$ rpki-client -vvf repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft File: 0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft (raw, json) Hash identifier: VTT1jR7VvtHKRXB5nzKqt5YvNLTbFlt6HIGfztSaYWk= Subject key identifier: 39:8A:32:DD:8A:87:28:DF:85:8C:FB:70:C9:A0:6B:50:3C:34:B7:E1 Authority key identifier: 0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD Certificate issuer: /CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD Certificate serial: 2C89634DEEE6C173F7568A4E1E26CE65D0B9093C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft Manifest number: B6 Signing time: Mon 20 Oct 2025 16:11:07 +0000 Manifest this update: Mon 20 Oct 2025 16:06:07 +0000 Manifest next update: Thu 23 Oct 2025 22:16:07 +0000 Files and hashes: 1: 3135372e32302e39382e302f32332d3234203d3e20313532343335.roa (hash: ksjiqtTAWCgIRtUjPZtNzrKoQay+iOF9ttjO6dpoPs4=) 2: 0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl (hash: ozBoiSaQYfCfFpUsf1gPj7QkAh1j/G4uxdlrlcKyJ14=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:89:63:4d:ee:e6:c1:73:f7:56:8a:4e:1e:26:ce:65:d0:b9:09:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD Validity Not Before: Oct 20 16:06:07 2025 GMT Not After : Oct 23 22:16:07 2025 GMT Subject: CN=398A32DD8A8728DF858CFB70C9A06B503C34B7E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ae:3d:08:50:6f:ff:c0:81:7f:17:7f:d3:cc: 23:2c:9d:5a:7d:69:ad:52:80:b2:19:ba:3c:02:e9: 5d:14:b4:56:57:8e:39:a9:fe:29:c6:e9:3f:20:20: 3a:6c:c0:59:c1:14:b3:d1:fc:55:c1:d9:9f:81:e3: 87:1d:c0:0e:87:2b:2e:86:a8:f8:e4:8e:43:bd:3b: 97:47:1f:77:22:c4:e4:35:5f:2b:e6:f0:f0:dd:29: 7d:0c:92:5e:98:eb:66:b4:be:b5:45:af:3a:47:e6: af:62:ae:28:bc:be:27:c0:f8:d3:a7:91:f0:c5:de: 2a:2c:7a:ed:a1:db:9a:b3:d8:95:92:1b:b9:b8:33: ad:7e:0a:c8:ed:62:f4:81:ab:1c:d9:fa:64:9f:55: 47:0e:fa:f2:69:3f:fd:f0:05:ad:24:83:1c:9a:40: 9d:77:c7:d4:55:1e:ad:de:62:e2:c4:78:cb:84:15: 16:a5:0e:9f:33:da:e0:ee:1a:66:38:d5:77:79:a8: 18:4d:2a:00:cb:ff:50:e4:33:04:07:05:6c:83:91: d8:00:41:6e:f8:67:64:f6:22:b6:b5:95:8f:ad:9b: 74:08:4b:a6:53:5e:df:56:db:da:98:04:88:a4:1f: 28:ba:a3:74:d2:af:70:23:7f:9a:0c:3c:13:3d:67: 01:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8A:32:DD:8A:87:28:DF:85:8C:FB:70:C9:A0:6B:50:3C:34:B7:E1 X509v3 Authority Key Identifier: keyid:0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ad:70:77:29:00:e5:dd:e4:3a:59:cf:32:51:ae:5e:a4:59: cf:30:9f:7c:86:b5:38:df:30:03:95:5a:d5:15:e3:33:e9:b2: 33:ee:2a:5f:a8:b2:83:7b:15:12:9e:2d:94:a4:9c:f4:99:93: 5f:c7:bb:92:41:2f:eb:a4:7e:99:e0:83:73:bc:19:2a:eb:92: 8e:8a:e9:b5:b5:10:ab:fb:ca:7a:d2:b8:30:ad:ea:06:97:cb: 68:f1:02:22:d1:d8:eb:69:c3:f1:1d:17:74:42:01:44:1a:5d: 4c:aa:8f:cd:d0:f8:c1:f4:f2:b7:47:d6:c0:77:ca:43:5e:9e: ec:9a:5d:c6:04:f2:7a:ca:61:69:9c:27:30:e7:c4:1e:d5:f2: 1e:09:54:7f:86:2a:f4:25:50:f0:84:37:8d:76:9b:b4:0e:88: a1:25:e9:80:1e:99:d2:01:28:f4:2a:3c:00:71:67:e2:49:76: 8a:26:50:da:cf:51:83:ae:80:cb:cf:4a:9b:e8:96:dd:ce:73: 73:ca:7d:92:a3:ed:14:ca:db:4a:6e:88:0c:80:4c:2b:61:a6: 8f:e3:cd:57:5a:69:b4:c5:20:d9:9e:78:30:1b:1c:60:b2:e7: 4c:9f:0c:42:28:78:dc:5a:f5:70:34:c1:d8:66:1e:c1:e6:5c: 0d:69:9d:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULIljTe7mwXP3VopOHibOZdC5CTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1QzA4 M0ZCN0RDRDAeFw0yNTEwMjAxNjA2MDdaFw0yNTEwMjMyMjE2MDdaMDMxMTAvBgNV BAMTKDM5OEEzMkREOEE4NzI4REY4NThDRkI3MEM5QTA2QjUwM0MzNEI3RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/rj0IUG//wIF/F3/TzCMsnVp9 aa1SgLIZujwC6V0UtFZXjjmp/inG6T8gIDpswFnBFLPR/FXB2Z+B44cdwA6HKy6G qPjkjkO9O5dHH3cixOQ1Xyvm8PDdKX0Mkl6Y62a0vrVFrzpH5q9irii8vifA+NOn kfDF3ioseu2h25qz2JWSG7m4M61+CsjtYvSBqxzZ+mSfVUcO+vJpP/3wBa0kgxya QJ13x9RVHq3eYuLEeMuEFRalDp8z2uDuGmY41Xd5qBhNKgDL/1DkMwQHBWyDkdgA QW74Z2T2Ira1lY+tm3QIS6ZTXt9W29qYBIikHyi6o3TSr3Ajf5oMPBM9ZwE/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOYoy3YqHKN+FjPtwyaBrUDw0t+EwHwYDVR0j BBgwFoAUDB++gPIesmaGl4s+dpSFwIP7fc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzQ2YzBlMi04MTk0LTQwMjQtYmNiMy1kMDI5NTZjZTNhOTkvMC8wQzFGQkU4MEYy MUVCMjY2ODY5NzhCM0U3Njk0ODVDMDgzRkI3RENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1QzA4M0ZC N0RDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM0NmMwZTItODE5NC00MDI0LWJj YjMtZDAyOTU2Y2UzYTk5LzAvMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1 QzA4M0ZCN0RDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2tcHcpAOXd5DpZzzJRrl6kWc8wn3yGtTjf MAOVWtUV4zPpsjPuKl+osoN7FRKeLZSknPSZk1/Hu5JBL+ukfpngg3O8GSrrko6K 6bW1EKv7ynrSuDCt6gaXy2jxAiLR2Otpw/EdF3RCAUQaXUyqj83Q+MH08rdH1sB3 ykNenuyaXcYE8nrKYWmcJzDnxB7V8h4JVH+GKvQlUPCEN412m7QOiKEl6YAemdIB KPQqPABxZ+JJdoomUNrPUYOugMvPSpvolt3Oc3PKfZKj7RTK20puiAyATCthpo/j zVdaabTFINmeeDAbHGCy50yfDEIoeNxa9XA0wdhmHsHmXA1pndA= -----END CERTIFICATE-----Generated at Tue Oct 21 02:34:28 2025 by rpki-client