$ rpki-client -vvf repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft File: 1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft (raw, json) Hash identifier: UKowLXKX5NcUxwZeLUamo/k1koCg/VNti533BTwetjI= Subject key identifier: 1C:48:8F:28:77:7E:E2:01:D1:E0:A1:86:94:B0:D1:E4:96:E9:02:AB Authority key identifier: 1F:CB:89:53:4D:D8:C2:C8:49:5A:1B:3F:1F:6D:B4:6B:58:D2:E1:3A Certificate issuer: /CN=1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A Certificate serial: 0F2811BA5AD76D17B244A2683E8B01366BB4D9F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft Manifest number: 91 Signing time: Tue 21 Oct 2025 01:02:03 +0000 Manifest this update: Tue 21 Oct 2025 00:57:03 +0000 Manifest next update: Fri 24 Oct 2025 08:40:03 +0000 Files and hashes: 1: 3135372e36362e3234362e302f32332d3234203d3e20313532373630.roa (hash: bni1MEXt2pu3EGFhrLDGw6PMS2Wp/uUSxRtLnqeKGlY=) 2: 1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.crl (hash: QMKCJsmfgQGPY6i9RgYCqazUWZp2gx39EVeX1ibWjio=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.crl rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:28:11:ba:5a:d7:6d:17:b2:44:a2:68:3e:8b:01:36:6b:b4:d9:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A Validity Not Before: Oct 21 00:57:03 2025 GMT Not After : Oct 24 08:40:03 2025 GMT Subject: CN=1C488F28777EE201D1E0A18694B0D1E496E902AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:88:2f:21:a2:4c:4b:4f:1f:90:47:f7:b5:74: 96:fb:5a:06:c5:fd:f9:0b:f8:90:4d:0d:7f:d0:47: 48:82:12:51:1a:5c:84:61:dd:e2:89:0c:ec:5b:85: 2c:af:c6:f4:fb:09:62:23:23:81:a6:8b:84:aa:a8: 5a:c4:38:bd:df:19:eb:db:7c:8d:26:2d:53:33:30: 65:43:31:8f:35:6f:38:2b:ec:de:8a:81:e9:a1:2a: 00:20:b7:b7:2a:f0:81:b9:1f:d0:f4:93:90:68:be: 02:61:a1:2a:be:41:20:38:13:9e:cc:11:61:bf:69: d4:f8:ba:37:55:5e:4f:71:0b:65:8e:8d:a0:25:4a: 51:68:d8:e9:f7:e7:aa:5d:dc:55:26:b1:16:b5:a3: 5a:46:84:d8:c4:df:ea:72:0d:a3:34:08:09:57:8c: 3a:8a:a2:fe:f4:31:5e:66:9e:e4:e1:08:6b:74:c8: 83:1a:81:89:3d:ed:03:72:47:e9:0d:36:17:cb:d7: a6:4a:fa:c0:2e:f2:77:59:81:0b:61:5a:bf:74:2d: b5:5f:e0:e2:63:7b:70:ae:df:af:7f:33:85:ec:33: fb:dc:68:37:55:bb:40:c1:a3:5b:6e:c1:73:c7:f2: e0:25:e1:da:9a:3e:f2:61:ad:93:11:5b:00:47:84: 78:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:48:8F:28:77:7E:E2:01:D1:E0:A1:86:94:B0:D1:E4:96:E9:02:AB X509v3 Authority Key Identifier: keyid:1F:CB:89:53:4D:D8:C2:C8:49:5A:1B:3F:1F:6D:B4:6B:58:D2:E1:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:7a:b9:2a:c5:bb:f8:1e:84:9b:a3:05:4d:bb:aa:cc:92:51: 