$ rpki-client -vvf repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft File: 1C427FBF1A649B90BD89B0EA83871003D9045925.mft (raw, json) Hash identifier: te+6CdKL30q/XPISVyg9OgU4e6tG21X5JVFaup0Hg/0= Subject key identifier: 1E:CE:74:16:11:BA:30:2A:09:51:2C:53:C5:CE:E5:5F:1E:F7:A8:21 Authority key identifier: 1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25 Certificate issuer: /CN=1C427FBF1A649B90BD89B0EA83871003D9045925 Certificate serial: 361C092C8FCE6D171C2E176BDCDC19A1203397BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft Manifest number: 0256 Signing time: Tue 04 Nov 2025 05:31:43 +0000 Manifest this update: Tue 04 Nov 2025 05:26:43 +0000 Manifest next update: Fri 07 Nov 2025 06:29:43 +0000 Files and hashes: 1: 1C427FBF1A649B90BD89B0EA83871003D9045925.crl (hash: 3XeKtBRUzWCd6kczUjRQFIdU81zekyXjOro4I5comr0=) 2: 3130332e3138322e302e302f32342d3234203d3e2039333431.roa (hash: 2wBOZUnxy6X5m3+lNkjmU4KdnF5wKP3vz0BnFhgKPHA=) 3: 3130332e3138322e312e302f32342d3234203d3e2039333431.roa (hash: /hsHlytGSIEPe0GxgSOfGs3J1HDdS9+raMR80Eb5wQY=) 4: 3130332e3138322e302e302f32332d3233203d3e2039333431.roa (hash: gNkqorvk0f2bBTsmEL4MnNlyYJ+Qr0d2hFD2R7VVU4Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 06:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:1c:09:2c:8f:ce:6d:17:1c:2e:17:6b:dc:dc:19:a1:20:33:97:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C427FBF1A649B90BD89B0EA83871003D9045925 Validity Not Before: Nov 4 05:26:43 2025 GMT Not After : Nov 7 06:29:43 2025 GMT Subject: CN=1ECE741611BA302A09512C53C5CEE55F1EF7A821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:56:46:36:b3:46:bf:3c:26:9d:6a:fa:6f:da: a3:88:ca:1d:5c:70:bf:17:88:41:f7:6f:e9:21:73: a1:5b:67:d0:f5:9f:97:b3:c7:b0:b1:84:a4:a6:1d: cf:6a:d1:fb:12:00:86:6d:3b:a4:78:a9:83:ac:6d: 23:7c:a7:d2:93:f6:8c:1c:88:57:37:63:12:a6:aa: ac:b3:17:23:10:f0:f4:b6:af:22:96:61:24:1f:da: 2f:dd:46:8c:fa:ab:f7:32:10:f8:21:8c:4c:89:b6: 45:64:83:a3:31:f2:43:f8:a5:a0:4d:94:43:c0:15: c6:a0:d3:f4:c4:f9:e9:a0:1d:0d:b9:f6:0c:1c:61: dd:c4:54:fa:bd:81:b0:a0:e2:64:62:9c:fc:cb:0a: 83:be:ac:e2:21:c5:39:ce:8c:12:f8:bd:74:5a:c2: 88:d1:65:1d:27:aa:67:23:f4:58:ab:28:e2:12:0b: a7:69:33:41:5a:72:f6:0c:c8:de:27:a6:91:7a:52: 1c:97:a6:40:02:88:b3:5d:a2:96:0c:fe:e3:24:e6: 80:eb:33:cc:59:7b:c4:13:6f:03:c6:5f:cc:c3:03: d6:87:fc:ab:52:3a:ba:a8:00:6e:d5:de:c2:41:97: 91:7a:44:6a:55:2b:6d:88:5c:ac:ef:9c:72:e1:e6: f4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CE:74:16:11:BA:30:2A:09:51:2C:53:C5:CE:E5:5F:1E:F7:A8:21 X509v3 