$ rpki-client -vvf repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft File: 0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft (raw, json) Hash identifier: uSTrS7diS/+PgkEhQuPjifqi81ct8/AwzjS8IzqBS7Q= Subject key identifier: 8A:2B:93:86:4F:42:F6:AD:2E:2B:0E:95:B5:D8:61:A1:D4:5E:EC:F7 Authority key identifier: 0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD Certificate issuer: /CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD Certificate serial: 031E23D172AB09288A42660094A8DED44C1B93FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft Manifest number: BD Signing time: Wed 05 Nov 2025 09:51:07 +0000 Manifest this update: Wed 05 Nov 2025 09:46:07 +0000 Manifest next update: Sat 08 Nov 2025 16:57:07 +0000 Files and hashes: 1: 3135372e32302e39382e302f32332d3234203d3e20313532343335.roa (hash: ksjiqtTAWCgIRtUjPZtNzrKoQay+iOF9ttjO6dpoPs4=) 2: 0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl (hash: wzxjS7MZDpT00NOHpemqu5QEYGPXAQiM0ktd2IL0A8o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 16:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:1e:23:d1:72:ab:09:28:8a:42:66:00:94:a8:de:d4:4c:1b:93:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD Validity Not Before: Nov 5 09:46:07 2025 GMT Not After : Nov 8 16:57:07 2025 GMT Subject: CN=8A2B93864F42F6AD2E2B0E95B5D861A1D45EECF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5b:80:d3:44:3b:46:a3:34:5a:28:7d:a1:ec: 1d:7a:1f:12:6a:27:51:38:3d:0e:42:51:19:a3:12: 82:3a:83:4f:93:8f:af:2e:33:e5:c2:f8:d7:84:e3: 1e:e0:c3:df:0f:67:bf:40:27:b9:6c:da:c7:73:0c: ff:5c:f8:45:17:dc:46:4b:ee:89:af:fe:6c:c7:af: 47:c5:46:ea:e9:fd:a0:71:06:33:b3:d9:a7:18:5e: 29:0b:ff:74:cd:3d:d8:d6:29:ec:06:a5:e9:64:a9: ad:d6:58:7c:69:64:dc:72:ea:5c:9b:08:93:48:08: e6:64:0d:e8:23:e2:78:03:b9:af:6c:fd:35:b1:f8: 9f:14:32:75:ae:02:00:04:b5:af:3f:2f:72:9f:21: 53:ff:16:8b:ba:98:87:d6:2a:3f:e7:8a:c0:8d:9f: 06:e3:a9:a2:44:07:9c:f6:ed:06:6c:d0:1b:a2:5c: 2d:5e:15:0d:9a:0e:83:ab:b9:05:2e:26:f9:19:e5: b2:c1:27:d0:59:12:7d:ac:8b:cf:80:39:7c:ae:33: 40:29:3b:c2:c1:77:67:34:e8:ef:b4:bf:f8:5d:07: 1e:5f:ef:5f:db:df:eb:39:fe:06:b2:18:cd:32:e5: 98:8f:46:4d:0a:ad:f2:e0:a2:0c:c7:94:7e:3e:28: 62:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2B:93:86:4F:42:F6:AD:2E:2B:0E:95:B5:D8:61:A1:D4:5E:EC:F7 X509v3 Authority Key Identifier: keyid:0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:48:c8:54:59:6f:09:d7:91:01:16:d8:d7:c5:e9:23:15:25: 