$ rpki-client -vvf repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft File: 0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft (raw, json) Hash identifier: 4/7ID0+8Jfp5jmX1oiBu5ttr6fM0DJsioUcXjmGA0to= Subject key identifier: 82:4A:06:FA:EC:75:B4:1C:07:88:26:A3:A0:37:EB:4D:2A:A0:75:26 Authority key identifier: 0A:1D:E6:FD:88:BB:9E:F4:E3:49:C1:77:4D:A9:26:E4:23:26:47:96 Certificate issuer: /CN=0A1DE6FD88BB9EF4E349C1774DA926E423264796 Certificate serial: 177235810AA628E9B13A2D277755B0C89FF4C8F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft Manifest number: 051A Signing time: Sun 19 Oct 2025 16:42:06 +0000 Manifest this update: Sun 19 Oct 2025 16:37:06 +0000 Manifest next update: Thu 23 Oct 2025 03:37:06 +0000 Files and hashes: 1: 3130332e3135332e3133312e302f32342d3234203d3e20313430343633.roa (hash: qjM6zOskUgB5aVouJZ8bw8PRtPD9BsEaccD1Oe43xX4=) 2: 323030313a6466343a343938303a3a2f34382d3438203d3e20313430343633.roa (hash: ALvwx2swtpbz8NGxp51wtfjrJRECE+XKLqFSLUrMbz4=) 3: 0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl (hash: Ga5nqD51rCau5Kk2XoRqeWvMHX+6NdSXnsudu/q2rDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:72:35:81:0a:a6:28:e9:b1:3a:2d:27:77:55:b0:c8:9f:f4:c8:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1DE6FD88BB9EF4E349C1774DA926E423264796 Validity Not Before: Oct 19 16:37:06 2025 GMT Not After : Oct 23 03:37:06 2025 GMT Subject: CN=824A06FAEC75B41C078826A3A037EB4D2AA07526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:24:8d:a9:73:5d:68:26:f4:52:3f:54:5a:2d: 60:42:a0:1d:ce:84:c1:7d:42:c2:c4:dc:09:18:55: 76:78:c6:46:96:6c:8f:28:b8:c2:9a:2c:b2:d7:1a: 78:15:bd:29:69:f6:45:82:68:76:a4:83:22:ae:f0: 1e:1e:ea:80:4d:0b:66:24:8c:33:42:47:cf:bd:6b: e8:17:98:f5:27:d9:f5:21:4f:30:61:6e:0f:7a:aa: 1f:78:bb:f6:c7:df:b6:20:00:9c:63:89:9e:cc:57: a2:69:a3:71:a2:a8:d0:ec:2d:88:24:d3:2c:90:cf: 47:52:09:21:24:3a:dc:7c:71:a6:97:2e:15:07:2c: 9a:ff:c6:bd:7b:26:da:26:c0:be:f1:68:a7:d9:76: 8b:ed:41:b5:dc:09:a4:9f:b3:04:47:14:05:78:ac: 65:26:04:13:79:8d:2b:8c:39:9b:bc:f8:b0:c6:8f: d0:a6:fc:16:8d:67:12:8c:95:ef:14:6b:7c:8d:e6: 89:ab:99:18:1c:8b:1a:b0:49:9a:3f:b1:5a:e4:58: 79:56:ad:42:48:2f:82:40:cd:73:a3:74:94:df:f8: ba:bb:a6:fd:4b:af:e5:9b:e1:da:a8:b7:5b:47:ed: db:94:1e:3f:44:14:fe:d4:76:b2:ae:60:26:23:fe: 9c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4A:06:FA:EC:75:B4:1C:07:88:26:A3:A0:37:EB:4D:2A:A0:75:26 X509v3 Authority Key Identifier: