$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft File: A500108F09BF54E5603B5C1F6E6325A561FE7126.mft (raw, json) Hash identifier: FPKUzsxdFx5SOIeHUANlfBPwfoApNJFQ0dcqidc2Lo0= Subject key identifier: 77:C6:32:00:F9:93:A6:1A:D2:88:95:66:CF:15:DC:B7:3F:CA:59:C4 Authority key identifier: A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26 Certificate issuer: /CN=A500108F09BF54E5603B5C1F6E6325A561FE7126 Certificate serial: 195EFE1C0473C78DCC6A1BDE0076425D0AB4E1EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft Manifest number: 0511 Signing time: Fri 10 Oct 2025 13:32:20 +0000 Manifest this update: Fri 10 Oct 2025 13:27:20 +0000 Manifest next update: Mon 13 Oct 2025 15:36:20 +0000 Files and hashes: 1: A500108F09BF54E5603B5C1F6E6325A561FE7126.crl (hash: OXX5Oap0F8+N6XYkDPcURLnf7zGv1ssSiH7G7nTO+3E=) 2: 323030313a6466343a623130303a3a2f34382d3438203d3e20313337333331.roa (hash: N5WXqZ6Jw+zSS8rnedVuQEefp7BbCpCEzbN4PssNcrU=) 3: 3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa (hash: oiQrxAKU3WAq8WQAa4AsG/VSgBXo6JykRbhPhmfaGc4=) 4: 3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa (hash: lIpuwQni1CJCCy7a6RQeBOueUSsNd+BwETQKPZ3/nzw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Oct 2025 15:36:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:5e:fe:1c:04:73:c7:8d:cc:6a:1b:de:00:76:42:5d:0a:b4:e1:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A500108F09BF54E5603B5C1F6E6325A561FE7126 Validity Not Before: Oct 10 13:27:20 2025 GMT Not After : Oct 13 15:36:20 2025 GMT Subject: CN=77C63200F993A61AD2889566CF15DCB73FCA59C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:93:73:d1:bb:41:02:68:a2:ac:41:b3:82:f0: 01:a8:60:b9:21:61:0b:38:78:9a:a3:74:b1:ee:a7: d3:92:62:4f:87:e8:5b:76:90:9f:3b:af:bf:88:8c: 5b:eb:8b:e1:7a:8d:82:c6:36:63:be:3e:3f:d1:40: 16:9b:3e:f2:e9:59:f5:08:6e:b5:23:32:3e:72:59: 86:03:63:06:8a:13:60:f0:21:5d:f6:eb:8d:74:03: af:93:1e:8a:6f:14:44:e5:44:1b:73:4c:08:43:ec: a8:a1:ea:2d:11:67:2b:db:55:96:c3:3a:ec:ef:39: 42:30:43:f9:5c:39:1a:2d:35:eb:4b:e5:e4:fd:53: 1c:35:ca:19:2f:93:1f:ba:37:76:d8:fb:f8:60:53: f1:b3:5d:7b:50:3b:2b:0a:f3:4e:bc:35:bd:f2:06: 3b:34:ab:a0:2e:b8:b1:ea:e1:f4:ae:ca:89:37:29: cd:d3:44:3c:eb:47:bf:21:94:89:f6:99:de:d1:1d: 86:ba:f9:7d:1a:d0:86:93:ab:9d:1e:7d:42:e1:38: 26:ae:fe:6b:19:e5:32:31:cd:53:a1:70:d9:92:98: a1:e4:81:7d:7f:d0:fd:0d:4b:a3:7d:99:30:61:bf: eb:c3:be:58:38:fc:0c:c7:46:a9:98:c8:a9:f2:e1: 1a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C6:32:00:F9:93:A6:1A:D2:88:95:66:CF:15:DC:B7:3F:CA:59:C4 X509v3 