$ rpki-client -vvf repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft File: 0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft (raw, json) Hash identifier: //CQ+k6cU9CwrolKXzSy0chrULYA84OVFKwg2c6DiPU= Subject key identifier: 1A:E7:6C:56:86:FB:67:B8:57:09:14:87:15:D8:23:58:06:88:2A:E7 Authority key identifier: 0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD Certificate issuer: /CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD Certificate serial: 2E836C10AB54F7A34E985F01A19B9CC9464E9434 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft Manifest number: 9F Signing time: Fri 29 Aug 2025 01:31:08 +0000 Manifest this update: Fri 29 Aug 2025 01:26:08 +0000 Manifest next update: Mon 01 Sep 2025 05:50:08 +0000 Files and hashes: 1: 3135372e32302e39382e302f32332d3234203d3e20313532343335.roa (hash: ksjiqtTAWCgIRtUjPZtNzrKoQay+iOF9ttjO6dpoPs4=) 2: 0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl (hash: AYSAehPbYa0t9cH2ctyROKmSMzptgPL0kfJCx6+Kkq0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Sep 2025 05:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:83:6c:10:ab:54:f7:a3:4e:98:5f:01:a1:9b:9c:c9:46:4e:94:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD Validity Not Before: Aug 29 01:26:08 2025 GMT Not After : Sep 1 05:50:08 2025 GMT Subject: CN=1AE76C5686FB67B85709148715D8235806882AE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:11:f7:80:bb:6a:a1:c7:45:41:13:d7:e1:9f: 85:ed:e2:62:a8:ce:70:73:7c:ed:f4:2b:01:36:20: f4:21:30:76:81:5d:ed:0e:5b:3d:a6:e1:d4:7b:3e: e4:f2:7a:1f:7e:af:06:08:cd:d4:33:c1:ad:bb:f1: b0:b2:6b:4f:7a:99:cc:70:77:ae:6e:e1:5c:e3:8c: 5f:5e:d2:95:cb:e7:6c:38:3b:23:22:ae:a4:a1:23: 07:d0:8f:9d:08:32:37:b6:b1:66:4d:46:f5:91:29: 28:2e:2b:89:fa:f3:3c:ee:fb:69:8a:d1:79:51:5c: 50:f2:ac:63:f2:c9:41:65:c9:06:2c:3b:76:08:e2: a8:b1:21:ac:82:69:19:52:38:a6:a8:bb:da:8d:95: 8f:00:56:ce:83:c8:0e:e3:ba:26:34:8a:aa:e1:69: 0f:c6:c8:0c:2e:ae:74:24:05:a3:2d:31:22:05:48: c8:6c:4e:7b:93:20:b6:67:37:ae:ed:11:99:fa:72: 6b:39:f8:8e:73:83:b0:a6:ae:5d:32:30:54:7b:a8: fc:f5:e3:74:c1:8b:39:a6:4a:55:04:86:71:b9:29: d9:2e:e6:5e:65:47:71:8a:e4:99:96:17:c6:cb:f0: 96:fb:43:67:57:af:d4:24:27:80:61:7f:8d:0b:29: 4d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E7:6C:56:86:FB:67:B8:57:09:14:87:15:D8:23:58:06:88:2A:E7 X509v3 Authority Key Identifier: keyid:0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:a7:6b:f7:8d:5f:a6:a8:20:5c:21:5a:12:f7:c9:d5:bf:d6: 