$ rpki-client -vvf repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft File: 1DE04B1502D06C1C133ACE901223884FB36B2638.mft (raw, json) Hash identifier: I/MDFVGITzUm0i/97+2fOAjKVz6l6HX8Kf+YaU25zBg= Subject key identifier: D2:35:A5:15:06:B9:CA:68:73:38:98:8C:C4:10:DD:46:72:60:EC:AD Authority key identifier: 1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38 Certificate issuer: /CN=1DE04B1502D06C1C133ACE901223884FB36B2638 Certificate serial: 53D4515E485BC4B687730815AF88C11AF606EB25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft Manifest number: 021A Signing time: Sun 19 Oct 2025 05:41:10 +0000 Manifest this update: Sun 19 Oct 2025 05:36:10 +0000 Manifest next update: Wed 22 Oct 2025 13:10:10 +0000 Files and hashes: 1: 3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa (hash: Dbua1W+dq/k6Z9uQfXqPhRIcFQdPJ4Cp3vbD2GRN4CU=) 2: 1DE04B1502D06C1C133ACE901223884FB36B2638.crl (hash: jvyuMQN2EN1KN8Z47rhsnFtW4W3RrUeOsvo63NwekeM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:d4:51:5e:48:5b:c4:b6:87:73:08:15:af:88:c1:1a:f6:06:eb:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DE04B1502D06C1C133ACE901223884FB36B2638 Validity Not Before: Oct 19 05:36:10 2025 GMT Not After : Oct 22 13:10:10 2025 GMT Subject: CN=D235A51506B9CA687338988CC410DD467260ECAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:30:10:bc:7c:2e:15:3c:2c:cf:11:0a:bc:df: 05:4c:10:e1:cb:c3:11:d1:be:29:40:6d:ce:17:68: 71:98:05:2d:fc:74:15:97:ee:a4:a7:9a:02:d1:48: 20:19:6e:ed:c7:05:cf:f3:2d:f0:38:83:41:c9:92: 01:71:c1:15:71:9d:8d:44:98:ad:45:01:ff:a6:c8: 8a:57:d0:6a:d0:61:4f:05:ee:d3:78:16:66:72:f1: f6:a7:2f:d5:58:1a:27:e9:95:f2:ab:35:b4:10:f8: 63:a8:2a:43:4b:31:1e:33:36:3c:0c:d0:9f:e9:8e: c3:a4:64:03:d5:b3:d0:5f:54:a4:3a:53:08:d2:1e: d3:2a:da:ec:5e:5e:69:f6:db:3a:f4:0e:45:17:f7: 55:8d:f1:15:8b:10:ab:4c:9a:d8:cd:ec:c8:96:db: a6:d7:ec:fe:4d:f7:4e:99:1b:96:4c:a3:63:09:92: f7:19:c6:a1:3a:8e:2c:e3:bd:73:94:ed:30:9b:4b: b0:8d:d6:c7:77:96:6e:b9:75:9d:d1:41:60:6b:e3: 1b:84:a6:8a:a1:b0:c8:93:eb:08:ff:bc:84:4a:e1: 9c:c6:f8:27:cf:76:5a:d8:d5:1f:60:2d:67:41:ab: 38:29:42:4d:45:44:a0:da:be:d2:bd:68:33:17:be: e1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:35:A5:15:06:B9:CA:68:73:38:98:8C:C4:10:DD:46:72:60:EC:AD X509v3 Authority Key Identifier: keyid:1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c7:0b:4a:fd:20:8b:2c:43:25:32:fe:59:ce:22:33:21:0e: 