$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft File: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft (raw, json) Hash identifier: AURWdJFUTz2OidYsGwpqxlMDQezl5WVJezN6oEA75iE= Subject key identifier: 08:25:42:73:E9:C5:67:E4:FC:DD:85:14:33:59:91:61:4B:A3:9C:3E Authority key identifier: 1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 Certificate issuer: /CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Certificate serial: 2017AAB0875097921E8D618D84C0E1533F7BF07F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft Manifest number: FA Signing time: Sat 18 Oct 2025 18:51:43 +0000 Manifest this update: Sat 18 Oct 2025 18:46:43 +0000 Manifest next update: Wed 22 Oct 2025 06:06:43 +0000 Files and hashes: 1: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl (hash: zrZJkF8aO5Ry7rFX7TD0QUkMiuH8o5AJwKHYP+FVxLk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 06:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:17:aa:b0:87:50:97:92:1e:8d:61:8d:84:c0:e1:53:3f:7b:f0:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Validity Not Before: Oct 18 18:46:43 2025 GMT Not After : Oct 22 06:06:43 2025 GMT Subject: CN=08254273E9C567E4FCDD8514335991614BA39C3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:34:e2:6a:36:a2:33:aa:3b:74:6c:17:ee:fb: 53:94:ad:d7:74:b8:2e:79:bf:ef:d3:cf:6b:8a:51: 64:38:92:9a:d0:3a:ce:32:21:06:9b:24:ed:14:f1: f8:26:41:21:12:c8:83:0f:2a:e0:99:62:15:5c:03: 3c:84:25:45:ff:87:6c:f9:5e:90:bc:38:c4:00:08: d8:87:8b:de:cb:15:87:23:1d:86:59:6b:26:c4:85: 92:e1:b4:f6:5f:85:21:82:85:0c:82:e1:59:a6:33: da:03:ba:d0:29:af:89:ae:80:30:23:d8:0f:b1:02: a5:b0:87:de:e5:16:2f:4d:39:54:79:85:78:c9:2c: 5f:74:c7:2d:89:65:fd:79:00:39:f9:27:3b:2a:b4: 61:aa:d5:18:02:98:40:2a:ef:11:c8:a8:b8:d6:6a: ec:cf:a1:b7:be:b0:f8:90:24:98:19:df:70:ba:42: 13:1e:72:35:6e:7a:cc:8d:e9:9c:d2:cf:d4:6c:69: 0b:59:cc:9a:6e:67:5e:ac:bd:05:19:61:89:30:f8: 1d:98:dd:84:eb:d8:12:52:5e:1e:8a:4f:cb:fa:de: 08:85:7a:57:82:9e:7c:f1:ae:de:8b:0e:3f:72:9f: c9:b3:25:c2:cf:31:13:30:05:cd:07:e6:2d:4c:dd: 54:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:25:42:73:E9:C5:67:E4:FC:DD:85:14:33:59:91:61:4B:A3:9C:3E X509v3 Authority Key Identifier: keyid:1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:20:20:14:1d:29:5a:9f:7b:5e:16:1a:d2:b8:76:81:f0:61: 86:7f:99:d4:e7:95:e5:4f:30:13:8f:a6:87:ff:fa:fb:4f:0b: 02:85:f6:ff:c3:03:25:05:69:e9:ce:8c:56:26:9f:19:67:7d: ad:69:44:42:74:91:02:93:26:d9:6c:21:49:16:4c:33:ca:94: 0d:fe:70:87:29:4e:0d:8e:4b:a0:42:64:8b:56:43:f1:bf:65: 6f:de:53:b6:0f:f1:92:9e:c7:61:95:89:bc:6d:13:00:a0:f4: ad:03:27:45:f1:33:50:ec:a4:fb:46:3d:1e:22:23:7f:86:91: 45:81:5a:29:a9:7e:db:0d:c1:ca:c5:63:52:01:ff:f5:2f:b0: ea:02:c8:c0:2e:6e:0c:88:6a:d0:f1:f5:a2:eb:a4:6c:bf:1a: d1:fc:70:f3:6b:ee:0e:81:7b:06:ee:de:d6:06:89:bb:0a:fb: fc:c5:ff:fb:6e:e7:61:04:b0:56:a3:b3:0b:8d:09:aa:0c:07: 69:75:f3:a8:5a:e7:af:17:83:39:0d:5c:44:c5:ec:ae:35:b8: ae:8d:27:57:30:d8:74:e5:37:e9:5f:50:3b:db:db:54:f7:76: 55:c3:88:54:9d:a3:83:7e:e5:b0:81:fa:ec:81:a2:63:81:86: dc:68:36:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIBeqsIdQl5IejWGNhMDhUz978H8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJE RkE1NUY0OTAeFw0yNTEwMTgxODQ2NDNaFw0yNTEwMjIwNjA2NDNaMDMxMTAvBgNV BAMTKDA4MjU0MjczRTlDNTY3RTRGQ0REODUxNDMzNTk5MTYxNEJBMzlDM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbNOJqNqIzqjt0bBfu+1OUrdd0 uC55v+/Tz2uKUWQ4kprQOs4yIQabJO0U8fgmQSESyIMPKuCZYhVcAzyEJUX/h2z5 XpC8OMQACNiHi97LFYcjHYZZaybEhZLhtPZfhSGChQyC4VmmM9oDutApr4mugDAj 2A+xAqWwh97lFi9NOVR5hXjJLF90xy2JZf15ADn5JzsqtGGq1RgCmEAq7xHIqLjW auzPobe+sPiQJJgZ33C6QhMecjVuesyN6ZzSz9RsaQtZzJpuZ16svQUZYYkw+B2Y 3YTr2BJSXh6KT8v63giFeleCnnzxrt6LDj9yn8mzJcLPMRMwBc0H5i1M3VTJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCCVCc+nFZ+T83YUUM1mRYUujnD4wHwYDVR0j BBgwFoAUGjIJkCPdMrHD7mcVHFCYq9+lX0kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmUwNWZjZi01ZjJhLTRkNWUtYTNmMi1kODQwMzJmMGM4ZjcvMC8xQTMyMDk5MDIz REQzMkIxQzNFRTY3MTUxQzUwOThBQkRGQTU1RjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJERkE1 NUY0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJlMDVmY2YtNWYyYS00ZDVlLWEz ZjItZDg0MDMyZjBjOGY3LzAvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4 QUJERkE1NUY0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQgIBQdKVqfe14WGtK4doHwYYZ/mdTnleVP MBOPpof/+vtPCwKF9v/DAyUFaenOjFYmnxlnfa1pREJ0kQKTJtlsIUkWTDPKlA3+ cIcpTg2OS6BCZItWQ/G/ZW/eU7YP8ZKex2GVibxtEwCg9K0DJ0XxM1DspPtGPR4i I3+GkUWBWimpftsNwcrFY1IB//UvsOoCyMAubgyIatDx9aLrpGy/GtH8cPNr7g6B ewbu3tYGibsK+/zF//tu52EEsFajswuNCaoMB2l186ha568XgzkNXETF7K41uK6N J1cw2HTlN+lfUDvb21T3dlXDiFSdo4N+5bCB+uyBomOBhtxoNhM= -----END CERTIFICATE-----Generated at Mon Oct 20 16:55:14 2025 by rpki-client