$ rpki-client -vvf repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft File: 1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft (raw, json) Hash identifier: lh8Xy6wF/7Y8cpU/4/mojgOq2yg2XCYjM13lvO0oHDQ= Subject key identifier: C6:84:5C:0D:60:37:4F:B5:65:79:E2:4E:05:1E:47:CD:22:02:DA:BC Authority key identifier: 1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 Certificate issuer: /CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754 Certificate serial: 5FE56460CAD7DED4EED743C2AB225775BBF9E172 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft Manifest number: 023C Signing time: Sat 18 Oct 2025 09:01:43 +0000 Manifest this update: Sat 18 Oct 2025 08:56:43 +0000 Manifest next update: Tue 21 Oct 2025 20:32:43 +0000 Files and hashes: 1: 1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl (hash: NFUDo3TRQre1WzbLjy/wrPg7SFcPc5scHTjWIWIuGks=) 2: 3130332e3130322e3134322e302f32342d3234203d3e20313336383534.roa (hash: E9hexxYc1bqmjJVzYlcJ1n0jxfd6pWxzNygPPPDyMeU=) 3: 3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa (hash: r4/2SO1KfMaPGbX/FsKDs7agHGywqOgLxZjLIrvX7OQ=) 4: 3130332e3130322e3134312e302f32342d3234203d3e20313336383534.roa (hash: B2qLIiehd/VzdAIdfO6T4LFNUB/9FZCQ+7yI4OPC/0Q=) 5: 3130332e3130322e3134332e302f32342d3234203d3e20313336383534.roa (hash: Ue24uXPwQGc54JNB/telr39Lz7e1QRjzsLYAEfr9eLA=) 6: 3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa (hash: 7vNFqyZ19GIU7uMKM54m1pt7f10H0K5mcAT54ul2qeA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:32:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:e5:64:60:ca:d7:de:d4:ee:d7:43:c2:ab:22:57:75:bb:f9:e1:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754 Validity Not Before: Oct 18 08:56:43 2025 GMT Not After : Oct 21 20:32:43 2025 GMT Subject: CN=C6845C0D60374FB56579E24E051E47CD2202DABC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b7:45:98:f5:41:fb:a0:c0:31:71:8b:2c:cb: 04:ed:e4:29:77:c9:fe:6e:6b:5f:80:f0:f8:1d:1b: c2:ec:18:0a:32:c9:e0:be:ee:3c:76:3b:ef:ca:aa: 1f:79:a3:c9:aa:d2:e5:59:11:aa:62:69:8c:95:33: d6:f3:8a:06:b8:4c:84:76:57:cc:f4:f3:40:ad:ea: 24:ee:a2:61:67:57:09:77:7e:cd:91:96:0b:8d:84: 21:17:ef:3f:7d:88:eb:83:6d:04:e3:7f:f0:6f:dd: 1f:d0:a8:98:cc:e3:01:8d:fa:94:b6:2e:6a:fd:dc: 70:03:74:fa:bb:23:b0:4b:45:33:c1:4c:a0:43:43: 8d:f1:02:d2:bb:c3:b0:85:95:a7:1f:c9:c0:8a:4b: d8:c0:0f:d1:f3:b6:dc:97:f7:f9:d7:f5:bd:a0:89: d8:b1:e4:9d:e0:76:ed:df:95:c3:9b:e9:07:4d:f8: 5d:93:73:93:eb:60:18:08:36:28:58:0c:bf:2c:40: 28:99:f8:8d:9f:5f:5d:19:39:18:1a:05:d3:33:3d: d9:9c:99:90:7c:6c:9a:cd:bb:f3:e0:0b:87:3d:7b: 90:c8:0f:4a:18:c4:d5:d4:4e:a4:13:70:6a:d2:e2: 37:4b:0e:5b:e0:72:60:8f:66:a5:d0:3b:75:d1:bc: a6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:84:5C:0D:60:37:4F:B5:65:79:E2:4E:05:1E:47:CD:22:02:DA:BC X509v3 Authority Key Identifier: keyid:1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:6e:e4:c4:5f:a0:18:e6:f6:4d:08:4c:56:c1:dc:9d:5a:d3: 32:c3:4b:35:37:1a:fe:d6:44:13:99:ef:bb:8c:2b:65:65:94: 46:54:29:5b:a5:b5:66:ca:e6:df:22:52:84:ea:aa:45:14:75: b5:b5:6f:1d:da:cc:2e:07:8e:41:30:b9:2e:e3:fc:d0:13:f1: 93:ea:54:0a:80:46:12:cc:31:d5:a5:fc:31:7b:54:12:22:92: 56:2b:c2:be:86:09:3c:77:40:e2:2c:69:ae:e6:fd:ee:2c:01: 35:2b:b9:a8:f0:41:2e:56:3b:ff:76:58:0a:c7:c3:32:d0:96: 66:e5:46:19:45:58:15:fb:49:32:17:02:53:80:ad:2d:04:88: dd:f9:91:45:e6:6b:2d:4c:ff:34:e2:e0:f4:aa:91:2e:6b:a4: 1f:cb:28:21:0d:a4:91:f9:b1:cf:98:05:49:ee:43:9b:cf:1a: f3:fd:45:3b:03:e2:c9:4c:1d:22:71:a6:69:a3:ad:0b:09:de: f5:b3:b7:8c:27:64:b1:5c:27:71:a8:49:1f:a9:8f:15:f6:67: 17:04:ed:07:65:f8:62:93:83:13:dc:f8:61:1d:b6:40:f8:70: 1b:d4:90:22:98:c2:2b:e3:85:9e:08:f6:e5:8f:20:d4:0e:ce: 84:15:5f:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX+VkYMrX3tTu10PCqyJXdbv54XIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4RjdB RjUwRDc1NDAeFw0yNTEwMTgwODU2NDNaFw0yNTEwMjEyMDMyNDNaMDMxMTAvBgNV BAMTKEM2ODQ1QzBENjAzNzRGQjU2NTc5RTI0RTA1MUU0N0NEMjIwMkRBQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6t0WY9UH7oMAxcYssywTt5Cl3 yf5ua1+A8PgdG8LsGAoyyeC+7jx2O+/Kqh95o8mq0uVZEapiaYyVM9bziga4TIR2 V8z080Ct6iTuomFnVwl3fs2RlguNhCEX7z99iOuDbQTjf/Bv3R/QqJjM4wGN+pS2 Lmr93HADdPq7I7BLRTPBTKBDQ43xAtK7w7CFlacfycCKS9jAD9HzttyX9/nX9b2g idix5J3gdu3flcOb6QdN+F2Tc5PrYBgINihYDL8sQCiZ+I2fX10ZORgaBdMzPdmc mZB8bJrNu/PgC4c9e5DID0oYxNXUTqQTcGrS4jdLDlvgcmCPZqXQO3XRvKaXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxoRcDWA3T7VleeJOBR5HzSIC2rwwHwYDVR0j BBgwFoAUHWABpPRlSLN+2HHKXPCI969Q11QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTYzMmQ5OS0zMmIyLTQ2N2ItYjdmZS0wZDI1Zjg1M2JmYTYvMC8xRDYwMDFBNEY0 NjU0OEIzN0VEODcxQ0E1Q0YwODhGN0FGNTBENzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4RjdBRjUw RDc1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU2MzJkOTktMzJiMi00NjdiLWI3 ZmUtMGQyNWY4NTNiZmE2LzAvMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4 RjdBRjUwRDc1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJu5MRfoBjm9k0ITFbB3J1a0zLDSzU3Gv7W RBOZ77uMK2VllEZUKVultWbK5t8iUoTqqkUUdbW1bx3azC4HjkEwuS7j/NAT8ZPq VAqARhLMMdWl/DF7VBIiklYrwr6GCTx3QOIsaa7m/e4sATUruajwQS5WO/92WArH wzLQlmblRhlFWBX7STIXAlOArS0EiN35kUXmay1M/zTi4PSqkS5rpB/LKCENpJH5 sc+YBUnuQ5vPGvP9RTsD4slMHSJxpmmjrQsJ3vWzt4wnZLFcJ3GoSR+pjxX2ZxcE 7Qdl+GKTgxPc+GEdtkD4cBvUkCKYwivjhZ4I9uWPINQOzoQVXzk= -----END CERTIFICATE-----Generated at Mon Oct 20 15:37:03 2025 by rpki-client