$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft File: 1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft (raw, json) Hash identifier: QjEYQzOjoH+IfxGuDkajW7QRCEaEpXpNtXiwkhQTeRQ= Subject key identifier: A8:D2:46:3E:F0:0A:22:FF:D2:C3:8F:33:4F:6F:59:1A:9D:71:5A:09 Authority key identifier: 1A:C4:9A:EA:F4:8C:92:51:C7:91:3E:A3:8C:F4:BA:F8:E4:0B:7E:4F Certificate issuer: /CN=1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F Certificate serial: 2DBF494683D7E545AEAAF080150646115289922C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft Manifest number: 0109 Signing time: Sun 02 Nov 2025 10:20:39 +0000 Manifest this update: Sun 02 Nov 2025 10:15:39 +0000 Manifest next update: Wed 05 Nov 2025 19:47:39 +0000 Files and hashes: 1: 1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.crl (hash: iRqiFfpLAuADmu6XfdVM3kw1pPfM3Wp5DoqCaC61ijI=) 2: 323030313a6466333a373263303a3a2f34382d3438203d3e20313532333733.roa (hash: 2lAjycdxeSaqDarXvJpjbjwFWksBTkypcj159AzhKmk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.crl rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 19:47:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:bf:49:46:83:d7:e5:45:ae:aa:f0:80:15:06:46:11:52:89:92:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F Validity Not Before: Nov 2 10:15:39 2025 GMT Not After : Nov 5 19:47:39 2025 GMT Subject: CN=A8D2463EF00A22FFD2C38F334F6F591A9D715A09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:aa:24:66:10:4e:42:03:b2:a1:b8:64:be:42: e0:87:20:ea:86:35:2a:8d:6c:fc:c3:10:b3:c9:a5: bc:c7:66:56:1e:37:5d:d0:e1:55:de:2a:fe:fb:fa: a2:03:fd:83:f6:97:2b:47:a0:7d:0d:ae:84:9e:85: e1:57:a3:aa:de:d7:54:4b:88:28:89:4f:c1:dc:ef: 0e:ab:62:d7:6f:4b:03:5a:a4:fb:62:96:c9:f9:39: c3:47:df:ae:b3:04:f9:9b:b8:56:5d:08:8a:d7:7a: 18:1d:a5:7e:a0:25:f6:75:83:8b:7c:ad:5e:d9:87: 20:54:2c:ad:0f:2c:45:96:7f:8f:3f:2e:30:c9:3e: 6a:d6:f7:85:d8:fa:66:62:99:2c:bc:54:e0:06:f9: 39:2e:60:29:13:18:24:20:87:30:d8:eb:51:78:e5: 7a:90:d2:cc:c0:7c:37:46:a9:78:d9:a5:43:2b:61: 97:d0:76:69:ae:dc:2f:05:97:d6:31:11:d0:a2:9e: f5:da:5e:18:48:60:c3:36:d7:c2:d3:95:9f:b6:35: e5:63:fc:f2:ea:c3:29:97:bc:32:05:7a:f0:c2:98: cc:56:85:bb:99:60:c3:0b:f3:15:4a:9b:12:d3:76: 5d:4e:ae:dd:ab:50:ee:16:e2:05:f0:d3:cc:82:d4: 47:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D2:46:3E:F0:0A:22:FF:D2:C3:8F:33:4F:6F:59:1A:9D:71:5A:09 X509v3 Authority Key Identifier: keyid:1A:C4:9A:EA:F4:8C:92:51:C7:91:3E:A3:8C:F4:BA:F8:E4:0B:7E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:5b:af:74:fe:60:82:84:3f:75:bc:ff:20:97:88:5e:c9:4c: