$ rpki-client -vvf repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft File: 1072AD17A8EDB1513AED95A258088F480ADA492B.mft (raw, json) Hash identifier: tNDoOvgvCn7TSQ3Rb5rxfROHxeaNmQEWIylzz+y93ho= Subject key identifier: 09:81:FD:D9:82:B6:AF:3F:BC:F2:8D:B6:F4:DF:17:8D:07:90:42:7B Authority key identifier: 10:72:AD:17:A8:ED:B1:51:3A:ED:95:A2:58:08:8F:48:0A:DA:49:2B Certificate issuer: /CN=1072AD17A8EDB1513AED95A258088F480ADA492B Certificate serial: 4EC35F1F54C3B8B224D1A36D6EF22E7045330B6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft Manifest number: 01B0 Signing time: Mon 20 Oct 2025 11:20:41 +0000 Manifest this update: Mon 20 Oct 2025 11:15:41 +0000 Manifest next update: Thu 23 Oct 2025 19:19:41 +0000 Files and hashes: 1: 3130332e3232302e3131342e302f32332d3234203d3e20313335343436.roa (hash: rmtw0G0gq68lr7jcdH8MQxUIP+1AwEpTMYMONzRXapE=) 2: 1072AD17A8EDB1513AED95A258088F480ADA492B.crl (hash: VpTu8N0u6G3xbjVbiW9VzfdNLFJUSdB46lpYuXtOOdI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.crl rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:c3:5f:1f:54:c3:b8:b2:24:d1:a3:6d:6e:f2:2e:70:45:33:0b:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1072AD17A8EDB1513AED95A258088F480ADA492B Validity Not Before: Oct 20 11:15:41 2025 GMT Not After : Oct 23 19:19:41 2025 GMT Subject: CN=0981FDD982B6AF3FBCF28DB6F4DF178D0790427B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:44:73:e7:ff:19:38:20:49:43:6d:3d:12:eb: a4:57:32:12:3c:54:c6:91:d3:af:8e:76:d6:61:c9: 67:90:85:ab:d9:dd:14:19:07:ec:ef:4c:67:f4:03: 3e:26:50:1f:0d:34:c7:68:b2:fd:af:c7:b1:d7:42: 50:44:ca:d3:46:3d:b7:dc:82:f7:d3:61:8f:13:18: 16:07:0f:f2:65:b2:4d:7f:2f:d2:59:e6:2a:2a:ea: 53:d8:8f:62:48:46:70:fa:bd:34:ff:fd:71:34:cb: 12:a9:93:d8:94:f5:d7:1c:1a:06:51:1b:40:fd:a4: 31:96:36:3f:97:87:64:89:d8:e5:02:97:a3:ce:59: 5a:fc:36:1e:df:7a:4f:ab:79:b4:e3:c5:b4:76:59: c9:e3:68:08:b7:4f:b3:a8:75:c6:e7:aa:0a:33:f0: 21:ac:69:d8:a9:01:55:79:06:c3:b0:2f:43:69:49: a8:b0:11:86:ff:30:55:a1:7c:7b:ad:d0:c9:10:b8: 67:75:0b:ff:e5:49:fd:8a:15:53:5e:b8:87:8c:06: a3:61:09:52:d2:b1:e4:1a:3c:40:04:28:d3:0c:63: aa:f6:69:a0:a1:eb:3a:87:ea:8c:a7:ac:f1:c7:95: 0d:7f:ff:ec:78:47:e6:54:11:40:b5:2c:0a:17:62: 91:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:81:FD:D9:82:B6:AF:3F:BC:F2:8D:B6:F4:DF:17:8D:07:90:42:7B X509v3 Authority Key Identifier: keyid:10:72:AD:17:A8:ED:B1:51:3A:ED:95:A2:58:08:8F:48:0A:DA:49:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:33:f8:5b:70:50:13:51:87:cd:60:d4:8e:90:10:00:cf:eb: 