$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft File: 1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft (raw, json) Hash identifier: nM3Sn8PHn7zeuuTXD/Z1jI3LVjdRn2ugA30nQmO9drE= Subject key identifier: C2:91:B0:AE:DE:27:7A:17:11:1E:FF:19:59:FF:56:D5:95:3E:D0:30 Authority key identifier: 1F:98:5A:F8:4B:69:45:80:4B:85:3C:2E:7C:09:AE:DC:28:B6:B2:E5 Certificate issuer: /CN=1F985AF84B6945804B853C2E7C09AEDC28B6B2E5 Certificate serial: 42C9F2DED6AD055CBE2E42F63C91A08D589656F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft Manifest number: 3D Signing time: Sun 19 Oct 2025 02:51:48 +0000 Manifest this update: Sun 19 Oct 2025 02:46:48 +0000 Manifest next update: Wed 22 Oct 2025 07:33:48 +0000 Files and hashes: 1: 1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.crl (hash: E49BqckAN28l1vaAlnDUi/Is1fgW1m0MN0BGtfbgHos=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.crl rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 07:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:c9:f2:de:d6:ad:05:5c:be:2e:42:f6:3c:91:a0:8d:58:96:56:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F985AF84B6945804B853C2E7C09AEDC28B6B2E5 Validity Not Before: Oct 19 02:46:48 2025 GMT Not After : Oct 22 07:33:48 2025 GMT Subject: CN=C291B0AEDE277A17111EFF1959FF56D5953ED030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1a:95:e8:5d:0c:d2:5e:83:d0:54:e5:99:3a: 60:1a:b6:79:31:37:6a:b1:5e:4e:8c:b5:b7:1e:1f: b1:36:ad:c6:47:8b:88:93:1d:b4:a0:a8:7a:fa:b4: af:8e:48:8b:9e:15:46:1d:43:fc:31:ac:66:bb:22: a6:e5:f4:98:e1:00:5a:db:6c:7d:52:5b:91:02:23: 57:60:ac:d7:51:f8:9f:bc:18:33:12:a5:80:b0:f1: c6:05:0a:67:c8:c9:18:df:38:45:db:f7:fd:0b:d4: d6:79:e2:5f:3a:17:e0:38:1b:96:7b:b5:01:ea:6d: 0c:0e:71:e7:f2:17:73:52:a0:43:73:2b:dc:4c:b0: 1b:d9:ad:93:f6:77:b4:ee:7e:c1:1d:c7:f0:7d:8c: c5:4c:64:92:3c:a8:29:ee:96:7d:48:84:1b:a5:da: bf:2c:17:bb:49:de:3c:d9:28:f6:c9:84:45:50:3b: fe:e7:56:f6:05:ee:9f:78:54:9d:22:86:83:00:4d: 24:52:9c:5e:21:ec:2a:81:f2:d5:58:5b:25:c8:af: 73:15:ce:de:87:cb:ac:96:86:11:54:e0:3e:fd:dd: ac:9a:60:e9:f2:66:ec:4c:76:3f:ca:43:0c:a0:e3: 21:a7:82:43:a8:af:0e:ca:8a:ec:63:64:1e:dc:6e: 15:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:91:B0:AE:DE:27:7A:17:11:1E:FF:19:59:FF:56:D5:95:3E:D0:30 X509v3 Authority Key Identifier: keyid:1F:98:5A:F8:4B:69:45:80:4B:85:3C:2E:7C:09:AE:DC:28:B6:B2:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:21:2d:40:46:f3:04:db:5e:77:c1:f2:91:57:4f:c1:e4:bf: 