c2:38:68:e0:a1:0f:ae:da:c4:aa:6b:1b:54:60:89:9a:e1:fd: 34:7a:96:76:b1:dd:56:dc:ad:ee:ab:99:3f:88:1d:f3:f0:4c: 66:37:bc:ce:b7:18:13:a1:05:a3:80:9e:76:21:64:6c:04:5a: 9f:d6:34:75:c1:ca:4f:59:11:28:10:a3:d5:e5:31:4b:80:cf: 80:0a:a1:4e:a1:67:c1:13:25:62:e6:3f:b8:03:62:46:9b:4e: f2:9f:75:25:21:73:c8:ea:44:e9:77:70:6a:e7:dc:77:93:25: 37:1d:c0:f7:cb:87:f8:08:58:49:c1:ae:fe:a2:e1:b9:f2:06: bc:6d:95:4d:e7:68:de:f0:63:47:9e:f7:69:b4:fc:60:45:c4: 8f:25:97:7e:3c:1e:94:00:dc:c2:1a:e3:a7:55:0a:dc:a8:70: 33:26:25:a4:8b:f7:b6:d7:43:c3:7b:e9:30:e8:28:c5:22:f7: 8c:c9:5e:e4:06:8a:44:95:5b:fb:db:13:3e:6f:d5:3f:f2:03: 67:a4:1f:fc:3e:0d:c1:9a:c3:4f:c4:41:1f:c7:db:1f:28:a1: e2:ed:d3:86:55:4d:1d:51:16:11:23:c8:a7:f1:c3:48:06:93: 6d:6c:58:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULb9JRoPX5UWuqvCAFQZGEVKJkiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFDNDlBRUFGNDhDOTI1MUM3OTEzRUEzOENGNEJBRjhF NDBCN0U0RjAeFw0yNTExMDIxMDE1MzlaFw0yNTExMDUxOTQ3MzlaMDMxMTAvBgNV BAMTKEE4RDI0NjNFRjAwQTIyRkZEMkMzOEYzMzRGNkY1OTFBOUQ3MTVBMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6qiRmEE5CA7KhuGS+QuCHIOqG NSqNbPzDELPJpbzHZlYeN13Q4VXeKv77+qID/YP2lytHoH0NroSeheFXo6re11RL iCiJT8Hc7w6rYtdvSwNapPtilsn5OcNH366zBPmbuFZdCIrXehgdpX6gJfZ1g4t8 rV7ZhyBULK0PLEWWf48/LjDJPmrW94XY+mZimSy8VOAG+TkuYCkTGCQghzDY61F4 5XqQ0szAfDdGqXjZpUMrYZfQdmmu3C8Fl9YxEdCinvXaXhhIYMM218LTlZ+2NeVj /PLqwymXvDIFevDCmMxWhbuZYMML8xVKmxLTdl1Ort2rUO4W4gXw08yC1EcdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqNJGPvAKIv/Sw48zT29ZGp1xWgkwHwYDVR0j BBgwFoAUGsSa6vSMklHHkT6jjPS6+OQLfk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTIzNGM0YS1hOGZmLTQwMzYtODQyMC1kYTgxNjIxMTE4MDYvMS8xQUM0OUFFQUY0 OEM5MjUxQzc5MTNFQTM4Q0Y0QkFGOEU0MEI3RTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUFDNDlBRUFGNDhDOTI1MUM3OTEzRUEzOENGNEJBRjhFNDBC N0U0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzEvMUFDNDlBRUFGNDhDOTI1MUM3OTEzRUEzOENGNEJB RjhFNDBCN0U0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMBbr3T+YIKEP3W8/yCXiF7JTMI4aOChD67a xKprG1RgiZrh/TR6lnax3Vbcre6rmT+IHfPwTGY3vM63GBOhBaOAnnYhZGwEWp/W NHXByk9ZESgQo9XlMUuAz4AKoU6hZ8ETJWLmP7gDYkabTvKfdSUhc8jqROl3cGrn 3HeTJTcdwPfLh/gIWEnBrv6i4bnyBrxtlU3naN7wY0ee92m0/GBFxI8ll348HpQA 3MIa46dVCtyocDMmJaSL97bXQ8N76TDoKMUi94zJXuQGikSVW/vbEz5v1T/yA2ek H/w+DcGaw0/EQR/H2x8ooeLt04ZVTR1RFhEjyKfxw0gGk21sWOY= -----END CERTIFICATE-----Generated at Tue Nov 4 12:31:59 2025 by rpki-client