$ rpki-client -vvf repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft File: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft (raw, json) Hash identifier: yGoY7efND24bId1ucZ71WPDtBdbh0kiNNUXL/SEclP8= Subject key identifier: 52:BD:27:60:0A:26:3C:B7:E8:40:B0:36:3E:4D:29:29:90:7C:F9:25 Authority key identifier: 1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A Certificate issuer: /CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Certificate serial: 31C3E20B4C8B3DEE1B58FD6D7E51ED8CA6BE74D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft Manifest number: 048A Signing time: Mon 20 Oct 2025 09:32:17 +0000 Manifest this update: Mon 20 Oct 2025 09:27:17 +0000 Manifest next update: Thu 23 Oct 2025 20:44:17 +0000 Files and hashes: 1: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: ygjycUROLuuycgQmlGFdBviRnTHP36unF91EN7REwu4=) 2: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: 52WZwGRv+Wo5hswd/uRmdKS5RbkBGKSp3qw8Zcv5xAA=) 3: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: 5tvhyREjxfe/DJlZ9wBpFrEXCdu8eQWjVSLlHduznyg=) 4: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl (hash: gt1P5Oj6ROanP2EdEpbgEWuYESJ0jSynAfI921GD1JY=) 5: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: Puzw6btCdPQ2KOCDFFaL2opEFaU1YVpimShuXfVUo3Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:c3:e2:0b:4c:8b:3d:ee:1b:58:fd:6d:7e:51:ed:8c:a6:be:74:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Validity Not Before: Oct 20 09:27:17 2025 GMT Not After : Oct 23 20:44:17 2025 GMT Subject: CN=52BD27600A263CB7E840B0363E4D2929907CF925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:17:6b:b0:03:05:75:a3:d5:3f:53:03:a0:a0: 60:99:14:71:f6:93:73:1e:b6:9b:e9:9c:00:ef:76: df:96:0e:40:66:dd:bf:7d:6e:b9:96:cc:cd:74:b2: 67:5c:7a:25:eb:3b:91:7f:89:3e:50:b2:e2:15:ba: 86:63:fa:85:4b:b8:e9:1d:7a:90:64:ab:86:95:48: b6:0a:c7:f7:3a:14:74:e8:35:32:e8:f2:60:cc:02: b1:89:75:cc:d3:04:07:76:f2:13:ac:2f:ad:50:25: 88:f0:33:79:04:84:d6:bd:1d:f6:24:f7:c6:a5:c1: 13:7b:96:2c:fa:d3:a1:0b:20:37:c9:66:5d:61:b1: a8:f7:d2:e9:6b:c9:bc:02:32:46:43:6f:16:16:95: c7:25:0a:6e:86:bb:01:6a:f5:9f:ec:2b:7e:b2:f2: a1:28:ed:62:b6:09:7a:3a:0d:08:0d:98:82:2b:5e: be:58:0a:0e:8d:cc:5a:33:d6:d6:af:99:6f:41:ca: 91:b7:30:30:21:1a:c2:e4:29:6a:d2:9b:43:5c:10: 1d:08:84:1c:df:bc:64:f5:b1:6f:9c:53:ea:2c:cb: 35:2c:77:aa:a9:d3:8b:1c:1a:ad:0f:9b:b4:8c:6f: e7:93:9d:75:61:55:a1:3e:c2:da:6c:8f:c6:61:2e: 7b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BD:27:60:0A:26:3C:B7:E8:40:B0:36:3E:4D:29:29:90:7C:F9:25 