$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft File: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft (raw, json) Hash identifier: mNN0Hd0uWe3ZaIpe7lqjo8NDhXcoCLz6krqbq6IKYcQ= Subject key identifier: 7C:7F:72:61:7B:47:34:6B:03:F9:7C:AF:44:B7:A9:16:03:25:43:2D Authority key identifier: 1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 Certificate issuer: /CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Certificate serial: 7D03AD44E4A0B42EF0D5795CDEB7D1D5F4E53447 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft Manifest number: DE Signing time: Sat 18 Oct 2025 20:01:10 +0000 Manifest this update: Sat 18 Oct 2025 19:56:10 +0000 Manifest next update: Wed 22 Oct 2025 05:08:10 +0000 Files and hashes: 1: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl (hash: ZubyuMjY5xPLw7+iMwvCyxjWh5Z/LYDDIzl1oY2YU5k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 05:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:03:ad:44:e4:a0:b4:2e:f0:d5:79:5c:de:b7:d1:d5:f4:e5:34:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Validity Not Before: Oct 18 19:56:10 2025 GMT Not After : Oct 22 05:08:10 2025 GMT Subject: CN=7C7F72617B47346B03F97CAF44B7A9160325432D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:20:f2:fa:2d:b1:3f:d6:c6:12:99:d7:1a:af: 10:0f:4c:c7:d4:c3:00:ed:87:56:dc:2e:d1:31:49: 24:29:9c:2c:a2:04:b6:5f:04:11:71:af:09:3b:46: 35:fc:17:2f:5d:86:37:4e:fa:08:2e:4a:3e:31:47: 7b:dc:0d:ae:98:1c:43:24:d9:5a:5f:73:ae:33:cb: 8d:24:ba:3e:e3:b1:53:5a:91:86:6b:aa:ec:f0:fc: 61:b9:04:69:99:aa:f1:97:75:cd:7e:28:a6:3d:0e: 68:27:45:e9:e8:38:28:b3:72:31:c8:75:75:1f:56: a7:52:e8:34:03:62:c2:a1:c4:8b:b7:8f:5d:e0:14: ae:c6:f2:d6:c2:87:66:5e:a2:d4:68:f9:47:06:fc: cb:cb:2c:4a:87:3e:3c:93:be:76:18:46:5b:94:67: 79:5b:6d:10:a5:df:a6:1b:6a:eb:00:df:c4:28:a6: aa:d8:1b:61:d2:d0:0c:c9:4d:4f:ba:d3:50:5e:ec: be:1b:39:cc:7a:fc:81:c3:c9:d1:f3:e1:76:f9:3c: dd:3a:0b:9e:c0:f3:8f:85:f4:95:ab:23:b8:0a:74: 4e:d1:ae:68:ae:d1:1b:45:01:c4:52:0c:f1:76:c8: 4a:64:60:8d:44:e7:5c:42:84:ef:83:89:2f:65:fd: d0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7F:72:61:7B:47:34:6B:03:F9:7C:AF:44:B7:A9:16:03:25:43:2D X509v3 Authority Key Identifier: keyid:1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:9b:3e:09:e7:6a:24:5a:80:ac:c2:71:aa:06:f6:fb:88:87: be:82:d0:f7:17:75:67:db:50:6a:2d:03:4e:12:b1:80:69:e0: 0b:20:c6:b1:6c:94:9e:de:54:78:da:6b:45:f3:cc:33:6c:26: 2c:86:a2:47:a2:2d:b3:84:ef:bd:dc:da:60:ad:c0:36:e2:8b: 8b:d1:60:b1:bf:17:dc:bc:6b:07:0e:25:1d:90:19:85:1e:1b: 7f:70:38:95:4c:67:6b:91:1a:a8:af:65:ca:69:17:fe:c5:8c: c1:13:25:70:ad:b4:b2:12:1e:03:0e:d4:75:a6:52:ff:6b:e4: 1c:0b:65:fe:bc:a6:2b:a0:40:16:db:b8:6c:26:6e:76:41:73: 2e:a8:65:4e:c9:43:4b:6d:45:ca:68:df:f0:86:8c:1f:8c:e1: 0f:84:02:21:21:16:4a:2b:a8:bf:a1:7b:e7:fc:01:64:b6:94: 0a:12:35:95:27:b4:e4:73:15:07:e6:d4:e0:02:a6:4d:8f:c0: 05:56:c9:3a:1c:9e:19:d3:5f:d1:5e:ab:84:04:60:9c:66:90: af:e7:5f:04:1b:e8:b9:b0:69:b1:03:a0:f8:0c:7b:1d:b8:dd: 90:1a:cc:b8:d5:6c:b4:e7:d4:0e:ec:5b:b2:66:2b:e3:a4:56: 4d:0b:81:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfQOtROSgtC7w1Xlc3rfR1fTlNEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVF M0ZBQjlCMjAeFw0yNTEwMTgxOTU2MTBaFw0yNTEwMjIwNTA4MTBaMDMxMTAvBgNV BAMTKDdDN0Y3MjYxN0I0NzM0NkIwM0Y5N0NBRjQ0QjdBOTE2MDMyNTQzMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEIPL6LbE/1sYSmdcarxAPTMfU wwDth1bcLtExSSQpnCyiBLZfBBFxrwk7RjX8Fy9dhjdO+gguSj4xR3vcDa6YHEMk 2Vpfc64zy40kuj7jsVNakYZrquzw/GG5BGmZqvGXdc1+KKY9DmgnRenoOCizcjHI dXUfVqdS6DQDYsKhxIu3j13gFK7G8tbCh2ZeotRo+UcG/MvLLEqHPjyTvnYYRluU Z3lbbRCl36YbausA38QopqrYG2HS0AzJTU+601Be7L4bOcx6/IHDydHz4Xb5PN06 C57A84+F9JWrI7gKdE7Rrmiu0RtFAcRSDPF2yEpkYI1E51xChO+DiS9l/dCjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfH9yYXtHNGsD+XyvRLepFgMlQy0wHwYDVR0j BBgwFoAUHmS/ZQUQUtkT19uMRRL2FeP6ubIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMS8xRTY0QkY2NTA1 MTA1MkQ5MTNEN0RCOEM0NTEyRjYxNUUzRkFCOUIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVFM0ZB QjlCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzEvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2 MTVFM0ZBQjlCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWbPgnnaiRagKzCcaoG9vuIh76C0PcXdWfb UGotA04SsYBp4AsgxrFslJ7eVHjaa0XzzDNsJiyGokeiLbOE773c2mCtwDbii4vR YLG/F9y8awcOJR2QGYUeG39wOJVMZ2uRGqivZcppF/7FjMETJXCttLISHgMO1HWm Uv9r5BwLZf68piugQBbbuGwmbnZBcy6oZU7JQ0ttRcpo3/CGjB+M4Q+EAiEhFkor qL+he+f8AWS2lAoSNZUntORzFQfm1OACpk2PwAVWyTocnhnTX9Feq4QEYJxmkK/n XwQb6LmwabEDoPgMex243ZAazLjVbLTn1A7sW7JmK+OkVk0LgR8= -----END CERTIFICATE-----Generated at Mon Oct 20 12:39:21 2025 by rpki-client