAOH4+2pxoM0IKKZVhfrvNTLnpEmQxDmTL5lmUYLMoUSdRGcKcq6ttarc 2LujoZBbxfw79pbbrOXSfWDHzC8BM/L/mgpr5vaa2uZMDDW9yTBVE0fYvilS11lN 31oZ6bUkNRKulTN7Perzro+2jUJNvGbBRKw+GNhrf9Dor5GGnzteCHy5TRmZET2j +MM7MNY2eMxo8FFlUPYPocIF/k5RgA7avrmKDbYYAPSDSq5V2aefJVE3Bmp8QHOQ rEaJeaX7dNiDMBrbdSLZeX0RYDbefyg9JLuNFPog/QoKPwrsF36U61C1L8AxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiD5Wetg60bNt2Lb5dQpg3iNn4XgwHwYDVR0j BBgwFoAUo+/d2tUm76Pygh6ebsbnR7tbEkYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmM1NzBlZi02ZWZkLTRmOTctYmYzMS05NjgxMjZhYjU3YzAvMC9BM0VGREREQUQ1 MjZFRkEzRjI4MjFFOUU2RUM2RTc0N0JCNUIxMjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdCQjVC MTI0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZjNTcwZWYtNmVmZC00Zjk3LWJm MzEtOTY4MTI2YWI1N2MwLzAvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3 NDdCQjVCMTI0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+djRKxiPU12yM5OWTrhkdI7Wjq4UAoYJGS 9op6eS3AlOnlhftobPnU2EWbFob37D/Zjxl3UnSKye3dPhmgb6rRVT0Y+I9431J+ bxBnR+vrSWKF484jekOAutt/JmsI8U8GyFffZl1leNVaH7Sges+9G8Lb75+RzvSZ Lq9+Fc+lzLqtW9OEJhlvFUCd7CIRXUNZXBUDuYcd2/Wr7BOIGoS3gIDsVyQb8Y46 N1erYMIsSJqHA/pTVT3ss+r26pWGPm93f4jSANCFMdD5REfsmYvnLStJLHax6ECU 5zr2TFtWFAGhat9u1HrPH2PkHF2no8RqKlDSuD/QjzSh4atExKc= -----END CERTIFICATE-----Generated at Mon Oct 20 10:34:10 2025 by rpki-client