$ rpki-client -vvf repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft File: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft (raw, json) Hash identifier: Q6qJnxHBjOP1UeN9rSguGC+N1FK92n4Ut5fWCgPXc58= Subject key identifier: C8:2B:CD:86:12:BC:83:91:3C:87:CE:5F:F2:A6:D3:FB:5C:B1:58:3C Authority key identifier: 1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 Certificate issuer: /CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Certificate serial: 15C2E0991E836DFD1C5B88AEFDDDAF0A7A2AB4EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft Manifest number: 04EA Signing time: Mon 03 Nov 2025 02:50:41 +0000 Manifest this update: Mon 03 Nov 2025 02:45:41 +0000 Manifest next update: Thu 06 Nov 2025 08:19:41 +0000 Files and hashes: 1: 323430313a343230303a3a2f33322d3438203d3e203234313935.roa (hash: xPjBnSpHmpcu0qAxiY2wE80xegcTsRNtPEAJ6PwASdw=) 2: 3230322e36372e382e302f32312d3234203d3e203234313935.roa (hash: B+C/2EohdvfSLSdEWCv4uFVDG8om8Pw0dnsHmi+NJ9Y=) 3: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (hash: XlrHKxvILobzAM8qX1Td9F4llGO1s7dDnxuDShAIB6Q=) 4: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl (hash: Zqz8BkBx+pAkfTiJ9VNfqg8Z3OvNUUWL4XfrgM1QO6k=) 5: 3131382e39312e3132382e302f32312d3234203d3e203234313935.roa (hash: yiPIGsDISayK97qWqm2UWsTxEHdxKETOsL8gSiwFMjA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 08:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:c2:e0:99:1e:83:6d:fd:1c:5b:88:ae:fd:dd:af:0a:7a:2a:b4:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Validity Not Before: Nov 3 02:45:41 2025 GMT Not After : Nov 6 08:19:41 2025 GMT Subject: CN=C82BCD8612BC83913C87CE5FF2A6D3FB5CB1583C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:48:be:31:87:14:63:f6:7e:ce:25:91:24:82: ab:35:6b:73:0f:d3:a8:b6:cd:96:71:b6:8b:ef:e4: 7e:81:f1:f6:09:08:91:7a:00:83:e0:6e:7a:5b:08: 46:53:44:bf:89:f6:75:49:e1:ed:e6:fc:4d:42:f6: 1a:99:50:6e:1f:4f:74:27:88:22:7d:ab:a6:25:8f: 8e:08:24:9f:77:a9:23:14:64:16:d4:10:9c:13:30: 01:39:2c:6f:58:ec:99:f3:9d:67:3b:f4:b6:fb:bd: 96:84:d3:13:fa:9f:a6:0c:df:c3:bc:20:df:9a:8d: 28:0d:d9:2d:67:8a:34:98:2d:ab:4c:78:12:b0:96: d9:dc:18:7a:bf:06:23:56:31:1f:cd:14:3f:81:14: 38:36:43:9b:ce:66:ad:2e:db:1b:ba:cf:66:2b:9d: 1d:2f:aa:b8:6d:72:09:67:c4:82:ca:b2:1d:e8:2c: 6c:48:26:cd:ad:d9:65:9a:f4:0e:62:14:5f:c9:c7: fb:17:22:ae:30:0e:04:45:1e:b6:e1:00:4e:cc:0f: d0:35:54:02:15:2a:be:7a:9b:67:c2:30:36:e5:a1: 52:31:a8:d1:46:f2:c8:5c:4c:68:fa:67:97:be:85: 97:7e:0c:48:95:66:3d:6d:50:25:a7:11:1c:a7:57: ce:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:2B:CD:86:12:BC:83:91:3C:87:CE:5F:F2:A6:D3:FB:5C:B1:58:3C