$ rpki-client -vvf repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft File: C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft (raw, json) Hash identifier: GJDYtI2Y0S+bQeBsuOonCw+XvypM/fOHFS+zqPYUD0A= Subject key identifier: 5A:52:22:5F:68:E4:28:F2:B3:4E:3A:23:00:93:27:B4:C0:F1:AC:98 Authority key identifier: C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 Certificate issuer: /CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Certificate serial: 23796DDC7ED955891E2C039AB5455F6B3630F53D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject info access: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft Manifest number: E1 Signing time: Sun 19 Oct 2025 21:31:24 +0000 Manifest this update: Sun 19 Oct 2025 21:26:24 +0000 Manifest next update: Thu 23 Oct 2025 08:59:24 +0000 Files and hashes: 1: C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl (hash: PEAic3EYM0ecSq6NgZjtt8iKBgfOqogvKuQrK6kXbI4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 08:59:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:79:6d:dc:7e:d9:55:89:1e:2c:03:9a:b5:45:5f:6b:36:30:f5:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Validity Not Before: Oct 19 21:26:24 2025 GMT Not After : Oct 23 08:59:24 2025 GMT Subject: CN=5A52225F68E428F2B34E3A23009327B4C0F1AC98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d8:38:3e:db:17:96:d1:2f:63:47:30:aa:37: 23:01:b6:0b:1e:d3:c1:25:71:66:6f:dc:4a:d1:4f: 7e:50:f2:4a:e1:28:f2:07:03:65:e6:8b:59:09:18: 5a:90:09:69:7b:c2:8b:3f:78:eb:69:29:d0:e5:6e: 87:0f:83:7a:5a:c7:57:b8:22:c9:50:f8:2d:5d:18: 98:1f:31:af:14:61:11:07:ad:9b:63:d0:66:54:a8: af:5a:61:d2:2c:25:35:8a:0b:16:c6:c0:dd:b0:6e: c3:6e:12:4d:7a:8c:12:6d:a4:df:a1:bc:49:b8:df: a0:5e:21:20:28:ab:83:c8:0f:40:47:53:0e:88:a1: 04:53:90:32:00:b3:5b:63:da:1e:eb:5a:8e:50:58: 0e:c1:f4:af:35:86:db:aa:f4:08:0a:be:e5:9e:bd: ad:de:b1:19:38:34:6c:59:5b:d9:cd:58:82:8a:f6: 2b:3a:c6:2a:08:2b:d4:c3:bc:42:42:dd:22:ce:e3: de:c0:76:ad:cd:fa:45:95:38:29:d7:94:a3:28:ae: bf:26:ce:ab:ee:3d:d8:7e:21:1c:5e:ad:6c:da:c2: c3:bf:02:68:8c:38:13:b9:aa:5c:a6:a1:7e:68:e7: f3:f5:05:fa:ff:20:3d:26:b1:3c:6e:24:4e:2d:0d: 3a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:52:22:5F:68:E4:28:F2:B3:4E:3A:23:00:93:27:B4:C0:F1:AC:98 X509v3 Authority Key Identifier: keyid:C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:ef:75:36:a7:c5:7f:09:b0:f5:30:fb:0e:93:9e:8d:51:dd: bd:32:68:87:0e:35:2d:e5:92:fb:70:eb:0b:8e:6e:38:d2:ca: 66:1c:83:69:ad:f4:36:68:f4:1b:9d:65:82:bb:76:04:05:73: f3:c4:1a:5e:30:c4:09:d8:41:44:f3:7f:2d:2b:f3:e1:3e:06: 4c:8e:31:2a:a5:ce:43:a3:f7:0a:34:87:d8:75:5b:bd:b3:7a: d4:3d:26:9d:1d:9c:4f:e1:5b:02:e3:f2:b4:50:54:43:2b:2a: 84:02:8a:07:19:fa:82:86:da:cb:2a:dc:09:ee:69:79:f2:10: 40:d1:7e:3c:fb:4e:15:d3:8b:85:8a:5e:ea:96:19:83:e8:c3: 72:66:e3:1b:80:29:60:ea:92:fe:c4:64:d7:d0:cc:a2:05:7d: 92:83:d7:8f:75:b4:65:3d:91:39:fe:f2:c9:fa:c4:b3:f2:89: 56:e5:81:71:0c:b3:b9:3b:bb:71:e5:63:4c:65:7d:54:b4:ed: 06:b8:0f:90:62:0c:93:af:cb:df:57:8a:3b:d5:a5:49:a7:6c: 0c:44:d1:6e:f6:3f:29:cf:99:a5:5f:83:88:de:10:55:f3:b3: 9c:53:94:ae:51:ee:c1:79:87:df:ef:16:ab:a0:e0:8e:75:fd: b9:08:53:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI3lt3H7ZVYkeLAOatUVfazYw9T0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNF NDhCMDU0MDAeFw0yNTEwMTkyMTI2MjRaFw0yNTEwMjMwODU5MjRaMDMxMTAvBgNV BAMTKDVBNTIyMjVGNjhFNDI4RjJCMzRFM0EyMzAwOTMyN0I0QzBGMUFDOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd2Dg+2xeW0S9jRzCqNyMBtgse 08ElcWZv3ErRT35Q8krhKPIHA2Xmi1kJGFqQCWl7wos/eOtpKdDlbocPg3pax1e4 IslQ+C1dGJgfMa8UYREHrZtj0GZUqK9aYdIsJTWKCxbGwN2wbsNuEk16jBJtpN+h vEm436BeISAoq4PID0BHUw6IoQRTkDIAs1tj2h7rWo5QWA7B9K81htuq9AgKvuWe va3esRk4NGxZW9nNWIKK9is6xioIK9TDvEJC3SLO497Adq3N+kWVOCnXlKMorr8m zqvuPdh+IRxerWzawsO/AmiMOBO5qlymoX5o5/P1Bfr/ID0msTxuJE4tDTp7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWlIiX2jkKPKzTjojAJMntMDxrJgwHwYDVR0j BBgwFoAUwWaRA9hwo5DFbI39PBv+I+SLBUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODhkMGI2ZS1iMmVkLTQ5YzgtYTQ5OC04ZmQyOTlhZmI3MDEvMC9DMTY2OTEwM0Q4 NzBBMzkwQzU2QzhERkQzQzFCRkUyM0U0OEIwNTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNFNDhC MDU0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg4ZDBiNmUtYjJlZC00OWM4LWE0 OTgtOGZkMjk5YWZiNzAxLzAvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZF MjNFNDhCMDU0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPvdTanxX8JsPUw+w6Tno1R3b0yaIcONS3l kvtw6wuObjjSymYcg2mt9DZo9BudZYK7dgQFc/PEGl4wxAnYQUTzfy0r8+E+BkyO MSqlzkOj9wo0h9h1W72zetQ9Jp0dnE/hWwLj8rRQVEMrKoQCigcZ+oKG2ssq3Anu aXnyEEDRfjz7ThXTi4WKXuqWGYPow3Jm4xuAKWDqkv7EZNfQzKIFfZKD1491tGU9 kTn+8sn6xLPyiVblgXEMs7k7u3HlY0xlfVS07Qa4D5BiDJOvy99XijvVpUmnbAxE 0W72PynPmaVfg4jeEFXzs5xTlK5R7sF5h9/vFqug4I51/bkIU7I= -----END CERTIFICATE-----Generated at Mon Oct 20 12:25:32 2025 by rpki-client