$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft File: 1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft (raw, json) Hash identifier: Zu7qR4aLZcyjQMZYdau7ss9MA0PR6YlaCnNbk0b0luY= Subject key identifier: CA:22:D0:1A:44:20:D4:B1:AC:11:C7:FA:3D:57:77:1D:E1:71:B4:4C Authority key identifier: 1F:F6:52:DE:54:00:15:05:2E:A0:6B:CE:36:44:C9:C1:C9:B8:3B:32 Certificate issuer: /CN=1FF652DE540015052EA06BCE3644C9C1C9B83B32 Certificate serial: 0B72DA69A643BB21DDF7B0C89F76AAA7841BDE7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft Manifest number: 0215 Signing time: Sun 19 Oct 2025 17:01:57 +0000 Manifest this update: Sun 19 Oct 2025 16:56:57 +0000 Manifest next update: Thu 23 Oct 2025 02:13:57 +0000 Files and hashes: 1: 3130332e3137342e3137362e302f32332d3234203d3e203338333230.roa (hash: BAcGuMLsPgJV3u2WPi981toHkg4Nsmz+4IDaHY/xX1M=) 2: 1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl (hash: mi+Oyrec0L0lJyM6YO2loLyDab/Hx22nEOn6J4YVTf8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 02:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:72:da:69:a6:43:bb:21:dd:f7:b0:c8:9f:76:aa:a7:84:1b:de:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF652DE540015052EA06BCE3644C9C1C9B83B32 Validity Not Before: Oct 19 16:56:57 2025 GMT Not After : Oct 23 02:13:57 2025 GMT Subject: CN=CA22D01A4420D4B1AC11C7FA3D57771DE171B44C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:77:74:63:b7:f1:85:51:d4:f6:86:2d:ad:5a: 58:c2:87:2d:d9:93:c8:c5:84:f8:2e:cb:92:36:da: d6:f2:f2:78:21:de:da:43:87:fc:5d:67:1a:b1:6c: 22:8b:52:1e:63:89:8b:02:d7:89:40:71:f4:6e:ab: ef:49:19:13:3d:9b:b2:18:02:a5:14:fe:98:1e:b9: 41:4d:b1:5e:31:89:9d:6c:e5:3e:72:99:a9:59:c8: f3:43:af:b0:60:7a:18:e6:17:78:b1:12:b2:1d:c5: f5:c9:e0:06:b6:98:97:8a:24:02:93:a2:66:c3:43: db:2a:67:47:12:83:7a:1d:f8:07:38:18:c0:6b:74: 73:29:ef:d7:c8:de:3f:1c:47:15:d9:6e:32:d2:22: 85:da:58:e8:fa:86:fe:c0:35:25:b3:49:fa:2c:f4: 79:97:ac:68:ae:11:42:3b:27:87:09:2f:09:08:f9: da:14:4c:0f:e8:3b:36:21:7b:7f:cd:fb:47:6e:69: ee:cf:53:bf:87:07:17:92:37:45:38:cf:9c:7d:bd: 86:f3:5d:28:15:74:77:ab:c0:99:01:55:4a:81:30: 89:19:cd:97:ac:ad:4e:3a:91:6b:3e:8b:a6:a3:5d: ee:b4:de:8a:94:d7:d9:a6:3b:da:ea:55:5d:f6:33: d6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:22:D0:1A:44:20:D4:B1:AC:11:C7:FA:3D:57:77:1D:E1:71:B4:4C X509v3 Authority Key Identifier: keyid:1F:F6:52:DE:54:00:15:05:2E:A0:6B:CE:36:44:C9:C1:C9:B8:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:3d:ef:d1:2d:f6:ec:b2:4c:7f:99:51:a8:6b:b5:7d:45:65: 