X509v3 Authority Key Identifier: keyid:1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:ef:bf:cc:87:49:e7:e1:ff:a0:de:fb:ed:3d:34:76:c2:01: 2a:a4:a6:a3:4f:19:40:80:57:d2:9d:dd:28:a2:ee:75:c8:1d: a6:75:3f:39:77:34:a4:61:b2:0d:92:c6:f4:e8:c4:65:cc:80: 70:23:95:3a:37:36:6a:0d:7c:e7:5e:91:f2:2b:cf:3a:ed:6d: 58:f7:1d:af:46:b9:9a:03:b0:77:23:75:87:f0:63:5f:4f:bd: f4:19:d2:fa:58:8d:f8:1e:37:80:3a:0d:ae:68:08:ab:8c:2b: d4:ad:71:e1:94:af:4f:04:52:94:71:ed:0f:81:a2:5b:54:1e: 2c:98:56:28:51:86:7c:74:2a:59:ea:37:1a:f0:e6:1b:ef:da: eb:33:e2:4b:60:c4:81:a4:01:e2:0d:1c:7c:07:cc:94:ce:ed: 8a:dc:25:42:2b:0c:de:9e:24:e5:8c:4a:c9:3a:f8:8a:bc:56: d4:cf:02:2f:e4:88:08:c6:5d:54:75:fc:d0:6e:e8:61:bc:07: 12:91:40:be:ed:0a:08:38:76:6f:5e:9a:0d:e1:72:e5:0b:74: 28:b1:1b:3f:ee:10:7c:47:42:48:ca:b3:e6:c8:75:10:b6:bf: 04:c0:42:f5:c9:6d:3f:ea:04:50:9d:e9:57:83:0c:15:60:6d: 61:52:98:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFcLgmR6Dbf0cW4iu/d2vCnoqtOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUx QzdGRTk0NjAeFw0yNTExMDMwMjQ1NDFaFw0yNTExMDYwODE5NDFaMDMxMTAvBgNV BAMTKEM4MkJDRDg2MTJCQzgzOTEzQzg3Q0U1RkYyQTZEM0ZCNUNCMTU4M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFSL4xhxRj9n7OJZEkgqs1a3MP 06i2zZZxtovv5H6B8fYJCJF6AIPgbnpbCEZTRL+J9nVJ4e3m/E1C9hqZUG4fT3Qn iCJ9q6Ylj44IJJ93qSMUZBbUEJwTMAE5LG9Y7JnznWc79Lb7vZaE0xP6n6YM38O8 IN+ajSgN2S1nijSYLatMeBKwltncGHq/BiNWMR/NFD+BFDg2Q5vOZq0u2xu6z2Yr nR0vqrhtcglnxILKsh3oLGxIJs2t2WWa9A5iFF/Jx/sXIq4wDgRFHrbhAE7MD9A1 VAIVKr56m2fCMDbloVIxqNFG8shcTGj6Z5e+hZd+DEiVZj1tUCWnERynV85LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyCvNhhK8g5E8h85f8qbT+1yxWDwwHwYDVR0j BBgwFoAUH81H+0vXKeIuT+785bYbThx/6UYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzkyYTRjZC1kYmFjLTQzYWMtODA2MC0yZThkNDJlYWU2NTUvMC8xRkNENDdGQjRC RDcyOUUyMkU0RkVFRkNFNUI2MUI0RTFDN0ZFOTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUxQzdG RTk0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc5MmE0Y2QtZGJhYy00M2FjLTgw NjAtMmU4ZDQyZWFlNjU1LzAvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFC NEUxQzdGRTk0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjvv8yHSefh/6De++09NHbCASqkpqNPGUCA V9Kd3Sii7nXIHaZ1Pzl3NKRhsg2SxvToxGXMgHAjlTo3NmoNfOdekfIrzzrtbVj3 Ha9GuZoDsHcjdYfwY19PvfQZ0vpYjfgeN4A6Da5oCKuMK9StceGUr08EUpRx7Q+B oltUHiyYVihRhnx0KlnqNxrw5hvv2usz4ktgxIGkAeINHHwHzJTO7YrcJUIrDN6e JOWMSsk6+Iq8VtTPAi/kiAjGXVR1/NBu6GG8BxKRQL7tCgg4dm9emg3hcuULdCix Gz/uEHxHQkjKs+bIdRC2vwTAQvXJbT/qBFCd6VeDDBVgbWFSmHk= -----END CERTIFICATE-----Generated at Tue Nov 4 08:03:25 2025 by rpki-client