$ rpki-client -vvf repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft File: 1B5E8685B8219B59B20D12DC9D13863826746ED6.mft (raw, json) Hash identifier: 53fmqA2s/AvbB/zImpKomySVuULauBymxS2hzV5eq0Q= Subject key identifier: B6:22:05:2B:4A:0B:FA:14:CB:06:2A:7B:3B:F3:AE:00:3C:30:5C:29 Authority key identifier: 1B:5E:86:85:B8:21:9B:59:B2:0D:12:DC:9D:13:86:38:26:74:6E:D6 Certificate issuer: /CN=1B5E8685B8219B59B20D12DC9D13863826746ED6 Certificate serial: 0D84989069F657FB9A63068867E77941BD781277 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft Manifest number: EB Signing time: Sat 18 Oct 2025 06:51:05 +0000 Manifest this update: Sat 18 Oct 2025 06:46:05 +0000 Manifest next update: Tue 21 Oct 2025 12:12:05 +0000 Files and hashes: 1: 1B5E8685B8219B59B20D12DC9D13863826746ED6.crl (hash: De918y6bD2bpIJV5RpHY02O2c8hO8n2uJi8/KE3OUz0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.crl rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 12:12:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:84:98:90:69:f6:57:fb:9a:63:06:88:67:e7:79:41:bd:78:12:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B5E8685B8219B59B20D12DC9D13863826746ED6 Validity Not Before: Oct 18 06:46:05 2025 GMT Not After : Oct 21 12:12:05 2025 GMT Subject: CN=B622052B4A0BFA14CB062A7B3BF3AE003C305C29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:14:31:b6:13:d3:99:73:f4:46:25:ae:c9:a7: 1a:e6:99:f6:a3:d4:f8:0d:12:4d:bb:aa:83:15:25: d8:66:ca:b3:42:54:30:e2:be:76:5a:f2:f7:17:56: fb:ea:30:39:3d:07:06:0b:f1:c4:eb:fc:3d:33:bd: 57:a2:c6:8a:1a:9e:1d:c5:af:93:51:ac:0f:91:93: bb:b6:99:a5:b4:77:0e:c6:3c:34:c6:e6:dd:f0:d6: a6:b7:89:60:b0:bc:60:35:b0:40:d1:08:4e:a1:3a: 41:ae:55:95:e3:a7:24:88:bc:a6:75:77:b8:03:28: 9e:83:e2:38:5e:52:7e:38:9d:3f:54:5e:7a:98:c4: a5:e6:f2:bb:d8:87:9c:cd:5b:0c:1a:46:c3:89:2b: 95:f1:2c:7a:68:67:eb:21:5b:47:d5:01:b6:87:ee: 90:fd:ea:4a:1b:32:e4:e8:50:7f:3f:e1:e2:02:06: 33:99:92:20:26:ef:1d:55:9e:f8:02:fa:c1:a5:38: 35:a2:a0:d2:a3:9b:6b:29:b4:e5:95:f2:81:33:f5: 43:55:98:89:bb:b2:e1:d4:95:82:36:27:56:6e:5b: 55:7e:91:87:b1:b3:2f:7d:f1:72:b4:3c:f6:3d:72: 97:44:e2:de:bb:42:6a:88:0e:f0:e4:38:15:7b:bb: 1a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:22:05:2B:4A:0B:FA:14:CB:06:2A:7B:3B:F3:AE:00:3C:30:5C:29 X509v3 Authority Key Identifier: keyid:1B:5E:86:85:B8:21:9B:59:B2:0D:12:DC:9D:13:86:38:26:74:6E:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:1b:ad:10:b9:18:7b:55:38:5a:0a:0a:9c:16:80:54:6b:10: 