$ rpki-client -vvf repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft File: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft (raw, json) Hash identifier: +207wcWYXhSVUW1BLvOvEw5ll2PIga8Hwcf67arBY1I= Subject key identifier: 72:5C:BB:F2:3B:F6:3D:1A:CD:C5:DB:74:22:21:C9:24:0C:4A:AC:13 Authority key identifier: 1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 Certificate issuer: /CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Certificate serial: 2FB6B26BF9AB5347FB0ACE52AC8556A96E3B9BC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft Manifest number: AD Signing time: Mon 03 Nov 2025 08:43:49 +0000 Manifest this update: Mon 03 Nov 2025 08:38:49 +0000 Manifest next update: Thu 06 Nov 2025 10:49:49 +0000 Files and hashes: 1: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl (hash: EodQsnoFKk62UyE23JidWTSXEVI+RstEGDTULZY5/gY=) 2: 323030313a6466343a353863303a3a2f34382d3438203d3e20313533313237.roa (hash: vwgSPrWbk7InW3RVvW95kOhCGfi4C/hudM8AnWKgHzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:b6:b2:6b:f9:ab:53:47:fb:0a:ce:52:ac:85:56:a9:6e:3b:9b:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Validity Not Before: Nov 3 08:38:49 2025 GMT Not After : Nov 6 10:49:49 2025 GMT Subject: CN=725CBBF23BF63D1ACDC5DB742221C9240C4AAC13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9a:dd:8f:67:1f:ca:6e:be:fd:a7:be:ba:f0: 95:c5:ef:cb:f8:61:29:c7:52:c5:f0:d0:0d:4b:40: a3:6b:fe:64:7a:8f:87:5f:a6:de:6d:dc:32:b0:78: 69:35:e4:c7:6d:11:83:0f:fb:21:f3:7e:39:93:4e: b9:af:4e:08:cf:04:cd:aa:87:d5:34:08:0d:bf:63: 60:53:e1:a2:f0:5c:ea:58:95:49:a9:f3:57:3e:4c: b8:fe:da:90:d7:ff:a3:e1:e9:8b:3f:d5:ee:fd:5d: 04:ca:1f:79:4e:83:0d:93:34:74:b6:25:04:96:2e: 9d:d9:32:a6:5d:40:cf:6f:28:00:6f:c5:ba:ab:6b: 00:09:38:e2:ff:db:96:8f:f0:5f:c7:b7:8a:03:8e: 4b:7a:11:d5:5e:a9:b4:53:d0:eb:fa:7a:4b:1c:f7: 6a:62:0f:b2:44:06:4d:a2:fc:bf:21:86:45:2f:58: 0a:79:15:65:3b:51:fc:99:14:9d:cb:a0:f6:a0:a4: 81:25:e0:5e:f8:d3:b9:d5:87:c7:dd:cc:08:c6:48: b9:d8:8b:07:72:92:16:1a:c3:96:05:49:85:f0:5b: 2a:3d:3b:81:53:34:04:22:49:ee:2d:b8:d6:a8:ef: 89:09:66:56:85:0a:45:3b:88:42:a7:b9:9f:82:46: fd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:5C:BB:F2:3B:F6:3D:1A:CD:C5:DB:74:22:21:C9:24:0C:4A:AC:13 X509v3 Authority Key Identifier: keyid:1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:ad:b6:fc:e1:ac:aa:76:80:96:f8:59:d8:2a:aa:c9:ce:5e: e6:6f:57:d0:cf:16:e3:36:1c:4c:f6:56:82:0c:36:76:0b:46: 66:d3:60:06:da:2d:b9:43:c7:b9:7a:38:f8:78:5f:65:23:4f: b0:bb:06:1e:24:40:e4:7a:fa:45:fb:ce:92:4f:7d:00:9b:2e: de:31:18:12:e5:6d:e3:ef:45:37:c1:86:e7:a6:1c:3b:87:30: 29:16:21:7c:29:f0:8e:6d:94:fb:35:d0:91:d0:be:33:98:50: 32:d1:01:ef:a2:02:4b:c7:33:e6:df:cd:67:0f:a1:3e:42:d6: 11:23:79:9f:e6:4d:af:41:ac:ea:f8:64:79:3f:6d:3b:73:82: bb:b3:97:3a:b3:60:e7:e5:a2:c1:8e:e6:4f:e4:c4:af:91:81: 6c:dd:98:52:0d:4d:7b:f0:9c:83:d0:28:ca:e8:10:26:a1:15: 69:85:8e:b6:ca:10:ee:87:71:2c:65:0a:20:b3:2c:dd:a7:77: 70:9f:99:75:82:c0:45:d7:22:bd:2a:bb:3b:b8:fa:91:da:41: 03:37:4f:fe:2f:52:ba:e7:35:1d:30:d6:e0:86:73:a4:b2:9d: 5d:88:9a:99:bd:73:32:84:d0:a1:f9:ea:85:f9:a3:89:3b:4f: 90:e8:8e:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL7aya/mrU0f7Cs5SrIVWqW47m8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVB NTE4M0RGMzAeFw0yNTExMDMwODM4NDlaFw0yNTExMDYxMDQ5NDlaMDMxMTAvBgNV BAMTKDcyNUNCQkYyM0JGNjNEMUFDREM1REI3NDIyMjFDOTI0MEM0QUFDMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVmt2PZx/Kbr79p7668JXF78v4 YSnHUsXw0A1LQKNr/mR6j4dfpt5t3DKweGk15MdtEYMP+yHzfjmTTrmvTgjPBM2q h9U0CA2/Y2BT4aLwXOpYlUmp81c+TLj+2pDX/6Ph6Ys/1e79XQTKH3lOgw2TNHS2 JQSWLp3ZMqZdQM9vKABvxbqrawAJOOL/25aP8F/Ht4oDjkt6EdVeqbRT0Ov6eksc 92piD7JEBk2i/L8hhkUvWAp5FWU7UfyZFJ3LoPagpIEl4F7407nVh8fdzAjGSLnY iwdykhYaw5YFSYXwWyo9O4FTNAQiSe4tuNao74kJZlaFCkU7iEKnuZ+CRv3dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcly78jv2PRrNxdt0IiHJJAxKrBMwHwYDVR0j BBgwFoAUH1FZGczAqQD/lxfht+8R9aUYPfMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWQ5N2I0MC1jMDMxLTRlNWItOWI0Mi1kMmFlMWM5Y2Y5ODcvMS8xRjUxNTkxOUND QzBBOTAwRkY5NzE3RTFCN0VGMTFGNUE1MTgzREYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVBNTE4 M0RGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzEvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjEx RjVBNTE4M0RGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJittvzhrKp2gJb4WdgqqsnOXuZvV9DPFuM2 HEz2VoIMNnYLRmbTYAbaLblDx7l6OPh4X2UjT7C7Bh4kQOR6+kX7zpJPfQCbLt4x GBLlbePvRTfBhuemHDuHMCkWIXwp8I5tlPs10JHQvjOYUDLRAe+iAkvHM+bfzWcP oT5C1hEjeZ/mTa9BrOr4ZHk/bTtzgruzlzqzYOflosGO5k/kxK+RgWzdmFINTXvw nIPQKMroECahFWmFjrbKEO6HcSxlCiCzLN2nd3CfmXWCwEXXIr0quzu4+pHaQQM3 T/4vUrrnNR0w1uCGc6SynV2Impm9czKE0KH56oX5o4k7T5DojoU= -----END CERTIFICATE-----Generated at Wed Nov 5 11:13:32 2025 by rpki-client