5b:f0:27:1b:bc:86:bf:74:ab:51:7b:f8:e6:05:02:09:c6:c3: 38:ef:42:be:07:a4:0e:54:26:59:ff:e9:e3:46:78:44:1e:f0: 93:1e:8f:15:db:4c:c2:68:cc:7d:b9:b1:3a:81:69:55:fe:02: 26:47:53:e0:f0:9c:f0:11:1f:b2:5c:1c:bb:a6:cd:63:42:9d: cf:02:70:5c:50:12:f8:f1:59:da:f8:23:0a:74:67:d6:1b:10: 80:46:2d:4e:a1:f7:33:6f:4e:ac:13:f8:bc:55:c1:4a:b8:fb: c6:0e:6f:ef:db:9c:5d:67:4c:32:96:49:17:b0:2b:51:47:a3: ba:39:8f:82:0f:d9:60:f0:08:39:15:fc:67:96:d8:7a:0c:44: cc:50:6e:da:b4:12:e8:aa:51:14:ca:b5:36:c2:60:ea:d2:07: 69:c3:20:36:4f:47:80:d4:3d:58:43:4b:91:c5:d8:9b:d0:71: cc:6a:ac:30:86:cf:9c:a0:a8:a4:d9:41:d1:38:99:c6:e9:16: ad:6f:6c:1d:af:c8:cf:91:0c:dc:3a:c6:9e:ae:62:49:a3:cd: 40:54:a1:55:f6:77:70:eb:34:40:6d:2e:c4:85:96:e5:33:13: 5a:64:46:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC3LaaaZDuyHd97DIn3aqp4Qb3n0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5QzFD OUI4M0IzMjAeFw0yNTEwMTkxNjU2NTdaFw0yNTEwMjMwMjEzNTdaMDMxMTAvBgNV BAMTKENBMjJEMDFBNDQyMEQ0QjFBQzExQzdGQTNENTc3NzFERTE3MUI0NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4d3Rjt/GFUdT2hi2tWljChy3Z k8jFhPguy5I22tby8ngh3tpDh/xdZxqxbCKLUh5jiYsC14lAcfRuq+9JGRM9m7IY AqUU/pgeuUFNsV4xiZ1s5T5ymalZyPNDr7BgehjmF3ixErIdxfXJ4Aa2mJeKJAKT ombDQ9sqZ0cSg3od+Ac4GMBrdHMp79fI3j8cRxXZbjLSIoXaWOj6hv7ANSWzSfos 9HmXrGiuEUI7J4cJLwkI+doUTA/oOzYhe3/N+0duae7PU7+HBxeSN0U4z5x9vYbz XSgVdHerwJkBVUqBMIkZzZesrU46kWs+i6ajXe603oqU19mmO9rqVV32M9bPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyiLQGkQg1LGsEcf6PVd3HeFxtEwwHwYDVR0j BBgwFoAUH/ZS3lQAFQUuoGvONkTJwcm4OzIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmUxNWU2Zi0wNjg5LTQ3MTMtYjBmYy05NDMwNjJhYzU5MmUvMC8xRkY2NTJERTU0 MDAxNTA1MkVBMDZCQ0UzNjQ0QzlDMUM5QjgzQjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5QzFDOUI4 M0IzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJlMTVlNmYtMDY4OS00NzEzLWIw ZmMtOTQzMDYyYWM1OTJlLzAvMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5 QzFDOUI4M0IzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGs979Et9uyyTH+ZUahrtX1FZVvwJxu8hr90 q1F7+OYFAgnGwzjvQr4HpA5UJln/6eNGeEQe8JMejxXbTMJozH25sTqBaVX+AiZH U+DwnPARH7JcHLumzWNCnc8CcFxQEvjxWdr4Iwp0Z9YbEIBGLU6h9zNvTqwT+LxV wUq4+8YOb+/bnF1nTDKWSRewK1FHo7o5j4IP2WDwCDkV/GeW2HoMRMxQbtq0Euiq URTKtTbCYOrSB2nDIDZPR4DUPVhDS5HF2JvQccxqrDCGz5ygqKTZQdE4mcbpFq1v bB2vyM+RDNw6xp6uYkmjzUBUoVX2d3DrNEBtLsSFluUzE1pkRh8= -----END CERTIFICATE-----Generated at Mon Oct 20 16:47:21 2025 by rpki-client