73:99:48:6c:06:f1:ac:30:b3:8c:5e:88:96:eb:c9:89:30:61: c4:8c:ab:ec:98:03:64:71:1c:b5:e7:84:7f:c6:da:d9:34:5e: e1:71:75:ef:c0:66:d6:be:80:c4:b8:2f:9c:ed:ae:f1:2f:5b: 29:84:98:09:34:bf:c7:04:e5:27:17:bc:be:51:c4:a7:4a:d7: 30:f4:57:c9:9c:35:1e:79:f2:02:c1:fd:41:9f:68:af:09:db: 38:8d:3d:5a:5a:6a:e7:87:81:00:e2:fc:27:d1:b4:52:fa:c3: 92:1f:68:7e:25:a9:b9:89:42:3f:0a:ec:91:77:8a:26:fa:b3: 07:6f:2e:4e:74:d3:99:96:3a:9e:87:ea:67:54:53:23:43:3f: c9:6a:42:8d:d2:fe:1a:38:9b:76:69:85:ac:ff:7f:d5:0c:90: 9a:83:88:c9:70:f2:8e:79:a8:b0:d5:b4:44:01:08:26:ac:b3: 40:02:f6:4b:95:ce:82:ea:f3:49:45:ae:ad:ab:d1:e1:0e:f0: 56:b7:08:40:1d:da:b5:ba:f9:8b:96:80:57:b9:cb:54:81:82: 29:0b:28:cb:ac:2a:b9:4c:23:94:dc:cc:df:90:43:31:b0:5a: 66:c8:bf:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDygRulrXbReyRKJoPosBNmu02fMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDQjg5NTM0REQ4QzJDODQ5NUExQjNGMUY2REI0NkI1 OEQyRTEzQTAeFw0yNTEwMjEwMDU3MDNaFw0yNTEwMjQwODQwMDNaMDMxMTAvBgNV BAMTKDFDNDg4RjI4Nzc3RUUyMDFEMUUwQTE4Njk0QjBEMUU0OTZFOTAyQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOiC8hokxLTx+QR/e1dJb7WgbF /fkL+JBNDX/QR0iCElEaXIRh3eKJDOxbhSyvxvT7CWIjI4Gmi4SqqFrEOL3fGevb fI0mLVMzMGVDMY81bzgr7N6KgemhKgAgt7cq8IG5H9D0k5BovgJhoSq+QSA4E57M EWG/adT4ujdVXk9xC2WOjaAlSlFo2On356pd3FUmsRa1o1pGhNjE3+pyDaM0CAlX jDqKov70MV5mnuThCGt0yIMagYk97QNyR+kNNhfL16ZK+sAu8ndZgQthWr90LbVf 4OJje3Cu369/M4XsM/vcaDdVu0DBo1tuwXPH8uAl4dqaPvJhrZMRWwBHhHgNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHEiPKHd+4gHR4KGGlLDR5JbpAqswHwYDVR0j BBgwFoAUH8uJU03YwshJWhs/H220a1jS4TowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjcyZTUyNy03MjViLTQ5ZTMtODc0My1jNzUzZGQzMzc5ZTMvMC8xRkNCODk1MzRE RDhDMkM4NDk1QTFCM0YxRjZEQjQ2QjU4RDJFMTNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUZDQjg5NTM0REQ4QzJDODQ5NUExQjNGMUY2REI0NkI1OEQy RTEzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI3MmU1MjctNzI1Yi00OWUzLTg3 NDMtYzc1M2RkMzM3OWUzLzAvMUZDQjg5NTM0REQ4QzJDODQ5NUExQjNGMUY2REI0 NkI1OEQyRTEzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJp6uSrFu/gehJujBU27qsySUXOZSGwG8aww s4xeiJbryYkwYcSMq+yYA2RxHLXnhH/G2tk0XuFxde/AZta+gMS4L5ztrvEvWymE mAk0v8cE5ScXvL5RxKdK1zD0V8mcNR558gLB/UGfaK8J2ziNPVpaaueHgQDi/CfR tFL6w5IfaH4lqbmJQj8K7JF3iib6swdvLk5005mWOp6H6mdUUyNDP8lqQo3S/ho4 m3Zphaz/f9UMkJqDiMlw8o55qLDVtEQBCCass0AC9kuVzoLq80lFrq2r0eEO8Fa3 CEAd2rW6+YuWgFe5y1SBgikLKMusKrlMI5TczN+QQzGwWmbIv+A= -----END CERTIFICATE-----Generated at Tue Oct 21 04:49:57 2025 by rpki-client