$ rpki-client -vvf repo-rpki.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.mft File: 1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.mft (raw, json) Hash identifier: 6bg+rse39Gj3ZI2csl9iLWZXF6utugnTMfhQrAxSLXQ= Subject key identifier: 04:1D:E5:FF:B0:33:92:FC:94:3B:AF:16:C8:23:F5:29:20:98:E6:2B Authority key identifier: 1C:05:C7:9C:77:54:4A:2E:3F:54:29:0E:60:07:CA:03:E6:FC:3A:AE Certificate issuer: /CN=1C05C79C77544A2E3F54290E6007CA03E6FC3AAE Certificate serial: 6A3B6E30D4A63D293A3DCA188EC43339C796C221 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.mft Manifest number: 03 Signing time: Mon 03 Nov 2025 13:12:13 +0000 Manifest this update: Mon 03 Nov 2025 13:07:13 +0000 Manifest next update: Thu 06 Nov 2025 21:27:13 +0000 Files and hashes: 1: 1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.crl (hash: 5Zu1tGJnRlTvzc8LRL+8BQ0ZHacgRRpRSVF29xGT+yo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.crl rsync://repo-rpki.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 21:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:3b:6e:30:d4:a6:3d:29:3a:3d:ca:18:8e:c4:33:39:c7:96:c2:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C05C79C77544A2E3F54290E6007CA03E6FC3AAE Validity Not Before: Nov 3 13:07:13 2025 GMT Not After : Nov 6 21:27:13 2025 GMT Subject: CN=041DE5FFB03392FC943BAF16C823F5292098E62B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:60:e3:6d:18:2e:89:b0:a3:12:12:bf:0d:85: 95:60:f2:64:08:b7:d0:15:95:da:95:2f:3b:60:0a: b8:5e:9d:6f:62:54:a9:ac:3e:88:84:91:0a:6e:0f: d2:40:37:56:9e:69:11:83:ec:01:07:6c:d1:fb:bf: 60:65:6e:cc:16:00:25:35:bf:e2:95:11:0c:00:51: e6:18:61:cd:d0:c9:85:0b:40:44:bf:f7:cd:ad:1f: 35:d0:4e:02:b2:7c:f6:81:cb:c4:ef:84:b7:70:60: f2:84:d9:ba:2a:25:d0:06:94:93:1b:78:ce:46:da: be:34:02:1f:55:e2:d2:6e:56:e0:cc:9b:a0:97:10: 0c:50:34:fc:5e:ca:cb:d2:b2:a3:c1:a0:be:82:fc: 46:00:88:62:31:c5:79:55:00:64:f2:b5:13:50:56: 88:05:40:fa:ea:0e:e6:b6:fd:06:6f:2c:9e:d1:f2: 60:07:6c:d9:52:4a:99:84:2f:d2:06:88:b7:07:ed: 0d:5c:7e:30:09:65:9e:37:68:aa:fb:20:3c:d6:8f: 01:de:6a:7f:01:a9:fa:83:03:e3:b3:b7:5c:0f:09: a2:e6:2c:e2:6b:b9:d8:44:ca:55:ab:94:8a:03:b0: 31:c0:dc:5a:35:43:ff:33:25:63:eb:9b:89:a1:53: 91:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1D:E5:FF:B0:33:92:FC:94:3B:AF:16:C8:23:F5:29:20:98:E6:2B X509v3 Authority Key Identifier: keyid:1C:05:C7:9C:77:54:4A:2E:3F:54:29:0E:60:07:CA:03:E6:FC:3A:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:2b:81:32:09:15:d7:e0:64:f7:a3:aa:93:03:14:df:4a:7a: 