$ rpki-client -vvf repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft File: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft (raw, json) Hash identifier: sUHANknaQJkFAisTvt8lk7WmGgi8w+6u1VM54O0e2CI= Subject key identifier: B4:92:38:4E:C4:F5:A6:82:4F:0F:AA:D0:A5:32:52:A5:A3:3D:8C:69 Authority key identifier: 1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB Certificate issuer: /CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Certificate serial: 7AD9672FF26A6997418A7054CE246EC776324083 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft Manifest number: 02CB Signing time: Mon 03 Nov 2025 22:22:23 +0000 Manifest this update: Mon 03 Nov 2025 22:17:23 +0000 Manifest next update: Fri 07 Nov 2025 00:16:23 +0000 Files and hashes: 1: 3130332e3137372e3130302e302f32332d3234203d3e20313331313131.roa (hash: 3wek+JTR4Gr3DKmUDawbdf/x7TASEspEnmo4iHcCsdk=) 2: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl (hash: dRBQFFNo9U1agmoFGA2ZCYQJpabCJc/G7nLV920317c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d9:67:2f:f2:6a:69:97:41:8a:70:54:ce:24:6e:c7:76:32:40:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Validity Not Before: Nov 3 22:17:23 2025 GMT Not After : Nov 7 00:16:23 2025 GMT Subject: CN=B492384EC4F5A6824F0FAAD0A53252A5A33D8C69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:da:7d:47:bd:29:1c:23:97:fe:d0:23:89:08: d2:7a:70:95:29:1e:9c:84:61:df:ab:7d:34:90:60: 5f:5e:fc:c6:58:cf:6c:77:28:1b:5a:13:ff:cc:a2: 69:d9:4a:4c:29:65:03:78:86:a2:07:d1:3c:81:6b: 46:83:d2:ee:bf:6e:14:f6:2c:57:10:f6:ca:8c:d3: 3a:4a:38:15:9a:4e:fc:2d:7b:7a:dc:47:1c:49:38: 40:58:50:08:13:82:df:b9:88:09:99:be:7c:9e:9e: dd:d6:06:da:d7:64:a6:05:4d:5e:8f:ad:b7:5f:70: 1e:d8:65:b9:d5:7a:31:49:2c:b0:a5:55:f4:58:11: 92:fc:b0:52:1d:0c:2d:53:3e:e2:63:98:3f:21:29: cb:f4:72:4d:b5:fc:a3:be:59:f0:7a:08:c8:d3:42: e1:c7:7b:f9:88:89:24:d3:2b:5a:b9:ca:55:0f:df: 3a:b3:1a:49:75:86:02:db:52:9d:04:ca:f3:94:1b: ae:f9:8b:1a:95:cd:93:f0:6a:ef:80:38:d2:eb:fc: d0:e6:5e:55:29:e7:0c:92:e9:bf:fa:1c:1d:ea:1a: 5b:eb:ad:d2:b7:ee:14:6b:33:e7:1c:c9:22:ef:90: 13:6d:1b:54:5d:e4:aa:0f:af:78:bd:73:3a:9e:89: 02:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:92:38:4E:C4:F5:A6:82:4F:0F:AA:D0:A5:32:52:A5:A3:3D:8C:69 X509v3 Authority Key Identifier: keyid:1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:61:e9:7f:68:3e:2e:db:ed:4c:50:d9:b8:15:42:e6:08:4c: 3f:2b:25:6f:2f:da:4a:ee:ed:87:33:a2:4e:d2:1f:76:73:26: 99:7c:2f:64:31:73:c0:e7:13:93:ae:47:dd:8b:e2:66:05:79: 2a:19:7d:f9:cb:7b:e7:7a:df:3a:14:56:68:7b:28:b8:b5:f6: 42:76:cf:5e:94:8d:45:2e:ec:a0:28:1b:40:1d:e3:33:3b:6b: 31:c1:6d:2c:74:21:2d:a7:76:fd:46:85:aa:11:c2:d1:cd:f3: 95:65:43:e8:cc:e9:44:2a:b0:97:a8:c6:50:61:90:ac:dd:9a: 27:a4:e3:01:a9:7d:dd:d9:48:b6:88:cf:c5:c3:5b:a7:ab:ef: ad:f0:3d:54:3d:49:c1:dc:6a:2b:c0:e4:e5:f2:4a:19:5d:2d: 91:82:07:4c:f4:a0:3e:67:41:95:5c:d6:51:c3:7e:5f:c7:65: 31:b7:80:90:b8:7b:90:4e:77:db:62:2c:46:b1:e2:9b:19:fb: 47:bf:15:6e:a6:04:0a:e3:20:0b:39:50:fd:13:5d:8b:95:67: 12:fa:3a:73:7b:e4:97:b5:cf:6c:8c:ee:93:55:e5:5c:28:de: 86:1a:6a:ed:4c:20:b2:a3:90:f7:85:16:db:5a:a7:9c:19:84: 05:98:13:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUetlnL/JqaZdBinBUziRux3YyQIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQyQ0M2 MENFMEJBQjAeFw0yNTExMDMyMjE3MjNaFw0yNTExMDcwMDE2MjNaMDMxMTAvBgNV BAMTKEI0OTIzODRFQzRGNUE2ODI0RjBGQUFEMEE1MzI1MkE1QTMzRDhDNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR2n1HvSkcI5f+0COJCNJ6cJUp HpyEYd+rfTSQYF9e/MZYz2x3KBtaE//MomnZSkwpZQN4hqIH0TyBa0aD0u6/bhT2 LFcQ9sqM0zpKOBWaTvwte3rcRxxJOEBYUAgTgt+5iAmZvnyent3WBtrXZKYFTV6P rbdfcB7YZbnVejFJLLClVfRYEZL8sFIdDC1TPuJjmD8hKcv0ck21/KO+WfB6CMjT QuHHe/mIiSTTK1q5ylUP3zqzGkl1hgLbUp0EyvOUG675ixqVzZPwau+AONLr/NDm XlUp5wyS6b/6HB3qGlvrrdK37hRrM+ccySLvkBNtG1Rd5KoPr3i9czqeiQJbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtJI4TsT1poJPD6rQpTJSpaM9jGkwHwYDVR0j BBgwFoAUG/cSGWZHB6e3ds2ZuabSzGDOC6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ODk4NWY1OS0wZWU2LTQyMDgtOWE5MC0yOWMxMDg2MDBjZmMvMC8xQkY3MTIxOTY2 NDcwN0E3Qjc3NkNEOTlCOUE2RDJDQzYwQ0UwQkFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQyQ0M2MENF MEJBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDg5ODVmNTktMGVlNi00MjA4LTlh OTAtMjljMTA4NjAwY2ZjLzAvMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQy Q0M2MENFMEJBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFh6X9oPi7b7UxQ2bgVQuYITD8rJW8v2kru 7Yczok7SH3ZzJpl8L2Qxc8DnE5OuR92L4mYFeSoZffnLe+d63zoUVmh7KLi19kJ2 z16UjUUu7KAoG0Ad4zM7azHBbSx0IS2ndv1GhaoRwtHN85VlQ+jM6UQqsJeoxlBh kKzdmiek4wGpfd3ZSLaIz8XDW6er763wPVQ9ScHcaivA5OXyShldLZGCB0z0oD5n QZVc1lHDfl/HZTG3gJC4e5BOd9tiLEax4psZ+0e/FW6mBArjIAs5UP0TXYuVZxL6 OnN75Je1z2yM7pNV5Vwo3oYaau1MILKjkPeFFttap5wZhAWYExU= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:36 2025 by rpki-client