$ rpki-client -vvf repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft File: 1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft (raw, json) Hash identifier: 15w0ihnaAOjdNIO+3oztoo3GKSZBgeIst83TO7s8RIU= Subject key identifier: C5:73:B9:D0:5D:5D:1F:57:C0:85:28:F3:A4:F6:13:FF:03:8C:4B:FB Authority key identifier: 1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8 Certificate issuer: /CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8 Certificate serial: 4B012A1CF734BBDD03376200CE61CF3EE6BE4BF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft Manifest number: E7 Signing time: Sat 18 Oct 2025 23:20:04 +0000 Manifest this update: Sat 18 Oct 2025 23:15:04 +0000 Manifest next update: Wed 22 Oct 2025 02:24:04 +0000 Files and hashes: 1: 1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl (hash: SON1903V3OZQcjNB2rRKbFCL3LDfjK5mVgE7xxQUuxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 02:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:01:2a:1c:f7:34:bb:dd:03:37:62:00:ce:61:cf:3e:e6:be:4b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8 Validity Not Before: Oct 18 23:15:04 2025 GMT Not After : Oct 22 02:24:04 2025 GMT Subject: CN=C573B9D05D5D1F57C08528F3A4F613FF038C4BFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:19:1a:6a:18:97:0e:29:c6:d7:94:58:bf:21: 52:fd:f7:ce:c8:a4:2c:4e:c5:6f:79:ef:22:c2:ca: cf:10:fb:54:c9:ad:92:6b:f7:36:9e:3e:aa:6b:22: d8:ab:10:70:5b:80:37:48:7d:3e:52:ec:87:7f:98: f1:1c:a4:31:ea:2a:df:62:2e:ae:9e:18:0b:d2:6b: ef:e5:67:2c:b2:32:d8:d7:45:7f:03:69:0e:6d:26: 47:68:e8:9f:18:42:b7:8f:ec:63:7e:cd:ac:0f:d5: 6e:cd:a9:af:09:90:24:85:ae:72:09:a4:8a:f8:ef: b2:e3:0b:57:f2:37:b2:08:60:d1:a2:fa:88:87:73: 89:43:69:9f:39:bc:a4:63:9d:23:d8:43:33:88:93: b9:c6:b2:26:b9:a7:ef:5e:f0:2c:e6:eb:26:ab:af: c4:72:69:4e:1d:74:b9:a7:94:4c:06:1a:fb:03:71: b7:ff:06:e0:5e:43:50:2a:99:e2:ed:2b:6f:a4:63: 9f:1a:dc:1f:1c:cb:c0:d1:d2:d7:6b:2c:1c:b4:5c: af:d4:99:b6:e6:88:a5:06:6e:91:8f:7f:43:92:c8: fd:27:38:a2:d9:65:1c:9d:bc:e8:1b:d6:53:ad:52: 4d:6c:fd:95:49:5b:a0:50:1a:9d:79:60:3e:db:a5: b8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:73:B9:D0:5D:5D:1F:57:C0:85:28:F3:A4:F6:13:FF:03:8C:4B:FB X509v3 Authority Key Identifier: keyid:1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:20:c4:c7:03:26:40:76:9e:0c:d3:ca:08:0b:64:63:56:ed: e0:5a:d9:cf:29:47:09:5b:6d:a4:11:32:d9:d4:5a:12:56:8a: 17:d2:13:bf:6e:cc:20:81:d1:3d:47:6a:f4:45:4c:3d:55:73: 8d:80:d3:e0:45:91:37:1a:42:a7:78:f1:2b:fe:25:e9:a9:af: ff:0d:c8:07:b0:80:f6:a1:81:30:d8:1e:b5:ff:8a:85:11:ca: e5:ad:93:62:b8:d3:cd:eb:cc:f4:b6:c1:16:47:ce:e0:cb:6d: b6:13:56:56:03:9c:cd:de:8e:d4:5e:aa:f4:06:4d:bb:33:60: b7:69:1a:db:a0:c5:e1:cb:76:5f:7c:b3:30:27:c5:b3:89:09: e6:20:51:62:82:44:65:69:33:70:47:b5:58:e2:0a:fc:d8:34: df:8d:4d:af:40:4b:29:fa:1d:37:46:c8:cf:9f:da:44:3a:36: 97:b3:a4:7c:21:07:43:e9:7d:55:e0:67:b3:7c:45:34:08:71: f5:25:d6:c1:e3:84:ef:af:12:5e:d4:bd:4e:f6:1d:81:28:2d: b3:05:2c:bf:7d:75:46:2d:c7:7e:6a:8e:c9:64:34:46:81:51: f1:f4:4b:15:e1:98:55:dd:86:f4:38:ae:34:d3:aa:77:3a:10: e4:31:8e:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSwEqHPc0u90DN2IAzmHPPua+S/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBEQjEx MzY5N0FEODAeFw0yNTEwMTgyMzE1MDRaFw0yNTEwMjIwMjI0MDRaMDMxMTAvBgNV BAMTKEM1NzNCOUQwNUQ1RDFGNTdDMDg1MjhGM0E0RjYxM0ZGMDM4QzRCRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/GRpqGJcOKcbXlFi/IVL9987I pCxOxW957yLCys8Q+1TJrZJr9zaePqprItirEHBbgDdIfT5S7Id/mPEcpDHqKt9i Lq6eGAvSa+/lZyyyMtjXRX8DaQ5tJkdo6J8YQreP7GN+zawP1W7Nqa8JkCSFrnIJ pIr477LjC1fyN7IIYNGi+oiHc4lDaZ85vKRjnSPYQzOIk7nGsia5p+9e8Czm6yar r8RyaU4ddLmnlEwGGvsDcbf/BuBeQ1AqmeLtK2+kY58a3B8cy8DR0tdrLBy0XK/U mbbmiKUGbpGPf0OSyP0nOKLZZRydvOgb1lOtUk1s/ZVJW6BQGp15YD7bpbipAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxXO50F1dH1fAhSjzpPYT/wOMS/swHwYDVR0j BBgwFoAUGkzlRpqdq9J3x/GmwuANsRNpetgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDM3YjYzYy1lNDk4LTRlNDctYjk3ZS02N2FiYTQ1ODc4MWMvMC8xQTRDRTU0NjlB OURBQkQyNzdDN0YxQTZDMkUwMERCMTEzNjk3QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBEQjExMzY5 N0FEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAzN2I2M2MtZTQ5OC00ZTQ3LWI5 N2UtNjdhYmE0NTg3ODFjLzAvMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBE QjExMzY5N0FEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALggxMcDJkB2ngzTyggLZGNW7eBa2c8pRwlb baQRMtnUWhJWihfSE79uzCCB0T1HavRFTD1Vc42A0+BFkTcaQqd48Sv+Jempr/8N yAewgPahgTDYHrX/ioURyuWtk2K4083rzPS2wRZHzuDLbbYTVlYDnM3ejtReqvQG TbszYLdpGtugxeHLdl98szAnxbOJCeYgUWKCRGVpM3BHtVjiCvzYNN+NTa9ASyn6 HTdGyM+f2kQ6NpezpHwhB0PpfVXgZ7N8RTQIcfUl1sHjhO+vEl7UvU72HYEoLbMF LL99dUYtx35qjslkNEaBUfH0SxXhmFXdhvQ4rjTTqnc6EOQxjiw= -----END CERTIFICATE-----Generated at Mon Oct 20 12:55:55 2025 by rpki-client