$ rpki-client -vvf repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft File: A781200DA8EA5D34C742642B1E502D67A5B2279E.mft (raw, json) Hash identifier: Vo95xhOosBUK66SnwI9P+B7/UqIjbiY9vB2yu2j5UqM= Subject key identifier: 8D:4A:69:48:AA:07:AD:2A:77:2C:97:B9:46:59:94:B6:42:56:63:FE Authority key identifier: A7:81:20:0D:A8:EA:5D:34:C7:42:64:2B:1E:50:2D:67:A5:B2:27:9E Certificate issuer: /CN=A781200DA8EA5D34C742642B1E502D67A5B2279E Certificate serial: 4E3748C8E950723420D8BE23D440BCE9A7E510FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft Manifest number: 01F3 Signing time: Mon 20 Oct 2025 01:20:41 +0000 Manifest this update: Mon 20 Oct 2025 01:15:41 +0000 Manifest next update: Thu 23 Oct 2025 11:07:41 +0000 Files and hashes: 1: 3130332e3231352e31392e302f32342d3234203d3e203634303331.roa (hash: ye+cYX2bhxXPeuSvU8p0xT1eC4Vs1OuUE3wcpd1xNMY=) 2: 3230322e35312e3139382e302f32342d3234203d3e203130323230.roa (hash: INN9h8serr/CQ6jBqp1R8d307W4fR88s0fl4Gzwo2gU=) 3: 3230322e35312e3231342e302f32342d3234203d3e203130323230.roa (hash: XAE8gjNY+boQayyymijM/NO8daFcdyz78y1MThdC1do=) 4: A781200DA8EA5D34C742642B1E502D67A5B2279E.crl (hash: rnNXgTP59SfGkvDi5NvL+Nfagz+kyS1+5HNph2IU888=) 5: 3130332e3231352e31362e302f32342d3234203d3e203634303331.roa (hash: iTXijEjQts+GxMwVGkPiv33W0uV/9tdMEiAqMwI4dno=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.crl rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:37:48:c8:e9:50:72:34:20:d8:be:23:d4:40:bc:e9:a7:e5:10:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A781200DA8EA5D34C742642B1E502D67A5B2279E Validity Not Before: Oct 20 01:15:41 2025 GMT Not After : Oct 23 11:07:41 2025 GMT Subject: CN=8D4A6948AA07AD2A772C97B9465994B6425663FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:86:2d:a2:68:33:57:e2:66:f9:eb:50:13:58: a9:ae:f1:88:26:61:99:34:ee:5b:51:b5:10:51:4d: c8:58:3a:2f:da:5d:98:b2:12:1f:fe:57:2e:8a:b3: 75:d7:dc:d4:32:c4:e5:4b:a8:63:df:d7:ba:59:a9: 12:d9:66:20:2d:67:fc:e0:33:71:7e:8a:a9:a3:78: ee:f7:06:63:c2:13:44:f6:49:3b:b3:c2:6d:4e:61: 12:03:41:34:53:e9:6a:51:de:e5:6b:0a:8c:9d:b3: 0f:a1:67:53:b5:cd:0f:90:4e:df:2a:be:b6:ec:43: c2:39:4f:66:4d:43:21:01:86:97:45:3d:1d:77:6b: 7d:2f:70:df:9f:90:3b:b9:04:41:43:b5:2a:21:3d: 40:7e:f2:90:06:e9:5c:8f:c9:f9:fd:06:9c:e9:8b: 98:d0:ba:a6:be:ad:92:70:19:09:22:c1:7d:9e:a0: c0:6f:3b:4c:b6:4e:30:bc:b0:44:0f:83:61:4a:76: 9d:6f:b0:6d:24:98:bb:df:34:f9:1a:f2:99:98:f7: f7:4d:26:cd:b6:56:34:b7:7f:9a:e4:a0:57:1e:dc: 66:ee:49:aa:c1:de:47:6e:cf:60:3c:c9:17:2b:4e: 61:6f:60:e2:56:21:66:8d:5c:68:05:bb:e8:3a:1c: 7f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4A:69:48:AA:07:AD:2A:77:2C:97:B9:46:59:94:B6:42:56:63:FE