$ rpki-client -vvf repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft File: 1C427FBF1A649B90BD89B0EA83871003D9045925.mft (raw, json) Hash identifier: BduWfdF1Bg1tXV8rjvs2XTPYqn/HQExoFxjoQf9F3EU= Subject key identifier: 12:DD:F8:CD:ED:A4:B4:45:88:80:31:AB:D6:49:F1:5B:87:13:E6:8F Authority key identifier: 1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25 Certificate issuer: /CN=1C427FBF1A649B90BD89B0EA83871003D9045925 Certificate serial: 3C844006C064BF50BE77204DAB589E407E746DCD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft Manifest number: 023B Signing time: Thu 04 Sep 2025 21:21:39 +0000 Manifest this update: Thu 04 Sep 2025 21:16:39 +0000 Manifest next update: Mon 08 Sep 2025 09:08:39 +0000 Files and hashes: 1: 1C427FBF1A649B90BD89B0EA83871003D9045925.crl (hash: 7/X7nTqGeeIKorW2BbDTrBkxRMqc+RJGy0f0OWq5FVc=) 2: 3130332e3138322e302e302f32342d3234203d3e2039333431.roa (hash: 2wBOZUnxy6X5m3+lNkjmU4KdnF5wKP3vz0BnFhgKPHA=) 3: 3130332e3138322e312e302f32342d3234203d3e2039333431.roa (hash: /hsHlytGSIEPe0GxgSOfGs3J1HDdS9+raMR80Eb5wQY=) 4: 3130332e3138322e302e302f32332d3233203d3e2039333431.roa (hash: gNkqorvk0f2bBTsmEL4MnNlyYJ+Qr0d2hFD2R7VVU4Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 09:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:84:40:06:c0:64:bf:50:be:77:20:4d:ab:58:9e:40:7e:74:6d:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C427FBF1A649B90BD89B0EA83871003D9045925 Validity Not Before: Sep 4 21:16:39 2025 GMT Not After : Sep 8 09:08:39 2025 GMT Subject: CN=12DDF8CDEDA4B445888031ABD649F15B8713E68F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:aa:3f:fd:68:5a:1a:d7:67:d5:20:b1:c4:cc: 68:83:dd:92:e2:cb:0f:77:bd:d2:db:bf:57:26:26: 88:28:19:7d:cc:f6:92:fe:c2:85:c6:25:2f:74:80: 7a:42:f0:af:a3:3d:73:5c:1b:27:21:15:be:18:af: 27:14:47:d0:98:67:9b:f7:4d:4f:b1:5c:36:f2:50: c0:50:90:76:4b:ec:2f:c4:15:16:7d:05:a3:b2:6c: c5:14:10:43:21:68:6b:70:61:b0:87:61:3b:d8:26: 8f:ba:47:6f:7d:2b:df:46:77:cd:e8:af:5c:3a:87: 68:c5:4f:74:3d:c4:a6:3c:92:6d:9d:eb:f3:2f:62: 5d:dd:d9:2c:78:7f:44:95:6d:95:67:95:15:e8:7f: 47:41:c0:54:fb:e2:11:92:f7:20:2c:1b:fd:5d:2d: c7:77:e2:46:51:35:b6:b1:b1:4b:e7:9e:70:df:f3: 69:fd:1b:4d:87:e7:33:37:cd:70:3d:c2:6c:78:2b: a2:df:33:07:01:41:ec:01:74:dc:0e:49:31:5f:03: 5b:28:5e:77:84:e0:bd:90:cd:2a:01:ba:d0:52:00: 0f:c9:bf:ab:8d:8e:b8:9b:e1:c4:b1:84:a4:8e:99: 54:86:39:ef:4d:90:8f:2f:5d:57:b3:36:84:ef:56: 56:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DD:F8:CD:ED:A4:B4:45:88:80:31:AB:D6:49:F1:5B:87:13:E6:8F X509v3 