$ rpki-client -vvf repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft File: 0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft (raw, json) Hash identifier: YksoOrZUfsRUtwdwJJB+eak5h9omnMzWDVXWHuFfcKc= Subject key identifier: 02:86:A0:5B:F3:93:F8:5E:D5:53:F5:A9:E1:6B:0D:C1:E6:A6:5F:D5 Authority key identifier: 01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04 Certificate issuer: /CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804 Certificate serial: 2EE91664BF6F543083B3EF49A58E217CA871B986 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft Manifest number: 01DD Signing time: Tue 28 Oct 2025 15:50:51 +0000 Manifest this update: Tue 28 Oct 2025 15:45:51 +0000 Manifest next update: Fri 31 Oct 2025 18:40:51 +0000 Files and hashes: 1: 0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl (hash: 2XdeRMXH3pvflepfIC6mNeIWioa0lzD9R36HP7lwQ+4=) 2: 3130332e33352e3135322e302f32332d3233203d3e2039333431.roa (hash: 7pJK2Nu09mDb/KW48/x7bS6pMakC4PmiTUB5vEr70Gk=) 3: 3130332e33352e3135332e302f32342d3234203d3e2039333431.roa (hash: 4gA0Ayh4wc+enuZjfM5cvXtF4KS/wz/Vl+eaNQabdGI=) 4: 3130332e33352e3135322e302f32342d3234203d3e2039333431.roa (hash: U/yDn1W4jZEF4S0Nu+KZGK93oXQkpj5Y66m25j//fks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 18:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:e9:16:64:bf:6f:54:30:83:b3:ef:49:a5:8e:21:7c:a8:71:b9:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804 Validity Not Before: Oct 28 15:45:51 2025 GMT Not After : Oct 31 18:40:51 2025 GMT Subject: CN=0286A05BF393F85ED553F5A9E16B0DC1E6A65FD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ec:a1:4a:7a:fa:7a:39:60:75:05:c0:4f:75: 4c:e6:22:c0:b8:81:8d:15:61:86:a2:f7:f2:61:e0: 22:78:f6:06:70:67:c8:70:2f:00:6b:d8:a1:6a:0b: 3c:e3:8b:3d:aa:26:27:7d:43:9d:9d:48:66:e9:7a: 87:cd:3e:45:8e:e5:80:d7:d9:4b:83:fa:05:50:ac: 5e:0b:8c:75:46:a4:04:6b:d7:fc:e7:47:23:eb:48: 19:32:96:06:02:22:a0:ef:90:9b:7a:7e:64:e5:7a: 2f:a3:d7:34:8d:29:af:67:f5:ed:ad:d5:4c:11:bf: 09:62:6d:7e:54:82:17:1a:a7:8f:5b:bd:de:8a:06: 46:27:57:2c:1a:04:cf:ec:d3:5f:49:23:05:f8:32: 7c:7b:de:3f:5f:aa:c0:7e:18:37:ed:78:35:f8:55: 54:8f:b9:c2:b4:86:0e:f4:bf:06:ae:ef:b2:c3:8b: fb:a7:70:4d:1c:10:c4:7e:d5:c8:98:03:47:2c:0d: f0:fd:f4:f4:34:a3:3c:2e:11:3b:59:fe:8f:e7:f2: 46:9d:c2:5e:1a:d5:03:09:e6:f0:86:04:e9:57:ee: 30:36:28:20:cc:2d:7d:b1:98:da:20:58:97:70:10: dd:ab:75:18:d9:71:ce:05:9d:fd:c7:d9:20:ac:09: 74:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:86:A0:5B:F3:93:F8:5E:D5:53:F5:A9:E1:6B:0D:C1:E6:A6:5F:D5 X509v3 