$ rpki-client -vvf repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft File: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft (raw, json) Hash identifier: 7ZWOCbQVeqSK/euynqurhoWzc8rfBw/DM85CJ+mCXDA= Subject key identifier: 0F:6A:52:F3:27:BB:B3:4E:01:3F:EB:28:5B:9C:EB:20:6D:39:10:55 Authority key identifier: 1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A Certificate issuer: /CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Certificate serial: 6B6D4D8D22F4FFF3550E4EC48F4E05F07B684D90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft Manifest number: 048D Signing time: Mon 27 Oct 2025 10:42:17 +0000 Manifest this update: Mon 27 Oct 2025 10:37:17 +0000 Manifest next update: Thu 30 Oct 2025 17:57:17 +0000 Files and hashes: 1: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl (hash: iBWCrJegI8VUdCX247OhIrf4x2zzBmJox23PcGzwsUo=) 2: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: 52WZwGRv+Wo5hswd/uRmdKS5RbkBGKSp3qw8Zcv5xAA=) 3: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: ygjycUROLuuycgQmlGFdBviRnTHP36unF91EN7REwu4=) 4: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: 5tvhyREjxfe/DJlZ9wBpFrEXCdu8eQWjVSLlHduznyg=) 5: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: Puzw6btCdPQ2KOCDFFaL2opEFaU1YVpimShuXfVUo3Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 17:57:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:6d:4d:8d:22:f4:ff:f3:55:0e:4e:c4:8f:4e:05:f0:7b:68:4d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Validity Not Before: Oct 27 10:37:17 2025 GMT Not After : Oct 30 17:57:17 2025 GMT Subject: CN=0F6A52F327BBB34E013FEB285B9CEB206D391055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:08:a8:b9:89:11:9c:0b:8c:48:81:7f:9e:c6: 64:bb:4c:cc:7d:11:8a:2c:c0:d7:61:bc:51:19:15: 30:49:74:cf:ce:34:6e:2b:13:d6:b4:f8:bb:6f:91: e9:40:72:f7:46:60:37:57:8b:a9:5a:1e:e9:45:bd: fd:5c:db:27:7d:b0:e1:ca:00:f2:d1:0e:12:e0:fe: 43:a7:07:57:bd:8e:c3:21:5e:3c:19:e9:60:6b:a8: bc:89:4e:8a:b1:c2:26:3b:5a:63:10:36:e6:b4:65: 12:8a:5c:91:29:70:40:11:1e:24:80:56:a3:b3:39: d1:2f:09:69:79:dd:0f:21:03:fd:f7:b8:ac:a6:06: ae:c9:0d:9c:4e:6b:24:2a:f8:1d:3d:78:43:9b:63: ce:42:98:0f:81:bd:66:70:d8:b8:84:18:13:be:8f: 23:72:da:a6:b1:44:73:be:9a:dc:36:92:9c:9e:a9: bb:49:3e:94:2a:d1:fa:de:fd:6e:27:17:17:c0:5a: 10:9d:18:29:ee:e7:b4:00:5d:7e:55:29:2f:11:22: 15:0a:6f:9a:55:22:c8:39:cd:22:61:5d:c0:c6:3b: 3e:49:b0:51:70:65:3c:bf:98:ff:78:b0:10:eb:b1: 35:01:80:10:57:72:ea:a1:fb:5c:81:25:d2:e5:6a: 1b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:6A:52:F3:27:BB:B3:4E:01:3F:EB:28:5B:9C:EB:20:6D:39:10:55 