81:61:d0:33:1e:f2:f4:d7:95:43:2e:14:2a:a7:46:92:ec:91: d5:1d:1c:59:56:2c:4a:b4:c0:24:ea:d7:5f:61:c2:f8:72:1a: 31:ef:71:60:df:1c:e3:f4:bf:a7:a2:59:ea:97:d9:6d:71:30: cd:11:20:27:47:6e:44:18:38:dd:af:8b:84:e3:b5:75:ac:b5: 88:68:e6:6c:7a:9d:0a:9a:3c:2c:d5:c0:dc:04:c4:b2:ae:69: ca:aa:58:02:fc:3f:05:f3:8e:2b:04:26:db:6c:f8:68:47:59: 77:ad:17:a2:80:3b:57:f9:82:70:3f:71:a2:60:8f:21:7c:b0: 24:70:2e:fd:ca:4f:60:73:97:21:df:af:65:b1:9d:93:a2:f0: 82:60:3b:ff:b3:75:68:b0:a6:98:fc:2f:97:7b:0a:30:9c:3e: 9b:93:88:bc:d0:3a:81:93:48:a0:95:74:a0:36:f0:12:b2:b3: ed:84:6f:05:ae:67:1e:14:ec:08:f1:a6:e6:f4:4f:0e:89:ad: b6:2a:54:22:7c:1b:77:84:a7:6c:a6:c6:61:0e:02:90:3b:6f: 91:fb:d8:51:6e:15:30:4a:6d:2e:b4:fa:ae:cc:11:aa:0f:d4: 33:4b:ae:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU9RRXkhbxLaHcwgVr4jBGvYG6yUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4NEZC MzZCMjYzODAeFw0yNTEwMTkwNTM2MTBaFw0yNTEwMjIxMzEwMTBaMDMxMTAvBgNV BAMTKEQyMzVBNTE1MDZCOUNBNjg3MzM4OTg4Q0M0MTBERDQ2NzI2MEVDQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbMBC8fC4VPCzPEQq83wVMEOHL wxHRvilAbc4XaHGYBS38dBWX7qSnmgLRSCAZbu3HBc/zLfA4g0HJkgFxwRVxnY1E mK1FAf+myIpX0GrQYU8F7tN4FmZy8fanL9VYGifplfKrNbQQ+GOoKkNLMR4zNjwM 0J/pjsOkZAPVs9BfVKQ6UwjSHtMq2uxeXmn22zr0DkUX91WN8RWLEKtMmtjN7MiW 26bX7P5N906ZG5ZMo2MJkvcZxqE6jizjvXOU7TCbS7CN1sd3lm65dZ3RQWBr4xuE poqhsMiT6wj/vIRK4ZzG+CfPdlrY1R9gLWdBqzgpQk1FRKDavtK9aDMXvuH1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0jWlFQa5ymhzOJiMxBDdRnJg7K0wHwYDVR0j BBgwFoAUHeBLFQLQbBwTOs6QEiOIT7NrJjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmZhYjYxMS04YmUzLTRiNDQtOTU2MS03NTJhMWVkYTA2NWMvMC8xREUwNEIxNTAy RDA2QzFDMTMzQUNFOTAxMjIzODg0RkIzNkIyNjM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4NEZCMzZC MjYzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJmYWI2MTEtOGJlMy00YjQ0LTk1 NjEtNzUyYTFlZGEwNjVjLzAvMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4 NEZCMzZCMjYzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7HC0r9IIssQyUy/lnOIjMhDoFh0DMe8vTX lUMuFCqnRpLskdUdHFlWLEq0wCTq119hwvhyGjHvcWDfHOP0v6eiWeqX2W1xMM0R ICdHbkQYON2vi4TjtXWstYho5mx6nQqaPCzVwNwExLKuacqqWAL8PwXzjisEJtts +GhHWXetF6KAO1f5gnA/caJgjyF8sCRwLv3KT2BzlyHfr2WxnZOi8IJgO/+zdWiw ppj8L5d7CjCcPpuTiLzQOoGTSKCVdKA28BKys+2EbwWuZx4U7Ajxpub0Tw6JrbYq VCJ8G3eEp2ymxmEOApA7b5H72FFuFTBKbS60+q7MEaoP1DNLrso= -----END CERTIFICATE-----Generated at Mon Oct 20 10:18:33 2025 by rpki-client