X509v3 Authority Key Identifier: keyid:A7:81:20:0D:A8:EA:5D:34:C7:42:64:2B:1E:50:2D:67:A5:B2:27:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:e0:36:e1:b8:02:51:2a:12:2d:43:f4:65:d2:79:17:ff:76: d1:ac:13:26:2c:b8:10:31:d3:47:d9:84:e2:6d:b6:cb:f8:99: 5a:56:22:71:3e:f9:5c:ea:66:bf:54:31:00:76:1b:b9:ab:b8: 56:1c:3c:aa:73:8a:bb:3b:73:f1:85:b3:3a:3b:f1:56:d2:fe: 51:5b:cd:16:31:13:d6:5a:2d:70:07:de:51:ee:3c:0e:32:4a: 5b:67:d8:04:f2:51:fb:9e:bb:e1:5a:9e:fb:99:18:ef:da:f9: 3d:f0:a0:a8:60:6a:58:2e:1d:53:a9:bd:91:7a:05:19:47:21: 50:39:a8:5c:8d:0f:60:03:c2:59:9c:64:6b:0a:ff:da:e8:99: 07:c9:f0:19:52:08:0a:19:37:77:5e:ae:60:25:6a:52:64:21: c5:62:23:38:8a:19:89:a3:b4:ea:1d:ba:fc:4a:f7:b0:25:2d: c6:d2:11:76:b0:66:0e:9d:e6:2d:16:a5:1b:be:63:91:62:5d: bb:1c:f6:cd:99:7e:02:54:97:c7:53:d7:3e:de:7d:54:02:cf: 03:38:ed:bc:fc:96:10:d8:99:f0:d6:49:3c:96:f7:7c:78:6b: dd:e2:59:42:66:f3:8f:d4:23:ae:75:db:51:e1:b5:18:d5:4e: 14:7f:25:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTjdIyOlQcjQg2L4j1EC86aflEPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJENjdB NUIyMjc5RTAeFw0yNTEwMjAwMTE1NDFaFw0yNTEwMjMxMTA3NDFaMDMxMTAvBgNV BAMTKDhENEE2OTQ4QUEwN0FEMkE3NzJDOTdCOTQ2NTk5NEI2NDI1NjYzRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCthi2iaDNX4mb561ATWKmu8Ygm YZk07ltRtRBRTchYOi/aXZiyEh/+Vy6Ks3XX3NQyxOVLqGPf17pZqRLZZiAtZ/zg M3F+iqmjeO73BmPCE0T2STuzwm1OYRIDQTRT6WpR3uVrCoydsw+hZ1O1zQ+QTt8q vrbsQ8I5T2ZNQyEBhpdFPR13a30vcN+fkDu5BEFDtSohPUB+8pAG6VyPyfn9Bpzp i5jQuqa+rZJwGQkiwX2eoMBvO0y2TjC8sEQPg2FKdp1vsG0kmLvfNPka8pmY9/dN Js22VjS3f5rkoFce3GbuSarB3kduz2A8yRcrTmFvYOJWIWaNXGgFu+g6HH97AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjUppSKoHrSp3LJe5RlmUtkJWY/4wHwYDVR0j BBgwFoAUp4EgDajqXTTHQmQrHlAtZ6WyJ54wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZDcwY2MzNy0xZmE2LTRmYTAtYTg4Yy00MDhhZWQyOGQ5YWEvMC9BNzgxMjAwREE4 RUE1RDM0Qzc0MjY0MkIxRTUwMkQ2N0E1QjIyNzlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJENjdBNUIy Mjc5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWQ3MGNjMzctMWZhNi00ZmEwLWE4 OGMtNDA4YWVkMjhkOWFhLzAvQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJE NjdBNUIyMjc5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/gNuG4AlEqEi1D9GXSeRf/dtGsEyYsuBAx 00fZhOJttsv4mVpWInE++VzqZr9UMQB2G7mruFYcPKpzirs7c/GFszo78VbS/lFb zRYxE9ZaLXAH3lHuPA4ySltn2ATyUfueu+FanvuZGO/a+T3woKhgalguHVOpvZF6 BRlHIVA5qFyND2ADwlmcZGsK/9romQfJ8BlSCAoZN3dermAlalJkIcViIziKGYmj tOoduvxK97AlLcbSEXawZg6d5i0WpRu+Y5FiXbsc9s2ZfgJUl8dT1z7efVQCzwM4 7bz8lhDYmfDWSTyW93x4a93iWUJm84/UI65121HhtRjVThR/Je4= -----END CERTIFICATE-----Generated at Mon Oct 20 12:40:05 2025 by rpki-client