$ rpki-client -vvf repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft File: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft (raw, json) Hash identifier: uAgIp9Trnq3IU41ReCHP1Opd/H2zhs39okporutGh3c= Subject key identifier: 11:38:EC:82:FC:0A:98:54:1F:C0:ED:25:6A:98:AD:D9:11:B9:84:07 Authority key identifier: 1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 Certificate issuer: /CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Certificate serial: 7ED139639D6374CB9E78E8368F7C223DEA59839C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft Manifest number: A6 Signing time: Sun 19 Oct 2025 08:22:20 +0000 Manifest this update: Sun 19 Oct 2025 08:17:20 +0000 Manifest next update: Wed 22 Oct 2025 10:45:20 +0000 Files and hashes: 1: 323030313a6466343a353863303a3a2f34382d3438203d3e20313533313237.roa (hash: vwgSPrWbk7InW3RVvW95kOhCGfi4C/hudM8AnWKgHzQ=) 2: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl (hash: OY9fuPAa5WLUjPTCmtmPvQpHXFRrVTjyxMN8IJdLyB4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 10:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:d1:39:63:9d:63:74:cb:9e:78:e8:36:8f:7c:22:3d:ea:59:83:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Validity Not Before: Oct 19 08:17:20 2025 GMT Not After : Oct 22 10:45:20 2025 GMT Subject: CN=1138EC82FC0A98541FC0ED256A98ADD911B98407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:36:57:08:b5:35:79:ef:c8:5d:06:e4:3f:34: 2f:eb:f4:52:87:4e:f8:29:49:24:8e:96:fc:b1:33: c7:d5:a5:bf:1b:9e:1b:54:2f:cd:30:c5:b0:72:5e: 93:1a:43:01:af:f3:28:71:82:ee:51:14:db:09:a1: 58:16:0d:d1:06:e3:ef:dd:29:e6:92:c1:cd:10:a4: ca:97:3c:0a:98:5b:e4:e7:c9:68:74:70:57:fe:a4: f7:80:8f:3a:0e:34:cb:3b:1e:ad:40:04:95:66:f1: 19:e3:ef:74:1c:7f:9c:f4:1d:52:c0:91:ee:f3:cf: c9:d5:ac:9f:10:6d:9c:1f:8f:0d:b0:a9:89:38:d3: ac:a5:8a:3e:c5:03:19:af:61:5d:3b:fb:ac:1a:30: 66:19:6e:c9:c9:96:1a:41:82:be:74:d7:2d:63:7e: 95:96:75:1b:16:10:b8:ce:2f:1d:e1:bc:e8:73:09: 16:ec:e4:93:47:d2:43:be:a4:c3:8b:55:5c:91:68: f6:69:64:12:8a:6d:74:65:84:7b:1b:8b:65:68:18: 4f:15:7a:71:b7:34:e4:a4:5b:99:98:c3:f5:48:05: 32:32:94:4e:ed:53:a1:33:05:49:59:ab:ac:a6:c1: 15:3c:7b:25:29:da:fc:4a:a0:57:45:01:fa:b7:6e: 67:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:38:EC:82:FC:0A:98:54:1F:C0:ED:25:6A:98:AD:D9:11:B9:84:07 X509v3 Authority Key Identifier: keyid:1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:7e:52:b5:41:98:46:4c:6b:3a:9d:1e:1d:d2:a0:36:6e:ec: 26:92:80:2b:75:bf:06:3c:74:40:bc:ba:89:5f:6c:a4:0c:c7: e6:64:95:dc:e6:72:96:97:62:a6:a6:78:d3:cb:51:ac:2c:a3: 50:5e:cf:45:2d:83:5b:79:c3:6b:8f:20:f1:62:bd:dd:e7:8d: 6d:44:1a:fb:63:4e:c2:c9:7f:1a:92:33:8e:6b:b5:97:c3:c4: 56:1c:27:2b:07:c7:f8:e1:50:e8:a9:4c:12:6b:4d:09:22:24: b3:5f:dd:77:b1:ff:a3:85:ca:9e:e4:0f:19:04:28:7d:5d:04: f2:05:d9:4b:a9:2d:3f:81:2d:3b:65:0b:70:d8:dd:1f:53:c7: 53:ae:dd:a3:dd:14:b2:9c:e7:51:68:3b:f3:58:d9:ae:03:a3: 0f:64:51:da:93:f4:cb:cd:42:2c:a3:39:d2:d6:d1:06:52:2d: ac:84:64:5d:46:c6:d2:5b:5f:4b:4a:2d:a4:27:d0:4e:8c:b2: 32:9c:6b:83:2b:93:c0:cd:b0:f8:b2:41:79:82:24:e4:67:5d: 55:90:19:6b:14:39:eb:cc:93:db:c1:e5:c5:25:d9:64:f6:18: fe:f2:f1:15:76:fe:96:8c:55:8a:dc:fa:86:e5:0e:3a:ee:cb: c5:0b:77:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUftE5Y51jdMueeOg2j3wiPepZg5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVB NTE4M0RGMzAeFw0yNTEwMTkwODE3MjBaFw0yNTEwMjIxMDQ1MjBaMDMxMTAvBgNV BAMTKDExMzhFQzgyRkMwQTk4NTQxRkMwRUQyNTZBOThBREQ5MTFCOTg0MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaNlcItTV578hdBuQ/NC/r9FKH TvgpSSSOlvyxM8fVpb8bnhtUL80wxbByXpMaQwGv8yhxgu5RFNsJoVgWDdEG4+/d KeaSwc0QpMqXPAqYW+TnyWh0cFf+pPeAjzoONMs7Hq1ABJVm8Rnj73Qcf5z0HVLA ke7zz8nVrJ8QbZwfjw2wqYk406ylij7FAxmvYV07+6waMGYZbsnJlhpBgr501y1j fpWWdRsWELjOLx3hvOhzCRbs5JNH0kO+pMOLVVyRaPZpZBKKbXRlhHsbi2VoGE8V enG3NOSkW5mYw/VIBTIylE7tU6EzBUlZq6ymwRU8eyUp2vxKoFdFAfq3bmf/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUETjsgvwKmFQfwO0lapit2RG5hAcwHwYDVR0j BBgwFoAUH1FZGczAqQD/lxfht+8R9aUYPfMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWQ5N2I0MC1jMDMxLTRlNWItOWI0Mi1kMmFlMWM5Y2Y5ODcvMS8xRjUxNTkxOUND QzBBOTAwRkY5NzE3RTFCN0VGMTFGNUE1MTgzREYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVBNTE4 M0RGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzEvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjEx RjVBNTE4M0RGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKR+UrVBmEZMazqdHh3SoDZu7CaSgCt1vwY8 dEC8uolfbKQMx+ZkldzmcpaXYqameNPLUawso1Bez0Utg1t5w2uPIPFivd3njW1E GvtjTsLJfxqSM45rtZfDxFYcJysHx/jhUOipTBJrTQkiJLNf3Xex/6OFyp7kDxkE KH1dBPIF2UupLT+BLTtlC3DY3R9Tx1Ou3aPdFLKc51FoO/NY2a4Dow9kUdqT9MvN QiyjOdLW0QZSLayEZF1GxtJbX0tKLaQn0E6MsjKca4Mrk8DNsPiyQXmCJORnXVWQ GWsUOevMk9vB5cUl2WT2GP7y8RV2/paMVYrc+oblDjruy8ULd6M= -----END CERTIFICATE-----Generated at Mon Oct 20 19:01:30 2025 by rpki-client