Authority Key Identifier: keyid:1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:41:5a:e9:35:84:c1:57:c0:ed:0c:5f:61:b7:2e:82:23:e4: 56:99:38:09:33:73:69:77:37:73:fa:f7:87:b9:58:13:21:44: 61:80:0c:8a:f7:c4:5d:26:bc:c1:5c:b2:1d:61:d3:0c:a2:df: 70:1f:30:8e:0c:0e:90:56:62:30:e1:f3:17:40:4d:74:a8:eb: 6d:e4:94:31:12:4d:96:0c:7b:f0:b0:b3:40:d1:ce:43:ff:33: 9e:87:49:0b:c0:0a:6d:2c:0a:91:dd:c2:ce:75:10:7e:44:45: 85:a7:6a:34:1c:0f:b0:f0:be:1a:1c:17:3d:25:5a:93:6b:66: 87:80:fb:3d:78:7f:ff:11:e4:94:bc:20:55:40:2d:b5:78:fc: a1:65:24:6d:1f:48:c8:7e:82:54:1b:70:0f:56:ba:9c:b6:7a: e5:b6:0f:6a:b8:43:25:4b:4c:c8:72:3a:fa:a0:9a:cc:a3:8b: 6b:98:d3:bc:5e:b3:56:ad:90:8c:86:d8:9a:df:83:fe:f4:0b: 2e:cc:3d:be:3b:59:4b:e6:9d:a3:1a:ae:14:fe:62:06:36:92: 95:ee:dd:9e:03:68:c0:a4:27:d3:80:5d:38:c7:63:92:78:84: 73:7c:64:52:cd:f7:f0:c9:6a:12:d6:e7:29:2c:2d:fc:af:92: c0:09:8c:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPIRABsBkv1C+dyBNq1ieQH50bc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNE OTA0NTkyNTAeFw0yNTA5MDQyMTE2MzlaFw0yNTA5MDgwOTA4MzlaMDMxMTAvBgNV BAMTKDEyRERGOENERURBNEI0NDU4ODgwMzFBQkQ2NDlGMTVCODcxM0U2OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPqj/9aFoa12fVILHEzGiD3ZLi yw93vdLbv1cmJogoGX3M9pL+woXGJS90gHpC8K+jPXNcGychFb4YrycUR9CYZ5v3 TU+xXDbyUMBQkHZL7C/EFRZ9BaOybMUUEEMhaGtwYbCHYTvYJo+6R299K99Gd83o r1w6h2jFT3Q9xKY8km2d6/MvYl3d2Sx4f0SVbZVnlRXof0dBwFT74hGS9yAsG/1d Lcd34kZRNbaxsUvnnnDf82n9G02H5zM3zXA9wmx4K6LfMwcBQewBdNwOSTFfA1so XneE4L2QzSoButBSAA/Jv6uNjrib4cSxhKSOmVSGOe9NkI8vXVezNoTvVlafAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEt34ze2ktEWIgDGr1knxW4cT5o8wHwYDVR0j BBgwFoAUHEJ/vxpkm5C9ibDqg4cQA9kEWSUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmZhM2I2NC0zYzYxLTQ4ZDUtYWIwYy1kNjNiNDgyNGQwMGUvMC8xQzQyN0ZCRjFB NjQ5QjkwQkQ4OUIwRUE4Mzg3MTAwM0Q5MDQ1OTI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNEOTA0 NTkyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZmYTNiNjQtM2M2MS00OGQ1LWFi MGMtZDYzYjQ4MjRkMDBlLzAvMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEw MDNEOTA0NTkyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAlBWuk1hMFXwO0MX2G3LoIj5FaZOAkzc2l3 N3P694e5WBMhRGGADIr3xF0mvMFcsh1h0wyi33AfMI4MDpBWYjDh8xdATXSo623k lDESTZYMe/Cws0DRzkP/M56HSQvACm0sCpHdws51EH5ERYWnajQcD7DwvhocFz0l WpNrZoeA+z14f/8R5JS8IFVALbV4/KFlJG0fSMh+glQbcA9Wupy2euW2D2q4QyVL TMhyOvqgmsyji2uY07xes1atkIyG2Jrfg/70Cy7MPb47WUvmnaMarhT+YgY2kpXu 3Z4DaMCkJ9OAXTjHY5J4hHN8ZFLN9/DJahLW5yksLfyvksAJjPU= -----END CERTIFICATE-----Generated at Fri Sep 5 10:29:34 2025 by rpki-client