$ rpki-client -vvf repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft File: 1CA9E40710262DA751A67E932477D6E12B4B2DED.mft (raw, json) Hash identifier: 7/nfD4w5LIsh3hRhAMdw6HgYoSilNdT8Smf5xXf8dIQ= Subject key identifier: DE:9C:E4:CD:5D:88:DE:E5:2F:03:0B:E3:B3:6D:18:2A:DB:56:17:9A Authority key identifier: 1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED Certificate issuer: /CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Certificate serial: 64632CE2D9BD4DF7706228CBB2871781166F242A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft Manifest number: 051C Signing time: Sat 18 Oct 2025 01:30:02 +0000 Manifest this update: Sat 18 Oct 2025 01:25:02 +0000 Manifest next update: Tue 21 Oct 2025 11:02:02 +0000 Files and hashes: 1: 3130332e3132332e3130342e302f32322d3234203d3e20313338303730.roa (hash: Yh/X3wf3xgSBLANEs82b75GugxHKann/OAKH3YrZy2U=) 2: 323430333a396663303a3a2f33322d3438203d3e20313338303730.roa (hash: g2I091o7xGYF01O50CUZMPsQctw2lflU2v4s2FAorWY=) 3: 3130332e3132332e3130342e302f32342d3234203d3e20313338303730.roa (hash: yHCpL2jeoTRdKkL9PeW/BmTUh9ZLAObQa8uLRwAc8Ww=) 4: 3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa (hash: cke05Fz1pU7ph5quQU6BQAXvAK/qW0tlFEcIja5SVaM=) 5: 1CA9E40710262DA751A67E932477D6E12B4B2DED.crl (hash: Ioo2T9QuPYQ54CWOhPyaEkvs3zwnk9H8Rg8HD/2FJTM=) 6: 3130332e3132332e3130362e302f32342d3234203d3e20313338303730.roa (hash: 1Qj+0yJlnyRAkhJQW7JxleOTtApsG7fPmAlVCQ6z7p8=) 7: 3130332e3132332e3130352e302f32342d3234203d3e20313338303730.roa (hash: BfFCh7Vfs8z+WKVbxTTngHawwEIYaKlayBm3t+ZFnyU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 11:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:63:2c:e2:d9:bd:4d:f7:70:62:28:cb:b2:87:17:81:16:6f:24:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Validity Not Before: Oct 18 01:25:02 2025 GMT Not After : Oct 21 11:02:02 2025 GMT Subject: CN=DE9CE4CD5D88DEE52F030BE3B36D182ADB56179A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4c:d5:f7:f6:9c:08:f2:76:74:32:5e:17:10: 71:68:2e:1a:e1:3f:9b:29:cb:68:ac:09:ba:d6:33: f3:97:98:f8:dd:a1:48:f5:45:ec:09:09:82:18:f7: 9c:32:7e:3e:23:9e:89:bc:bf:ca:d7:4a:18:bd:c5: 78:91:af:0d:9f:65:12:8f:14:f6:07:7b:31:a7:14: 2a:09:04:87:f3:fd:eb:ac:d6:c5:db:1e:34:a5:d4: 6b:75:2b:35:55:da:8b:cc:bc:0f:f5:51:96:f6:a2: 38:cf:52:a7:bb:64:c4:cd:9f:e3:81:85:de:8c:79: d7:62:e5:f2:40:7c:87:23:3d:c8:11:d2:af:55:9b: 5e:43:b4:25:47:cb:0c:52:07:a9:24:82:8e:a1:a9: 48:04:0d:a3:5f:1b:38:12:35:9a:6f:7f:6a:34:7a: 12:09:de:28:21:4b:74:ba:72:57:1f:90:e7:25:4f: 18:ad:b7:e6:b3:c3:0c:bc:96:39:4d:ff:cf:c4:cb: 0c:ca:4f:99:9c:64:89:21:41:4b:ef:69:76:4c:3e: 03:6d:72:d6:66:88:8b:e2:e3:c6:55:68:41:39:4a: b0:0d:b0:70:9a:af:d2:ba:6b:2b:6b:f6:ea:ba:8d: b3:68:a7:69:52:8b:c7:35:97:fe:38:df:2f:30:92: 3c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9C:E4:CD:5D:88:DE:E5:2F:03:0B:E3:B3:6D:18:2A:DB:56:17:9A X509v3 Authority Key Identifier: keyid:1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:40:b5:82:f3:d9:a5:5f:29:37:e0:56:ef:f9:86:ae:5b:07: 81:f1:f0:e6:85:b0:26:38:72:e8:68:74:aa:fd:86:21:99:38: e3:73:9a:8b:00:ae:b3:3b:de:f3:06:49:11:55:6c:70:ab:d6: 00:df:09:73:10:81:d4:c4:52:57:a2:42:21:e9:a3:66:cf:70: 1f:f1:ed:54:88:3f:ec:5a:24:83:9f:5a:ca:0e:c3:31:3d:08: 9a:ab:5e:c6:ec:67:b7:bb:42:6f:07:a4:07:49:b7:00:dd:25: a3:d2:58:c4:71:ab:2e:58:92:73:16:a1:c5:87:5f:83:d0:0f: d9:23:33:de:9d:13:15:a1:42:fa:5b:af:f2:2b:6a:f4:c0:5d: f9:62:4f:da:46:f8:0b:1b:f8:49:4e:07:ef:42:d0:7c:34:ee: cc:5b:f6:e9:7e:7d:a0:76:e8:ce:ef:fc:92:f2:e4:a6:f0:36: 68:10:7a:21:b1:b9:29:b2:04:80:1e:cd:d4:a7:8c:b1:0e:3c: d5:20:cc:ec:09:85:3c:49:20:f5:da:90:22:f4:ed:f6:ef:dc: a3:71:59:be:6a:57:3a:07:25:26:99:a9:1d:4b:ad:96:ee:a9: 38:fd:9f:2d:c6:17:7d:e4:ae:52:68:73:af:0e:72:f2:87:b3: f8:2e:27:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZGMs4tm9TfdwYijLsocXgRZvJCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEy QjRCMkRFRDAeFw0yNTEwMTgwMTI1MDJaFw0yNTEwMjExMTAyMDJaMDMxMTAvBgNV BAMTKERFOUNFNENENUQ4OERFRTUyRjAzMEJFM0IzNkQxODJBREI1NjE3OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8TNX39pwI8nZ0Ml4XEHFoLhrh P5spy2isCbrWM/OXmPjdoUj1RewJCYIY95wyfj4jnom8v8rXShi9xXiRrw2fZRKP FPYHezGnFCoJBIfz/eus1sXbHjSl1Gt1KzVV2ovMvA/1UZb2ojjPUqe7ZMTNn+OB hd6Meddi5fJAfIcjPcgR0q9Vm15DtCVHywxSB6kkgo6hqUgEDaNfGzgSNZpvf2o0 ehIJ3ighS3S6clcfkOclTxitt+azwwy8ljlN/8/EywzKT5mcZIkhQUvvaXZMPgNt ctZmiIvi48ZVaEE5SrANsHCar9K6aytr9uq6jbNop2lSi8c1l/443y8wkjylAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3pzkzV2I3uUvAwvjs20YKttWF5owHwYDVR0j BBgwFoAUHKnkBxAmLadRpn6TJHfW4StLLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWQ2N2Q1Zi01NzEzLTQxNTMtODcxYi0xYjAwOGY3ZmZkZDIvMC8xQ0E5RTQwNzEw MjYyREE3NTFBNjdFOTMyNDc3RDZFMTJCNEIyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEyQjRC MkRFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFkNjdkNWYtNTcxMy00MTUzLTg3 MWItMWIwMDhmN2ZmZGQyLzAvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2 RTEyQjRCMkRFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABBAtYLz2aVfKTfgVu/5hq5bB4Hx8OaFsCY4 cuhodKr9hiGZOONzmosArrM73vMGSRFVbHCr1gDfCXMQgdTEUleiQiHpo2bPcB/x 7VSIP+xaJIOfWsoOwzE9CJqrXsbsZ7e7Qm8HpAdJtwDdJaPSWMRxqy5YknMWocWH X4PQD9kjM96dExWhQvpbr/IravTAXfliT9pG+Asb+ElOB+9C0Hw07sxb9ul+faB2 6M7v/JLy5KbwNmgQeiGxuSmyBIAezdSnjLEOPNUgzOwJhTxJIPXakCL07fbv3KNx Wb5qVzoHJSaZqR1LrZbuqTj9ny3GF33krlJoc68OcvKHs/guJ2U= -----END CERTIFICATE-----Generated at Mon Oct 20 10:08:29 2025 by rpki-client