Authority Key Identifier: keyid:A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:b2:64:ac:3a:81:74:09:54:d1:ac:6c:1d:a9:56:d6:42:c4: 7e:48:ce:de:ff:11:c3:7a:5b:68:ad:b6:87:cb:fb:93:80:18: 28:74:1c:f9:5d:e7:9a:37:f8:43:9f:9c:e8:25:9e:67:71:26: 13:99:59:10:d5:df:7e:31:8d:80:f5:d0:a5:c0:29:34:fc:f7: 38:7a:d3:32:bf:ff:18:ef:f0:4d:df:6a:eb:b2:8e:35:99:3c: 59:2e:f2:ff:cb:57:7c:2c:af:bf:09:3b:5c:a6:b4:1b:2a:3b: a5:d6:35:0f:9a:b6:10:cb:d9:1f:2e:0a:67:57:6c:db:1b:dc: cf:de:88:ec:f2:d3:c9:7d:9b:62:36:9f:85:df:41:9f:68:75: 3e:e2:04:5c:20:ab:33:80:cc:dd:44:22:9e:7e:83:9a:75:7f: 01:11:67:72:46:97:53:27:db:dc:1b:81:06:df:13:8a:14:2e: f1:07:9d:03:02:29:c5:77:0b:f8:3f:01:4d:ae:23:2f:fe:54: 6f:ee:bd:63:55:8d:26:0c:40:1e:e5:43:5d:7b:fe:a9:0e:e2: 2a:97:e2:46:3f:43:01:ab:c9:7a:58:c1:e5:31:2b:09:b2:f0: e6:22:da:3c:a1:43:70:48:2f:e9:79:f4:4b:d9:d1:ff:16:17: a1:3e:40:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGV7+HARzx43MahveAHZCXQq04ewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1QTU2 MUZFNzEyNjAeFw0yNTEwMTAxMzI3MjBaFw0yNTEwMTMxNTM2MjBaMDMxMTAvBgNV BAMTKDc3QzYzMjAwRjk5M0E2MUFEMjg4OTU2NkNGMTVEQ0I3M0ZDQTU5QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUk3PRu0ECaKKsQbOC8AGoYLkh YQs4eJqjdLHup9OSYk+H6Ft2kJ87r7+IjFvri+F6jYLGNmO+Pj/RQBabPvLpWfUI brUjMj5yWYYDYwaKE2DwIV326410A6+THopvFETlRBtzTAhD7Kih6i0RZyvbVZbD OuzvOUIwQ/lcORotNetL5eT9Uxw1yhkvkx+6N3bY+/hgU/GzXXtQOysK8068Nb3y Bjs0q6AuuLHq4fSuyok3Kc3TRDzrR78hlIn2md7RHYa6+X0a0IaTq50efULhOCau /msZ5TIxzVOhcNmSmKHkgX1/0P0NS6N9mTBhv+vDvlg4/AzHRqmYyKny4RpHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd8YyAPmTphrSiJVmzxXctz/KWcQwHwYDVR0j BBgwFoAUpQAQjwm/VOVgO1wfbmMlpWH+cSYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmQ4MGQ5Ni1lZjFiLTQ0YjItOTAzYS03ZjZkYTk0MWE4MzYvMC9BNTAwMTA4RjA5 QkY1NEU1NjAzQjVDMUY2RTYzMjVBNTYxRkU3MTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1QTU2MUZF NzEyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZkODBkOTYtZWYxYi00NGIyLTkw M2EtN2Y2ZGE5NDFhODM2LzAvQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1 QTU2MUZFNzEyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAqyZKw6gXQJVNGsbB2pVtZCxH5Izt7/EcN6 W2ittofL+5OAGCh0HPld55o3+EOfnOglnmdxJhOZWRDV334xjYD10KXAKTT89zh6 0zK//xjv8E3fauuyjjWZPFku8v/LV3wsr78JO1ymtBsqO6XWNQ+athDL2R8uCmdX bNsb3M/eiOzy08l9m2I2n4XfQZ9odT7iBFwgqzOAzN1EIp5+g5p1fwERZ3JGl1Mn 29wbgQbfE4oULvEHnQMCKcV3C/g/AU2uIy/+VG/uvWNVjSYMQB7lQ117/qkO4iqX 4kY/QwGryXpYweUxKwmy8OYi2jyhQ3BIL+l59EvZ0f8WF6E+QIE= -----END CERTIFICATE-----Generated at Sat Oct 11 13:07:23 2025 by rpki-client