$ rpki-client -vvf repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft File: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft (raw, json) Hash identifier: eC6b2InwlwaVtqN0Vfy0+Rep82AbdeXP500kXXmzICc= Subject key identifier: 9B:BC:74:C7:3F:9A:84:66:16:CC:91:C7:62:9F:46:54:94:F2:41:00 Authority key identifier: 1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE Certificate issuer: /CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Certificate serial: 6486AFC035FF08138DA3AAEBD3B1BF28492A29EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft Manifest number: 023B Signing time: Sun 19 Oct 2025 03:11:28 +0000 Manifest this update: Sun 19 Oct 2025 03:06:28 +0000 Manifest next update: Wed 22 Oct 2025 08:03:28 +0000 Files and hashes: 1: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl (hash: hPBa3jodDp9XFWmv2pOwaS8YhnjaIEve1c/R/isRM8I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 08:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:86:af:c0:35:ff:08:13:8d:a3:aa:eb:d3:b1:bf:28:49:2a:29:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Validity Not Before: Oct 19 03:06:28 2025 GMT Not After : Oct 22 08:03:28 2025 GMT Subject: CN=9BBC74C73F9A846616CC91C7629F465494F24100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:91:6e:a0:bc:33:a8:67:cd:77:3f:61:39:99: ed:25:80:2a:a9:24:45:42:17:2b:4a:96:87:cd:9f: 4e:50:1a:d5:29:17:5f:dc:72:10:d1:d0:8d:a9:11: d1:e2:1e:58:a0:28:45:e5:00:79:25:dc:42:fe:56: 93:c6:14:1d:69:eb:67:d1:4d:c9:0b:36:79:b8:de: 41:71:6c:46:47:a6:38:a8:62:c0:0f:2c:39:69:57: 52:5a:57:60:f0:89:da:20:66:10:47:cf:ae:4e:dc: ce:9f:3f:78:57:80:89:14:97:b8:30:f2:dd:7f:b2: af:1b:58:c5:c9:f5:de:b1:96:ff:09:25:f6:68:c7: 82:e5:b3:68:df:99:e5:04:43:9c:00:5e:c5:a5:86: 06:3f:25:5a:ac:a7:af:10:a1:82:60:26:c3:05:58: e4:b4:ea:51:67:41:2e:f2:eb:22:b0:39:70:fd:c0: 58:9d:1b:bb:31:bf:0f:3d:59:66:b0:87:5e:18:94: ba:b7:cc:26:73:9f:31:25:99:c2:00:26:cb:17:df: d2:ab:61:46:9c:66:3f:d9:a7:cd:ee:d9:98:73:19: a9:70:29:5f:cb:3d:5a:80:2a:1f:3d:e4:3c:79:1f: 9e:0d:fd:18:55:0b:9e:bc:bf:c2:c8:c1:e0:c0:97: e4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BC:74:C7:3F:9A:84:66:16:CC:91:C7:62:9F:46:54:94:F2:41:00 X509v3 Authority Key Identifier: keyid:1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:3e:dd:fe:da:43:28:8f:6b:47:b3:1a:79:58:ef:5e:d7:19: 88:ec:7e:68:ed:95:b7:96:c1:dc:f5:c2:14:1b:f8:0d:ab:03: 4f:94:e1:67:73:d2:f9:18:d4:65:26:c6:85:84:1f:e9:b8:3c: 97:e8:8a:eb:c6:ab:69:bc:93:75:59:c4:67:7a:2d:99:c1:d2: 21:f3:9b:b2:b4:90:b3:50:4b:4e:ef:c8:65:10:23:94:e4:c2: a4:39:8b:f2:72:ca:a9:58:c5:73:cc:67:70:c6:59:23:c1:9d: c9:e9:e3:46:4c:af:35:d1:ba:a3:64:c7:d5:26:9d:d0:c9:97: 63:69:8c:34:2b:3e:ad:9b:9d:a9:45:5e:98:8b:dd:28:01:b2: 74:79:06:90:09:ea:bf:13:07:0d:53:81:0e:6b:e5:80:05:39: ab:40:21:09:5c:41:d7:59:4b:49:8e:3d:a2:82:33:0f:bd:c0: e3:db:f7:b3:cb:10:d4:59:86:c1:e3:18:1e:90:55:f9:59:35: b2:e1:bc:0f:c3:65:dd:ea:d3:c2:6e:bb:05:a1:21:c5:e3:cd: 68:89:af:00:3d:40:6c:59:44:ff:3e:6b:ab:cd:72:f5:5b:7f: 36:4c:32:d9:20:52:57:c3:f2:ef:61:45:bf:6f:e3:61:ed:c0: 8a:e2:f0:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZIavwDX/CBONo6rr07G/KEkqKe4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgyRkNC N0U0NjBFRTAeFw0yNTEwMTkwMzA2MjhaFw0yNTEwMjIwODAzMjhaMDMxMTAvBgNV BAMTKDlCQkM3NEM3M0Y5QTg0NjYxNkNDOTFDNzYyOUY0NjU0OTRGMjQxMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkkW6gvDOoZ813P2E5me0lgCqp JEVCFytKlofNn05QGtUpF1/cchDR0I2pEdHiHligKEXlAHkl3EL+VpPGFB1p62fR TckLNnm43kFxbEZHpjioYsAPLDlpV1JaV2DwidogZhBHz65O3M6fP3hXgIkUl7gw 8t1/sq8bWMXJ9d6xlv8JJfZox4Lls2jfmeUEQ5wAXsWlhgY/JVqsp68QoYJgJsMF WOS06lFnQS7y6yKwOXD9wFidG7sxvw89WWawh14YlLq3zCZznzElmcIAJssX39Kr YUacZj/Zp83u2ZhzGalwKV/LPVqAKh895Dx5H54N/RhVC568v8LIweDAl+Q3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm7x0xz+ahGYWzJHHYp9GVJTyQQAwHwYDVR0j BBgwFoAUH9V9TEImlgzgK3puQtiC/LfkYO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTM0YmI0OC04YTY1LTQyOGItOTRmMS05OTVhZWQ3MmVjYjUvMC8xRkQ1N0Q0QzQy MjY5NjBDRTAyQjdBNkU0MkQ4ODJGQ0I3RTQ2MEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgyRkNCN0U0 NjBFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTEzNGJiNDgtOGE2NS00MjhiLTk0 ZjEtOTk1YWVkNzJlY2I1LzAvMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgy RkNCN0U0NjBFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAk+3f7aQyiPa0ezGnlY717XGYjsfmjtlbeW wdz1whQb+A2rA0+U4Wdz0vkY1GUmxoWEH+m4PJfoiuvGq2m8k3VZxGd6LZnB0iHz m7K0kLNQS07vyGUQI5TkwqQ5i/JyyqlYxXPMZ3DGWSPBncnp40ZMrzXRuqNkx9Um ndDJl2NpjDQrPq2bnalFXpiL3SgBsnR5BpAJ6r8TBw1TgQ5r5YAFOatAIQlcQddZ S0mOPaKCMw+9wOPb97PLENRZhsHjGB6QVflZNbLhvA/DZd3q08JuuwWhIcXjzWiJ rwA9QGxZRP8+a6vNcvVbfzZMMtkgUlfD8u9hRb9v42HtwIri8P8= -----END CERTIFICATE-----Generated at Mon Oct 20 12:32:38 2025 by rpki-client