$ rpki-client -vvf repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft File: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft (raw, json) Hash identifier: 0eNIrFpmow/iXpWDbvg4qEvXS25K8phJmz6rsheUmEo= Subject key identifier: E9:61:1F:46:19:D2:11:BF:6B:95:E8:DE:F9:4B:6B:2C:0B:B8:08:F1 Authority key identifier: 0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 Certificate issuer: /CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Certificate serial: 72F0BC636DDE56CCF784A5D0FF4881F7A13695F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft Manifest number: C3 Signing time: Sat 18 Oct 2025 09:11:08 +0000 Manifest this update: Sat 18 Oct 2025 09:06:08 +0000 Manifest next update: Tue 21 Oct 2025 19:32:08 +0000 Files and hashes: 1: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl (hash: GujuEaRK+16D/qHiT288L6KjXNQq2I/Fve1dZkpOhYo=) 2: 3136302e32322e3230352e302f32342d3234203d3e20313337333136.roa (hash: 8dognkJ+3KqI8Zy3SbY9osu6X0L9/9P5xv+FtLtMt+4=) 3: 3136302e32322e3230342e302f32342d3234203d3e20313337333136.roa (hash: Zh8n/dPr3gHP9KgajNV0z2AsOCpEwb2affZu8V5L6qs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 19:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f0:bc:63:6d:de:56:cc:f7:84:a5:d0:ff:48:81:f7:a1:36:95:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Validity Not Before: Oct 18 09:06:08 2025 GMT Not After : Oct 21 19:32:08 2025 GMT Subject: CN=E9611F4619D211BF6B95E8DEF94B6B2C0BB808F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8c:5a:b2:0a:91:39:ab:9b:14:a7:41:68:21: 3f:ff:1e:c0:ff:54:17:0d:4f:62:f8:f9:75:bf:d5: c6:72:c7:8d:99:e8:11:69:f9:3f:98:6b:9a:2e:bb: 32:2b:38:af:1d:1a:12:d0:70:bd:8a:4e:9d:74:74: 68:35:68:e2:54:1b:fe:90:45:98:a2:ad:52:a9:37: c6:6b:78:5c:20:fb:db:f0:4f:1d:3e:97:23:44:39: e7:c0:2a:d0:67:03:f3:a1:7d:97:16:50:78:40:62: 4f:6f:ff:e2:e8:18:8d:2e:4b:cd:46:58:10:86:d8: 50:b3:ae:01:74:ad:ff:a4:f5:63:4f:01:ac:fe:6c: 90:ee:6b:d4:50:db:9b:9f:af:33:79:12:b3:b4:8f: 45:36:0a:27:8f:39:a2:17:eb:53:44:67:67:29:19: dc:52:28:2b:14:e4:37:1b:4b:ec:b5:e4:85:3a:c1: e2:3f:71:20:69:5b:ce:67:79:6a:b9:9a:34:53:b6: 46:78:62:8f:6a:bd:12:3a:27:e5:01:ae:33:57:d7: 47:d9:30:a3:e6:a2:7a:f0:1c:98:d5:fb:1d:47:bc: b7:35:56:37:b9:c1:d5:51:b0:28:cb:fc:d6:97:fc: 06:29:4d:e4:68:33:f5:54:90:4c:03:81:d5:9d:8d: 3e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:61:1F:46:19:D2:11:BF:6B:95:E8:DE:F9:4B:6B:2C:0B:B8:08:F1 X509v3 Authority Key Identifier: keyid:0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:62:93:2e:90:c7:64:81:c1:c5:19:38:d5:57:26:e0:97:74: 2e:30:fd:02:7d:40:48:52:38:68:58:e6:7b:c8:b9:2a:53:80: 7a:00:3d:67:34:b3:3a:02:fd:43:ac:5a:d0:03:e0:e5:27:43: 39:da:3c:a3:72:f7:ee:89:9b:46:4a:18:3d:de:08:1b:3a:7d: 00:7c:c8:a4:08:1f:38:13:e9:83:58:52:c2:35:d1:2a:b3:c7: 11:cf:58:62:d8:d0:d4:17:a7:b0:fe:fa:de:3b:d0:b8:58:b6: c9:62:9d:3a:b0:79:03:d8:d3:c4:bf:ef:b1:57:b6:f2:87:74: c5:2e:51:25:b2:3d:21:ad:cd:7a:a4:39:28:a5:b0:9b:06:ab: 22:bf:1e:fb:b0:35:ed:6e:84:29:14:cd:ae:10:c7:82:85:1f: 50:4f:0a:3a:bb:17:f1:22:09:5f:26:f1:35:4d:3b:0e:d6:a0: 8e:ca:ae:55:24:4b:32:69:f6:52:2c:2a:1d:34:39:d9:1b:22: 3c:bd:6c:37:94:28:2e:60:7f:47:4a:7d:e6:31:1d:8f:81:52: 63:03:a4:b4:94:d1:c2:e1:b7:5a:ba:63:25:71:a0:dc:72:4f: 93:65:57:9e:09:77:e8:f7:ce:4c:b9:dd:88:cf:08:4d:c9:ef: 42:1d:75:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcvC8Y23eVsz3hKXQ/0iB96E2lfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFG MDYwMzYxMjAeFw0yNTEwMTgwOTA2MDhaFw0yNTEwMjExOTMyMDhaMDMxMTAvBgNV BAMTKEU5NjExRjQ2MTlEMjExQkY2Qjk1RThERUY5NEI2QjJDMEJCODA4RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDajFqyCpE5q5sUp0FoIT//HsD/ VBcNT2L4+XW/1cZyx42Z6BFp+T+Ya5ouuzIrOK8dGhLQcL2KTp10dGg1aOJUG/6Q RZiirVKpN8ZreFwg+9vwTx0+lyNEOefAKtBnA/OhfZcWUHhAYk9v/+LoGI0uS81G WBCG2FCzrgF0rf+k9WNPAaz+bJDua9RQ25ufrzN5ErO0j0U2CiePOaIX61NEZ2cp GdxSKCsU5DcbS+y15IU6weI/cSBpW85neWq5mjRTtkZ4Yo9qvRI6J+UBrjNX10fZ MKPmonrwHJjV+x1HvLc1Vje5wdVRsCjL/NaX/AYpTeRoM/VUkEwDgdWdjT4NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6WEfRhnSEb9rleje+UtrLAu4CPEwHwYDVR0j BBgwFoAUChv85nYdi3+yCffPntGz2vBgNhIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzFiNGMzOC03NzQ3LTQ1ZmMtYTU5MC1jYWM1MjE2M2Q1MzgvMC8wQTFCRkNFNjc2 MUQ4QjdGQjIwOUY3Q0Y5RUQxQjNEQUYwNjAzNjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFGMDYw MzYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMxYjRjMzgtNzc0Ny00NWZjLWE1 OTAtY2FjNTIxNjNkNTM4LzAvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIz REFGMDYwMzYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxiky6Qx2SBwcUZONVXJuCXdC4w/QJ9QEhS OGhY5nvIuSpTgHoAPWc0szoC/UOsWtAD4OUnQznaPKNy9+6Jm0ZKGD3eCBs6fQB8 yKQIHzgT6YNYUsI10SqzxxHPWGLY0NQXp7D++t470LhYtslinTqweQPY08S/77FX tvKHdMUuUSWyPSGtzXqkOSilsJsGqyK/HvuwNe1uhCkUza4Qx4KFH1BPCjq7F/Ei CV8m8TVNOw7WoI7KrlUkSzJp9lIsKh00OdkbIjy9bDeUKC5gf0dKfeYxHY+BUmMD pLSU0cLht1q6YyVxoNxyT5NlV54Jd+j3zky53YjPCE3J70IddQ0= -----END CERTIFICATE-----Generated at Mon Oct 20 13:54:32 2025 by rpki-client