$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft File: C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft (raw, json) Hash identifier: KAObZuPByv1jh4LR0YYjJb0ULj45rCEnyH1Ykk7jAqM= Subject key identifier: CE:98:92:03:80:5E:66:C7:F1:35:B9:62:38:22:80:49:3C:07:C5:D7 Authority key identifier: C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD Certificate issuer: /CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD Certificate serial: 580898AACC1FC038048E480AE48DFA246F49F62B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft Manifest number: 012B Signing time: Sat 18 Oct 2025 16:40:00 +0000 Manifest this update: Sat 18 Oct 2025 16:35:00 +0000 Manifest next update: Tue 21 Oct 2025 21:42:00 +0000 Files and hashes: 1: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: o3X95QY7fg1x907JEuK0Tti5YWHdGjRCJ0G2QdlLS9w=) 2: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: tTSkb3LmGeKJ+KOwhCOQc0e57SI0T8wvWexMRiAu1K4=) 3: C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl (hash: YHS48INu8OqbVXID0Xy20n58W9uP1qnk7E0uZzdsuwc=) 4: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: yHjDD2B7ssz0I97OhqKdQ6IMmUPUkeyrcBf6V6OA9mQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 21:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:08:98:aa:cc:1f:c0:38:04:8e:48:0a:e4:8d:fa:24:6f:49:f6:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD Validity Not Before: Oct 18 16:35:00 2025 GMT Not After : Oct 21 21:42:00 2025 GMT Subject: CN=CE989203805E66C7F135B962382280493C07C5D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f6:51:40:d3:f7:30:db:b8:49:90:7d:d4:49: 89:fa:00:be:96:8f:bd:41:cd:9a:90:d5:09:19:34: 65:f6:52:51:e8:ad:af:06:2d:c7:93:13:df:49:e3: 97:77:9d:a9:8e:3b:36:d2:7c:60:bb:5e:b6:b8:18: f6:97:4a:2e:bb:3e:af:43:bc:d9:3d:0d:d9:af:bd: 24:85:6a:0d:44:af:fd:b7:34:bc:df:fa:e0:7a:e8: 16:60:3d:ab:b7:7c:37:11:26:53:15:1d:a7:6e:8f: 2c:08:2c:dc:a1:9b:73:bc:c0:ec:3d:28:d8:a5:a7: 38:e0:0c:9b:e2:15:43:81:b1:ba:fd:fb:aa:de:1d: 76:31:d7:34:57:22:d9:db:86:0c:06:ea:43:a0:17: d6:7e:07:56:70:c5:42:d8:bc:1b:cc:cf:fe:8e:cc: 2b:7f:a9:b0:2d:7d:4e:28:b6:ea:04:a2:3f:a0:6d: f7:74:c5:5e:b9:e4:48:1b:e1:22:6d:89:f8:71:d2: c2:e1:6f:46:b2:03:3c:d7:76:19:29:23:84:b3:75: d3:75:81:75:0a:a2:df:7b:a9:9f:e3:ea:6f:78:35: d2:f3:7c:d9:d1:d6:4f:76:f6:34:57:7c:e6:09:2b: 36:be:d6:96:f2:b2:c2:82:23:8f:96:ee:7b:a1:41: d9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:98:92:03:80:5E:66:C7:F1:35:B9:62:38:22:80:49:3C:07:C5:D7 X509v3 Authority Key Identifier: keyid:C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:cc:d2:23:a9:28:61:1b:eb:62:43:fc:f9:9c:60:56:de:34: 9d:4d:5a:73:45:ab:fa:85:a7:e0:8f:dd:4c:5e:d0:38:e4:aa: ae:8e:ad:68:e0:be:f0:6f:03:27:ad:ab:5b:5e:3a:06:ff:8c: 15:49:da:db:23:32:07:3f:ef:d7:c4:4b:9b:89:a8:53:2e:2f: cf:9a:ea:9b:57:d6:39:ce:cb:76:2a:a4:c6:aa:13:4b:d5:24: 71:31:27:6c:4b:96:db:67:89:f2:ff:4b:30:15:8d:16:4e:4e: 11:2c:67:43:01:7f:98:45:15:66:dd:f4:15:66:e4:bd:3c:be: 18:21:28:3f:a4:97:1e:8d:49:31:c3:a5:5b:27:8e:1b:52:fe: 2e:82:4b:11:66:dd:89:f0:9e:e6:75:23:98:69:f2:9e:19:a6: e2:e5:5c:b5:32:c1:d9:a4:10:12:ad:83:1e:29:35:4b:81:b9: 8d:0b:ac:be:f3:69:ff:09:4e:b4:80:35:de:c9:b5:78:4d:cb: 95:98:39:ec:43:b2:82:07:f5:30:63:a1:33:f7:48:d4:ee:af: a4:e8:27:83:8f:be:7f:4c:68:67:8a:12:5d:2a:50:19:cc:a3: 2c:6c:0a:13:d6:4d:2d:12:f4:8b:bf:6d:6a:2e:66:50:be:11: b5:95:30:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWAiYqswfwDgEjkgK5I36JG9J9iswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3MjZD RjBDQzdCRDAeFw0yNTEwMTgxNjM1MDBaFw0yNTEwMjEyMTQyMDBaMDMxMTAvBgNV BAMTKENFOTg5MjAzODA1RTY2QzdGMTM1Qjk2MjM4MjI4MDQ5M0MwN0M1RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY9lFA0/cw27hJkH3USYn6AL6W j71BzZqQ1QkZNGX2UlHora8GLceTE99J45d3namOOzbSfGC7Xra4GPaXSi67Pq9D vNk9DdmvvSSFag1Er/23NLzf+uB66BZgPau3fDcRJlMVHadujywILNyhm3O8wOw9 KNilpzjgDJviFUOBsbr9+6reHXYx1zRXItnbhgwG6kOgF9Z+B1ZwxULYvBvMz/6O zCt/qbAtfU4otuoEoj+gbfd0xV655Egb4SJtifhx0sLhb0ayAzzXdhkpI4SzddN1 gXUKot97qZ/j6m94NdLzfNnR1k929jRXfOYJKza+1pbyssKCI4+W7nuhQdntAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzpiSA4BeZsfxNbliOCKASTwHxdcwHwYDVR0j BBgwFoAUwXMlcYEMnUl2zRpH1VhHJs8Mx70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMC9DMTczMjU3MTgx MEM5RDQ5NzZDRDFBNDdENTU4NDcyNkNGMENDN0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3MjZDRjBD QzdCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzAvQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3 MjZDRjBDQzdCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbM0iOpKGEb62JD/PmcYFbeNJ1NWnNFq/qF p+CP3Uxe0Djkqq6OrWjgvvBvAyetq1teOgb/jBVJ2tsjMgc/79fES5uJqFMuL8+a 6ptX1jnOy3YqpMaqE0vVJHExJ2xLlttnifL/SzAVjRZOThEsZ0MBf5hFFWbd9BVm 5L08vhghKD+klx6NSTHDpVsnjhtS/i6CSxFm3YnwnuZ1I5hp8p4ZpuLlXLUywdmk EBKtgx4pNUuBuY0LrL7zaf8JTrSANd7JtXhNy5WYOexDsoIH9TBjoTP3SNTur6To J4OPvn9MaGeKEl0qUBnMoyxsChPWTS0S9Iu/bWouZlC+EbWVMDo= -----END CERTIFICATE-----Generated at Mon Oct 20 11:06:51 2025 by rpki-client