$ rpki-client -vvf repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft File: 1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft (raw, json) Hash identifier: RewKVwpfQ6+4RTjKrpXfTwmmJok8AUcvP9TabSa7BG0= Subject key identifier: 73:24:32:D7:D5:6A:DC:87:1A:68:63:F5:22:57:AE:1F:3D:45:3A:C1 Authority key identifier: 1C:C4:D0:E2:E2:BC:8B:00:60:71:8A:85:76:57:AA:82:D2:0E:59:74 Certificate issuer: /CN=1CC4D0E2E2BC8B0060718A857657AA82D20E5974 Certificate serial: 1666365C60147982D812844C0A030C06DB1A08C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft Manifest number: 0144 Signing time: Sun 02 Nov 2025 19:00:04 +0000 Manifest this update: Sun 02 Nov 2025 18:55:04 +0000 Manifest next update: Thu 06 Nov 2025 01:45:04 +0000 Files and hashes: 1: 3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa (hash: c6uY286NAKl6e1+QUCIAnDozTBVcXw8V9RD5Jtc/nw8=) 2: 1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl (hash: LuVdSkSyKy/FM/4V5iDvHr5PJ6umCVudKKtl2y9gWYo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:45:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:66:36:5c:60:14:79:82:d8:12:84:4c:0a:03:0c:06:db:1a:08:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CC4D0E2E2BC8B0060718A857657AA82D20E5974 Validity Not Before: Nov 2 18:55:04 2025 GMT Not After : Nov 6 01:45:04 2025 GMT Subject: CN=732432D7D56ADC871A6863F52257AE1F3D453AC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ca:0e:14:b5:76:3b:60:02:de:d7:6d:58:f9: 5e:bf:53:3b:5f:cf:0c:f3:85:de:26:1a:81:78:9e: 19:57:db:d2:3d:20:67:e1:89:c1:e1:1a:f3:fa:00: 5c:f1:b7:a8:23:75:db:0f:87:4e:66:a7:ae:aa:15: 7c:c4:a0:a4:0c:74:99:99:29:be:73:13:73:51:ea: 78:be:4c:06:ea:ba:b2:e0:57:ca:66:5c:e8:c5:88: c9:0e:6c:7b:0d:21:ef:26:2a:a4:cd:ca:ad:fa:c1: 81:3c:cb:53:9e:99:be:0d:b0:79:f1:4e:c9:7a:63: e4:3a:e6:b6:34:aa:44:67:3f:f7:8c:d0:02:af:e0: 92:60:f1:c2:1a:ce:f3:f7:fe:76:e0:c6:b9:e4:4a: f1:b4:53:f5:36:7e:f5:16:1b:1c:84:85:3c:96:07: 75:ba:2b:d3:3e:0e:d0:9c:33:30:1f:df:3d:ad:34: e0:c4:9c:4e:e6:7e:f5:96:29:84:b3:95:74:fa:55: b0:3b:62:18:aa:c1:0f:5f:c5:cf:39:ab:2d:13:11: a3:3d:8f:c9:7a:d6:32:11:1a:22:97:cb:e2:ce:cc: 69:d9:81:65:9d:ea:34:32:88:6e:05:6e:c6:51:bf: 2b:63:2b:02:c2:aa:0a:37:6a:df:57:11:2c:47:75: 95:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:24:32:D7:D5:6A:DC:87:1A:68:63:F5:22:57:AE:1F:3D:45:3A:C1 X509v3 Authority Key Identifier: keyid:1C:C4:D0:E2:E2:BC:8B:00:60:71:8A:85:76:57:AA:82:D2:0E:59:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:d2:8e:b2:d3:45:29:4e:59:1c:df:e1:ad:fc:5d:f9:65:0b: 