$ rpki-client -vvf repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft File: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft (raw, json) Hash identifier: kDYtq6QbNBjJWOzYypnNHRMKWwE6oFiTELmTptEHjtw= Subject key identifier: 8B:AD:DC:63:F9:CC:64:DA:46:24:DD:BC:55:FA:EC:A4:59:8C:E6:67 Authority key identifier: 1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A Certificate issuer: /CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Certificate serial: 7F852D57AE78060D45949E1D24048DCE2F54E9BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft Manifest number: 0490 Signing time: Mon 03 Nov 2025 08:33:52 +0000 Manifest this update: Mon 03 Nov 2025 08:28:52 +0000 Manifest next update: Thu 06 Nov 2025 18:40:52 +0000 Files and hashes: 1: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl (hash: scPOqgkREOu7LDiScZ7cD/4995HhnKfbF4xqKgBQ4oY=) 2: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: ygjycUROLuuycgQmlGFdBviRnTHP36unF91EN7REwu4=) 3: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: Puzw6btCdPQ2KOCDFFaL2opEFaU1YVpimShuXfVUo3Y=) 4: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: 5tvhyREjxfe/DJlZ9wBpFrEXCdu8eQWjVSLlHduznyg=) 5: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: 52WZwGRv+Wo5hswd/uRmdKS5RbkBGKSp3qw8Zcv5xAA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 18:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:85:2d:57:ae:78:06:0d:45:94:9e:1d:24:04:8d:ce:2f:54:e9:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Validity Not Before: Nov 3 08:28:52 2025 GMT Not After : Nov 6 18:40:52 2025 GMT Subject: CN=8BADDC63F9CC64DA4624DDBC55FAECA4598CE667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:35:4f:4d:3e:17:54:12:0b:60:61:ab:9e:80: 81:6c:e6:74:02:6f:b6:19:56:a2:da:de:9f:8f:5f: d6:ab:00:05:d5:73:f9:ac:1e:aa:eb:d3:e9:4b:27: 90:2f:04:a9:93:f1:ef:e8:b8:21:8c:a4:92:ad:0d: c5:34:2c:1e:7f:21:e3:fa:45:55:be:6d:29:49:6c: 22:1e:5d:0e:69:62:5b:d5:92:13:81:11:93:61:7e: 14:55:35:a1:84:21:25:b8:a6:43:64:b8:39:62:48: 28:4c:1c:39:1d:49:c7:95:1f:a7:57:91:23:9f:b3: ec:7a:11:ef:79:75:9f:11:78:93:19:fe:1d:d2:7a: 5b:44:61:cc:de:1e:0d:fa:05:01:62:b7:86:ea:d3: 84:dc:97:db:27:74:d5:bc:6b:19:dd:79:00:41:dc: 05:02:c1:ea:cc:fe:0a:8f:9f:fe:39:53:c6:3f:a2: 4e:4b:d5:86:53:4d:8a:21:b0:d0:04:25:d5:0a:d1: 8b:39:00:47:ad:31:f9:6c:5c:c8:b4:ce:be:59:92: 65:b8:c4:50:f5:76:3d:08:d7:ee:6f:ad:d9:c6:5b: 9c:f4:e9:17:af:c0:49:10:da:28:6a:bc:81:d0:8f: 3b:3f:de:29:10:9f:fc:d6:d7:38:4b:dc:70:e1:10: 4c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:AD:DC:63:F9:CC:64:DA:46:24:DD:BC:55:FA:EC:A4:59:8C:E6:67 