3f:ef:01:82:52:ff:65:9d:29:81:e7:d4:60:c0:4d:87:7b:93: bf:79:1b:ac:f9:24:57:ec:9a:87:24:c7:a6:b9:9f:46:a5:69: a4:f3:b2:dc:c1:05:f4:43:f1:de:32:43:e2:ed:43:3d:84:b0: 45:8f:9a:c2:cf:64:df:ab:7c:53:68:c6:48:c6:71:b1:ef:a5: 15:92:b7:de:8e:33:24:4f:2a:09:16:f5:b1:db:ef:48:6f:7a: 61:c9:e8:2f:e9:bd:ad:49:ca:49:9c:e2:11:5b:d9:d2:15:25: c2:6f:60:49:21:02:b0:07:24:65:b5:8b:f6:86:aa:9a:41:77: e0:82:6f:8d:7e:57:46:f8:0c:68:6a:91:13:13:56:5f:8b:67: 94:de:6f:d5:6a:9d:c7:40:7f:b1:50:ea:ba:d7:9f:38:37:a3: 32:06:95:cf:94:cc:e8:79:1d:c6:eb:5d:a5:ec:50:a3:15:21: 7a:e3:bc:ff:bd:59:d6:fc:54:d2:0b:06:4f:8b:5c:5a:e2:54: 96:ec:87:bc:49:d1:c5:b2:b8:c2:85:4b:4d:8e:5c:18:ad:2a: b8:4a:a0:b6:bb:a8:b5:5b:b7:ee:7f:4e:76:f2:d2:bc:ba:1e: 9e:c9:3c:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDYSYkGn2V/uaYwaIZ+d5Qb14EncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2Mzgy Njc0NkVENjAeFw0yNTEwMTgwNjQ2MDVaFw0yNTEwMjExMjEyMDVaMDMxMTAvBgNV BAMTKEI2MjIwNTJCNEEwQkZBMTRDQjA2MkE3QjNCRjNBRTAwM0MzMDVDMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5FDG2E9OZc/RGJa7Jpxrmmfaj 1PgNEk27qoMVJdhmyrNCVDDivnZa8vcXVvvqMDk9BwYL8cTr/D0zvVeixooanh3F r5NRrA+Rk7u2maW0dw7GPDTG5t3w1qa3iWCwvGA1sEDRCE6hOkGuVZXjpySIvKZ1 d7gDKJ6D4jheUn44nT9UXnqYxKXm8rvYh5zNWwwaRsOJK5XxLHpoZ+shW0fVAbaH 7pD96kobMuToUH8/4eICBjOZkiAm7x1VnvgC+sGlODWioNKjm2sptOWV8oEz9UNV mIm7suHUlYI2J1ZuW1V+kYexsy998XK0PPY9cpdE4t67QmqIDvDkOBV7uxq/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtiIFK0oL+hTLBip7O/OuADwwXCkwHwYDVR0j BBgwFoAUG16Ghbghm1myDRLcnROGOCZ0btYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzQwOTRkMi1lMThkLTQ4NDAtODRmYS1jNTc1N2FmNTgwZjEvMS8xQjVFODY4NUI4 MjE5QjU5QjIwRDEyREM5RDEzODYzODI2NzQ2RUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2MzgyNjc0 NkVENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzEvMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2 MzgyNjc0NkVENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAbrRC5GHtVOFoKCpwWgFRrED/vAYJS/2Wd KYHn1GDATYd7k795G6z5JFfsmockx6a5n0alaaTzstzBBfRD8d4yQ+LtQz2EsEWP msLPZN+rfFNoxkjGcbHvpRWSt96OMyRPKgkW9bHb70hvemHJ6C/pva1Jykmc4hFb 2dIVJcJvYEkhArAHJGW1i/aGqppBd+CCb41+V0b4DGhqkRMTVl+LZ5Teb9VqncdA f7FQ6rrXnzg3ozIGlc+UzOh5HcbrXaXsUKMVIXrjvP+9Wdb8VNILBk+LXFriVJbs h7xJ0cWyuMKFS02OXBitKrhKoLa7qLVbt+5/Tnby0ry6Hp7JPHo= -----END CERTIFICATE-----Generated at Mon Oct 20 12:25:23 2025 by rpki-client