$ rpki-client -vvf repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft File: 1C427FBF1A649B90BD89B0EA83871003D9045925.mft (raw, json) Hash identifier: K7writFX3b4wXavQHAVztlMhEgZdi4CrnewBkUKa8n0= Subject key identifier: 0F:C8:9E:6C:6F:A6:C9:B1:E5:BA:CC:B8:DE:1D:70:90:DD:C5:4C:7B Authority key identifier: 1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25 Certificate issuer: /CN=1C427FBF1A649B90BD89B0EA83871003D9045925 Certificate serial: 0733C3D14F226543A79EE06B8A7F25A2BA3BC691 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft Manifest number: 024F Signing time: Sun 19 Oct 2025 20:31:44 +0000 Manifest this update: Sun 19 Oct 2025 20:26:44 +0000 Manifest next update: Thu 23 Oct 2025 00:11:44 +0000 Files and hashes: 1: 1C427FBF1A649B90BD89B0EA83871003D9045925.crl (hash: 1g2tnrCIJ7LMLaSDcEIKuNPfRX8+dS88dnLYcrmoe9w=) 2: 3130332e3138322e302e302f32332d3233203d3e2039333431.roa (hash: gNkqorvk0f2bBTsmEL4MnNlyYJ+Qr0d2hFD2R7VVU4Y=) 3: 3130332e3138322e302e302f32342d3234203d3e2039333431.roa (hash: 2wBOZUnxy6X5m3+lNkjmU4KdnF5wKP3vz0BnFhgKPHA=) 4: 3130332e3138322e312e302f32342d3234203d3e2039333431.roa (hash: /hsHlytGSIEPe0GxgSOfGs3J1HDdS9+raMR80Eb5wQY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 00:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:33:c3:d1:4f:22:65:43:a7:9e:e0:6b:8a:7f:25:a2:ba:3b:c6:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C427FBF1A649B90BD89B0EA83871003D9045925 Validity Not Before: Oct 19 20:26:44 2025 GMT Not After : Oct 23 00:11:44 2025 GMT Subject: CN=0FC89E6C6FA6C9B1E5BACCB8DE1D7090DDC54C7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c2:04:6d:f5:f9:a9:13:57:e2:f7:59:7e:6f: 66:99:f6:69:09:06:ae:67:db:66:85:11:40:11:11: 38:66:ae:47:13:aa:9d:90:a8:38:8b:aa:7d:88:19: 5e:25:0f:b8:40:0d:f6:b9:43:bc:c1:15:1a:1f:21: 5f:10:6d:ef:9f:e9:68:ed:3b:21:21:e3:2b:07:4d: 36:2d:b2:cf:99:d1:5d:eb:2e:17:da:ce:95:2f:63: ea:94:f3:40:4e:00:8f:89:aa:d4:6f:89:7c:03:48: a8:fb:f7:e0:65:ed:be:10:84:ee:ce:42:20:74:8b: bb:2c:3d:fd:f6:4f:18:c0:66:d7:f2:39:b7:76:c5: f2:65:9b:d8:6e:20:41:1f:24:20:f4:6e:76:f0:4e: 53:67:9e:9b:44:87:7e:55:ba:56:e2:6d:9d:0c:bb: 7f:f2:53:34:64:eb:80:b5:5e:0a:f8:0e:58:7d:bf: a5:4c:bb:e3:12:3e:48:57:a4:f6:38:b4:eb:7a:3c: 6e:81:c0:89:d8:12:d7:71:63:0e:1e:81:0b:42:73: b3:f5:0c:77:06:03:4e:2e:2e:06:f0:4e:af:a8:f1: 11:29:cd:bc:b6:54:28:97:1e:16:9f:61:34:20:91: 6b:4e:0e:5d:87:73:ee:50:6c:52:c6:0a:58:f7:80: 23:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C8:9E:6C:6F:A6:C9:B1:E5:BA:CC:B8:DE:1D:70:90:DD:C5:4C:7B X509v3 