06:bb:80:cd:7e:d4:c5:78:d8:91:6e:f8:c6:82:06:82:07:58: 4d:bd:33:ec:8f:92:b2:17:80:16:17:ab:26:ac:54:4e:ab:51: 8c:69:ad:56:46:ef:ad:13:6f:69:8d:ed:9f:a0:84:74:7b:21: e7:72:26:76:d5:48:ca:78:e7:3b:29:9d:53:fd:d1:0c:cf:2a: 23:98:13:91:a2:f9:50:99:90:d8:12:ef:2d:23:4f:9c:15:69: 68:6d:20:24:d4:df:ee:ce:49:85:de:cf:d4:d1:26:6e:b5:6a: f7:32:0c:f8:e7:54:b7:99:01:d5:c9:f9:42:54:ff:f9:0a:fb: b8:b5:21:3b:38:f7:d6:7c:0d:12:df:54:31:9f:0f:1c:f5:3e: e3:04:5c:97:9e:0b:1a:2f:b3:c0:23:97:11:82:78:08:0d:b9: 90:3e:02:c2:7c:59:ee:e2:bb:07:bc:c8:33:64:31:d6:91:1b: f8:30:a9:81:83:d5:05:12:56:9b:06:2a:9d:9e:50:17:19:9d: fd:d9:58:73:b5:9d:6e:ec:25:47:c5:1c:b8:fc:63:df:b7:6e: 02:3b:97:d0:23:81:67:14:bd:5c:f4:43:24:a7:cf:b5:7c:8d: 50:78:49:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQsny3tatBVy+LkL2PJGgjViWVvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY5ODVBRjg0QjY5NDU4MDRCODUzQzJFN0MwOUFFREMy OEI2QjJFNTAeFw0yNTEwMTkwMjQ2NDhaFw0yNTEwMjIwNzMzNDhaMDMxMTAvBgNV BAMTKEMyOTFCMEFFREUyNzdBMTcxMTFFRkYxOTU5RkY1NkQ1OTUzRUQwMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5GpXoXQzSXoPQVOWZOmAatnkx N2qxXk6MtbceH7E2rcZHi4iTHbSgqHr6tK+OSIueFUYdQ/wxrGa7Iqbl9JjhAFrb bH1SW5ECI1dgrNdR+J+8GDMSpYCw8cYFCmfIyRjfOEXb9/0L1NZ54l86F+A4G5Z7 tQHqbQwOcefyF3NSoENzK9xMsBvZrZP2d7TufsEdx/B9jMVMZJI8qCnuln1IhBul 2r8sF7tJ3jzZKPbJhEVQO/7nVvYF7p94VJ0ihoMATSRSnF4h7CqB8tVYWyXIr3MV zt6Hy6yWhhFU4D793ayaYOnyZuxMdj/KQwyg4yGngkOorw7KiuxjZB7cbhVHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwpGwrt4nehcRHv8ZWf9W1ZU+0DAwHwYDVR0j BBgwFoAUH5ha+EtpRYBLhTwufAmu3Ci2suUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWI5MjZlMC02YzZiLTQ4NTUtYTc1Ni1lMGNiYjdhZDAxZjgvMC8xRjk4NUFGODRC Njk0NTgwNEI4NTNDMkU3QzA5QUVEQzI4QjZCMkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY5ODVBRjg0QjY5NDU4MDRCODUzQzJFN0MwOUFFREMyOEI2 QjJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiOTI2ZTAtNmM2Yi00ODU1LWE3 NTYtZTBjYmI3YWQwMWY4LzAvMUY5ODVBRjg0QjY5NDU4MDRCODUzQzJFN0MwOUFF REMyOEI2QjJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJMhLUBG8wTbXnfB8pFXT8Hkvwa7gM1+1MV4 2JFu+MaCBoIHWE29M+yPkrIXgBYXqyasVE6rUYxprVZG760Tb2mN7Z+ghHR7Iedy JnbVSMp45zspnVP90QzPKiOYE5Gi+VCZkNgS7y0jT5wVaWhtICTU3+7OSYXez9TR Jm61avcyDPjnVLeZAdXJ+UJU//kK+7i1ITs499Z8DRLfVDGfDxz1PuMEXJeeCxov s8AjlxGCeAgNuZA+AsJ8We7iuwe8yDNkMdaRG/gwqYGD1QUSVpsGKp2eUBcZnf3Z WHO1nW7sJUfFHLj8Y9+3bgI7l9AjgWcUvVz0QySnz7V8jVB4SZo= -----END CERTIFICATE-----Generated at Mon Oct 20 17:43:15 2025 by rpki-client