Authority Key Identifier: keyid:01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:bb:68:ea:7d:86:43:41:5d:38:9e:52:ac:bf:78:7d:aa:43: 7e:d5:ee:0f:2e:4e:8f:7b:bf:31:17:b2:6a:47:03:d9:5c:d6: 8f:3d:ed:ae:27:d8:e5:68:8f:ca:15:f0:10:4d:52:0e:6a:94: 6a:dc:17:2d:da:28:13:c4:fb:a7:63:aa:6d:f3:c0:dd:48:97: 92:74:b8:9a:02:11:af:b6:73:db:e2:be:84:d3:28:ed:d0:d1: c9:2d:2f:59:fb:39:57:c4:48:da:2e:ff:e2:96:c9:2c:32:95: f3:b3:4a:62:ec:d8:92:6a:fa:13:64:42:00:99:48:b0:8f:41: de:6d:4f:5a:f0:ce:ed:2e:01:41:ae:0d:71:2b:2a:0a:2f:fa: eb:c5:59:37:d2:e3:e1:84:0a:13:1a:85:93:a0:9b:38:06:e4: 6d:5a:82:3b:15:75:60:7c:9d:d3:8a:11:95:bb:54:6d:31:ca: 44:eb:90:73:e3:1c:38:27:98:6a:d9:21:42:8b:9f:bb:f8:a3: 62:4a:11:4f:c4:58:c4:5e:ea:57:49:79:59:c3:c4:0d:66:a4: 24:fb:cc:24:81:63:73:54:19:b3:79:40:bf:ad:d8:cf:7a:e3: 29:e8:9e:5d:90:85:34:92:98:96:9c:e3:e8:a9:37:1d:94:5e: 48:09:42:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULukWZL9vVDCDs+9JpY4hfKhxuYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZEQ0VE MEE1NzgwNDAeFw0yNTEwMjgxNTQ1NTFaFw0yNTEwMzExODQwNTFaMDMxMTAvBgNV BAMTKDAyODZBMDVCRjM5M0Y4NUVENTUzRjVBOUUxNkIwREMxRTZBNjVGRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM7KFKevp6OWB1BcBPdUzmIsC4 gY0VYYai9/Jh4CJ49gZwZ8hwLwBr2KFqCzzjiz2qJid9Q52dSGbpeofNPkWO5YDX 2UuD+gVQrF4LjHVGpARr1/znRyPrSBkylgYCIqDvkJt6fmTlei+j1zSNKa9n9e2t 1UwRvwlibX5Ughcap49bvd6KBkYnVywaBM/s019JIwX4Mnx73j9fqsB+GDfteDX4 VVSPucK0hg70vwau77LDi/uncE0cEMR+1ciYA0csDfD99PQ0ozwuETtZ/o/n8kad wl4a1QMJ5vCGBOlX7jA2KCDMLX2xmNogWJdwEN2rdRjZcc4Fnf3H2SCsCXQ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAoagW/OT+F7VU/Wp4WsNweamX9UwHwYDVR0j BBgwFoAUAQCn9sTVjDhn+c7X59RtztCleAQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDg4NTUyNS1jYjBmLTQ2YTAtODI1My0wNDJkN2Q3YWZmMzgvMC8wMTAwQTdGNkM0 RDU4QzM4NjdGOUNFRDdFN0Q0NkRDRUQwQTU3ODA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZEQ0VEMEE1 NzgwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ4ODU1MjUtY2IwZi00NmEwLTgy NTMtMDQyZDdkN2FmZjM4LzAvMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZE Q0VEMEE1NzgwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIC7aOp9hkNBXTieUqy/eH2qQ37V7g8uTo97 vzEXsmpHA9lc1o897a4n2OVoj8oV8BBNUg5qlGrcFy3aKBPE+6djqm3zwN1Il5J0 uJoCEa+2c9vivoTTKO3Q0cktL1n7OVfESNou/+KWySwylfOzSmLs2JJq+hNkQgCZ SLCPQd5tT1rwzu0uAUGuDXErKgov+uvFWTfS4+GEChMahZOgmzgG5G1agjsVdWB8 ndOKEZW7VG0xykTrkHPjHDgnmGrZIUKLn7v4o2JKEU/EWMRe6ldJeVnDxA1mpCT7 zCSBY3NUGbN5QL+t2M964ynonl2QhTSSmJac4+ipNx2UXkgJQkM= -----END CERTIFICATE-----Generated at Thu Oct 30 14:58:37 2025 by rpki-client