$ rpki-client -vvf repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft File: 1D5FBED26611C99226941DBD91139C594B399F46.mft (raw, json) Hash identifier: Qo2MJn6xCLtjloaYzBG5LjXqUacKVFiy25eetP+d6T8= Subject key identifier: 87:60:F4:99:3D:CF:C4:5E:63:4B:78:4B:BE:56:63:5C:45:DA:D8:38 Authority key identifier: 1D:5F:BE:D2:66:11:C9:92:26:94:1D:BD:91:13:9C:59:4B:39:9F:46 Certificate issuer: /CN=1D5FBED26611C99226941DBD91139C594B399F46 Certificate serial: 0D8CB1AF73C1BC7D3F03BBB66FB8173FEE4B6ADF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft Manifest number: 02C6 Signing time: Sun 19 Oct 2025 15:41:32 +0000 Manifest this update: Sun 19 Oct 2025 15:36:32 +0000 Manifest next update: Thu 23 Oct 2025 01:18:32 +0000 Files and hashes: 1: 1D5FBED26611C99226941DBD91139C594B399F46.crl (hash: C9eGmQwsIoQc+4OEa7jyyZiTuEEvmcGLA4G6QNUMvsk=) 2: 3130332e3137362e3139382e302f32342d3234203d3e20313437313334.roa (hash: fmmesiS1WcI4ovgUB3oEnMzQaroROS18Jh1l+/FK5Mw=) 3: 3130332e3137362e3139392e302f32342d3234203d3e20313437313334.roa (hash: 0HKqUWxZbI9n+PEVKoTLIbRadeKyFkIWvHvlRbtvAq0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.crl rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 01:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:8c:b1:af:73:c1:bc:7d:3f:03:bb:b6:6f:b8:17:3f:ee:4b:6a:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D5FBED26611C99226941DBD91139C594B399F46 Validity Not Before: Oct 19 15:36:32 2025 GMT Not After : Oct 23 01:18:32 2025 GMT Subject: CN=8760F4993DCFC45E634B784BBE56635C45DAD838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:46:11:67:74:d4:b5:18:cc:98:e4:7d:13:bb: e9:1b:4c:99:3c:80:22:62:6f:07:3c:94:58:3a:1f: ce:ec:f9:31:a2:56:2e:cd:c2:e4:63:48:5d:1b:64: f4:61:2b:a2:9b:e4:58:c6:7c:ad:ac:4d:37:02:e2: 4e:bb:f2:e9:89:f0:eb:fe:b9:92:a4:13:be:d9:2c: 08:59:12:a3:39:e5:86:03:6a:c7:3f:b4:2a:8a:0d: 0f:d5:35:fa:b2:42:3b:eb:c7:7f:20:84:6f:9a:4d: f4:9f:d8:53:28:6e:31:e9:17:26:82:d0:8b:e7:6b: da:b1:ed:61:33:9b:05:26:ae:ec:e6:b8:98:ee:8c: 27:98:a2:31:8e:78:d9:c3:ac:3f:02:dc:29:be:a4: 3d:9d:23:5c:ac:1e:6e:24:00:eb:ca:98:cf:93:a9: 78:85:36:47:7a:21:90:9f:91:05:8c:49:24:81:cb: 49:27:e6:85:21:fc:a4:f1:b1:bd:33:4c:5b:a8:e1: a8:d3:b1:44:63:6b:dc:49:e9:6d:77:60:cc:ba:06: fe:8e:0b:35:5b:52:a2:cf:91:b4:92:14:1b:b3:a6: b2:83:e5:cc:26:19:3b:f7:d5:1f:8f:39:99:8d:8c: 40:58:20:11:6a:81:67:38:ce:6c:d7:72:6e:ba:4c: d6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:60:F4:99:3D:CF:C4:5E:63:4B:78:4B:BE:56:63:5C:45:DA:D8:38 X509v3 Authority Key Identifier: keyid:1D:5F:BE:D2:66:11:C9:92:26:94:1D:BD:91:13:9C:59:4B:39:9F:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:39:a1:73:df:e0:a1:2c:c3:f3:ce:27:83:97:8c:82:26:e1: ad:20:ce:4e:79:84:15:fd:c7:5e:5b:70:5e:2b:67:bb:c5:b5: d6:0d:bf:fc:3d:9d:0c:90:41:91:8b:8e:2f:2c:10:a0:e4:8b: ae:ee:a9:ce:2d:e0:fd:bf:ba:6a:00:26:7a:3f:2e:3b:36:15: 40:71:1b:c1:4c:47:2b:d5:7b:e0:0f:6a:a8:c0:81:7d:2e:e1: be:30:44:7c:fb:f6:99:24:59:8a:b9:4e:32:ad:dd:f8:31:fe: b5:a2:13:d9:85:2e:e7:24:e9:5b:9f:a5:8e:c3:81:f8:31:0e: 20:c3:e4:8e:bb:44:49:bd:e1:cb:ea:47:6a:47:a6:3c:9b:ac: 4e:89:cb:38:9a:0d:54:b9:f7:03:96:7f:52:a1:41:38:35:a6: 59:26:dd:5e:99:d3:e6:e0:d4:38:08:b0:84:24:10:f2:b6:27: b9:95:3e:34:cd:55:8b:b4:82:c5:13:c3:d2:a3:63:43:f3:d3: 76:c0:09:b4:6b:b9:be:f8:4f:33:0d:3d:1a:07:36:ae:19:9d: 36:b0:93:c6:c8:e3:4f:36:54:31:91:ec:4f:a1:25:bb:49:b7: c7:f4:5d:c5:f0:91:7e:94:2c:95:7d:41:72:73:49:b2:44:c0: df:40:1d:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDYyxr3PBvH0/A7u2b7gXP+5Lat8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ1RkJFRDI2NjExQzk5MjI2OTQxREJEOTExMzlDNTk0 QjM5OUY0NjAeFw0yNTEwMTkxNTM2MzJaFw0yNTEwMjMwMTE4MzJaMDMxMTAvBgNV BAMTKDg3NjBGNDk5M0RDRkM0NUU2MzRCNzg0QkJFNTY2MzVDNDVEQUQ4MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaRhFndNS1GMyY5H0Tu+kbTJk8 gCJibwc8lFg6H87s+TGiVi7NwuRjSF0bZPRhK6Kb5FjGfK2sTTcC4k678umJ8Ov+ uZKkE77ZLAhZEqM55YYDasc/tCqKDQ/VNfqyQjvrx38ghG+aTfSf2FMobjHpFyaC 0Ivna9qx7WEzmwUmruzmuJjujCeYojGOeNnDrD8C3Cm+pD2dI1ysHm4kAOvKmM+T qXiFNkd6IZCfkQWMSSSBy0kn5oUh/KTxsb0zTFuo4ajTsURja9xJ6W13YMy6Bv6O CzVbUqLPkbSSFBuzprKD5cwmGTv31R+POZmNjEBYIBFqgWc4zmzXcm66TNbHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh2D0mT3PxF5jS3hLvlZjXEXa2DgwHwYDVR0j BBgwFoAUHV++0mYRyZImlB29kROcWUs5n0YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YjllNmRhNC1kYzQ2LTQ3MGYtYjBlOS0xNmU2ZTU3ZDQ3OWEvMC8xRDVGQkVEMjY2 MTFDOTkyMjY5NDFEQkQ5MTEzOUM1OTRCMzk5RjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ1RkJFRDI2NjExQzk5MjI2OTQxREJEOTExMzlDNTk0QjM5 OUY0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGI5ZTZkYTQtZGM0Ni00NzBmLWIw ZTktMTZlNmU1N2Q0NzlhLzAvMUQ1RkJFRDI2NjExQzk5MjI2OTQxREJEOTExMzlD NTk0QjM5OUY0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFo5oXPf4KEsw/POJ4OXjIIm4a0gzk55hBX9 x15bcF4rZ7vFtdYNv/w9nQyQQZGLji8sEKDki67uqc4t4P2/umoAJno/Ljs2FUBx G8FMRyvVe+APaqjAgX0u4b4wRHz79pkkWYq5TjKt3fgx/rWiE9mFLuck6VufpY7D gfgxDiDD5I67REm94cvqR2pHpjybrE6JyziaDVS59wOWf1KhQTg1plkm3V6Z0+bg 1DgIsIQkEPK2J7mVPjTNVYu0gsUTw9KjY0Pz03bACbRrub74TzMNPRoHNq4ZnTaw k8bI4082VDGR7E+hJbtJt8f0XcXwkX6ULJV9QXJzSbJEwN9AHcA= -----END CERTIFICATE-----Generated at Mon Oct 20 12:36:15 2025 by rpki-client