$ rpki-client -vvf repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft File: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft (raw, json) Hash identifier: gl6ip344tHJxlQ664h7EaVsi0yficlVNUbBNVe8JkRo= Subject key identifier: C1:30:7A:BC:11:0D:29:BE:42:0F:65:DA:D8:2A:03:BA:E6:3A:93:CF Authority key identifier: 0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD Certificate issuer: /CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Certificate serial: 6AC9EB093A1B9186429534E156ADBD8EB345E4A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft Manifest number: 01D9 Signing time: Mon 20 Oct 2025 00:11:30 +0000 Manifest this update: Mon 20 Oct 2025 00:06:30 +0000 Manifest next update: Thu 23 Oct 2025 10:32:30 +0000 Files and hashes: 1: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl (hash: UUzXU3PQuH9qBvqXtgt+ZD+RscZQ6s/W4bx1VtXm+x0=) 2: 3130332e3134372e3134342e302f32332d3234203d3e203137373639.roa (hash: 3VGbyCH6ddrGoq0lsoWNFafYhbKrpzTV4l4RHWPBamI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:c9:eb:09:3a:1b:91:86:42:95:34:e1:56:ad:bd:8e:b3:45:e4:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Validity Not Before: Oct 20 00:06:30 2025 GMT Not After : Oct 23 10:32:30 2025 GMT Subject: CN=C1307ABC110D29BE420F65DAD82A03BAE63A93CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c5:6a:70:5a:ca:0e:62:08:b6:2b:b8:70:f3: 06:43:16:2b:b8:8a:79:03:26:e3:5a:37:eb:98:d0: 07:48:30:79:eb:8e:21:3a:55:c4:47:0e:93:1e:48: 54:3e:ee:3d:61:52:c8:74:c9:22:f6:fa:a8:4c:aa: 7b:86:f9:84:cf:1b:99:25:8a:3c:13:ae:76:3b:ea: c6:ff:c2:56:5b:ee:26:fd:6a:96:fa:f3:f1:3a:6a: 38:fc:d4:51:03:ac:1a:3c:f2:a3:4f:54:a9:de:8f: 7a:34:32:b1:46:4a:0d:e7:b9:8a:25:4e:27:a8:c6: a9:f8:f7:9e:b8:48:74:18:08:a1:3c:bb:b6:f7:ed: e6:aa:ff:1b:01:08:b5:e4:f4:05:72:e1:13:74:ac: 8a:d3:55:ad:49:ef:c6:12:89:b1:5f:cf:3a:ac:5e: 9f:75:0b:e5:df:cf:52:c1:fa:26:a9:81:d9:4b:e3: 97:33:b8:57:46:97:5a:c5:b6:0b:cd:4e:7b:1c:1c: 24:b8:08:56:3a:1f:8b:cf:bc:26:ee:64:43:2f:09: 1c:92:61:b4:6c:0d:0c:04:92:b9:5b:e5:13:e9:79: 3b:85:e6:4e:b7:a3:67:68:61:8c:75:ae:42:75:98: b0:2f:e4:91:f0:7f:8a:1e:07:14:f9:fd:5f:f2:96: 20:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:30:7A:BC:11:0D:29:BE:42:0F:65:DA:D8:2A:03:BA:E6:3A:93:CF X509v3 Authority Key Identifier: keyid:0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:da:32:9a:6b:9f:41:fb:e1:de:27:45:e1:d5:46:a9:fe:8b: 12:86:5f:b6:72:a2:e9:83:54:f3:85:ee:f2:df:bd:b7:1c:7e: fb:87:0a:cf:fc:fc:53:f2:ae:2c:3e:d1:37:b1:af:d2:1a:20: 72:3c:83:d3:59:06:37:ed:cb:6f:9a:95:df:e4:6f:19:ed:31: e0:ca:9f:86:c2:81:09:34:66:69:7f:dc:5d:99:7a:18:d1:d1: 30:18:7b:54:15:90:5d:4e:fe:66:0d:c7:fb:00:4e:f1:87:ec: d8:14:39:48:9e:68:85:5c:e4:29:f6:58:22:4b:32:b5:3f:06: 40:0f:c9:d8:0c:66:e7:c4:69:66:45:52:11:8c:e7:4a:7c:d6: cc:db:56:a5:12:84:b7:21:4a:6b:1d:6c:bc:9a:9b:3a:8c:b9: 75:55:43:b8:fa:0a:de:69:70:38:b6:eb:47:87:9d:4a:a2:01: fe:3a:e6:f2:fa:4a:63:fe:57:58:5c:99:64:06:83:4c:fe:b4: ae:48:e3:cd:35:d0:d0:1f:56:e2:77:e8:c0:08:fb:24:a7:2d: 6b:9c:ee:d3:11:e8:e2:35:7d:a1:26:f7:c1:bc:84:50:32:0e: 4d:af:67:40:eb:8c:a6:f0:df:a0:e5:1a:61:7a:d5:41:48:ab: 7e:27:6c:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUasnrCTobkYZClTThVq29jrNF5KcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4 NUJGQURGRDAeFw0yNTEwMjAwMDA2MzBaFw0yNTEwMjMxMDMyMzBaMDMxMTAvBgNV BAMTKEMxMzA3QUJDMTEwRDI5QkU0MjBGNjVEQUQ4MkEwM0JBRTYzQTkzQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGxWpwWsoOYgi2K7hw8wZDFiu4 inkDJuNaN+uY0AdIMHnrjiE6VcRHDpMeSFQ+7j1hUsh0ySL2+qhMqnuG+YTPG5kl ijwTrnY76sb/wlZb7ib9apb68/E6ajj81FEDrBo88qNPVKnej3o0MrFGSg3nuYol Tieoxqn49564SHQYCKE8u7b37eaq/xsBCLXk9AVy4RN0rIrTVa1J78YSibFfzzqs Xp91C+Xfz1LB+iapgdlL45czuFdGl1rFtgvNTnscHCS4CFY6H4vPvCbuZEMvCRyS YbRsDQwEkrlb5RPpeTuF5k63o2doYYx1rkJ1mLAv5JHwf4oeBxT5/V/yliDDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwTB6vBENKb5CD2Xa2CoDuuY6k88wHwYDVR0j BBgwFoAUCh38tKQ4YeSnG81kV5IAVIW/rf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODVjYmQ5NS01NzRmLTQwNWItOGJkZS0wZGRiOWM5YmRkYmEvMC8wQTFERkNCNEE0 Mzg2MUU0QTcxQkNENjQ1NzkyMDA1NDg1QkZBREZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4NUJG QURGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg1Y2JkOTUtNTc0Zi00MDViLThi ZGUtMGRkYjljOWJkZGJhLzAvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAw NTQ4NUJGQURGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADTaMpprn0H74d4nReHVRqn+ixKGX7ZyoumD VPOF7vLfvbccfvuHCs/8/FPyriw+0Texr9IaIHI8g9NZBjfty2+ald/kbxntMeDK n4bCgQk0Zml/3F2ZehjR0TAYe1QVkF1O/mYNx/sATvGH7NgUOUieaIVc5Cn2WCJL MrU/BkAPydgMZufEaWZFUhGM50p81szbVqUShLchSmsdbLyamzqMuXVVQ7j6Ct5p cDi260eHnUqiAf465vL6SmP+V1hcmWQGg0z+tK5I48010NAfVuJ36MAI+ySnLWuc 7tMR6OI1faEm98G8hFAyDk2vZ0DrjKbw36DlGmF61UFIq34nbC4= -----END CERTIFICATE-----Generated at Mon Oct 20 09:26:26 2025 by rpki-client