$ rpki-client -vvf repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft File: 1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft (raw, json) Hash identifier: Vff69hF99LdY7e6Yl1LLUzf9tq4U5adYm9lUxKcW5iQ= Subject key identifier: 00:36:20:DF:63:39:45:C0:C9:AA:53:19:44:D6:27:D9:AD:70:D5:D7 Authority key identifier: 1E:AF:FD:F7:6C:26:1A:0C:98:01:D9:F2:B0:2D:5B:A1:49:67:F3:CD Certificate issuer: /CN=1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD Certificate serial: 200B8D46D71463C4D5B934BA7D6AE9879B6673A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft Manifest number: 01AF Signing time: Sun 19 Oct 2025 19:01:23 +0000 Manifest this update: Sun 19 Oct 2025 18:56:23 +0000 Manifest next update: Wed 22 Oct 2025 22:22:23 +0000 Files and hashes: 1: 3130332e3139302e39342e302f32342d3234203d3e20313530353531.roa (hash: ZLit+8UW98ngBL2LPf2rRbdHr7opbJkANqxKGJG/n4c=) 2: 1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl (hash: gXiWDrV9aH7TjC5+su8rs2dmlgs6HiPCRtnJ2DNEbdY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 22:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:0b:8d:46:d7:14:63:c4:d5:b9:34:ba:7d:6a:e9:87:9b:66:73:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD Validity Not Before: Oct 19 18:56:23 2025 GMT Not After : Oct 22 22:22:23 2025 GMT Subject: CN=003620DF633945C0C9AA531944D627D9AD70D5D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:80:bc:2f:b3:57:4f:49:85:72:14:24:08:4d: fb:3e:19:6a:36:8f:db:71:14:88:c9:de:7d:50:14: 79:70:63:b2:95:d7:b6:68:55:dd:7e:d1:2b:24:7f: 4a:f0:09:0d:cb:f8:92:a4:fe:4c:c9:ed:54:58:f4: d8:3f:a7:e0:65:d5:a2:4a:3b:17:82:cb:32:83:72: 92:c8:8c:d7:d0:a9:b7:bc:8f:4e:1a:f9:c5:ae:32: ff:56:d9:56:db:67:d1:e6:f1:f8:57:0a:17:a1:f1: 30:ec:db:0b:51:7e:89:aa:90:77:99:df:d0:e8:c9: ab:55:7f:44:d5:30:3a:69:8b:67:a1:cf:26:c7:3a: 87:0b:ee:a6:6f:3c:b9:62:de:01:e8:e7:f1:4e:1e: a1:86:17:8f:96:31:d8:62:98:85:12:12:10:32:c3: b3:e0:fc:43:30:b4:74:60:cb:56:f2:be:26:6c:03: f8:ca:7c:99:3c:e6:29:13:d4:1a:3b:61:34:90:90: b2:2e:02:08:3d:c2:84:cc:c8:b7:ba:77:3c:8a:31: 97:8e:db:83:e0:12:63:23:f2:d1:69:55:d8:26:37: 65:a4:2c:e3:b8:ed:69:5f:48:4b:ee:a1:94:fa:49: c8:d3:35:77:90:d1:fd:1b:33:f4:2e:a7:31:e4:43: 50:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:36:20:DF:63:39:45:C0:C9:AA:53:19:44:D6:27:D9:AD:70:D5:D7 X509v3 Authority Key Identifier: keyid:1E:AF:FD:F7:6C:26:1A:0C:98:01:D9:F2:B0:2D:5B:A1:49:67:F3:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:a2:31:de:ea:d9:5b:29:2c:57:ee:22:7a:7c:ce:fa:28:45: e1:56:be:e2:eb:f5:0d:7e:e8:d9:c6:ad:3c:0e:6b:b4:60:26: e3:e6:28:10:63:2d:cc:81:21:b2:94:60:ba:49:38:c7:56:cc: 28:ac:cc:49:02:ee:fd:ed:16:75:ad:cf:67:6d:a0:45:db:39: e3:0b:5c:13:7a:a4:bf:fe:b8:4b:de:e5:0c:0a:5c:b9:27:a5: f9:20:c8:6d:6c:5e:74:a0:0d:11:49:e1:6b:a4:9b:27:96:ad: 11:91:23:0b:74:09:88:53:64:ec:c3:ee:0a:e3:61:5b:10:ef: 05:7a:c1:b5:e3:93:c8:30:e5:51:0f:4e:2c:85:d6:de:10:e4: 2a:6d:f4:2c:24:2e:c1:97:ba:40:e6:2d:5a:e7:da:f4:59:ed: 29:b2:a1:69:17:28:ad:48:0d:9e:d5:e2:1a:81:af:25:dd:bd: 5e:da:81:71:a0:7f:f7:b2:79:e4:1a:0d:b1:ab:68:a4:db:07: 2a:39:ef:35:b0:39:dc:df:a6:39:51:e4:8c:72:eb:b0:4e:52: e2:1d:04:c8:0e:f7:2d:ea:e2:af:14:a3:32:c7:8c:ee:7e:69: 91:97:43:dc:47:63:1a:0b:3d:0f:d7:ec:0f:9d:d4:7a:de:a6: 5f:41:f2:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIAuNRtcUY8TVuTS6fWrph5tmc6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVCQTE0 OTY3RjNDRDAeFw0yNTEwMTkxODU2MjNaFw0yNTEwMjIyMjIyMjNaMDMxMTAvBgNV BAMTKDAwMzYyMERGNjMzOTQ1QzBDOUFBNTMxOTQ0RDYyN0Q5QUQ3MEQ1RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSgLwvs1dPSYVyFCQITfs+GWo2 j9txFIjJ3n1QFHlwY7KV17ZoVd1+0Sskf0rwCQ3L+JKk/kzJ7VRY9Ng/p+Bl1aJK OxeCyzKDcpLIjNfQqbe8j04a+cWuMv9W2VbbZ9Hm8fhXCheh8TDs2wtRfomqkHeZ 39DoyatVf0TVMDppi2ehzybHOocL7qZvPLli3gHo5/FOHqGGF4+WMdhimIUSEhAy w7Pg/EMwtHRgy1byviZsA/jKfJk85ikT1Bo7YTSQkLIuAgg9woTMyLe6dzyKMZeO 24PgEmMj8tFpVdgmN2WkLOO47WlfSEvuoZT6ScjTNXeQ0f0bM/QupzHkQ1BdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUADYg32M5RcDJqlMZRNYn2a1w1dcwHwYDVR0j BBgwFoAUHq/992wmGgyYAdnysC1boUln880wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Nzk4MDkxZS1jMWFlLTQwNDktOTZkMi1jNGNlMzdmZGMzNWIvMC8xRUFGRkRGNzZD MjYxQTBDOTgwMUQ5RjJCMDJENUJBMTQ5NjdGM0NELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVCQTE0OTY3 RjNDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc5ODA5MWUtYzFhZS00MDQ5LTk2 ZDItYzRjZTM3ZmRjMzViLzAvMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVC QTE0OTY3RjNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqiMd7q2VspLFfuInp8zvooReFWvuLr9Q1+ 6NnGrTwOa7RgJuPmKBBjLcyBIbKUYLpJOMdWzCiszEkC7v3tFnWtz2dtoEXbOeML XBN6pL/+uEve5QwKXLknpfkgyG1sXnSgDRFJ4WukmyeWrRGRIwt0CYhTZOzD7grj YVsQ7wV6wbXjk8gw5VEPTiyF1t4Q5Cpt9CwkLsGXukDmLVrn2vRZ7SmyoWkXKK1I DZ7V4hqBryXdvV7agXGgf/eyeeQaDbGraKTbByo57zWwOdzfpjlR5Ixy67BOUuId BMgO9y3q4q8UozLHjO5+aZGXQ9xHYxoLPQ/X7A+d1Hrepl9B8i8= -----END CERTIFICATE-----Generated at Mon Oct 20 12:08:26 2025 by rpki-client