$ rpki-client -vvf repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft File: 1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft (raw, json) Hash identifier: S3KBKS0RYxIJ9KGQB4Nw64s1jVEb1bL/pm8LrD4byGc= Subject key identifier: 6E:D7:2F:AD:B9:E1:BE:1C:95:31:01:95:1E:95:AA:82:88:43:50:D0 Authority key identifier: 1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33 Certificate issuer: /CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633 Certificate serial: 7A8A42269BB2583A045AB58B21C6D6C10BACBCBA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft Manifest number: 01F5 Signing time: Sun 19 Oct 2025 10:20:52 +0000 Manifest this update: Sun 19 Oct 2025 10:15:52 +0000 Manifest next update: Wed 22 Oct 2025 14:57:52 +0000 Files and hashes: 1: 3130332e32302e38382e302f32342d3234203d3e20313530313837.roa (hash: Ad9vTNOJwKofaap6S433q9PQ++RzqFFroze72orM9pE=) 2: 1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl (hash: E7rFTh38pNkIgJ1JegjMu37FQ+gk66a29voOpYp/xwc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 14:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:8a:42:26:9b:b2:58:3a:04:5a:b5:8b:21:c6:d6:c1:0b:ac:bc:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633 Validity Not Before: Oct 19 10:15:52 2025 GMT Not After : Oct 22 14:57:52 2025 GMT Subject: CN=6ED72FADB9E1BE1C953101951E95AA82884350D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f1:56:b5:7f:61:a8:7b:0d:ff:91:52:c6:03: e9:e0:83:16:83:79:e5:70:40:74:7d:bf:60:a1:ba: 35:90:07:16:7d:f4:a0:71:6d:c8:db:40:0a:db:f9: 8a:ee:ce:10:30:57:2d:e8:eb:b7:79:5e:43:9a:f6: b7:aa:b4:13:f9:f6:96:98:c8:be:43:a6:04:e4:8f: 20:ea:ff:45:71:57:17:8e:e0:2e:bb:4e:14:c9:8d: 8c:6f:98:bf:57:53:bc:25:fe:0f:42:88:64:87:b7: 55:6e:ae:7b:c9:6c:55:b8:01:ca:0f:2a:b9:25:24: 9f:b4:69:5b:5a:c9:c2:3e:1d:c2:cd:86:67:60:3e: 51:bf:67:8e:b7:50:8d:eb:c5:f1:d1:b4:7a:c3:c1: 0a:8b:f8:e8:68:69:be:f8:7c:44:2c:91:87:23:3e: ed:14:d1:d1:25:25:5a:75:f3:55:1b:f6:85:05:6d: c5:67:d2:7f:c8:ad:39:b6:43:fe:6f:5d:42:58:e7: 2c:aa:68:7a:a0:5f:a2:9d:76:44:96:52:31:74:ff: 5c:07:f6:d9:ba:c2:76:43:05:c4:0e:c4:26:4b:1a: 18:21:82:72:79:1d:aa:25:1c:2d:b3:a3:75:15:c4: db:9a:7e:d4:82:40:dd:83:52:eb:af:de:f8:47:56: 60:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D7:2F:AD:B9:E1:BE:1C:95:31:01:95:1E:95:AA:82:88:43:50:D0 X509v3 Authority Key Identifier: keyid:1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:1a:41:20:e3:74:c2:a7:5d:9b:23:69:2d:5e:8d:8a:f1:e4: 2e:23:0c:88:13:c7:e6:0d:12:03:5b:d5:1d:37:3b:c9:e4:1e: a8:85:11:1e:f8:b2:8c:d7:d9:87:19:fb:98:49:78:92:09:90: 89:84:6a:09:4b:96:fc:35:c4:94:b7:90:f5:4a:fc:e8:52:22: 36:2b:22:9a:1a:46:71:d0:64:6f:72:9f:38:e9:27:d2:bc:5d: 4a:fa:14:4e:22:27:42:bc:53:40:f2:65:6c:a2:80:c6:7d:68: f4:a2:d9:d5:02:7f:d4:03:86:df:9c:0d:f2:8e:26:a6:b3:06: fe:ca:fd:0d:db:f5:04:01:41:f8:e8:96:e5:11:84:81:90:83: df:06:e6:ca:93:db:38:ca:d8:da:83:0e:ec:58:08:ae:2b:da: 78:ca:31:9c:82:1f:bf:ef:9a:27:be:f5:0b:30:b5:58:3c:20: 8c:4d:62:5d:ad:90:95:b4:6a:90:b4:d4:37:4c:db:be:4c:7a: 1e:2a:c6:0f:c5:2a:5e:38:49:66:35:10:86:2c:c1:8f:19:88: 16:7d:d0:c7:2e:79:67:7a:dc:9e:90:61:f9:8b:83:0a:f3:e6: 86:be:bf:21:71:2a:60:ff:d5:e9:70:38:8e:8a:98:ba:a0:26: 86:f2:5e:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeopCJpuyWDoEWrWLIcbWwQusvLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIyMjY4 NDE2MTYzMzAeFw0yNTEwMTkxMDE1NTJaFw0yNTEwMjIxNDU3NTJaMDMxMTAvBgNV BAMTKDZFRDcyRkFEQjlFMUJFMUM5NTMxMDE5NTFFOTVBQTgyODg0MzUwRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq8Va1f2Goew3/kVLGA+nggxaD eeVwQHR9v2ChujWQBxZ99KBxbcjbQArb+YruzhAwVy3o67d5XkOa9reqtBP59paY yL5DpgTkjyDq/0VxVxeO4C67ThTJjYxvmL9XU7wl/g9CiGSHt1VurnvJbFW4AcoP KrklJJ+0aVtaycI+HcLNhmdgPlG/Z463UI3rxfHRtHrDwQqL+Ohoab74fEQskYcj Pu0U0dElJVp181Ub9oUFbcVn0n/IrTm2Q/5vXUJY5yyqaHqgX6KddkSWUjF0/1wH 9tm6wnZDBcQOxCZLGhghgnJ5HaolHC2zo3UVxNuaftSCQN2DUuuv3vhHVmCvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbtcvrbnhvhyVMQGVHpWqgohDUNAwHwYDVR0j BBgwFoAUGo1cXJXaG6tZOqcdDLayJoQWFjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmNjMWVmNi03NjlmLTRhYWYtOWQxNC0yZTViMTVhNmZmMjMvMC8xQThENUM1Qzk1 REExQkFCNTkzQUE3MUQwQ0I2QjIyNjg0MTYxNjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIyMjY4NDE2 MTYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZjYzFlZjYtNzY5Zi00YWFmLTlk MTQtMmU1YjE1YTZmZjIzLzAvMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIy MjY4NDE2MTYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwaQSDjdMKnXZsjaS1ejYrx5C4jDIgTx+YN EgNb1R03O8nkHqiFER74sozX2YcZ+5hJeJIJkImEaglLlvw1xJS3kPVK/OhSIjYr IpoaRnHQZG9ynzjpJ9K8XUr6FE4iJ0K8U0DyZWyigMZ9aPSi2dUCf9QDht+cDfKO JqazBv7K/Q3b9QQBQfjoluURhIGQg98G5sqT2zjK2NqDDuxYCK4r2njKMZyCH7/v mie+9QswtVg8IIxNYl2tkJW0apC01DdM275Meh4qxg/FKl44SWY1EIYswY8ZiBZ9 0McueWd63J6QYfmLgwrz5oa+vyFxKmD/1elwOI6KmLqgJobyXps= -----END CERTIFICATE-----Generated at Mon Oct 20 09:46:34 2025 by rpki-client