5e:42:90:77:b4:1b:1b:b5:b2:08:a1:45:0e:8d:a4:0f:e0:b7: 97:d1:10:cf:6f:ed:d8:55:26:f1:2a:2a:85:a5:68:b7:32:1c: 82:00:9f:9f:3a:4b:a0:00:a1:7f:d5:ee:ff:6d:07:fe:8b:e8: b0:93:1c:c8:69:97:3d:b9:7e:c6:e6:8a:f2:da:2e:8a:95:34: e5:b5:ea:e4:4b:53:81:5f:bf:ab:d2:35:2e:cb:af:cb:ba:f9: 41:41:b1:d1:a3:1f:e6:dd:69:f9:ca:5b:c5:28:44:43:a1:fa: 2e:c5:f2:a9:0c:fb:b2:0c:c3:ed:56:f7:87:01:1c:31:72:5b: 85:f6:0d:5e:de:ad:aa:e6:b4:f9:2b:bc:35:9c:fd:ae:0b:9c: 15:9a:63:40:2e:4a:52:52:d7:1e:c6:5b:f9:f1:ba:e6:17:01: f6:80:dd:df:c2:fa:61:07:70:6f:62:85:4f:36:15:f5:32:67: a8:54:8a:4f:f9:7a:fa:01:62:3b:83:30:fa:9f:1f:98:68:5f: cb:63:c4:93:64:29:94:3b:f3:1d:ce:1b:fe:cf:64:97:a5:fb: a6:35:04:ab:ef:e7:92:26:1f:a9:1c:c9:06:f7:2c:13:8e:88: dc:49:a6:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAx4j0XKrCSiKQmYAlKje1Ewbk/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1QzA4 M0ZCN0RDRDAeFw0yNTExMDUwOTQ2MDdaFw0yNTExMDgxNjU3MDdaMDMxMTAvBgNV BAMTKDhBMkI5Mzg2NEY0MkY2QUQyRTJCMEU5NUI1RDg2MUExRDQ1RUVDRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmW4DTRDtGozRaKH2h7B16HxJq J1E4PQ5CURmjEoI6g0+Tj68uM+XC+NeE4x7gw98PZ79AJ7ls2sdzDP9c+EUX3EZL 7omv/mzHr0fFRurp/aBxBjOz2acYXikL/3TNPdjWKewGpelkqa3WWHxpZNxy6lyb CJNICOZkDegj4ngDua9s/TWx+J8UMnWuAgAEta8/L3KfIVP/Fou6mIfWKj/nisCN nwbjqaJEB5z27QZs0BuiXC1eFQ2aDoOruQUuJvkZ5bLBJ9BZEn2si8+AOXyuM0Ap O8LBd2c06O+0v/hdBx5f71/b3+s5/gayGM0y5ZiPRk0KrfLgogzHlH4+KGKZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiiuThk9C9q0uKw6VtdhhodRe7PcwHwYDVR0j BBgwFoAUDB++gPIesmaGl4s+dpSFwIP7fc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzQ2YzBlMi04MTk0LTQwMjQtYmNiMy1kMDI5NTZjZTNhOTkvMC8wQzFGQkU4MEYy MUVCMjY2ODY5NzhCM0U3Njk0ODVDMDgzRkI3RENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1QzA4M0ZC N0RDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM0NmMwZTItODE5NC00MDI0LWJj YjMtZDAyOTU2Y2UzYTk5LzAvMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1 QzA4M0ZCN0RDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKBIyFRZbwnXkQEW2NfF6SMVJV5CkHe0Gxu1 sgihRQ6NpA/gt5fREM9v7dhVJvEqKoWlaLcyHIIAn586S6AAoX/V7v9tB/6L6LCT HMhplz25fsbmivLaLoqVNOW16uRLU4Ffv6vSNS7Lr8u6+UFBsdGjH+bdafnKW8Uo REOh+i7F8qkM+7IMw+1W94cBHDFyW4X2DV7erarmtPkrvDWc/a4LnBWaY0AuSlJS 1x7GW/nxuuYXAfaA3d/C+mEHcG9ihU82FfUyZ6hUik/5evoBYjuDMPqfH5hoX8tj xJNkKZQ78x3OG/7PZJel+6Y1BKvv55ImH6kcyQb3LBOOiNxJptk= -----END CERTIFICATE-----Generated at Wed Nov 5 20:46:09 2025 by rpki-client