$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft File: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft (raw, json) Hash identifier: h+LA0PWmJSuJe7L1TvQXQ/mxx8RvSxxDeI+Ln9OxRjY= Subject key identifier: FC:4F:94:20:3B:41:04:E7:F3:9A:55:95:74:BE:ED:98:AB:F8:12:B2 Authority key identifier: 1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A Certificate issuer: /CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Certificate serial: 4852E43E858975F17EAA2FE029B3B29788449CD4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft Manifest number: 90 Signing time: Sat 18 Oct 2025 20:51:14 +0000 Manifest this update: Sat 18 Oct 2025 20:46:14 +0000 Manifest next update: Wed 22 Oct 2025 01:13:14 +0000 Files and hashes: 1: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl (hash: x0fOxi8ZrJ4tKsGOM462OVz03aH5aSiRVhtZgGgDqFQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 01:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:52:e4:3e:85:89:75:f1:7e:aa:2f:e0:29:b3:b2:97:88:44:9c:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Validity Not Before: Oct 18 20:46:14 2025 GMT Not After : Oct 22 01:13:14 2025 GMT Subject: CN=FC4F94203B4104E7F39A559574BEED98ABF812B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:83:d7:e7:b7:1b:24:0a:ad:a2:d9:f6:bd:6a: 94:ce:4c:4a:05:af:bf:5e:57:d4:cc:73:98:f1:b6: 8b:0c:25:b5:6e:24:f2:47:39:00:0f:12:be:18:77: 0a:27:6f:20:35:af:0e:ef:ce:d3:ee:d6:29:e8:95: ba:43:13:ed:90:fe:60:5d:47:2b:ea:eb:10:47:16: e3:71:64:2c:79:da:4c:73:7d:71:f5:3d:cb:30:3a: 6a:d2:d6:64:62:b8:c3:23:95:39:0c:a9:c4:9e:28: 79:2d:a0:90:4f:2c:73:09:43:9c:0e:60:bf:f7:a8: 15:ef:35:ff:c5:89:a4:0a:73:cd:43:80:a5:ef:ac: ad:27:77:8f:dc:9a:03:51:31:ae:92:db:cb:1f:ee: 1b:7a:b6:fc:af:e2:36:7e:10:19:12:d3:d3:ea:33: ca:a5:1e:ae:7a:a7:79:dc:6c:96:9d:67:b4:40:81: 40:51:9c:12:31:55:95:32:21:fc:15:45:49:8e:9a: 3a:71:a6:f5:c5:3a:78:c1:55:8f:6c:78:90:18:25: 22:9d:da:fc:96:f7:cb:df:e2:88:f1:b7:66:81:b2: 9f:38:9b:a0:7c:27:07:d2:f2:8e:9c:ac:4d:9f:92: 65:df:d0:8f:8c:96:d1:a5:8b:89:19:7e:2c:00:54: f1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:4F:94:20:3B:41:04:E7:F3:9A:55:95:74:BE:ED:98:AB:F8:12:B2 X509v3 Authority Key Identifier: keyid:1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:3e:ac:a9:dc:67:c2:11:e1:af:61:e0:68:d5:64:f5:a9:96: cb:0c:ce:4a:01:1b:16:63:90:b1:35:20:12:b2:4d:51:77:d1: a9:17:e5:7f:e0:6a:6d:41:8a:00:57:c5:fa:16:22:d5:25:f5: 1f:1a:24:01:72:04:28:5e:17:33:64:2a:84:a4:f2:fd:9a:9e: 89:49:6c:b8:06:8a:e8:4f:67:04:0d:93:51:9e:08:d1:56:df: 0d:8e:21:53:a5:70:dd:d0:7d:80:16:8d:05:55:be:3b:74:72: 4d:75:7d:ce:22:db:6f:8d:fc:0b:8f:77:f7:60:37:bc:f2:39: 52:d3:dc:69:a2:5a:dd:e2:b6:28:ca:0e:1c:2e:d3:3c:1c:7f: 4a:46:1a:ab:9e:4f:a2:76:53:83:eb:67:7a:70:39:3f:1f:3e: 02:a0:51:fd:e3:8f:15:c3:68:ff:f6:33:82:43:32:25:e1:b4: 3a:f8:a6:55:45:5a:8c:b4:ae:25:00:d9:b7:b8:e9:3a:51:e4: 32:35:2c:af:a2:67:5f:6b:87:7e:c5:dd:d0:7f:04:6e:d5:cf: 27:e5:d6:97:b9:3b:48:88:1f:3c:60:3a:02:ba:91:db:ba:70: 78:d0:f0:7d:44:8a:4d:5f:a1:3a:92:4d:77:3d:0d:b3:57:72: d6:79:57:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSFLkPoWJdfF+qi/gKbOyl4hEnNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4 NTIxQjQ5QTAeFw0yNTEwMTgyMDQ2MTRaFw0yNTEwMjIwMTEzMTRaMDMxMTAvBgNV BAMTKEZDNEY5NDIwM0I0MTA0RTdGMzlBNTU5NTc0QkVFRDk4QUJGODEyQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmg9fntxskCq2i2fa9apTOTEoF r79eV9TMc5jxtosMJbVuJPJHOQAPEr4YdwonbyA1rw7vztPu1inolbpDE+2Q/mBd Ryvq6xBHFuNxZCx52kxzfXH1PcswOmrS1mRiuMMjlTkMqcSeKHktoJBPLHMJQ5wO YL/3qBXvNf/FiaQKc81DgKXvrK0nd4/cmgNRMa6S28sf7ht6tvyv4jZ+EBkS09Pq M8qlHq56p3ncbJadZ7RAgUBRnBIxVZUyIfwVRUmOmjpxpvXFOnjBVY9seJAYJSKd 2vyW98vf4ojxt2aBsp84m6B8JwfS8o6crE2fkmXf0I+MltGli4kZfiwAVPEvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/E+UIDtBBOfzmlWVdL7tmKv4ErIwHwYDVR0j BBgwFoAUHQJLffak9UITxQxAWuHje4UhtJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMS8xRDAyNEI3REY2 QTRGNTQyMTNDNTBDNDA1QUUxRTM3Qjg1MjFCNDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4NTIx QjQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzEvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUz N0I4NTIxQjQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMs+rKncZ8IR4a9h4GjVZPWplssMzkoBGxZj kLE1IBKyTVF30akX5X/gam1BigBXxfoWItUl9R8aJAFyBCheFzNkKoSk8v2anolJ bLgGiuhPZwQNk1GeCNFW3w2OIVOlcN3QfYAWjQVVvjt0ck11fc4i22+N/AuPd/dg N7zyOVLT3GmiWt3itijKDhwu0zwcf0pGGqueT6J2U4PrZ3pwOT8fPgKgUf3jjxXD aP/2M4JDMiXhtDr4plVFWoy0riUA2be46TpR5DI1LK+iZ19rh37F3dB/BG7Vzyfl 1pe5O0iIHzxgOgK6kdu6cHjQ8H1Eik1foTqSTXc9DbNXctZ5VzA= -----END CERTIFICATE-----Generated at Mon Oct 20 18:16:41 2025 by rpki-client