$ rpki-client -vvf repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft File: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft (raw, json) Hash identifier: ce/Q5EuRWykqo+0x01Adqe5N91vu3XccLl5icW30pM4= Subject key identifier: 9F:CC:1D:37:54:D1:E0:21:12:32:F2:79:38:1A:3F:90:D6:E4:78:EA Authority key identifier: 1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB Certificate issuer: /CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Certificate serial: 6524667A97FFA944AFFDA29F89D9692FEFB66578 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft Manifest number: 02C4 Signing time: Sat 18 Oct 2025 22:02:22 +0000 Manifest this update: Sat 18 Oct 2025 21:57:22 +0000 Manifest next update: Wed 22 Oct 2025 05:44:22 +0000 Files and hashes: 1: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl (hash: fiMbP2RFkJ6GsnG5N8yIScdnQZuoAiKly8kO1qew+5g=) 2: 3130332e3137372e3130302e302f32332d3234203d3e20313331313131.roa (hash: 3wek+JTR4Gr3DKmUDawbdf/x7TASEspEnmo4iHcCsdk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 05:44:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:24:66:7a:97:ff:a9:44:af:fd:a2:9f:89:d9:69:2f:ef:b6:65:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Validity Not Before: Oct 18 21:57:22 2025 GMT Not After : Oct 22 05:44:22 2025 GMT Subject: CN=9FCC1D3754D1E0211232F279381A3F90D6E478EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:90:dc:01:85:61:d0:88:e0:28:a7:2c:f1:0d: 46:05:81:ee:b1:31:31:4f:60:8d:50:ff:4a:e3:81: de:28:f1:9c:cd:2a:35:55:65:f0:16:63:0d:e8:67: 5d:6b:ff:6b:6a:dd:91:f6:ad:3c:d0:fe:67:c0:e4: 68:34:a0:91:9b:b8:b1:4f:fa:76:30:13:e7:c6:a3: cc:e4:aa:9e:42:2e:34:1e:72:94:15:0c:87:22:4c: 2e:5a:32:0f:0d:8a:76:3f:85:96:a0:ad:b9:96:c4: d7:99:43:74:70:d2:e3:eb:3a:85:37:7e:69:69:b2: 06:0d:b3:e9:e6:ba:7b:12:58:e1:2d:b6:a2:a4:d0: d0:b7:4d:d1:e2:77:aa:fa:6e:21:c8:80:1d:ca:9c: 41:a8:cc:d9:d1:a2:79:cc:48:0b:9e:26:d5:4f:9b: 76:e0:8a:45:d7:c4:16:41:d2:a7:14:b3:a0:6e:cc: e2:a2:c8:e1:0d:1b:f0:fb:23:9d:c7:c4:ed:c4:26: 13:f2:4e:3b:90:34:0f:ea:51:61:63:55:22:f4:b9: 36:34:19:d7:46:38:73:ad:c7:86:2e:4c:c4:2b:49: 0e:b0:23:33:11:c3:83:92:6a:ae:51:2f:2e:4a:86: 16:3b:bb:9a:09:78:c1:96:bb:fb:58:86:3c:99:7a: a2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:CC:1D:37:54:D1:E0:21:12:32:F2:79:38:1A:3F:90:D6:E4:78:EA X509v3 Authority Key Identifier: keyid:1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:d1:d0:06:0e:e4:3f:51:c9:8a:bf:e9:04:17:15:54:4a:51: a2:54:bb:b2:30:a8:02:1a:ef:23:d3:99:6d:44:5e:bf:cc:81: cc:97:54:b9:50:e6:5e:c8:f1:eb:43:78:52:8f:b7:39:82:cd: f8:fb:3c:63:58:56:f7:78:5e:ce:3b:a0:32:4f:df:6b:0a:cc: b9:8e:b0:00:3a:92:09:fa:ff:95:f4:e3:4e:66:ac:20:a1:92: 87:91:86:c3:5d:bb:7c:53:04:7f:40:64:93:56:2d:70:4c:fb: 6c:80:72:a2:61:c7:be:1a:e1:99:e6:b6:d0:bd:c5:d7:4f:81: e9:bf:9e:4a:28:9d:04:21:ee:8b:a4:ac:5b:08:56:28:16:fb: 49:fa:af:a0:e7:50:3f:da:e3:31:2c:0d:f3:e3:8d:5a:27:84: 88:7c:8a:02:93:47:4b:a3:84:21:76:a8:a9:30:f5:67:d0:d3: 72:89:55:e6:f2:88:4b:f4:35:f3:f9:56:f5:20:64:c9:0b:c8: 87:8f:06:3b:21:ab:54:3c:97:51:13:f9:49:37:08:b1:ed:d7: 41:e4:ed:67:d7:bd:0e:2d:dc:41:ea:8c:e8:02:d8:ea:45:8c: 6b:50:96:b2:4e:f6:5d:b5:a8:82:5a:b6:74:72:7f:02:94:29: e1:3c:e5:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZSRmepf/qUSv/aKfidlpL++2ZXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQyQ0M2 MENFMEJBQjAeFw0yNTEwMTgyMTU3MjJaFw0yNTEwMjIwNTQ0MjJaMDMxMTAvBgNV BAMTKDlGQ0MxRDM3NTREMUUwMjExMjMyRjI3OTM4MUEzRjkwRDZFNDc4RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqkNwBhWHQiOAopyzxDUYFge6x MTFPYI1Q/0rjgd4o8ZzNKjVVZfAWYw3oZ11r/2tq3ZH2rTzQ/mfA5Gg0oJGbuLFP +nYwE+fGo8zkqp5CLjQecpQVDIciTC5aMg8NinY/hZagrbmWxNeZQ3Rw0uPrOoU3 fmlpsgYNs+nmunsSWOEttqKk0NC3TdHid6r6biHIgB3KnEGozNnRonnMSAueJtVP m3bgikXXxBZB0qcUs6BuzOKiyOENG/D7I53HxO3EJhPyTjuQNA/qUWFjVSL0uTY0 GddGOHOtx4YuTMQrSQ6wIzMRw4OSaq5RLy5KhhY7u5oJeMGWu/tYhjyZeqLbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn8wdN1TR4CESMvJ5OBo/kNbkeOowHwYDVR0j BBgwFoAUG/cSGWZHB6e3ds2ZuabSzGDOC6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ODk4NWY1OS0wZWU2LTQyMDgtOWE5MC0yOWMxMDg2MDBjZmMvMC8xQkY3MTIxOTY2 NDcwN0E3Qjc3NkNEOTlCOUE2RDJDQzYwQ0UwQkFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQyQ0M2MENF MEJBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDg5ODVmNTktMGVlNi00MjA4LTlh OTAtMjljMTA4NjAwY2ZjLzAvMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQy Q0M2MENFMEJBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALDR0AYO5D9RyYq/6QQXFVRKUaJUu7IwqAIa 7yPTmW1EXr/MgcyXVLlQ5l7I8etDeFKPtzmCzfj7PGNYVvd4Xs47oDJP32sKzLmO sAA6kgn6/5X0405mrCChkoeRhsNdu3xTBH9AZJNWLXBM+2yAcqJhx74a4ZnmttC9 xddPgem/nkoonQQh7oukrFsIVigW+0n6r6DnUD/a4zEsDfPjjVonhIh8igKTR0uj hCF2qKkw9WfQ03KJVebyiEv0NfP5VvUgZMkLyIePBjshq1Q8l1ET+Uk3CLHt10Hk 7WfXvQ4t3EHqjOgC2OpFjGtQlrJO9l21qIJatnRyfwKUKeE85QA= -----END CERTIFICATE-----Generated at Mon Oct 20 15:54:59 2025 by rpki-client