$ rpki-client -vvf repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft File: 1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft (raw, json) Hash identifier: zHXHvLsRG2tPYLceHHrMUIkYr79OKG2FL/smZ2AJ/lw= Subject key identifier: BD:3D:1A:79:8A:06:B5:B4:59:BD:5A:33:FA:2F:FC:5B:B5:85:1F:CA Authority key identifier: 1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51 Certificate issuer: /CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51 Certificate serial: 47A9AE7F8A64A8740E5E36A71042C74D39373184 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft Manifest number: 022C Signing time: Sun 19 Oct 2025 13:31:06 +0000 Manifest this update: Sun 19 Oct 2025 13:26:06 +0000 Manifest next update: Wed 22 Oct 2025 14:59:06 +0000 Files and hashes: 1: 1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl (hash: /WUoUcZNIB3h1WngU0RImSTiAoI1gs2YmIJjTFj4UIQ=) 2: 3130332e3138352e32372e302f32342d3234203d3e20313439373039.roa (hash: R+hXYDLG/c17YyPsyb/GD72/SjNkAc2qPCjHbpzY5X4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 14:59:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:a9:ae:7f:8a:64:a8:74:0e:5e:36:a7:10:42:c7:4d:39:37:31:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51 Validity Not Before: Oct 19 13:26:06 2025 GMT Not After : Oct 22 14:59:06 2025 GMT Subject: CN=BD3D1A798A06B5B459BD5A33FA2FFC5BB5851FCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3f:4f:79:eb:0c:d3:8d:5f:b0:9b:5d:b4:2b: 39:1e:23:22:0f:3d:22:00:45:ea:b8:8c:01:ec:77: c1:9d:07:43:ee:c2:ff:a4:8b:da:d5:62:ae:69:7a: 64:23:15:21:32:96:b4:77:43:f8:32:e7:ea:da:1c: db:1a:1f:fc:40:f5:eb:1e:34:a3:1d:4e:23:b0:73: bd:ea:9a:7c:86:2b:4d:26:ec:39:14:91:c5:99:b7: 76:32:bd:c9:c0:a2:7b:7f:39:7a:06:5d:e7:1c:0b: 93:99:c3:68:57:2f:39:48:32:e6:d0:4f:2e:9f:e5: fb:ad:06:22:46:ae:94:6c:fd:25:85:7e:94:a6:e2: a3:32:30:d8:24:6f:89:5b:ca:5b:21:9f:a2:9a:c8: ae:36:13:dc:0f:fd:9f:a2:a1:8a:70:2c:bd:40:ff: 4b:1f:cb:ce:45:62:ee:4f:67:e6:62:10:ab:a0:e8: d9:ae:a9:f6:6d:da:b9:67:64:09:d4:42:48:5d:19: 59:d9:6b:df:1b:cb:c1:87:47:c3:5d:cc:57:c3:1c: 75:c5:ee:95:1a:59:ae:18:26:cb:35:59:b6:c0:c9: 63:13:13:00:ff:e0:9b:a1:fc:90:ef:b5:45:6b:0d: e0:86:e5:ec:77:6f:6d:bb:55:4f:ec:f4:08:21:7a: a7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3D:1A:79:8A:06:B5:B4:59:BD:5A:33:FA:2F:FC:5B:B5:85:1F:CA X509v3 Authority Key Identifier: keyid:1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:43:d3:55:3f:2d:b5:8f:8d:e3:90:51:37:80:f9:0d:04:eb: 