17:ba:ce:19:c7:85:c2:57:c3:17:6b:f7:a1:e0:00:18:ff:a9: 07:96:71:97:53:fd:7b:cd:14:cc:16:44:74:26:61:21:eb:28: e6:7e:59:c0:32:60:eb:f2:c4:bb:a2:f4:64:34:2b:04:e2:23: fd:a2:84:76:04:96:bf:e2:ee:33:b9:0d:07:20:50:23:f9:59: 72:f1:70:87:11:fb:2e:c2:c9:d0:bd:e6:10:20:b2:f3:59:d0: 89:4c:62:48:94:e1:5d:31:10:32:db:6d:49:7d:6a:6a:b5:79: a8:f4:9b:66:73:a7:2d:94:de:02:36:d2:07:93:8a:5b:16:a8: 9c:5c:55:fe:0b:6b:30:08:c1:ed:a9:18:14:98:a2:10:b9:a1: 44:18:37:56:50:51:f8:f6:1b:30:46:3f:a2:2f:8f:04:7c:1d: 98:56:d3:c4:3b:5b:bf:69:63:94:9e:e6:6e:74:0b:38:de:04: ff:b8:1f:fe:c4:87:93:f8:99:4e:b1:2b:08:60:b4:01:36:9c: 53:29:28:c5:86:f2:04:54:a9:fc:b2:42:6e:ad:ff:e9:ee:37: bb:ff:5e:38:7a:6b:6f:6c:1f:44:7c:c9:f0:d5:2c:19:e0:56: 39:d7:7b:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUajtuMNSmPSk6PcoYjsQzOceWwiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMwNUM3OUM3NzU0NEEyRTNGNTQyOTBFNjAwN0NBMDNF NkZDM0FBRTAeFw0yNTExMDMxMzA3MTNaFw0yNTExMDYyMTI3MTNaMDMxMTAvBgNV BAMTKDA0MURFNUZGQjAzMzkyRkM5NDNCQUYxNkM4MjNGNTI5MjA5OEU2MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCYONtGC6JsKMSEr8NhZVg8mQI t9AVldqVLztgCrhenW9iVKmsPoiEkQpuD9JAN1aeaRGD7AEHbNH7v2BlbswWACU1 v+KVEQwAUeYYYc3QyYULQES/982tHzXQTgKyfPaBy8TvhLdwYPKE2boqJdAGlJMb eM5G2r40Ah9V4tJuVuDMm6CXEAxQNPxeysvSsqPBoL6C/EYAiGIxxXlVAGTytRNQ VogFQPrqDua2/QZvLJ7R8mAHbNlSSpmEL9IGiLcH7Q1cfjAJZZ43aKr7IDzWjwHe an8BqfqDA+Ozt1wPCaLmLOJrudhEylWrlIoDsDHA3Fo1Q/8zJWPrm4mhU5FpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBB3l/7AzkvyUO68WyCP1KSCY5iswHwYDVR0j BBgwFoAUHAXHnHdUSi4/VCkOYAfKA+b8Oq4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjYyNWJmMi1mM2I2LTRlOWMtODViMC01NWUzYzU0NjdmOWMvMC8xQzA1Qzc5Qzc3 NTQ0QTJFM0Y1NDI5MEU2MDA3Q0EwM0U2RkMzQUFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUMwNUM3OUM3NzU0NEEyRTNGNTQyOTBFNjAwN0NBMDNFNkZD M0FBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjI2MjViZjItZjNiNi00ZTljLTg1 YjAtNTVlM2M1NDY3ZjljLzAvMUMwNUM3OUM3NzU0NEEyRTNGNTQyOTBFNjAwN0NB MDNFNkZDM0FBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgrgTIJFdfgZPejqpMDFN9Kehe6zhnHhcJX wxdr96HgABj/qQeWcZdT/XvNFMwWRHQmYSHrKOZ+WcAyYOvyxLui9GQ0KwTiI/2i hHYElr/i7jO5DQcgUCP5WXLxcIcR+y7CydC95hAgsvNZ0IlMYkiU4V0xEDLbbUl9 amq1eaj0m2Zzpy2U3gI20geTilsWqJxcVf4LazAIwe2pGBSYohC5oUQYN1ZQUfj2 GzBGP6IvjwR8HZhW08Q7W79pY5Se5m50CzjeBP+4H/7Eh5P4mU6xKwhgtAE2nFMp KMWG8gRUqfyyQm6t/+nuN7v/Xjh6a29sH0R8yfDVLBngVjnXe0Y= -----END CERTIFICATE-----Generated at Tue Nov 4 02:05:51 2025 by rpki-client