X509v3 Authority Key Identifier: keyid:1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:da:69:49:20:a6:d4:8c:e9:52:8c:5b:7b:49:3f:4c:96:74: 11:f9:6a:3b:27:ca:4d:b7:52:2c:dc:62:79:df:eb:50:0d:2b: 58:5c:2f:03:54:bd:22:b2:12:0c:50:3c:af:20:d9:a8:08:b1: e9:42:aa:c6:05:d0:0e:3a:2b:f9:de:53:40:61:f4:50:db:0b: 36:b2:fd:85:c7:b9:65:f3:45:0b:37:ea:09:b4:ee:89:86:4a: 41:6f:4d:d1:30:e5:ec:5a:1a:81:2e:3a:90:89:12:0d:47:ba: c9:cd:11:2f:e6:86:d2:72:af:d8:47:00:1a:a8:be:19:9e:cd: d5:66:e0:06:23:b7:8f:aa:e0:61:4d:02:ca:56:a0:79:80:04: 59:3e:97:37:de:89:67:d3:dd:56:cb:69:02:50:cb:62:21:1e: 7c:7e:23:13:65:65:c6:01:4a:15:81:96:fc:fa:4f:7a:81:c5: 5d:84:0c:e4:cd:ab:ea:3d:a5:c8:a8:1a:aa:ee:79:34:eb:68: d5:5c:88:85:f4:56:64:e3:11:d1:98:1c:5e:5e:70:33:e5:20: db:e8:6d:d9:00:a6:cc:e2:b4:3d:67:f4:ca:a2:63:b6:a7:67: e8:c0:0e:11:da:a1:c7:96:2c:a1:09:6b:88:24:be:12:27:bd: a4:7b:67:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa21NjSL0//NVDk7Ej04F8HtoTZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3 QUY0NTcyQTAeFw0yNTEwMjcxMDM3MTdaFw0yNTEwMzAxNzU3MTdaMDMxMTAvBgNV BAMTKDBGNkE1MkYzMjdCQkIzNEUwMTNGRUIyODVCOUNFQjIwNkQzOTEwNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClCKi5iRGcC4xIgX+exmS7TMx9 EYoswNdhvFEZFTBJdM/ONG4rE9a0+LtvkelAcvdGYDdXi6laHulFvf1c2yd9sOHK APLRDhLg/kOnB1e9jsMhXjwZ6WBrqLyJToqxwiY7WmMQNua0ZRKKXJEpcEARHiSA VqOzOdEvCWl53Q8hA/33uKymBq7JDZxOayQq+B09eEObY85CmA+BvWZw2LiEGBO+ jyNy2qaxRHO+mtw2kpyeqbtJPpQq0fre/W4nFxfAWhCdGCnu57QAXX5VKS8RIhUK b5pVIsg5zSJhXcDGOz5JsFFwZTy/mP94sBDrsTUBgBBXcuqh+1yBJdLlahvNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD2pS8ye7s04BP+soW5zrIG05EFUwHwYDVR0j BBgwFoAUH9fO7Gnep4ODgzF/+w1KEHr0VyowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTEyOWM5NC1jNWE2LTRkZDQtYjM0YS03ZTM1M2RlNmNlODEvMC8xRkQ3Q0VFQzY5 REVBNzgzODM4MzMxN0ZGQjBENEExMDdBRjQ1NzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3QUY0 NTcyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUxMjljOTQtYzVhNi00ZGQ0LWIz NGEtN2UzNTNkZTZjZTgxLzAvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRB MTA3QUY0NTcyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvaaUkgptSM6VKMW3tJP0yWdBH5ajsnyk23 UizcYnnf61ANK1hcLwNUvSKyEgxQPK8g2agIselCqsYF0A46K/neU0Bh9FDbCzay /YXHuWXzRQs36gm07omGSkFvTdEw5exaGoEuOpCJEg1HusnNES/mhtJyr9hHABqo vhmezdVm4AYjt4+q4GFNAspWoHmABFk+lzfeiWfT3VbLaQJQy2IhHnx+IxNlZcYB ShWBlvz6T3qBxV2EDOTNq+o9pcioGqrueTTraNVciIX0VmTjEdGYHF5ecDPlINvo bdkApszitD1n9MqiY7anZ+jADhHaoceWLKEJa4gkvhInvaR7Z5s= -----END CERTIFICATE-----Generated at Tue Oct 28 15:49:35 2025 by rpki-client