75:62:e7:be:b0:11:4f:bb:74:15:d0:0b:e7:1c:fc:46:cb:95: 91:74:c2:b6:c9:0b:94:7f:63:0c:d5:9a:73:9e:8d:c5:ac:a5: c2:a8:65:4c:9a:4c:e2:ab:37:77:58:d6:1c:7f:7c:60:37:20: 2c:14:17:f4:f0:37:b5:86:52:4e:ad:69:9c:73:90:c3:c0:63: 4f:58:03:33:2e:da:9e:47:43:a4:da:cb:fa:41:2d:f8:d9:12: 05:4e:1f:a9:f4:4b:19:4c:66:f1:e9:af:14:89:c2:1a:0f:11: 98:94:6f:96:42:a5:73:3c:09:1f:3c:fd:2f:6c:c8:01:5d:80: f0:72:84:9c:9d:2d:56:fd:f4:4f:dd:6d:d7:7d:e3:1c:e1:88: 9b:4a:e2:ba:15:96:76:f1:a4:f7:b1:40:64:f5:0b:c3:7d:41: bb:05:dc:87:c1:35:5c:0d:95:b7:e5:f7:53:9b:47:90:e8:0a: 5f:ca:38:b6:04:c5:3e:17:01:58:dd:31:c7:ec:a1:b3:a3:fb: 6f:13:ed:c3:a1:f1:ba:ac:57:87:75:06:da:f7:71:05:af:39: 85:74:29:c3:5c:b2:8b:28:4d:f3:01:dd:c8:3f:17:9b:22:42: aa:8a:53:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULoNsEKtU96NOmF8BoZucyUZOlDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1QzA4 M0ZCN0RDRDAeFw0yNTA4MjkwMTI2MDhaFw0yNTA5MDEwNTUwMDhaMDMxMTAvBgNV BAMTKDFBRTc2QzU2ODZGQjY3Qjg1NzA5MTQ4NzE1RDgyMzU4MDY4ODJBRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClEfeAu2qhx0VBE9fhn4Xt4mKo znBzfO30KwE2IPQhMHaBXe0OWz2m4dR7PuTyeh9+rwYIzdQzwa278bCya096mcxw d65u4VzjjF9e0pXL52w4OyMirqShIwfQj50IMje2sWZNRvWRKSguK4n68zzu+2mK 0XlRXFDyrGPyyUFlyQYsO3YI4qixIayCaRlSOKaou9qNlY8AVs6DyA7juiY0iqrh aQ/GyAwurnQkBaMtMSIFSMhsTnuTILZnN67tEZn6cms5+I5zg7Cmrl0yMFR7qPz1 43TBizmmSlUEhnG5Kdku5l5lR3GK5JmWF8bL8Jb7Q2dXr9QkJ4Bhf40LKU1RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGudsVob7Z7hXCRSHFdgjWAaIKucwHwYDVR0j BBgwFoAUDB++gPIesmaGl4s+dpSFwIP7fc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzQ2YzBlMi04MTk0LTQwMjQtYmNiMy1kMDI5NTZjZTNhOTkvMC8wQzFGQkU4MEYy MUVCMjY2ODY5NzhCM0U3Njk0ODVDMDgzRkI3RENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1QzA4M0ZC N0RDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM0NmMwZTItODE5NC00MDI0LWJj YjMtZDAyOTU2Y2UzYTk5LzAvMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1 QzA4M0ZCN0RDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmna/eNX6aoIFwhWhL3ydW/1nVi576wEU+7 dBXQC+cc/EbLlZF0wrbJC5R/YwzVmnOejcWspcKoZUyaTOKrN3dY1hx/fGA3ICwU F/TwN7WGUk6taZxzkMPAY09YAzMu2p5HQ6Tay/pBLfjZEgVOH6n0SxlMZvHprxSJ whoPEZiUb5ZCpXM8CR88/S9syAFdgPByhJydLVb99E/dbdd94xzhiJtK4roVlnbx pPexQGT1C8N9QbsF3IfBNVwNlbfl91ObR5DoCl/KOLYExT4XAVjdMcfsobOj+28T 7cOh8bqsV4d1Btr3cQWvOYV0KcNcsosoTfMB3cg/F5siQqqKU1U= -----END CERTIFICATE-----Generated at Sun Aug 31 01:59:10 2025 by rpki-client