8d:09:3e:2f:1c:63:8b:34:a2:5b:93:9a:b2:07:2f:15:c5:40: b3:4c:08:33:66:eb:0d:d2:f1:e3:3f:81:8a:17:ce:dd:68:74: 72:0a:17:bd:43:3b:0e:60:52:6e:b7:67:9e:4d:6b:76:8b:a8: 47:6a:d5:6b:98:64:b6:62:ed:06:d5:c3:7e:d8:bf:c5:76:dd: cc:f0:a0:c2:94:73:e5:bf:8a:db:8d:ed:e6:45:55:47:4c:37: 70:5e:24:35:07:9c:6e:c1:18:da:3f:8b:fc:16:f6:18:63:bc: e2:79:2c:2e:af:c1:ba:f8:37:db:58:0e:71:36:23:c6:eb:8e: 4a:79:03:ac:06:dd:83:61:19:36:c3:2d:ef:88:c5:18:2d:ea: 18:92:60:b5:34:6f:76:69:cd:d2:73:8e:a0:2c:d4:77:bf:16: 8f:b8:be:b7:d1:1f:28:ca:7a:4d:51:85:da:c3:ee:c1:ea:9a: ec:6b:63:2d:37:c1:94:dd:ef:a1:6a:ee:e6:7f:04:6d:5d:f6: 1d:d0:f9:12:83:52:84:85:a8:2c:47:14:7c:6e:8f:4a:18:fb: a8:27:e4:95:a1:8c:8b:44:03:36:ce:ee:36:75:c2:3a:cc:15: 44:ea:d9:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR6muf4pkqHQOXjanEELHTTk3MYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFCRDRB NUMxMkM1MTAeFw0yNTEwMTkxMzI2MDZaFw0yNTEwMjIxNDU5MDZaMDMxMTAvBgNV BAMTKEJEM0QxQTc5OEEwNkI1QjQ1OUJENUEzM0ZBMkZGQzVCQjU4NTFGQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+P0956wzTjV+wm120KzkeIyIP PSIAReq4jAHsd8GdB0Puwv+ki9rVYq5pemQjFSEylrR3Q/gy5+raHNsaH/xA9ese NKMdTiOwc73qmnyGK00m7DkUkcWZt3YyvcnAont/OXoGXeccC5OZw2hXLzlIMubQ Ty6f5futBiJGrpRs/SWFfpSm4qMyMNgkb4lbylshn6KayK42E9wP/Z+ioYpwLL1A /0sfy85FYu5PZ+ZiEKug6NmuqfZt2rlnZAnUQkhdGVnZa98by8GHR8NdzFfDHHXF 7pUaWa4YJss1WbbAyWMTEwD/4Juh/JDvtUVrDeCG5ex3b227VU/s9AgheqftAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvT0aeYoGtbRZvVoz+i/8W7WFH8owHwYDVR0j BBgwFoAUGn5SW1aenK4DNb/2bPob1KXBLFEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDZjYWNkNC00ZTA4LTRkZDgtYTVhZS05YTVhNjNhOGQyZmEvMC8xQTdFNTI1QjU2 OUU5Q0FFMDMzNUJGRjY2Q0ZBMUJENEE1QzEyQzUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFCRDRBNUMx MkM1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ2Y2FjZDQtNGUwOC00ZGQ4LWE1 YWUtOWE1YTYzYThkMmZhLzAvMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFC RDRBNUMxMkM1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMRD01U/LbWPjeOQUTeA+Q0E640JPi8cY4s0 oluTmrIHLxXFQLNMCDNm6w3S8eM/gYoXzt1odHIKF71DOw5gUm63Z55Na3aLqEdq 1WuYZLZi7QbVw37Yv8V23czwoMKUc+W/ituN7eZFVUdMN3BeJDUHnG7BGNo/i/wW 9hhjvOJ5LC6vwbr4N9tYDnE2I8brjkp5A6wG3YNhGTbDLe+IxRgt6hiSYLU0b3Zp zdJzjqAs1He/Fo+4vrfRHyjKek1RhdrD7sHqmuxrYy03wZTd76Fq7uZ/BG1d9h3Q +RKDUoSFqCxHFHxuj0oY+6gn5JWhjItEAzbO7jZ1wjrMFUTq2cI= -----END CERTIFICATE-----Generated at Mon Oct 20 23:10:13 2025 by rpki-client