$ rpki-client -vvf repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft File: 1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft (raw, json) Hash identifier: jTTEEb4JSlCnHfrCX/6vTyyxqdJW0XfXxVsw2aoJHgY= Subject key identifier: 67:E2:F9:F1:77:8B:58:3A:FA:73:47:4B:C1:A9:94:3C:47:B3:B3:B4 Authority key identifier: 1D:8D:9C:BC:52:93:4E:F0:2B:CD:1D:47:8A:EB:A6:A3:68:F8:04:19 Certificate issuer: /CN=1D8D9CBC52934EF02BCD1D478AEBA6A368F80419 Certificate serial: 0D339CB28A4DC2B053389A2194D1DA33C7A65E05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft Manifest number: 04ED Signing time: Tue 28 Oct 2025 06:01:48 +0000 Manifest this update: Tue 28 Oct 2025 05:56:48 +0000 Manifest next update: Fri 31 Oct 2025 11:11:48 +0000 Files and hashes: 1: 1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl (hash: 7s+1iPokvEU105Hn6vXVQkS6hQdM8S37xgqaJP93p1Q=) 2: 3130332e3135362e31342e302f32332d3234203d3e203538383231.roa (hash: uhbTS40xOE2iorcFCGhU6uKqyXCDewHO7yiFkBSc5gw=) 3: 323430363a376234303a3a2f33322d3438203d3e203538383231.roa (hash: 01o8IIdEBMNVP2rARnAtQNMxpIRvEPCoH/cFEbdvFjA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 11:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:33:9c:b2:8a:4d:c2:b0:53:38:9a:21:94:d1:da:33:c7:a6:5e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D8D9CBC52934EF02BCD1D478AEBA6A368F80419 Validity Not Before: Oct 28 05:56:48 2025 GMT Not After : Oct 31 11:11:48 2025 GMT Subject: CN=67E2F9F1778B583AFA73474BC1A9943C47B3B3B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:31:8f:10:e4:c9:f2:af:a5:73:ff:44:3f:9e: 4b:e4:63:31:bf:60:0c:3d:ac:53:a5:6c:38:34:c4: b0:f3:c8:7a:8c:a0:60:1e:23:a7:a0:eb:1e:ae:fc: 31:1d:b4:41:66:80:aa:e4:61:7b:04:54:35:5f:55: 33:e4:71:a0:9c:e1:50:3d:27:d5:6d:a6:db:df:86: b8:1f:9d:7b:82:cd:0a:e8:54:82:98:c6:e2:4a:94: 21:fb:53:aa:d1:a2:6f:b4:7c:2f:31:66:6a:86:5c: 0e:d3:39:b3:b6:be:2e:b2:a8:36:f8:9d:16:ef:56: 2e:9d:07:b7:84:ac:cf:4e:d5:58:e1:92:38:22:b3: da:91:36:bf:9d:dd:60:0a:7a:60:53:40:36:14:f3: 5c:a1:28:6c:cb:62:16:02:4c:7b:d2:ae:78:d1:9d: ae:61:60:9a:0d:a6:15:8d:59:8b:32:93:f4:1e:8e: 40:bb:15:c5:09:c1:3d:eb:2c:03:81:91:6f:90:db: b3:51:92:d8:fc:21:f8:28:36:15:fd:3f:eb:a1:53: ae:87:34:80:00:39:29:91:c4:c6:0c:67:b6:3a:b2: a9:ff:db:bd:37:68:4a:d1:39:6e:80:40:ab:89:84: 55:ee:ff:9f:0c:3d:73:5d:47:ea:cc:cd:34:76:64: 49:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E2:F9:F1:77:8B:58:3A:FA:73:47:4B:C1:A9:94:3C:47:B3:B3:B4 X509v3 Authority Key Identifier: keyid:1D:8D:9C:BC:52:93:4E:F0:2B:CD:1D:47:8A:EB:A6:A3:68:F8:04:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:9f:bf:7f:d9:6b:45:b5:69:71:10:15:3f:c9:dc:88:1d:5f: 7f:ca:0d:36:19:87:90:2a:b3:54:67:a1:e7:2b:06:59:20:80: c7:54:37:d0:42:55:44:22:24:b2:d1:8f:23:a9:25:12:9d:62: 4b:2a:eb:fe:ac:1b:c1:65:95:fc:78:95:04:e3:2e:19:70:70: b8:5f:ed:b7:24:8f:a9:88:04:fe:e1:02:5b:60:f9:db:73:67: 77:01:74:79:ea:39:30:d1:ea:7a:4b:f0:02:d7:9d:20:a8:e6: d6:4d:e0:6a:99:67:d2:e1:94:52:87:4d:f6:64:ac:6e:4e:ee: f2:11:ed:04:71:c0:8c:f6:c6:bf:1b:db:e0:02:8e:c3:b4:d9: 06:5a:6e:68:33:43:54:8c:6c:e8:13:23:f1:df:6e:80:60:f8: 6a:aa:00:0a:ef:b2:b3:02:a5:7b:79:f8:03:de:28:c3:e2:a3: ae:74:99:ac:51:6a:fb:60:a5:3b:ee:e3:d6:3a:e3:a8:79:a5: 80:6d:ed:db:ae:62:c1:6a:60:61:d7:80:55:a7:f2:8c:00:eb: e0:a3:68:6f:f3:4a:7f:36:6a:73:5a:76:b4:04:82:7e:56:d1: e2:e7:c1:76:b8:ae:0f:03:b5:26:ed:f5:a3:f9:32:a6:8e:17: f8:82:dd:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDTOcsopNwrBTOJohlNHaM8emXgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2QTM2 OEY4MDQxOTAeFw0yNTEwMjgwNTU2NDhaFw0yNTEwMzExMTExNDhaMDMxMTAvBgNV BAMTKDY3RTJGOUYxNzc4QjU4M0FGQTczNDc0QkMxQTk5NDNDNDdCM0IzQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8MY8Q5Mnyr6Vz/0Q/nkvkYzG/ YAw9rFOlbDg0xLDzyHqMoGAeI6eg6x6u/DEdtEFmgKrkYXsEVDVfVTPkcaCc4VA9 J9VtptvfhrgfnXuCzQroVIKYxuJKlCH7U6rRom+0fC8xZmqGXA7TObO2vi6yqDb4 nRbvVi6dB7eErM9O1Vjhkjgis9qRNr+d3WAKemBTQDYU81yhKGzLYhYCTHvSrnjR na5hYJoNphWNWYsyk/QejkC7FcUJwT3rLAOBkW+Q27NRktj8IfgoNhX9P+uhU66H NIAAOSmRxMYMZ7Y6sqn/2703aErROW6AQKuJhFXu/58MPXNdR+rMzTR2ZEkDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ+L58XeLWDr6c0dLwamUPEezs7QwHwYDVR0j BBgwFoAUHY2cvFKTTvArzR1Hiuumo2j4BBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTFlYTUxMy1hYzZlLTRhNWYtYjNlYi1kNTM1MmNhZjQ4NmIvMC8xRDhEOUNCQzUy OTM0RUYwMkJDRDFENDc4QUVCQTZBMzY4RjgwNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2QTM2OEY4 MDQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2UxZWE1MTMtYWM2ZS00YTVmLWIz ZWItZDUzNTJjYWY0ODZiLzAvMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2 QTM2OEY4MDQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJafv3/Za0W1aXEQFT/J3IgdX3/KDTYZh5Aq s1RnoecrBlkggMdUN9BCVUQiJLLRjyOpJRKdYksq6/6sG8Fllfx4lQTjLhlwcLhf 7bckj6mIBP7hAltg+dtzZ3cBdHnqOTDR6npL8ALXnSCo5tZN4GqZZ9LhlFKHTfZk rG5O7vIR7QRxwIz2xr8b2+ACjsO02QZabmgzQ1SMbOgTI/HfboBg+GqqAArvsrMC pXt5+APeKMPio650maxRavtgpTvu49Y646h5pYBt7duuYsFqYGHXgFWn8owA6+Cj aG/zSn82anNadrQEgn5W0eLnwXa4rg8DtSbt9aP5MqaOF/iC3dc= -----END CERTIFICATE-----Generated at Tue Oct 28 15:56:32 2025 by rpki-client