$ rpki-client -vvf repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft File: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft (raw, json) Hash identifier: YuQ7LNwnwC0ms8Jgg0S/7oOIh37zWCROIlJJyK4LwqI= Subject key identifier: FE:23:E7:44:2A:1E:66:45:F5:6A:88:88:18:6C:88:7F:6B:E9:89:1D Authority key identifier: 1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 Certificate issuer: /CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Certificate serial: 13AFD54353071B8B97750F3B04DD1273B1C182FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft Manifest number: 01CB Signing time: Sat 18 Oct 2025 03:41:40 +0000 Manifest this update: Sat 18 Oct 2025 03:36:40 +0000 Manifest next update: Tue 21 Oct 2025 15:16:40 +0000 Files and hashes: 1: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl (hash: dAiJVMwS7uYY/W7lQAsBinLtVvW0/6sd9tFAo57pKYU=) 2: 3130332e38372e3230322e302f32342d3234203d3e20313530323539.roa (hash: 6g8PbhkbZbLbnKoZLBgTfyMpeWvcwwbeUmAnxaDznuY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:af:d5:43:53:07:1b:8b:97:75:0f:3b:04:dd:12:73:b1:c1:82:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Validity Not Before: Oct 18 03:36:40 2025 GMT Not After : Oct 21 15:16:40 2025 GMT Subject: CN=FE23E7442A1E6645F56A8888186C887F6BE9891D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bf:dd:6c:31:19:19:98:b2:0a:42:cf:a2:e3: f0:55:ca:d8:7f:9e:f4:ab:e6:67:8a:87:77:21:99: ae:30:c7:28:be:fb:c6:74:8a:13:d5:8e:c7:cf:38: 0a:3b:08:df:45:09:26:80:a6:5e:69:ce:98:31:da: 0c:c4:fe:e4:c4:8b:d0:d4:cd:66:77:f2:27:6b:74: 0c:1f:bd:28:f0:d4:5c:7f:b0:76:73:67:10:92:88: 5c:f7:0a:89:1e:4d:52:09:d5:cd:02:1d:fa:88:82: 41:df:7a:74:e2:e6:7b:88:de:8d:91:65:66:8e:b7: fe:f6:67:08:54:e2:24:d7:b7:41:45:71:b7:e8:64: 79:5e:45:36:51:4e:d5:f6:c3:16:76:1e:95:ed:97: c6:f3:c3:66:b9:b5:52:63:4e:d3:ad:72:30:45:93: 65:ee:8a:22:1a:36:a2:0a:74:f7:9d:97:41:15:29: 31:8c:1f:9f:ca:f5:c9:c8:50:80:8b:d8:ec:74:b6: 61:f3:b8:06:b4:b8:bf:2c:85:b2:1d:67:a3:28:c4: be:79:c8:19:c7:57:ab:8e:48:79:31:c7:d7:00:42: 7f:cb:63:e6:4e:e7:e3:18:6e:20:de:54:e5:5a:ba: 81:ed:de:a8:2f:4b:7b:5a:a8:90:c2:15:d0:e3:b2: 8b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:23:E7:44:2A:1E:66:45:F5:6A:88:88:18:6C:88:7F:6B:E9:89:1D X509v3 Authority Key Identifier: keyid:1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:89:99:80:c2:55:fa:87:d5:15:30:8d:0c:67:97:2b:a4:74: 66:de:69:b2:28:75:35:57:36:27:42:48:ee:39:f2:6f:45:a0: 63:ae:b1:42:fd:8c:cf:7a:70:c1:05:90:a4:d3:66:6c:7f:a6: 3f:23:29:95:f0:1f:83:32:b7:64:ce:a2:38:3c:d0:08:f4:13: 71:b1:7f:6d:6a:e3:61:56:9c:c4:39:b8:c0:2a:f7:f4:0f:fd: 91:7e:bf:02:84:02:f5:f9:a6:bf:a1:78:45:93:26:50:0f:9b: b7:f6:07:db:d8:13:85:bb:65:fc:bb:ab:62:a7:14:74:22:a7: 3e:f0:05:e9:6b:9a:3a:d8:6a:59:41:c4:7c:4e:ce:f8:af:e9: 91:62:80:15:88:69:eb:9a:11:54:e5:e7:db:cc:08:fa:51:71: 56:ba:64:c6:a5:8b:26:49:ec:58:be:38:ca:5a:ae:f3:92:f0: 5b:fa:8c:74:22:ae:b9:b8:a3:2f:ff:8a:de:39:4e:a7:8d:d9: 36:7c:b4:f4:cf:a7:ba:cb:2a:99:6e:1d:1c:73:5f:91:6d:5e: 6f:f6:8b:cb:53:fb:04:4f:b5:80:0f:50:c0:fd:f3:8b:74:03: 57:c3:1b:ca:08:a2:11:db:81:31:59:8e:94:c5:ea:67:a3:ba: f7:24:9d:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE6/VQ1MHG4uXdQ87BN0Sc7HBgv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJE NUNCOEExNzAeFw0yNTEwMTgwMzM2NDBaFw0yNTEwMjExNTE2NDBaMDMxMTAvBgNV BAMTKEZFMjNFNzQ0MkExRTY2NDVGNTZBODg4ODE4NkM4ODdGNkJFOTg5MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHv91sMRkZmLIKQs+i4/BVyth/ nvSr5meKh3chma4wxyi++8Z0ihPVjsfPOAo7CN9FCSaApl5pzpgx2gzE/uTEi9DU zWZ38idrdAwfvSjw1Fx/sHZzZxCSiFz3CokeTVIJ1c0CHfqIgkHfenTi5nuI3o2R ZWaOt/72ZwhU4iTXt0FFcbfoZHleRTZRTtX2wxZ2HpXtl8bzw2a5tVJjTtOtcjBF k2XuiiIaNqIKdPedl0EVKTGMH5/K9cnIUICL2Ox0tmHzuAa0uL8shbIdZ6MoxL55 yBnHV6uOSHkxx9cAQn/LY+ZO5+MYbiDeVOVauoHt3qgvS3taqJDCFdDjsov7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/iPnRCoeZkX1aoiIGGyIf2vpiR0wHwYDVR0j BBgwFoAUHPEV0CGMq04xZ6fVsND6wtXLihcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGQ1OTQzMC1kZTc4LTQ1MzItOGUxYS0zNGI1M2I4ZjI2ZmEvMC8xQ0YxMTVEMDIx OENBQjRFMzE2N0E3RDVCMEQwRkFDMkQ1Q0I4QTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJENUNC OEExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhkNTk0MzAtZGU3OC00NTMyLThl MWEtMzRiNTNiOGYyNmZhLzAvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZB QzJENUNCOEExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFeJmYDCVfqH1RUwjQxnlyukdGbeabIodTVX NidCSO458m9FoGOusUL9jM96cMEFkKTTZmx/pj8jKZXwH4Myt2TOojg80Aj0E3Gx f21q42FWnMQ5uMAq9/QP/ZF+vwKEAvX5pr+heEWTJlAPm7f2B9vYE4W7Zfy7q2Kn FHQipz7wBelrmjrYallBxHxOzviv6ZFigBWIaeuaEVTl59vMCPpRcVa6ZMaliyZJ 7Fi+OMparvOS8Fv6jHQirrm4oy//it45TqeN2TZ8tPTPp7rLKpluHRxzX5FtXm/2 i8tT+wRPtYAPUMD984t0A1fDG8oIohHbgTFZjpTF6mejuvckncI= -----END CERTIFICATE-----Generated at Mon Oct 20 09:42:21 2025 by rpki-client