$ rpki-client -vvf repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft File: 1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft (raw, json) Hash identifier: ySsyAC2OoMaK7yw6Bojo8dR3Xo5ewFqjWGLaZIE9/ew= Subject key identifier: 8B:DD:04:EC:D6:56:5B:D7:66:AB:1D:CF:BC:1E:8B:C8:61:FE:0C:7D Authority key identifier: 1C:C4:D0:E2:E2:BC:8B:00:60:71:8A:85:76:57:AA:82:D2:0E:59:74 Certificate issuer: /CN=1CC4D0E2E2BC8B0060718A857657AA82D20E5974 Certificate serial: 248D7F8DB5C459EDA4B500DB14C93B7A4462A09B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft Manifest number: 013E Signing time: Mon 20 Oct 2025 08:20:04 +0000 Manifest this update: Mon 20 Oct 2025 08:15:04 +0000 Manifest next update: Thu 23 Oct 2025 10:00:04 +0000 Files and hashes: 1: 1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl (hash: y+/Gnpyzc0zjs83H1cjX5Altv6fHvi/5hteBpUhREbk=) 2: 3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa (hash: c6uY286NAKl6e1+QUCIAnDozTBVcXw8V9RD5Jtc/nw8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:8d:7f:8d:b5:c4:59:ed:a4:b5:00:db:14:c9:3b:7a:44:62:a0:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CC4D0E2E2BC8B0060718A857657AA82D20E5974 Validity Not Before: Oct 20 08:15:04 2025 GMT Not After : Oct 23 10:00:04 2025 GMT Subject: CN=8BDD04ECD6565BD766AB1DCFBC1E8BC861FE0C7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:61:01:a7:58:e7:1a:f5:6f:e7:46:1e:2a:1e: 10:7c:45:69:18:03:67:f9:de:f5:59:8f:13:a5:06: b5:c9:2a:88:18:8d:b4:db:96:ea:3c:96:9e:4d:a6: 29:03:cf:33:14:58:58:f8:7e:06:23:83:3b:78:af: ca:6b:f1:8e:5b:a7:d1:c7:b3:80:04:8d:14:d1:ea: 08:4c:a6:77:e1:b7:80:a4:67:df:4f:9e:66:a3:7e: a5:d0:54:f8:f4:ad:4e:44:ab:47:a4:5b:9b:7e:7f: 9e:70:56:0d:0b:44:73:48:2f:b1:14:4f:f5:03:36: ab:d8:5a:26:c7:66:91:d7:9f:ae:a0:9b:58:a4:53: 8c:4a:e4:be:80:95:c6:27:ee:78:83:4e:f0:54:f7: a3:d8:dc:7c:59:5a:ae:88:6f:01:d0:b3:30:d1:b9: 69:9c:3e:2a:d3:c1:5d:bc:1e:06:fb:79:c2:12:00: d5:74:f4:b3:48:5a:eb:41:60:a8:13:d6:e0:d5:8c: ac:1e:b8:5c:b4:b7:de:b3:3e:c7:09:b1:0a:47:32: d0:f6:1b:e4:3d:c8:43:44:cc:22:83:21:bb:34:f7: 7d:86:da:37:d4:37:84:b5:43:e7:92:36:1c:b4:72: 4e:ef:d1:67:85:07:ed:da:13:0f:53:14:e3:32:ed: 6c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:DD:04:EC:D6:56:5B:D7:66:AB:1D:CF:BC:1E:8B:C8:61:FE:0C:7D X509v3 Authority Key Identifier: keyid:1C:C4:D0:E2:E2:BC:8B:00:60:71:8A:85:76:57:AA:82:D2:0E:59:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:1d:19:c5:4c:9e:bb:b3:6f:0e:94:ed:3f:9b:1e:9f:29:de: d3:e9:cd:99:87:ce:8c:e8:a1:3d:7d:e5:e2:fa:0d:c1:9d:4a: 50:76:ec:c7:ae:e9:ca:46:11:46:0a:e5:56:6b:53:79:77:5e: d9:fd:a5:f4:a4:61:fa:bf:ae:0a:97:35:b1:f3:5f:99:5b:0a: 67:29:5c:08:2a:41:a1:42:54:3a:c9:f0:f8:af:b9:1d:5b:33: 3d:3a:b3:49:a1:50:35:9d:a4:fe:be:30:8f:ea:b1:99:e5:85: 93:a8:82:76:b2:4d:ed:cd:26:4d:7a:d6:2f:2b:ad:77:c8:e4: 67:18:17:47:43:72:fb:6e:0f:19:bb:3a:b0:37:e4:95:21:5e: aa:b1:b5:f2:f0:0b:93:c2:3b:b8:5e:8f:73:47:66:a5:1d:e9: cb:4d:72:57:53:e1:f6:c7:7f:7d:f0:b8:f8:fa:76:e2:36:13: c9:f5:61:6a:8c:77:ee:d5:48:a3:ab:be:a3:e0:40:35:20:d4: 50:b9:36:f2:80:78:64:06:6b:20:4d:3e:4e:f2:8a:9e:19:c1: 73:d3:14:aa:bb:39:3e:68:b2:23:27:c3:ff:2a:54:86:9c:75: b8:ec:c7:90:bc:3e:9c:70:45:ef:50:4e:de:37:4a:02:5b:76: 04:85:92:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJI1/jbXEWe2ktQDbFMk7ekRioJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FBODJE MjBFNTk3NDAeFw0yNTEwMjAwODE1MDRaFw0yNTEwMjMxMDAwMDRaMDMxMTAvBgNV BAMTKDhCREQwNEVDRDY1NjVCRDc2NkFCMURDRkJDMUU4QkM4NjFGRTBDN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDYQGnWOca9W/nRh4qHhB8RWkY A2f53vVZjxOlBrXJKogYjbTbluo8lp5NpikDzzMUWFj4fgYjgzt4r8pr8Y5bp9HH s4AEjRTR6ghMpnfht4CkZ99PnmajfqXQVPj0rU5Eq0ekW5t+f55wVg0LRHNIL7EU T/UDNqvYWibHZpHXn66gm1ikU4xK5L6AlcYn7niDTvBU96PY3HxZWq6IbwHQszDR uWmcPirTwV28Hgb7ecISANV09LNIWutBYKgT1uDVjKweuFy0t96zPscJsQpHMtD2 G+Q9yENEzCKDIbs0932G2jfUN4S1Q+eSNhy0ck7v0WeFB+3aEw9TFOMy7WzhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi90E7NZWW9dmqx3PvB6LyGH+DH0wHwYDVR0j BBgwFoAUHMTQ4uK8iwBgcYqFdleqgtIOWXQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWRmNTEyZi0wZDFhLTRiMDktYjlhNC1hOWM1MjVlYzI4MTcvMC8xQ0M0RDBFMkUy QkM4QjAwNjA3MThBODU3NjU3QUE4MkQyMEU1OTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FBODJEMjBF NTk3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVkZjUxMmYtMGQxYS00YjA5LWI5 YTQtYTljNTI1ZWMyODE3LzAvMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FB ODJEMjBFNTk3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIdGcVMnruzbw6U7T+bHp8p3tPpzZmHzozo oT195eL6DcGdSlB27Meu6cpGEUYK5VZrU3l3Xtn9pfSkYfq/rgqXNbHzX5lbCmcp XAgqQaFCVDrJ8PivuR1bMz06s0mhUDWdpP6+MI/qsZnlhZOognayTe3NJk161i8r rXfI5GcYF0dDcvtuDxm7OrA35JUhXqqxtfLwC5PCO7hej3NHZqUd6ctNcldT4fbH f33wuPj6duI2E8n1YWqMd+7VSKOrvqPgQDUg1FC5NvKAeGQGayBNPk7yip4ZwXPT FKq7OT5osiMnw/8qVIacdbjsx5C8PpxwRe9QTt43SgJbdgSFklM= -----END CERTIFICATE-----Generated at Mon Oct 20 09:57:24 2025 by rpki-client