$ rpki-client -vvf repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft File: 1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft (raw, json) Hash identifier: f1nBihzdzqM1tBrMUVBfmzprvj6TsxFSow5pkMG1bds= Subject key identifier: 63:C7:CB:F0:F1:D8:7B:7A:12:63:55:FD:8A:23:84:B7:C4:7A:14:48 Authority key identifier: 1E:07:47:65:6C:CC:5D:4B:BB:DB:85:B8:DE:73:5A:6D:F4:4C:72:AE Certificate issuer: /CN=1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE Certificate serial: 3FB8D5EB08DA195B1E4E44E120BD72EA7DD58DA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft Manifest number: 051D Signing time: Sun 02 Nov 2025 02:32:11 +0000 Manifest this update: Sun 02 Nov 2025 02:27:11 +0000 Manifest next update: Wed 05 Nov 2025 09:10:11 +0000 Files and hashes: 1: 323430353a366134303a3a2f33322d3332203d3e20313339343235.roa (hash: sqlbIIr/3B92d510dnWRSBB/lQtkjQSBObhW88AnQqI=) 2: 1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.crl (hash: FKHkNVkf5z0KDZy0sLm3dqe62W196UsQiQqZJbpjK3Y=) 3: 3130332e3134342e39302e302f32332d3234203d3e20313339343235.roa (hash: ivixgTI+bD3oZFKOSl+IC3pWvOMcPxvLBq04R8ayQa4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.crl rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 09:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b8:d5:eb:08:da:19:5b:1e:4e:44:e1:20:bd:72:ea:7d:d5:8d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE Validity Not Before: Nov 2 02:27:11 2025 GMT Not After : Nov 5 09:10:11 2025 GMT Subject: CN=63C7CBF0F1D87B7A126355FD8A2384B7C47A1448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:79:4a:3b:34:0a:e9:23:14:fa:96:54:81:f2: 2a:f5:51:fb:c9:7e:bd:ea:2b:78:7b:51:7d:4d:4d: bb:8d:e6:5a:4f:01:7b:e3:2f:9a:f3:bd:a6:ca:23: c7:90:9e:28:01:e9:f5:a0:0f:31:98:57:7b:1c:bb: 33:8e:00:0d:47:91:00:35:9e:1f:b4:18:71:58:b7: 3d:44:d5:d4:c9:85:58:f0:5b:2b:06:91:a0:e1:29: a3:e9:af:5f:38:b1:d6:2f:fe:15:b3:63:c5:1a:76: c0:98:63:b0:70:8e:ec:7f:c5:9b:fe:79:37:86:c9: b0:a8:3c:d0:d7:06:64:79:f6:f0:fc:f4:73:2f:ed: 1e:08:1e:b0:50:62:3d:81:12:bb:43:98:f7:65:bb: e1:39:9b:c4:a0:98:55:82:fc:b2:03:1a:e0:a0:f6: 59:1e:bc:ad:cb:ff:33:56:0d:fa:a1:08:c2:04:5d: 02:73:28:a8:e0:94:00:4d:d7:3e:63:05:ff:16:65: 9e:f1:8f:e4:00:5d:91:68:41:a7:d3:b1:14:e2:d1: 1e:92:ff:d1:08:fd:5e:42:ca:1b:fe:08:bd:ec:b8: 38:8f:90:b7:97:de:98:1f:98:b5:82:07:c0:4e:99: f1:6d:18:83:85:a9:01:fb:c6:e4:67:69:6e:ca:da: 5a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C7:CB:F0:F1:D8:7B:7A:12:63:55:FD:8A:23:84:B7:C4:7A:14:48 X509v3 Authority Key Identifier: keyid:1E:07:47:65:6C:CC:5D:4B:BB:DB:85:B8:DE:73:5A:6D:F4:4C:72:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:d2:77:81:4e:6f:1c:a9:53:b8:da:8b:b2:a1:37:51:c0:6a: e9:d9:48:49:19:c3:49:5a:2b:87:b0:fa:41:b4:be:ed:b3:f8: 78:d5:eb:ae:94:d9:d2:0d:d4:e4:00:fb:60:c0:b5:ea:8b:6a: 6a:02:2a:69:e6:f0:b2:57:3a:d9:2b:ad:c4:20:18:fc:b1:3b: 60:53:2d:a0:6d:5a:2f:27:b7:8a:8f:60:d0:87:b2:d4:04:2c: c7:66:57:bd:46:fc:d3:90:89:3d:8c:57:c3:dc:19:82:96:ca: 32:81:92:d8:53:e2:0b:77:ce:14:95:3b:d5:eb:7c:4c:37:5f: 33:81:04:4e:f2:88:c9:c1:0c:d2:69:cb:5e:be:5b:45:b7:9f: c9:51:31:53:32:b3:0c:a0:fe:b2:aa:d4:c8:f0:ad:6d:9a:4d: 8b:22:7b:c6:86:ce:ce:63:2e:93:dc:fc:19:ad:39:6c:db:1a: ac:5f:4e:ff:8d:e0:34:12:a5:2d:8c:66:eb:35:e0:ae:ce:54: aa:b0:73:5b:2b:8f:30:a2:b5:bf:3a:52:fb:db:87:e7:6a:b2: 9e:c0:3f:22:6a:d7:8b:b4:32:db:97:85:60:90:7e:65:aa:b3: e8:d8:10:69:43:75:8a:c8:db:df:ed:a1:a3:31:5c:39:3a:a1: 23:07:8e:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP7jV6wjaGVseTkThIL1y6n3VjagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUUwNzQ3NjU2Q0NDNUQ0QkJCREI4NUI4REU3MzVBNkRG NDRDNzJBRTAeFw0yNTExMDIwMjI3MTFaFw0yNTExMDUwOTEwMTFaMDMxMTAvBgNV BAMTKDYzQzdDQkYwRjFEODdCN0ExMjYzNTVGRDhBMjM4NEI3QzQ3QTE0NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBeUo7NArpIxT6llSB8ir1UfvJ fr3qK3h7UX1NTbuN5lpPAXvjL5rzvabKI8eQnigB6fWgDzGYV3scuzOOAA1HkQA1 nh+0GHFYtz1E1dTJhVjwWysGkaDhKaPpr184sdYv/hWzY8UadsCYY7Bwjux/xZv+ eTeGybCoPNDXBmR59vD89HMv7R4IHrBQYj2BErtDmPdlu+E5m8SgmFWC/LIDGuCg 9lkevK3L/zNWDfqhCMIEXQJzKKjglABN1z5jBf8WZZ7xj+QAXZFoQafTsRTi0R6S /9EI/V5Cyhv+CL3suDiPkLeX3pgfmLWCB8BOmfFtGIOFqQH7xuRnaW7K2lq/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY8fL8PHYe3oSY1X9iiOEt8R6FEgwHwYDVR0j BBgwFoAUHgdHZWzMXUu724W43nNabfRMcq4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmVhZDJmNS04YjY1LTQ4MjktODg0Yi1kN2MwNmRkMGY4M2EvMC8xRTA3NDc2NTZD Q0M1RDRCQkJEQjg1QjhERTczNUE2REY0NEM3MkFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUUwNzQ3NjU2Q0NDNUQ0QkJCREI4NUI4REU3MzVBNkRGNDRD NzJBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZlYWQyZjUtOGI2NS00ODI5LTg4 NGItZDdjMDZkZDBmODNhLzAvMUUwNzQ3NjU2Q0NDNUQ0QkJCREI4NUI4REU3MzVB NkRGNDRDNzJBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbSd4FObxypU7jai7KhN1HAaunZSEkZw0la K4ew+kG0vu2z+HjV666U2dIN1OQA+2DAteqLamoCKmnm8LJXOtkrrcQgGPyxO2BT LaBtWi8nt4qPYNCHstQELMdmV71G/NOQiT2MV8PcGYKWyjKBkthT4gt3zhSVO9Xr fEw3XzOBBE7yiMnBDNJpy16+W0W3n8lRMVMyswyg/rKq1MjwrW2aTYsie8aGzs5j LpPc/BmtOWzbGqxfTv+N4DQSpS2MZus14K7OVKqwc1srjzCitb86Uvvbh+dqsp7A PyJq14u0MtuXhWCQfmWqs+jYEGlDdYrI29/toaMxXDk6oSMHjh4= -----END CERTIFICATE-----Generated at Tue Nov 4 01:58:37 2025 by rpki-client