$ rpki-client -vvf repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft File: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft (raw, json) Hash identifier: ek/khy5rZFcPIKbOQbR24IAyCwE7iLCAQwxnD8cJmYU= Subject key identifier: CC:B1:FF:26:B7:36:11:E3:51:6A:4A:05:CF:93:70:48:29:3D:BD:5D Authority key identifier: 1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED Certificate issuer: /CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Certificate serial: 3856CEF70708C32636660031F7DB6EA6D4304E33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft Manifest number: 01DC Signing time: Sun 19 Oct 2025 08:51:40 +0000 Manifest this update: Sun 19 Oct 2025 08:46:40 +0000 Manifest next update: Wed 22 Oct 2025 10:49:40 +0000 Files and hashes: 1: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl (hash: bmmUsBdU8HHwySl7OsD8t6fTYbnOZqiViTN3llDve44=) 2: 3130332e33362e37302e302f32342d3234203d3e20313530323037.roa (hash: 5j0Tt77Cz46MkrUQmLJBWqtCp8m1Y546C35T0cpKX64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 10:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:56:ce:f7:07:08:c3:26:36:66:00:31:f7:db:6e:a6:d4:30:4e:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Validity Not Before: Oct 19 08:46:40 2025 GMT Not After : Oct 22 10:49:40 2025 GMT Subject: CN=CCB1FF26B73611E3516A4A05CF937048293DBD5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:84:de:e3:ed:8f:13:46:40:e7:34:a6:0d:47: fe:60:f8:73:91:22:ce:8a:a0:78:89:d4:51:bf:90: 85:d8:0b:a8:2d:3b:5e:5e:21:e2:00:51:68:2c:1f: 52:0f:02:b3:e8:92:8a:20:82:ae:cf:f2:3a:1b:ca: a0:96:8f:0d:72:0e:50:23:7e:17:41:5c:95:7e:95: cd:dd:de:2b:ec:60:93:cf:a4:89:26:66:d2:71:c8: e7:06:f2:4c:0e:7c:cc:12:45:99:fb:44:1c:80:58: 82:32:26:84:ce:26:39:04:8e:f6:82:1b:63:be:9a: 38:09:73:74:f0:18:88:9e:c9:f6:f8:18:4b:59:09: af:a7:0b:ad:74:59:7b:ca:80:35:d2:61:78:24:4e: 02:9e:6b:ed:80:6e:f2:b1:27:95:5e:99:c2:56:09: 56:0d:d2:87:23:30:b3:22:f9:23:b6:df:f3:0d:6d: cd:e9:ea:db:72:82:0c:ee:d4:b7:a8:7b:3d:f4:ee: cc:d1:59:57:82:38:12:a6:84:58:00:63:7b:d9:18: b7:bd:d6:f6:57:11:f1:85:4e:9b:b5:78:2b:60:bd: 0d:6c:63:28:38:01:f9:3c:15:ca:1d:aa:47:57:52: cb:f0:bd:50:93:87:73:a2:78:91:93:5e:84:c8:b6: 8c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B1:FF:26:B7:36:11:E3:51:6A:4A:05:CF:93:70:48:29:3D:BD:5D X509v3 Authority Key Identifier: keyid:1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:df:ba:d2:51:f8:3c:fc:66:4b:7d:c6:2c:6e:b8:5a:0a:66: 82:ee:be:ef:73:4d:bb:56:77:6d:65:07:00:61:2d:31:b0:6c: 5b:03:b2:fc:9c:81:49:e3:26:80:66:bb:f3:ba:f5:e7:df:d6: eb:43:cc:f1:65:fd:a5:93:42:cc:9d:2d:24:26:d3:6d:17:5a: ae:12:0d:40:10:78:1a:5b:5b:8b:eb:c3:3c:69:43:ea:9d:88: e4:62:5a:85:4b:5d:51:ad:5d:18:a1:a5:6e:fd:dc:c5:77:83: 46:b8:99:10:b0:21:c5:bd:eb:7a:df:e7:66:7c:10:37:15:71: c8:0f:dc:44:c7:1c:f4:3b:73:8a:c0:35:a1:01:55:b5:db:27: 3a:2c:df:f5:bb:00:d1:25:22:07:65:ff:e7:2d:d2:78:c1:c5: 84:55:e7:ab:7d:08:be:d0:28:76:d0:6d:6c:a6:95:9a:74:d7: d4:99:26:2d:83:fa:28:5f:6e:49:92:18:7c:d1:34:f1:b2:e9: 89:98:fc:b9:6d:8d:d0:23:48:53:65:b7:d7:dd:ec:a5:83:66: 13:07:98:51:6b:a8:e0:14:5c:e2:81:11:d9:86:92:46:f9:fd: 73:2a:f3:17:40:46:e0:aa:4e:f5:ca:28:52:36:5a:04:dc:2e: 0e:29:d6:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOFbO9wcIwyY2ZgAx99tuptQwTjMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMz RTFCMDFFRDAeFw0yNTEwMTkwODQ2NDBaFw0yNTEwMjIxMDQ5NDBaMDMxMTAvBgNV BAMTKENDQjFGRjI2QjczNjExRTM1MTZBNEEwNUNGOTM3MDQ4MjkzREJENUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxhN7j7Y8TRkDnNKYNR/5g+HOR Is6KoHiJ1FG/kIXYC6gtO15eIeIAUWgsH1IPArPokooggq7P8jobyqCWjw1yDlAj fhdBXJV+lc3d3ivsYJPPpIkmZtJxyOcG8kwOfMwSRZn7RByAWIIyJoTOJjkEjvaC G2O+mjgJc3TwGIieyfb4GEtZCa+nC610WXvKgDXSYXgkTgKea+2AbvKxJ5VemcJW CVYN0ocjMLMi+SO23/MNbc3p6ttyggzu1Leoez307szRWVeCOBKmhFgAY3vZGLe9 1vZXEfGFTpu1eCtgvQ1sYyg4Afk8FcodqkdXUsvwvVCTh3OieJGTXoTItoxdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzLH/Jrc2EeNRakoFz5NwSCk9vV0wHwYDVR0j BBgwFoAUH/neR2q2hlWeHBg6G1vUcz4bAe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTExZTk4Zi1mNTRlLTQ2MGItODhmMy1iZjkxZTA0NDNlOTAvMC8xRkY5REU0NzZB QjY4NjU1OUUxQzE4M0ExQjVCRDQ3MzNFMUIwMUVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMzRTFC MDFFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmUxMWU5OGYtZjU0ZS00NjBiLTg4 ZjMtYmY5MWUwNDQzZTkwLzAvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0 NzMzRTFCMDFFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJDfutJR+Dz8Zkt9xixuuFoKZoLuvu9zTbtW d21lBwBhLTGwbFsDsvycgUnjJoBmu/O69eff1utDzPFl/aWTQsydLSQm020XWq4S DUAQeBpbW4vrwzxpQ+qdiORiWoVLXVGtXRihpW793MV3g0a4mRCwIcW963rf52Z8 EDcVccgP3ETHHPQ7c4rANaEBVbXbJzos3/W7ANElIgdl/+ct0njBxYRV56t9CL7Q KHbQbWymlZp019SZJi2D+ihfbkmSGHzRNPGy6YmY/LltjdAjSFNlt9fd7KWDZhMH mFFrqOAUXOKBEdmGkkb5/XMq8xdARuCqTvXKKFI2WgTcLg4p1io= -----END CERTIFICATE-----Generated at Tue Oct 21 00:58:40 2025 by rpki-client