Authority Key Identifier: keyid:1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:9b:cb:9c:4d:3c:05:4f:a9:48:d4:27:76:04:e0:35:5d:72: 77:38:ef:28:ee:c6:e3:a7:6b:ee:18:bc:bc:a4:a1:46:3f:5a: 17:05:48:9b:69:fb:70:31:9e:22:08:a8:1b:0a:d2:c9:a3:d1: 61:28:fd:1e:0f:fa:73:bc:ec:0a:d9:14:f4:44:df:e1:46:27: 4c:2a:af:8e:4b:30:57:25:78:85:fd:77:3a:68:cb:a2:33:41: 2f:fa:b5:06:c7:cc:4d:26:2e:0e:4a:99:6b:ba:18:5d:85:02: b0:59:d8:fb:78:85:92:bf:43:ea:77:0c:2b:62:12:06:9c:a8: ec:63:fc:fc:1f:cd:92:93:59:c5:b4:38:8f:26:7e:f4:fe:9e: 93:15:95:9d:6d:85:8f:7d:99:77:7c:7f:aa:ff:9c:c2:0b:98: b9:27:bf:97:10:ce:3c:d3:cf:07:9f:7c:eb:20:14:47:b1:3e: 73:da:bc:9a:3b:0c:ed:5f:87:53:52:63:5f:63:81:80:1f:f8: b9:fd:f1:3e:b5:1f:59:ee:09:63:3b:90:8d:e3:a7:14:df:4a: 3b:4f:4a:31:89:6c:3e:e7:a3:8c:82:21:72:56:a2:a0:d5:a9: ff:92:3b:f9:2c:a4:bc:03:3c:f4:d9:2d:97:64:dd:91:28:b3: 0a:3c:72:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNhwJLI/ObRccLhdr3NwZoSAzl7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNE OTA0NTkyNTAeFw0yNTExMDQwNTI2NDNaFw0yNTExMDcwNjI5NDNaMDMxMTAvBgNV BAMTKDFFQ0U3NDE2MTFCQTMwMkEwOTUxMkM1M0M1Q0VFNTVGMUVGN0E4MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDVkY2s0a/PCadavpv2qOIyh1c cL8XiEH3b+khc6FbZ9D1n5ezx7CxhKSmHc9q0fsSAIZtO6R4qYOsbSN8p9KT9owc iFc3YxKmqqyzFyMQ8PS2ryKWYSQf2i/dRoz6q/cyEPghjEyJtkVkg6Mx8kP4paBN lEPAFcag0/TE+emgHQ259gwcYd3EVPq9gbCg4mRinPzLCoO+rOIhxTnOjBL4vXRa wojRZR0nqmcj9FirKOISC6dpM0FacvYMyN4nppF6UhyXpkACiLNdopYM/uMk5oDr M8xZe8QTbwPGX8zDA9aH/KtSOrqoAG7V3sJBl5F6RGpVK22IXKzvnHLh5vTlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHs50FhG6MCoJUSxTxc7lXx73qCEwHwYDVR0j BBgwFoAUHEJ/vxpkm5C9ibDqg4cQA9kEWSUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmZhM2I2NC0zYzYxLTQ4ZDUtYWIwYy1kNjNiNDgyNGQwMGUvMC8xQzQyN0ZCRjFB NjQ5QjkwQkQ4OUIwRUE4Mzg3MTAwM0Q5MDQ1OTI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNEOTA0 NTkyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZmYTNiNjQtM2M2MS00OGQ1LWFi MGMtZDYzYjQ4MjRkMDBlLzAvMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEw MDNEOTA0NTkyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABeby5xNPAVPqUjUJ3YE4DVdcnc47yjuxuOn a+4YvLykoUY/WhcFSJtp+3AxniIIqBsK0smj0WEo/R4P+nO87ArZFPRE3+FGJ0wq r45LMFcleIX9dzpoy6IzQS/6tQbHzE0mLg5KmWu6GF2FArBZ2Pt4hZK/Q+p3DCti EgacqOxj/PwfzZKTWcW0OI8mfvT+npMVlZ1thY99mXd8f6r/nMILmLknv5cQzjzT zweffOsgFEexPnPavJo7DO1fh1NSY19jgYAf+Ln98T61H1nuCWM7kI3jpxTfSjtP SjGJbD7no4yCIXJWoqDVqf+SO/kspLwDPPTZLZdk3ZEoswo8csw= -----END CERTIFICATE-----Generated at Tue Nov 4 23:15:05 2025 by rpki-client