83:d7:fe:79:07:40:c8:61:2c:63:49:e8:3f:0a:37:76:0c:6d: e7:9a:f1:f3:e8:33:ed:8f:8f:04:05:1e:10:c9:06:92:96:47: 87:e0:fd:d1:1c:72:16:68:8d:f3:31:84:6f:40:2d:aa:61:8b: c8:59:05:15:85:73:b4:00:86:7b:ff:42:fc:1b:15:10:96:0e: ab:3f:7a:29:e4:3f:b8:41:01:ce:98:4f:f4:d8:86:a5:f2:34: 3c:53:b9:53:c9:f0:2b:61:bd:a6:9e:5a:80:10:8e:65:ec:c9: 34:52:c7:3c:3a:b2:eb:02:07:4a:03:42:a2:c2:e4:55:97:21: 87:50:a6:6c:0c:4e:de:96:01:6e:a2:f7:a2:b0:6f:c6:e8:09: 7f:8d:ef:fe:f8:60:8e:f1:3d:6c:c4:b7:31:2f:32:81:5b:57: 5b:d7:41:fd:3a:00:5c:e5:08:c2:70:5b:96:fa:98:d1:1b:ab: c9:d9:93:6b:33:4b:ec:a9:70:01:ba:b0:9f:60:8c:17:fa:73: 58:74:9a:9e:40:2e:85:29:7f:f7:b0:d3:fc:a3:82:24:4f:27: 7e:9f:48:a6:51:dd:6c:09:39:5b:38:72:01:55:c6:c4:63:21: f6:88:46:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFmY2XGAUeYLYEoRMCgMMBtsaCMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FBODJE MjBFNTk3NDAeFw0yNTExMDIxODU1MDRaFw0yNTExMDYwMTQ1MDRaMDMxMTAvBgNV BAMTKDczMjQzMkQ3RDU2QURDODcxQTY4NjNGNTIyNTdBRTFGM0Q0NTNBQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpyg4UtXY7YALe121Y+V6/Uztf zwzzhd4mGoF4nhlX29I9IGfhicHhGvP6AFzxt6gjddsPh05mp66qFXzEoKQMdJmZ Kb5zE3NR6ni+TAbqurLgV8pmXOjFiMkObHsNIe8mKqTNyq36wYE8y1Oemb4NsHnx Tsl6Y+Q65rY0qkRnP/eM0AKv4JJg8cIazvP3/nbgxrnkSvG0U/U2fvUWGxyEhTyW B3W6K9M+DtCcMzAf3z2tNODEnE7mfvWWKYSzlXT6VbA7YhiqwQ9fxc85qy0TEaM9 j8l61jIRGiKXy+LOzGnZgWWd6jQyiG4FbsZRvytjKwLCqgo3at9XESxHdZXfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcyQy19Vq3IcaaGP1IleuHz1FOsEwHwYDVR0j BBgwFoAUHMTQ4uK8iwBgcYqFdleqgtIOWXQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWRmNTEyZi0wZDFhLTRiMDktYjlhNC1hOWM1MjVlYzI4MTcvMC8xQ0M0RDBFMkUy QkM4QjAwNjA3MThBODU3NjU3QUE4MkQyMEU1OTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FBODJEMjBF NTk3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVkZjUxMmYtMGQxYS00YjA5LWI5 YTQtYTljNTI1ZWMyODE3LzAvMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FB ODJEMjBFNTk3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbSjrLTRSlOWRzf4a38XfllC4PX/nkHQMhh LGNJ6D8KN3YMbeea8fPoM+2PjwQFHhDJBpKWR4fg/dEcchZojfMxhG9ALaphi8hZ BRWFc7QAhnv/QvwbFRCWDqs/einkP7hBAc6YT/TYhqXyNDxTuVPJ8CthvaaeWoAQ jmXsyTRSxzw6susCB0oDQqLC5FWXIYdQpmwMTt6WAW6i96Kwb8boCX+N7/74YI7x PWzEtzEvMoFbV1vXQf06AFzlCMJwW5b6mNEbq8nZk2szS+ypcAG6sJ9gjBf6c1h0 mp5ALoUpf/ew0/yjgiRPJ36fSKZR3WwJOVs4cgFVxsRjIfaIRj8= -----END CERTIFICATE-----Generated at Wed Nov 5 00:38:28 2025 by rpki-client