$ rpki-client -vvf repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft File: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft (raw, json) Hash identifier: 0LGagJTT6TO5yDmhUP0GsWpikprkjBqlHhQEXVH4qXI= Subject key identifier: 63:16:B4:42:74:B3:DB:83:F0:62:BA:C6:E6:A8:3D:A4:08:A1:AE:04 Authority key identifier: 1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 Certificate issuer: /CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Certificate serial: 1A43A176ADCB179EA2268E67241286B5789B0CEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft Manifest number: 04E3 Signing time: Sat 18 Oct 2025 22:40:41 +0000 Manifest this update: Sat 18 Oct 2025 22:35:41 +0000 Manifest next update: Wed 22 Oct 2025 03:44:41 +0000 Files and hashes: 1: 3230322e36372e382e302f32312d3234203d3e203234313935.roa (hash: B+C/2EohdvfSLSdEWCv4uFVDG8om8Pw0dnsHmi+NJ9Y=) 2: 3131382e39312e3132382e302f32312d3234203d3e203234313935.roa (hash: yiPIGsDISayK97qWqm2UWsTxEHdxKETOsL8gSiwFMjA=) 3: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (hash: XlrHKxvILobzAM8qX1Td9F4llGO1s7dDnxuDShAIB6Q=) 4: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl (hash: 50hCcmiRRikGthuJUzvoC2jFwO1Ebvo8EtdJV3bO/y4=) 5: 323430313a343230303a3a2f33322d3438203d3e203234313935.roa (hash: xPjBnSpHmpcu0qAxiY2wE80xegcTsRNtPEAJ6PwASdw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 03:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:43:a1:76:ad:cb:17:9e:a2:26:8e:67:24:12:86:b5:78:9b:0c:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Validity Not Before: Oct 18 22:35:41 2025 GMT Not After : Oct 22 03:44:41 2025 GMT Subject: CN=6316B44274B3DB83F062BAC6E6A83DA408A1AE04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ff:aa:2a:6c:6f:8a:f5:4c:46:5e:6d:02:4d: 3e:37:fb:da:12:60:bd:1d:35:b6:95:87:f7:8c:ba: 88:a0:ca:24:48:f7:3d:d6:a8:4b:5c:cc:19:75:df: ca:3c:53:f0:f3:5a:12:0e:f6:15:2c:5a:d0:7b:dd: 90:0f:60:89:1e:53:40:31:a9:52:2d:c5:25:91:8c: 0a:87:48:0f:08:36:a6:02:57:ce:d8:45:ca:54:c8: 65:14:1b:ed:51:9f:d2:76:0a:82:af:0c:4d:fd:95: c8:49:12:ed:5d:fd:11:bc:0c:a0:ff:f4:d4:a7:fd: bc:ef:62:f6:eb:b7:6e:30:23:03:22:be:d3:b9:f8: 6c:19:11:37:9c:61:6b:48:a6:a5:b7:28:28:00:25: 0e:9e:a8:9d:04:37:76:34:4b:fe:90:dd:0a:5e:d4: bd:cf:bb:af:7a:66:70:f4:2a:3f:6c:0e:c6:4b:dd: 3d:c1:22:7f:81:79:8f:8c:ee:ac:a9:17:9c:d8:08: 66:d2:7b:68:18:1d:be:4b:ac:f3:41:83:27:f4:21: cc:2f:8d:5f:9a:8d:ff:9a:c4:80:22:b1:9d:e3:ef: 6f:53:c9:c9:88:77:ca:27:df:34:2c:1c:da:8a:a0: a9:c0:c3:0e:10:5b:c3:1e:69:9b:a5:52:80:a4:1b: 81:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:16:B4:42:74:B3:DB:83:F0:62:BA:C6:E6:A8:3D:A4:08:A1:AE:04 