7a:22:56:76:60:0f:90:62:3f:88:32:24:e5:3c:a3:ea:0a:67: a4:de:4e:d3:d5:49:ba:84:9c:8b:f9:55:b6:1e:2b:f7:e7:e1: ee:dc:6f:93:f0:bc:29:3d:7f:3c:fe:53:5a:0f:aa:cd:31:c7: bb:3a:18:ab:67:19:f0:df:a1:d0:7e:9e:17:e1:1f:31:6b:ce: 81:d0:17:4c:be:72:ef:47:3c:2e:77:1c:41:d2:8d:82:54:50: 31:85:4e:51:23:84:6b:fb:92:88:40:5c:5f:d9:cf:7e:b1:7f: 33:74:e5:13:39:05:59:d4:da:c2:00:4c:8d:8e:e5:6a:7b:e8: 76:5d:79:14:8e:82:77:d4:2b:69:95:6c:2c:41:6e:68:5f:c9: a6:2c:6f:15:45:0f:2a:61:f7:ac:98:05:2c:a0:a2:fa:84:60: 3d:5e:15:14:ab:1e:38:3b:cb:55:72:82:a4:da:67:3b:1f:d9: 7a:48:ba:08:28:af:b8:d0:74:2b:d3:aa:f1:c0:43:28:2a:0b: f8:c4:0f:6b:09:78:71:95:b9:20:01:a6:c5:59:64:2d:ba:97: 53:4a:fd:f1:f4:36:4d:d0:79:08:9b:55:6c:51:f8:db:74:34: ca:3d:1a:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTsNfH1TDuLIk0aNtbvIucEUzC2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhGNDgw QURBNDkyQjAeFw0yNTEwMjAxMTE1NDFaFw0yNTEwMjMxOTE5NDFaMDMxMTAvBgNV BAMTKDA5ODFGREQ5ODJCNkFGM0ZCQ0YyOERCNkY0REYxNzhEMDc5MDQyN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDURHPn/xk4IElDbT0S66RXMhI8 VMaR06+OdtZhyWeQhavZ3RQZB+zvTGf0Az4mUB8NNMdosv2vx7HXQlBEytNGPbfc gvfTYY8TGBYHD/Jlsk1/L9JZ5ioq6lPYj2JIRnD6vTT//XE0yxKpk9iU9dccGgZR G0D9pDGWNj+Xh2SJ2OUCl6POWVr8Nh7fek+rebTjxbR2WcnjaAi3T7Oodcbnqgoz 8CGsadipAVV5BsOwL0NpSaiwEYb/MFWhfHut0MkQuGd1C//lSf2KFVNeuIeMBqNh CVLSseQaPEAEKNMMY6r2aaCh6zqH6oynrPHHlQ1//+x4R+ZUEUC1LAoXYpGJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCYH92YK2rz+88o229N8XjQeQQnswHwYDVR0j BBgwFoAUEHKtF6jtsVE67ZWiWAiPSAraSSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTRiOWQzMi0zYzVhLTQwZTItYjc4OC0wNjlkZTBjM2QyZGUvMC8xMDcyQUQxN0E4 RURCMTUxM0FFRDk1QTI1ODA4OEY0ODBBREE0OTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhGNDgwQURB NDkyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTU0YjlkMzItM2M1YS00MGUyLWI3 ODgtMDY5ZGUwYzNkMmRlLzAvMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhG NDgwQURBNDkyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4z+FtwUBNRh81g1I6QEADP63oiVnZgD5Bi P4gyJOU8o+oKZ6TeTtPVSbqEnIv5VbYeK/fn4e7cb5PwvCk9fzz+U1oPqs0xx7s6 GKtnGfDfodB+nhfhHzFrzoHQF0y+cu9HPC53HEHSjYJUUDGFTlEjhGv7kohAXF/Z z36xfzN05RM5BVnU2sIATI2O5Wp76HZdeRSOgnfUK2mVbCxBbmhfyaYsbxVFDyph 96yYBSygovqEYD1eFRSrHjg7y1VygqTaZzsf2XpIuggor7jQdCvTqvHAQygqC/jE D2sJeHGVuSABpsVZZC26l1NK/fH0Nk3QeQibVWxR+Nt0NMo9Gic= -----END CERTIFICATE-----Generated at Mon Oct 20 17:44:27 2025 by rpki-client