Authority Key Identifier: keyid:1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b5:ec:4f:80:d8:2c:be:ac:8e:a6:13:01:f1:70:fb:03:1f: 9d:1e:55:92:6f:af:5c:63:1a:51:b6:e2:af:07:ba:d4:b7:b5: 5d:a7:f9:28:55:dc:d6:d0:6d:28:c0:37:f3:fc:bc:0b:11:ec: a3:b4:cf:5a:9a:7a:4c:2f:09:80:ee:08:cf:4a:f5:3c:26:4a: 6c:51:3d:eb:7e:45:c3:d1:1d:f5:4f:e6:ed:02:62:81:32:9e: 51:50:50:db:68:c7:50:7f:bc:60:f1:1a:b1:9a:3f:fa:81:8a: 38:fd:4a:6e:b3:6c:6a:e5:21:71:1a:86:f3:b7:d4:63:7e:b3: e8:e5:c6:76:86:aa:fb:d6:de:05:75:ff:61:44:7d:79:b0:02: fa:e7:70:e9:99:43:62:e4:de:82:45:ea:ac:f3:4d:48:d2:1a: 42:ce:19:c5:0a:ba:e1:85:32:ff:43:e8:e2:7e:47:f8:7a:01: 3d:b8:5f:71:8b:2f:16:e8:31:89:93:c3:63:0d:af:ed:84:e1: 81:82:c4:24:cb:d9:7c:8a:c4:62:dc:51:61:85:f4:fb:9f:19: b9:8c:e3:cb:2b:e7:e1:f1:93:51:34:62:e2:80:72:6a:5b:8d: c8:0d:6d:59:c6:b5:72:d2:d2:62:7c:ea:76:a9:de:62:ca:b8: e1:40:3f:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBzPD0U8iZUOnnuBrin8loro7xpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNE OTA0NTkyNTAeFw0yNTEwMTkyMDI2NDRaFw0yNTEwMjMwMDExNDRaMDMxMTAvBgNV BAMTKDBGQzg5RTZDNkZBNkM5QjFFNUJBQ0NCOERFMUQ3MDkwRERDNTRDN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLwgRt9fmpE1fi91l+b2aZ9mkJ Bq5n22aFEUAREThmrkcTqp2QqDiLqn2IGV4lD7hADfa5Q7zBFRofIV8Qbe+f6Wjt OyEh4ysHTTYtss+Z0V3rLhfazpUvY+qU80BOAI+JqtRviXwDSKj79+Bl7b4QhO7O QiB0i7ssPf32TxjAZtfyObd2xfJlm9huIEEfJCD0bnbwTlNnnptEh35VulbibZ0M u3/yUzRk64C1Xgr4Dlh9v6VMu+MSPkhXpPY4tOt6PG6BwInYEtdxYw4egQtCc7P1 DHcGA04uLgbwTq+o8REpzby2VCiXHhafYTQgkWtODl2Hc+5QbFLGClj3gCO3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD8iebG+mybHlusy43h1wkN3FTHswHwYDVR0j BBgwFoAUHEJ/vxpkm5C9ibDqg4cQA9kEWSUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmZhM2I2NC0zYzYxLTQ4ZDUtYWIwYy1kNjNiNDgyNGQwMGUvMC8xQzQyN0ZCRjFB NjQ5QjkwQkQ4OUIwRUE4Mzg3MTAwM0Q5MDQ1OTI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNEOTA0 NTkyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZmYTNiNjQtM2M2MS00OGQ1LWFi MGMtZDYzYjQ4MjRkMDBlLzAvMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEw MDNEOTA0NTkyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEm17E+A2Cy+rI6mEwHxcPsDH50eVZJvr1xj GlG24q8HutS3tV2n+ShV3NbQbSjAN/P8vAsR7KO0z1qaekwvCYDuCM9K9TwmSmxR Pet+RcPRHfVP5u0CYoEynlFQUNtox1B/vGDxGrGaP/qBijj9Sm6zbGrlIXEahvO3 1GN+s+jlxnaGqvvW3gV1/2FEfXmwAvrncOmZQ2Lk3oJF6qzzTUjSGkLOGcUKuuGF Mv9D6OJ+R/h6AT24X3GLLxboMYmTw2MNr+2E4YGCxCTL2XyKxGLcUWGF9PufGbmM 48sr5+Hxk1E0YuKAcmpbjcgNbVnGtXLS0mJ86nap3mLKuOFAPzA= -----END CERTIFICATE-----Generated at Mon Oct 20 22:41:33 2025 by rpki-client