X509v3 Authority Key Identifier: keyid:1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:0b:05:b8:7c:e6:02:d6:c5:78:6b:f3:49:b8:16:f6:1e:7d: 54:78:de:e2:8d:96:cd:e8:69:f6:f9:08:97:1e:78:05:75:71: 96:9d:62:71:3c:51:8e:de:d5:b7:a3:1e:8f:85:05:a6:1b:fa: a4:c2:af:8f:0c:12:3e:81:4d:d6:4d:2d:47:a0:59:bb:0e:50: 14:9a:92:fe:60:9f:4e:05:98:57:83:a3:16:50:60:81:24:52: ee:c7:9b:12:3b:ef:d0:83:ab:5d:8a:4a:7e:54:6b:04:b4:c6: 21:ac:d2:a2:8f:73:68:72:6e:b8:d8:18:f2:aa:94:fd:56:02: f2:8e:3f:51:60:aa:2c:eb:17:ae:91:bb:ba:fa:b4:ef:ee:2e: 51:be:7f:30:ca:b7:39:7e:a4:8e:6e:e7:0c:74:d7:56:13:28: e5:fe:d5:32:b5:88:70:5a:86:5b:bc:b9:37:71:2a:a5:60:6e: 6c:94:46:b3:a3:8a:41:3a:d3:3a:1c:8e:ba:ab:da:64:0f:27: d4:66:af:1e:af:54:e1:94:bd:96:8f:d2:ee:16:93:52:00:9b: bf:a7:01:dd:61:48:ee:00:24:bd:eb:c0:c8:72:b3:c7:90:58: ea:74:f5:6a:b4:41:b0:b1:0d:c6:74:e5:8d:dd:fe:e1:2c:58: 32:48:91:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGkOhdq3LF56iJo5nJBKGtXibDO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUx QzdGRTk0NjAeFw0yNTEwMTgyMjM1NDFaFw0yNTEwMjIwMzQ0NDFaMDMxMTAvBgNV BAMTKDYzMTZCNDQyNzRCM0RCODNGMDYyQkFDNkU2QTgzREE0MDhBMUFFMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW/6oqbG+K9UxGXm0CTT43+9oS YL0dNbaVh/eMuoigyiRI9z3WqEtczBl138o8U/DzWhIO9hUsWtB73ZAPYIkeU0Ax qVItxSWRjAqHSA8INqYCV87YRcpUyGUUG+1Rn9J2CoKvDE39lchJEu1d/RG8DKD/ 9NSn/bzvYvbrt24wIwMivtO5+GwZETecYWtIpqW3KCgAJQ6eqJ0EN3Y0S/6Q3Qpe 1L3Pu696ZnD0Kj9sDsZL3T3BIn+BeY+M7qypF5zYCGbSe2gYHb5LrPNBgyf0Icwv jV+ajf+axIAisZ3j729TycmId8on3zQsHNqKoKnAww4QW8MeaZulUoCkG4GXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYxa0QnSz24PwYrrG5qg9pAihrgQwHwYDVR0j BBgwFoAUH81H+0vXKeIuT+785bYbThx/6UYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzkyYTRjZC1kYmFjLTQzYWMtODA2MC0yZThkNDJlYWU2NTUvMC8xRkNENDdGQjRC RDcyOUUyMkU0RkVFRkNFNUI2MUI0RTFDN0ZFOTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUxQzdG RTk0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc5MmE0Y2QtZGJhYy00M2FjLTgw NjAtMmU4ZDQyZWFlNjU1LzAvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFC NEUxQzdGRTk0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoLBbh85gLWxXhr80m4FvYefVR43uKNls3o afb5CJceeAV1cZadYnE8UY7e1bejHo+FBaYb+qTCr48MEj6BTdZNLUegWbsOUBSa kv5gn04FmFeDoxZQYIEkUu7HmxI779CDq12KSn5UawS0xiGs0qKPc2hybrjYGPKq lP1WAvKOP1FgqizrF66Ru7r6tO/uLlG+fzDKtzl+pI5u5wx011YTKOX+1TK1iHBa hlu8uTdxKqVgbmyURrOjikE60zocjrqr2mQPJ9Rmrx6vVOGUvZaP0u4Wk1IAm7+n Ad1hSO4AJL3rwMhys8eQWOp09Wq0QbCxDcZ05Y3d/uEsWDJIkZw= -----END CERTIFICATE-----Generated at Mon Oct 20 15:31:37 2025 by rpki-client