X509v3 Authority Key Identifier: keyid:1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:dd:83:9b:15:1e:1f:fb:2a:4c:8b:57:d8:bb:04:2e:39:75: 1f:d1:aa:36:f8:e1:ca:83:73:52:0c:1b:f7:73:dd:08:94:c4: cc:13:97:d8:f8:04:67:68:31:fd:68:87:3e:e0:b8:fa:82:72: 5e:d8:60:0d:79:4c:b8:a9:a6:c0:2f:17:73:7a:75:28:2e:22: e5:e1:f4:18:3a:1a:cd:50:0f:37:fc:f2:8c:dc:64:05:ed:b7: 9a:ca:91:de:c6:dd:a1:51:e6:64:56:af:6c:49:91:37:a2:76: 83:a2:5a:b3:b9:57:7f:cc:16:71:31:d1:3c:bc:d0:62:76:24: a5:ae:d8:7e:f5:a6:d6:25:2f:fa:26:aa:08:d4:3d:40:8a:51: 94:59:28:6f:2b:2f:03:d2:64:6b:8e:4f:d9:78:b7:c5:89:0e: 2a:14:21:16:5b:61:d8:c6:22:04:83:15:eb:37:ec:9b:c6:1c: af:0a:55:10:2a:3f:fb:11:25:b8:2f:4b:a7:51:a2:c8:f1:15: 29:05:82:9a:c6:3b:80:4b:09:aa:d6:6c:79:8f:04:af:e3:2f: 49:71:30:62:43:5a:9f:5f:ea:51:8d:67:6c:92:54:59:8b:37: 7d:cb:63:bb:1c:07:90:11:95:9c:a7:53:95:71:f8:1c:a9:b0: 22:75:f1:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMcPiC0yLPe4bWP1tflHtjKa+dNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3 QUY0NTcyQTAeFw0yNTEwMjAwOTI3MTdaFw0yNTEwMjMyMDQ0MTdaMDMxMTAvBgNV BAMTKDUyQkQyNzYwMEEyNjNDQjdFODQwQjAzNjNFNEQyOTI5OTA3Q0Y5MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZF2uwAwV1o9U/UwOgoGCZFHH2 k3MetpvpnADvdt+WDkBm3b99brmWzM10smdceiXrO5F/iT5QsuIVuoZj+oVLuOkd epBkq4aVSLYKx/c6FHToNTLo8mDMArGJdczTBAd28hOsL61QJYjwM3kEhNa9HfYk 98alwRN7liz606ELIDfJZl1hsaj30ulrybwCMkZDbxYWlcclCm6GuwFq9Z/sK36y 8qEo7WK2CXo6DQgNmIIrXr5YCg6NzFoz1tavmW9BypG3MDAhGsLkKWrSm0NcEB0I hBzfvGT1sW+cU+osyzUsd6qp04scGq0Pm7SMb+eTnXVhVaE+wtpsj8ZhLntfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUr0nYAomPLfoQLA2Pk0pKZB8+SUwHwYDVR0j BBgwFoAUH9fO7Gnep4ODgzF/+w1KEHr0VyowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTEyOWM5NC1jNWE2LTRkZDQtYjM0YS03ZTM1M2RlNmNlODEvMC8xRkQ3Q0VFQzY5 REVBNzgzODM4MzMxN0ZGQjBENEExMDdBRjQ1NzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3QUY0 NTcyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUxMjljOTQtYzVhNi00ZGQ0LWIz NGEtN2UzNTNkZTZjZTgxLzAvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRB MTA3QUY0NTcyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTdg5sVHh/7KkyLV9i7BC45dR/Rqjb44cqD c1IMG/dz3QiUxMwTl9j4BGdoMf1ohz7guPqCcl7YYA15TLippsAvF3N6dSguIuXh 9Bg6Gs1QDzf88ozcZAXtt5rKkd7G3aFR5mRWr2xJkTeidoOiWrO5V3/MFnEx0Ty8 0GJ2JKWu2H71ptYlL/omqgjUPUCKUZRZKG8rLwPSZGuOT9l4t8WJDioUIRZbYdjG IgSDFes37JvGHK8KVRAqP/sRJbgvS6dRosjxFSkFgprGO4BLCarWbHmPBK/jL0lx MGJDWp9f6lGNZ2ySVFmLN33LY7scB5ARlZynU5Vx+BypsCJ18VM= -----END CERTIFICATE-----Generated at Mon Oct 20 14:38:25 2025 by rpki-client