X509v3 Authority Key Identifier: keyid:1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:4a:a2:7c:c6:61:0a:c1:08:ba:94:0a:3c:69:14:17:9c:e1: 3b:d5:23:0e:ff:7b:4d:bc:00:c2:cd:ae:25:7a:a1:e6:28:ab: 51:a5:64:b4:91:fa:d1:8b:05:a9:78:7b:0f:1d:d5:65:2c:89: 9a:b2:64:17:1b:27:6f:1e:74:34:1f:25:a3:05:9f:c8:dd:6a: 7d:90:77:37:f1:82:e8:86:05:f4:45:d1:4e:bc:82:0a:7e:2e: da:91:52:dd:84:00:47:ff:60:c9:d1:c0:dc:a0:af:26:cf:cf: 26:e9:fd:68:1f:96:f0:db:59:72:71:bb:12:99:90:44:f5:5f: 1d:13:07:5c:51:c0:cc:b4:45:b1:01:11:ff:5a:a0:2a:11:05: be:f1:a2:c8:9d:45:ad:7b:11:7b:a5:6a:7d:5a:f2:72:d8:3a: bb:05:30:08:b6:f9:82:fd:85:ef:a7:e3:4f:fa:a1:1a:58:b7: c8:cb:65:80:10:eb:63:1a:93:6b:86:40:2a:c2:80:e2:56:7d: 87:85:77:6b:5a:5d:fa:a5:25:70:fc:14:be:3c:d7:a2:cf:a0: 7f:53:f2:42:79:33:64:f6:5a:c9:ea:ec:f5:0a:d0:b0:7a:05: 39:cb:1c:94:49:54:d3:4e:da:b4:8b:a5:53:65:bf:a4:17:1b: 7e:59:56:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf4UtV654Bg1FlJ4dJASNzi9U6bswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3 QUY0NTcyQTAeFw0yNTExMDMwODI4NTJaFw0yNTExMDYxODQwNTJaMDMxMTAvBgNV BAMTKDhCQUREQzYzRjlDQzY0REE0NjI0RERCQzU1RkFFQ0E0NTk4Q0U2NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFNU9NPhdUEgtgYauegIFs5nQC b7YZVqLa3p+PX9arAAXVc/msHqrr0+lLJ5AvBKmT8e/ouCGMpJKtDcU0LB5/IeP6 RVW+bSlJbCIeXQ5pYlvVkhOBEZNhfhRVNaGEISW4pkNkuDliSChMHDkdSceVH6dX kSOfs+x6Ee95dZ8ReJMZ/h3SeltEYczeHg36BQFit4bq04Tcl9sndNW8axndeQBB 3AUCwerM/gqPn/45U8Y/ok5L1YZTTYohsNAEJdUK0Ys5AEetMflsXMi0zr5ZkmW4 xFD1dj0I1+5vrdnGW5z06RevwEkQ2ihqvIHQjzs/3ikQn/zW1zhL3HDhEExFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi63cY/nMZNpGJN28VfrspFmM5mcwHwYDVR0j BBgwFoAUH9fO7Gnep4ODgzF/+w1KEHr0VyowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTEyOWM5NC1jNWE2LTRkZDQtYjM0YS03ZTM1M2RlNmNlODEvMC8xRkQ3Q0VFQzY5 REVBNzgzODM4MzMxN0ZGQjBENEExMDdBRjQ1NzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3QUY0 NTcyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUxMjljOTQtYzVhNi00ZGQ0LWIz NGEtN2UzNTNkZTZjZTgxLzAvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRB MTA3QUY0NTcyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdKonzGYQrBCLqUCjxpFBec4TvVIw7/e028 AMLNriV6oeYoq1GlZLSR+tGLBal4ew8d1WUsiZqyZBcbJ28edDQfJaMFn8jdan2Q dzfxguiGBfRF0U68ggp+LtqRUt2EAEf/YMnRwNygrybPzybp/WgflvDbWXJxuxKZ kET1Xx0TB1xRwMy0RbEBEf9aoCoRBb7xosidRa17EXulan1a8nLYOrsFMAi2+YL9 he+n40/6oRpYt8jLZYAQ62Mak2uGQCrCgOJWfYeFd2taXfqlJXD8FL4816LPoH9T 8kJ5M2T2Wsnq7PUK0LB6BTnLHJRJVNNO2rSLpVNlv6QXG35ZViQ= -----END CERTIFICATE-----Generated at Wed Nov 5 10:34:43 2025 by rpki-client