$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft File: 1A43B9C67646D3B8444E277C64D1FD489A45E536.mft (raw, json) Hash identifier: NZv3f7umndrlKyc32bmPV47t52RggGUsLq7aonlYGHU= Subject key identifier: CE:1F:DF:92:D9:09:1C:E2:E2:0E:5A:AD:80:EF:E5:A3:AC:3B:E8:09 Authority key identifier: 1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 Certificate issuer: /CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Certificate serial: 0A8810B178537F3FC3DCEE5F8733DC596698EF41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft Manifest number: DD Signing time: Mon 20 Oct 2025 08:22:10 +0000 Manifest this update: Mon 20 Oct 2025 08:17:10 +0000 Manifest next update: Thu 23 Oct 2025 19:42:10 +0000 Files and hashes: 1: 3135372e36362e3132352e302f32342d3234203d3e20313532373732.roa (hash: kqVD+n1IKw72OvnfLlVYQv+xCjn3zAPXv/doYj+5xns=) 2: 1A43B9C67646D3B8444E277C64D1FD489A45E536.crl (hash: tVRrRryHYUQfj5PlxOsJfZVXUjHYMjzbuktA2+9n89M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:88:10:b1:78:53:7f:3f:c3:dc:ee:5f:87:33:dc:59:66:98:ef:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Validity Not Before: Oct 20 08:17:10 2025 GMT Not After : Oct 23 19:42:10 2025 GMT Subject: CN=CE1FDF92D9091CE2E20E5AAD80EFE5A3AC3BE809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e0:fa:3d:31:c0:c6:53:81:39:2b:9e:82:ed: 0b:cf:9e:d9:a7:55:96:09:5a:ca:75:e0:6f:ce:a4: 1e:80:21:46:27:5e:a2:ed:79:db:8f:5d:9b:24:fc: 2e:18:00:9d:6e:42:c9:8c:65:c3:61:a7:88:ff:cf: 41:3e:74:89:c4:68:5d:7c:50:dd:93:e7:49:5a:b9: 0c:76:38:bd:00:36:87:30:09:1b:69:b4:58:4a:cb: 58:86:7e:74:7b:76:26:5a:10:c3:24:dd:29:24:c8: b7:2e:a5:7c:ab:fa:9f:74:62:ff:e8:3e:58:ab:0d: b7:c4:11:75:20:e8:fd:16:31:c2:04:22:be:57:fc: 81:d9:e3:72:d0:95:b2:16:ec:ea:31:90:5c:d2:77: 87:ab:db:f6:b7:dd:0c:8d:82:54:ad:ed:0a:91:b2: 53:74:b3:bd:70:d8:d4:09:76:b6:82:be:fb:cb:44: 32:5a:34:f0:43:51:1d:46:69:44:b1:e1:69:69:09: c7:5d:e6:1f:c4:1f:bf:90:c3:c8:c2:2b:37:a4:92: 44:7b:0e:b5:ad:91:11:15:a9:c8:54:24:0a:f4:f8: 27:73:3a:3e:21:c9:58:1f:53:6f:ec:63:ed:cb:cb: 62:e7:4a:cc:98:3f:dc:63:ad:b6:d1:1a:2d:d0:6e: 7b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:1F:DF:92:D9:09:1C:E2:E2:0E:5A:AD:80:EF:E5:A3:AC:3B:E8:09 X509v3 Authority Key Identifier: keyid:1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:0f:c0:06:d5:92:ef:80:1f:97:72:37:58:ee:99:0e:63:c0: 3d:3f:d9:5d:63:6d:63:c4:a7:b7:45:10:41:81:02:11:b7:0b: 31:3e:9c:fc:57:d6:22:b4:4c:c1:83:3c:4d:f4:c0:16:85:04: 5f:b3:72:ce:84:78:b4:5e:b2:6d:74:54:ec:34:49:76:8e:9a: 79:bf:78:55:8e:32:cc:71:02:d5:ce:94:db:58:5d:26:ca:33: 3d:ba:c0:37:b8:06:27:d7:1a:e1:12:71:4d:3d:6a:ed:c9:8a: 7f:73:f6:20:92:ef:20:9f:ad:09:29:92:6f:ff:b4:5a:99:53: 59:dd:7c:86:8f:24:d4:02:eb:11:b6:c9:79:74:44:e6:08:eb: e6:a3:b2:27:37:35:17:a4:b8:d7:b5:45:26:d6:cb:f6:4d:52: aa:57:af:ef:3d:ef:d9:d0:e8:cc:68:64:8e:de:a4:3c:ce:eb: ab:d4:32:a1:e2:90:c4:28:60:58:a7:13:7d:f5:a3:a6:c0:15: 18:f3:bd:8d:72:a2:eb:48:5c:a7:24:70:4e:5c:24:d3:4f:38: 7e:57:fc:16:d6:73:34:95:b2:a5:78:d0:78:72:6c:8c:22:c2: 67:47:51:15:19:31:25:f1:d2:3c:20:b5:44:42:d9:3e:43:41: 75:e3:ab:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCogQsXhTfz/D3O5fhzPcWWaY70EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5 QTQ1RTUzNjAeFw0yNTEwMjAwODE3MTBaFw0yNTEwMjMxOTQyMTBaMDMxMTAvBgNV BAMTKENFMUZERjkyRDkwOTFDRTJFMjBFNUFBRDgwRUZFNUEzQUMzQkU4MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf4Po9McDGU4E5K56C7QvPntmn VZYJWsp14G/OpB6AIUYnXqLteduPXZsk/C4YAJ1uQsmMZcNhp4j/z0E+dInEaF18 UN2T50lauQx2OL0ANocwCRtptFhKy1iGfnR7diZaEMMk3SkkyLcupXyr+p90Yv/o PlirDbfEEXUg6P0WMcIEIr5X/IHZ43LQlbIW7OoxkFzSd4er2/a33QyNglSt7QqR slN0s71w2NQJdraCvvvLRDJaNPBDUR1GaUSx4WlpCcdd5h/EH7+Qw8jCKzekkkR7 DrWtkREVqchUJAr0+CdzOj4hyVgfU2/sY+3Ly2LnSsyYP9xjrbbRGi3QbntdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzh/fktkJHOLiDlqtgO/lo6w76AkwHwYDVR0j BBgwFoAUGkO5xnZG07hETid8ZNH9SJpF5TYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMC8xQTQzQjlDNjc2 NDZEM0I4NDQ0RTI3N0M2NEQxRkQ0ODlBNDVFNTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5QTQ1 RTUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzAvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZE NDg5QTQ1RTUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYPwAbVku+AH5dyN1jumQ5jwD0/2V1jbWPE p7dFEEGBAhG3CzE+nPxX1iK0TMGDPE30wBaFBF+zcs6EeLResm10VOw0SXaOmnm/ eFWOMsxxAtXOlNtYXSbKMz26wDe4BifXGuEScU09au3Jin9z9iCS7yCfrQkpkm// tFqZU1ndfIaPJNQC6xG2yXl0ROYI6+ajsic3NRekuNe1RSbWy/ZNUqpXr+8979nQ 6MxoZI7epDzO66vUMqHikMQoYFinE331o6bAFRjzvY1youtIXKckcE5cJNNPOH5X /BbWczSVsqV40HhybIwiwmdHURUZMSXx0jwgtURC2T5DQXXjq+4= -----END CERTIFICATE-----Generated at Mon Oct 20 13:56:05 2025 by rpki-client