$ rpki-client -vvf repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft File: 1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft (raw, json) Hash identifier: Ak1Qec+X9kcAZASh/CPEoLxPZFpZE6UW4+vcKAJRxBQ= Subject key identifier: FB:96:60:A2:E2:C4:97:E0:2A:71:B2:EB:05:92:5E:22:E9:E6:DB:C0 Authority key identifier: 1B:D7:53:D8:CE:FF:B0:C4:CB:B1:9A:2E:15:76:5E:C3:23:33:A8:73 Certificate issuer: /CN=1BD753D8CEFFB0C4CBB19A2E15765EC32333A873 Certificate serial: 0341F46A41E5994F5F118DC8F8F6F0CA3A2FF56D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft Manifest number: 0277 Signing time: Sat 18 Oct 2025 11:02:01 +0000 Manifest this update: Sat 18 Oct 2025 10:57:01 +0000 Manifest next update: Tue 21 Oct 2025 17:50:01 +0000 Files and hashes: 1: 3130332e3137362e3138322e302f32332d3234203d3e20313437313332.roa (hash: 3b02tyVyXZeMs6y0uPPq0P29J4NxhIV9FAqBTSQpOwg=) 2: 1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl (hash: aHNxQEavqf0LqGo9XR6fiouk9gtSoNvY+xsNGoYJrsY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 17:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:41:f4:6a:41:e5:99:4f:5f:11:8d:c8:f8:f6:f0:ca:3a:2f:f5:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BD753D8CEFFB0C4CBB19A2E15765EC32333A873 Validity Not Before: Oct 18 10:57:01 2025 GMT Not After : Oct 21 17:50:01 2025 GMT Subject: CN=FB9660A2E2C497E02A71B2EB05925E22E9E6DBC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d4:37:54:b8:cc:28:97:b8:3b:e7:15:42:4f: a1:23:90:b6:3f:9d:46:72:31:2e:75:b8:8e:f8:7b: 05:62:05:12:15:e8:0d:6f:86:9c:07:47:93:c6:29: 93:4a:cd:1e:02:c9:7e:bf:c4:1b:58:73:f4:50:80: c6:7c:0a:ce:1a:6a:7e:2a:b5:e6:06:f2:d2:fb:8b: 60:a5:19:c7:a4:1e:be:8d:b0:5a:ee:e6:d8:a0:66: a9:dd:72:bb:39:24:78:c2:7a:1f:e6:87:b2:a9:95: b3:64:6c:79:78:1f:31:08:d7:d2:11:d8:73:4d:ed: 1a:67:0c:c5:6c:f9:30:58:63:00:f9:15:01:1e:86: 84:74:49:e0:04:f8:cf:62:cb:8b:8d:55:61:89:9f: f8:8a:1b:b5:eb:13:5e:67:51:3b:15:f0:93:30:25: 0f:f6:28:0c:e2:53:3e:c3:87:54:92:df:0d:8d:c8: 8b:22:58:4c:b2:2b:82:4f:19:13:20:76:e2:dc:61: 55:01:39:9e:e0:c6:15:ab:8c:bd:85:db:d4:b6:47: 8c:8b:86:ee:fe:a7:de:80:fa:9d:d6:57:c4:04:93: 56:3e:b7:43:6d:bf:bd:86:51:86:46:cb:a6:d1:aa: a5:30:3d:f2:09:a9:85:6d:03:49:07:c9:a8:18:76: 4e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:96:60:A2:E2:C4:97:E0:2A:71:B2:EB:05:92:5E:22:E9:E6:DB:C0 X509v3 Authority Key Identifier: keyid:1B:D7:53:D8:CE:FF:B0:C4:CB:B1:9A:2E:15:76:5E:C3:23:33:A8:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:b2:45:0e:c0:7d:f9:83:d8:61:11:3a:21:ab:5e:40:2d:43: ac:9b:4c:49:91:f3:31:08:a6:6a:4e:14:5b:25:af:b8:be:eb: 52:58:21:ab:06:c9:54:00:62:97:1a:80:7f:e8:d2:a4:29:ed: 84:76:96:d0:04:af:01:8b:77:81:5e:45:14:77:fc:68:11:03: 00:d7:a8:af:d3:a2:49:60:e3:40:4b:72:76:c7:29:72:f8:57: a3:67:bf:92:49:55:33:65:8d:41:17:93:b4:29:45:a2:7c:17: 8b:5d:e0:93:ad:18:97:6b:73:aa:00:2d:63:1e:50:36:2f:1a: ff:3b:fe:50:6e:67:aa:31:d1:2f:90:32:db:a6:fa:08:a2:9f: d4:9a:2d:2d:1f:f1:93:02:46:31:e0:1b:63:3b:60:5b:bd:92: f4:fe:8e:8c:fc:bf:5b:6e:0c:84:a8:d6:e8:ea:bf:18:03:e8: f7:a0:3a:e7:ba:d0:2d:4b:df:5f:c3:49:4e:95:c9:6d:15:c0: 4a:a2:f6:13:0b:de:16:d0:5d:1d:7d:cf:58:65:3d:57:02:37: 6d:04:f5:0d:57:c6:33:c7:26:8d:96:41:fc:57:95:e0:ba:cc: 35:59:bd:31:c1:58:c4:03:14:53:0d:b1:39:6f:b3:7a:b5:0e: 3d:cd:96:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA0H0akHlmU9fEY3I+Pbwyjov9W0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJENzUzRDhDRUZGQjBDNENCQjE5QTJFMTU3NjVFQzMy MzMzQTg3MzAeFw0yNTEwMTgxMDU3MDFaFw0yNTEwMjExNzUwMDFaMDMxMTAvBgNV BAMTKEZCOTY2MEEyRTJDNDk3RTAyQTcxQjJFQjA1OTI1RTIyRTlFNkRCQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk1DdUuMwol7g75xVCT6EjkLY/ nUZyMS51uI74ewViBRIV6A1vhpwHR5PGKZNKzR4CyX6/xBtYc/RQgMZ8Cs4aan4q teYG8tL7i2ClGcekHr6NsFru5tigZqndcrs5JHjCeh/mh7KplbNkbHl4HzEI19IR 2HNN7RpnDMVs+TBYYwD5FQEehoR0SeAE+M9iy4uNVWGJn/iKG7XrE15nUTsV8JMw JQ/2KAziUz7Dh1SS3w2NyIsiWEyyK4JPGRMgduLcYVUBOZ7gxhWrjL2F29S2R4yL hu7+p96A+p3WV8QEk1Y+t0Ntv72GUYZGy6bRqqUwPfIJqYVtA0kHyagYdk6LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+5ZgouLEl+AqcbLrBZJeIunm28AwHwYDVR0j BBgwFoAUG9dT2M7/sMTLsZouFXZewyMzqHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGU2ZmQ4MS1iODc3LTRmN2MtYWJjNi0wODJmY2JlYTE4OWYvMC8xQkQ3NTNEOENF RkZCMEM0Q0JCMTlBMkUxNTc2NUVDMzIzMzNBODczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJENzUzRDhDRUZGQjBDNENCQjE5QTJFMTU3NjVFQzMyMzMz QTg3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBlNmZkODEtYjg3Ny00ZjdjLWFi YzYtMDgyZmNiZWExODlmLzAvMUJENzUzRDhDRUZGQjBDNENCQjE5QTJFMTU3NjVF QzMyMzMzQTg3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCyRQ7AffmD2GEROiGrXkAtQ6ybTEmR8zEI pmpOFFslr7i+61JYIasGyVQAYpcagH/o0qQp7YR2ltAErwGLd4FeRRR3/GgRAwDX qK/Toklg40BLcnbHKXL4V6Nnv5JJVTNljUEXk7QpRaJ8F4td4JOtGJdrc6oALWMe UDYvGv87/lBuZ6ox0S+QMtum+giin9SaLS0f8ZMCRjHgG2M7YFu9kvT+joz8v1tu DISo1ujqvxgD6PegOue60C1L31/DSU6VyW0VwEqi9hML3hbQXR19z1hlPVcCN20E 9Q1XxjPHJo2WQfxXleC6zDVZvTHBWMQDFFMNsTlvs3q1Dj3Nlrw= -----END CERTIFICATE-----Generated at Mon Oct 20 18:06:30 2025 by rpki-client