keyid:0A:1D:E6:FD:88:BB:9E:F4:E3:49:C1:77:4D:A9:26:E4:23:26:47:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:53:78:72:1a:1a:c1:4d:f4:08:79:df:d0:db:aa:84:85:a6: 43:9c:09:3a:ae:0c:1e:2e:3c:3a:06:46:c0:53:ab:fe:12:5e: 67:bf:a4:22:bf:86:d4:f2:98:21:a5:ae:ea:7e:ce:96:01:83: 47:70:bd:47:66:8b:c6:b7:96:c6:8e:08:5a:02:03:95:9f:9c: c1:8b:a9:5d:b0:47:b3:55:cd:d6:c3:cb:f4:30:6f:74:e0:0e: 61:28:2f:5b:8e:78:68:cd:ac:a8:21:3b:8d:37:b9:bb:49:ff: b3:54:5d:86:6f:fc:67:9e:4c:9c:60:12:d2:1c:2c:4e:34:66: 2e:95:ed:87:eb:77:b3:ee:f0:2f:4a:9c:ee:b0:1c:40:87:18: d7:6a:48:87:28:32:a7:74:58:41:4e:63:9e:61:6c:bf:ca:65: 5e:82:68:84:dc:e3:5b:a2:dc:4e:32:49:dd:29:2e:c3:72:03: 3a:5f:70:46:ec:4c:ac:54:ae:47:62:32:f5:d5:fe:40:82:19: 25:a0:80:4f:31:01:62:a3:91:bb:b2:c1:e3:b5:68:8f:c5:ee: b1:a8:82:c0:12:b3:fc:b8:c8:5c:78:3f:cd:28:59:fc:e5:eb: f3:ba:b1:a8:9b:7a:d4:ff:6e:15:dd:24:7c:ae:78:15:6e:a2: 34:79:2f:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF3I1gQqmKOmxOi0nd1WwyJ/0yPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2RTQy MzI2NDc5NjAeFw0yNTEwMTkxNjM3MDZaFw0yNTEwMjMwMzM3MDZaMDMxMTAvBgNV BAMTKDgyNEEwNkZBRUM3NUI0MUMwNzg4MjZBM0EwMzdFQjREMkFBMDc1MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOJI2pc11oJvRSP1RaLWBCoB3O hMF9QsLE3AkYVXZ4xkaWbI8ouMKaLLLXGngVvSlp9kWCaHakgyKu8B4e6oBNC2Yk jDNCR8+9a+gXmPUn2fUhTzBhbg96qh94u/bH37YgAJxjiZ7MV6Jpo3GiqNDsLYgk 0yyQz0dSCSEkOtx8caaXLhUHLJr/xr17JtomwL7xaKfZdovtQbXcCaSfswRHFAV4 rGUmBBN5jSuMOZu8+LDGj9Cm/BaNZxKMle8Ua3yN5omrmRgcixqwSZo/sVrkWHlW rUJIL4JAzXOjdJTf+Lq7pv1Lr+Wb4dqot1tH7duUHj9EFP7UdrKuYCYj/pypAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgkoG+ux1tBwHiCajoDfrTSqgdSYwHwYDVR0j BBgwFoAUCh3m/Yi7nvTjScF3Takm5CMmR5YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTFlMGJkNy0yODFhLTRlYmEtYjk4Yy04MjkzOTMyN2RkZDcvMC8wQTFERTZGRDg4 QkI5RUY0RTM0OUMxNzc0REE5MjZFNDIzMjY0Nzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2RTQyMzI2 NDc5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWExZTBiZDctMjgxYS00ZWJhLWI5 OGMtODI5MzkzMjdkZGQ3LzAvMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2 RTQyMzI2NDc5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpTeHIaGsFN9Ah539DbqoSFpkOcCTquDB4u PDoGRsBTq/4SXme/pCK/htTymCGlrup+zpYBg0dwvUdmi8a3lsaOCFoCA5WfnMGL qV2wR7NVzdbDy/Qwb3TgDmEoL1uOeGjNrKghO403ubtJ/7NUXYZv/GeeTJxgEtIc LE40Zi6V7Yfrd7Pu8C9KnO6wHECHGNdqSIcoMqd0WEFOY55hbL/KZV6CaITc41ui 3E4ySd0pLsNyAzpfcEbsTKxUrkdiMvXV/kCCGSWggE8xAWKjkbuyweO1aI/F7rGo gsASs/y4yFx4P80oWfzl6/O6saibetT/bhXdJHyueBVuojR5L14= -----END CERTIFICATE-----Generated at Mon Oct 20 07:54:48 2025 by rpki-client