$ rpki-client -vvf repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft File: A532AD36631301388EC939BEB0F099FCDE956410.mft (raw, json) Hash identifier: ykFTZF3FU4gA7KfIny4g3apEOjeUjCCl1YMUYJnBiJc= Subject key identifier: 0A:E5:2C:C2:40:7F:5D:8B:96:AE:45:5D:D9:1B:AE:B2:9D:23:40:72 Authority key identifier: A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 Certificate issuer: /CN=A532AD36631301388EC939BEB0F099FCDE956410 Certificate serial: 1B39B7A6522580F9683DFE87F5CB7933408A52A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft Manifest number: 04B5 Signing time: Sun 19 Oct 2025 14:41:03 +0000 Manifest this update: Sun 19 Oct 2025 14:36:03 +0000 Manifest next update: Thu 23 Oct 2025 00:33:03 +0000 Files and hashes: 1: 323430363a373634303a3a2f33322d3332203d3e20313431303731.roa (hash: 6YW7Ywg58/9Y3fL2UyBxi9/3nsJtBUBgtTiZry4s9Zg=) 2: 3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa (hash: HCgC8t5pLbfKkTdfn0NYL/tY86j47b08S0q/IzNGAAA=) 3: A532AD36631301388EC939BEB0F099FCDE956410.crl (hash: Oh1mASEf2zejY3mJc+7b82aODUwV7vyIF8ApZ07K/rw=) 4: 3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa (hash: giT40O2wWmvxV65/dwsGgg901Qzr1+BEnGc0lAnFIDY=) 5: 3130332e3135352e3139362e302f32342d3234203d3e20313431303731.roa (hash: 9d7XfsrnfpJJqX9nZsXt1hskjbe4qjeQ8U4bAFN72jc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 00:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:39:b7:a6:52:25:80:f9:68:3d:fe:87:f5:cb:79:33:40:8a:52:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A532AD36631301388EC939BEB0F099FCDE956410 Validity Not Before: Oct 19 14:36:03 2025 GMT Not After : Oct 23 00:33:03 2025 GMT Subject: CN=0AE52CC2407F5D8B96AE455DD91BAEB29D234072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:54:b1:dd:3f:1d:18:25:de:85:0c:6b:ef:ce: 9a:32:a8:bd:ed:55:44:92:b2:71:c5:6d:f4:ce:ce: 58:2d:24:e4:c1:82:f1:92:c2:0f:ea:c4:73:ff:f6: 52:a1:02:14:39:44:35:88:7c:b9:c5:b0:49:5d:55: d9:a5:e3:c9:b2:97:44:0d:c2:eb:33:f9:d4:d3:09: cd:bd:93:a2:d8:83:f9:be:12:e8:2b:f4:80:8f:48: 48:1c:5c:f0:1a:23:ff:00:f6:6e:62:60:07:e1:be: e8:3d:1f:e5:3e:97:15:d9:35:77:3d:a8:48:06:d5: 89:bb:c8:51:33:13:bc:cb:f4:21:01:07:4e:18:de: 5f:57:2c:a0:81:85:e1:f0:0b:68:ae:53:18:59:af: f4:a4:ff:84:b1:52:23:f4:97:50:8a:41:69:a4:de: 0b:ad:1a:9d:0d:2a:ba:31:1d:f8:4e:a9:df:7a:26: 52:2f:82:8d:b4:7f:79:66:90:a0:e9:59:e2:b7:9c: c7:4c:54:55:a6:fd:90:7d:96:04:9c:08:e0:b6:27: f3:7d:ee:b7:6c:91:89:1a:22:6b:5e:3c:a3:b5:27: 81:43:79:e7:df:8e:1d:f6:11:67:73:b0:51:2b:ba: 96:06:20:e2:4e:ee:1f:0e:1c:a4:c5:61:f4:ad:3f: f9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E5:2C:C2:40:7F:5D:8B:96:AE:45:5D:D9:1B:AE:B2:9D:23:40:72 X509v3 Authority Key Identifier: keyid:A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:f7:3a:cc:af:bb:0e:c3:66:49:96:a4:81:70:11:23:97:8a: 01:a9:da:49:7c:03:3b:0b:1f:1e:50:0b:82:d0:dd:ea:0a:bc: 70:43:71:a2:9f:13:0d:22:85:9d:53:85:7e:ca:de:67:5d:bd: b2:0a:68:94:b4:5c:15:7f:89:41:87:b4:ba:76:f9:4d:b7:22: af:e1:98:31:1b:69:6b:31:e1:45:6a:f2:7e:3f:32:4b:43:4a: 13:27:97:b0:bc:fe:ac:ca:6f:48:61:02:57:4c:5b:09:28:ba: f4:1d:7c:89:eb:e4:d6:99:78:47:e9:ca:7d:ff:2c:88:29:7f: e7:8a:cb:89:06:4f:a3:19:00:d7:ca:d4:c6:47:c1:79:60:da: d0:67:0e:1e:67:ee:a0:08:8d:04:df:45:06:30:f9:b6:93:13: 4a:12:29:a3:a7:56:b2:89:99:4e:8e:8b:f3:4c:c0:e1:4c:d4: 2d:32:ea:93:03:4c:08:cd:73:f6:80:4f:04:9b:5e:97:0a:af: 7b:43:f9:1a:6a:12:92:6c:e6:77:39:f2:63:b0:d2:f5:28:50: 94:89:07:d1:42:66:48:83:13:79:31:08:1d:f9:e5:43:d7:6d: 74:34:b3:76:0b:42:ee:ad:22:f4:97:82:1a:a6:a1:bb:97:2d: 84:4b:75:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGzm3plIlgPloPf6H9ct5M0CKUqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNE RTk1NjQxMDAeFw0yNTEwMTkxNDM2MDNaFw0yNTEwMjMwMDMzMDNaMDMxMTAvBgNV BAMTKDBBRTUyQ0MyNDA3RjVEOEI5NkFFNDU1REQ5MUJBRUIyOUQyMzQwNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpVLHdPx0YJd6FDGvvzpoyqL3t VUSSsnHFbfTOzlgtJOTBgvGSwg/qxHP/9lKhAhQ5RDWIfLnFsEldVdml48myl0QN wusz+dTTCc29k6LYg/m+Eugr9ICPSEgcXPAaI/8A9m5iYAfhvug9H+U+lxXZNXc9 qEgG1Ym7yFEzE7zL9CEBB04Y3l9XLKCBheHwC2iuUxhZr/Sk/4SxUiP0l1CKQWmk 3gutGp0NKroxHfhOqd96JlIvgo20f3lmkKDpWeK3nMdMVFWm/ZB9lgScCOC2J/N9 7rdskYkaImtePKO1J4FDeeffjh32EWdzsFErupYGIOJO7h8OHKTFYfStP/n7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCuUswkB/XYuWrkVd2Ruusp0jQHIwHwYDVR0j BBgwFoAUpTKtNmMTATiOyTm+sPCZ/N6VZBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWNlMGM5NC0wZDZjLTQ1YjMtYWFjNi0zNGQwY2U5YjFmMDgvMC9BNTMyQUQzNjYz MTMwMTM4OEVDOTM5QkVCMEYwOTlGQ0RFOTU2NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNERTk1 NjQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjljZTBjOTQtMGQ2Yy00NWIzLWFh YzYtMzRkMGNlOWIxZjA4LzAvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5 RkNERTk1NjQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANz3Osyvuw7DZkmWpIFwESOXigGp2kl8AzsL Hx5QC4LQ3eoKvHBDcaKfEw0ihZ1ThX7K3mddvbIKaJS0XBV/iUGHtLp2+U23Iq/h mDEbaWsx4UVq8n4/MktDShMnl7C8/qzKb0hhAldMWwkouvQdfInr5NaZeEfpyn3/ LIgpf+eKy4kGT6MZANfK1MZHwXlg2tBnDh5n7qAIjQTfRQYw+baTE0oSKaOnVrKJ mU6Oi/NMwOFM1C0y6pMDTAjNc/aATwSbXpcKr3tD+RpqEpJs5nc58mOw0vUoUJSJ B9FCZkiDE3kxCB355UPXbXQ0s3YLQu6tIvSXghqmobuXLYRLdUA= -----END CERTIFICATE-----Generated at Mon Oct 20 07:28:01 2025 by rpki-client