$ rpki-client -vvf repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft File: 1F56B4FADE1163027086547FBCB424EDF45191FD.mft (raw, json) Hash identifier: Yuk0mLDe/ui0G85iDRcynCG7d/EbecEvmKtiF2++new= Subject key identifier: AB:F4:93:FA:2D:6C:7E:85:CA:53:81:DC:0C:5F:41:A0:2A:31:91:4F Authority key identifier: 1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD Certificate issuer: /CN=1F56B4FADE1163027086547FBCB424EDF45191FD Certificate serial: 44701ECF213B63FBE0DDF85DD464BE9B17EB7A03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft Manifest number: 021D Signing time: Wed 05 Nov 2025 17:01:34 +0000 Manifest this update: Wed 05 Nov 2025 16:56:34 +0000 Manifest next update: Sat 08 Nov 2025 17:56:34 +0000 Files and hashes: 1: 1F56B4FADE1163027086547FBCB424EDF45191FD.crl (hash: r3scHmvOnbc/EIER/cITsakUUTnEdMDHkulBzHKibZg=) 2: 3130332e3133362e342e302f32322d3234203d3e203338333230.roa (hash: MgjQuZZ4Lo3TWUBhrnPqAcWFkrZSN9rapanfesBZ5eM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.crl rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 17:56:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:70:1e:cf:21:3b:63:fb:e0:dd:f8:5d:d4:64:be:9b:17:eb:7a:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F56B4FADE1163027086547FBCB424EDF45191FD Validity Not Before: Nov 5 16:56:34 2025 GMT Not After : Nov 8 17:56:34 2025 GMT Subject: CN=ABF493FA2D6C7E85CA5381DC0C5F41A02A31914F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:37:27:20:e0:a0:f3:8c:d8:57:2a:f6:1c:0b: c9:e5:31:21:ab:4e:cd:82:e3:b1:02:65:16:57:38: 06:fa:25:16:dc:e9:cc:72:72:f6:9f:98:a8:38:fe: 89:ee:dd:e8:0e:a3:3e:58:41:26:c1:2e:15:db:80: 6c:1f:e9:79:97:d2:2c:8f:4e:87:71:14:f0:c7:88: 3d:65:4d:e8:58:34:89:29:81:57:71:b5:62:7f:e5: 63:f8:d1:4e:6b:22:6e:73:b0:46:f7:27:7a:98:b3: 6e:02:0b:ee:94:90:90:24:5d:97:1d:d2:24:01:33: 95:82:de:15:fe:d9:fe:2a:6a:43:cc:d6:b6:16:45: d0:b8:34:05:33:5c:ea:a9:97:4e:d4:47:88:38:b9: 07:aa:8b:b9:38:5e:64:b0:33:3e:8b:74:05:b7:96: 43:44:e9:c1:39:c7:72:20:e0:9a:3e:af:dd:b6:4e: 8f:4f:f6:ac:45:18:3d:8f:b6:6a:af:12:76:c1:8a: 7b:d2:f2:58:5f:9d:31:2c:aa:09:8f:46:b5:cd:de: f3:23:7a:66:48:8c:6b:21:3a:93:bb:31:79:a3:65: 3f:30:84:7a:6d:6d:9e:55:73:58:8b:85:63:42:1c: fa:e8:fa:0d:c1:6a:a5:69:e3:03:81:6e:c9:38:5b: 15:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F4:93:FA:2D:6C:7E:85:CA:53:81:DC:0C:5F:41:A0:2A:31:91:4F X509v3 Authority Key Identifier: keyid:1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:e5:7c:88:1b:cd:40:34:74:40:f4:a9:b4:e5:a1:13:1f:b6: 3c:4b:5b:72:39:5e:22:87:61:6f:6c:bb:07:52:87:2d:29:73: 02:9e:fe:51:3b:3f:6b:7a:fc:70:88:e9:33:99:99:0b:64:01: a3:f1:26:0d:8c:8c:fd:60:55:e3:e6:0e:b4:cd:e5:02:6a:b8: ee:5a:aa:a9:0f:5d:2f:14:06:6d:bf:63:f0:a5:fd:fe:bb:38: cf:3b:fe:42:70:a8:18:41:97:21:a0:b1:93:c0:83:ae:a4:c7: 88:9e:cc:59:d5:0f:fc:dc:c9:a0:8c:c2:00:97:94:20:dc:ba: d9:1d:8e:42:fa:55:e0:08:60:31:06:86:a2:fa:13:8b:8c:60: 90:8e:6d:f4:21:3f:bf:a7:86:8d:ee:7f:ed:39:10:48:00:be: a8:91:37:83:26:da:61:6f:9d:f1:2b:96:7b:6c:52:8c:08:fc: 97:55:2f:35:ad:3f:64:cf:0c:bd:2d:e3:9a:aa:0f:f7:a5:f1: 42:5b:d6:51:1f:e2:3d:d8:bb:1c:18:b8:93:42:70:04:b5:da: 48:8d:d5:b3:64:c8:71:ee:10:a9:ce:64:f2:66:8b:69:56:c5: 73:9f:9f:45:78:9a:8f:2c:02:64:1b:64:17:96:6e:45:3d:d9: 1e:f9:d1:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURHAezyE7Y/vg3fhd1GS+mxfregMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY1NkI0RkFERTExNjMwMjcwODY1NDdGQkNCNDI0RURG NDUxOTFGRDAeFw0yNTExMDUxNjU2MzRaFw0yNTExMDgxNzU2MzRaMDMxMTAvBgNV BAMTKEFCRjQ5M0ZBMkQ2QzdFODVDQTUzODFEQzBDNUY0MUEwMkEzMTkxNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBNycg4KDzjNhXKvYcC8nlMSGr Ts2C47ECZRZXOAb6JRbc6cxycvafmKg4/onu3egOoz5YQSbBLhXbgGwf6XmX0iyP TodxFPDHiD1lTehYNIkpgVdxtWJ/5WP40U5rIm5zsEb3J3qYs24CC+6UkJAkXZcd 0iQBM5WC3hX+2f4qakPM1rYWRdC4NAUzXOqpl07UR4g4uQeqi7k4XmSwMz6LdAW3 lkNE6cE5x3Ig4Jo+r922To9P9qxFGD2PtmqvEnbBinvS8lhfnTEsqgmPRrXN3vMj emZIjGshOpO7MXmjZT8whHptbZ5Vc1iLhWNCHPro+g3BaqVp4wOBbsk4WxW3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq/ST+i1sfoXKU4HcDF9BoCoxkU8wHwYDVR0j BBgwFoAUH1a0+t4RYwJwhlR/vLQk7fRRkf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzQ1YzIyYy0yNzViLTQyOTUtYjQ1My02MGE3ODNiOWM0MmEvMC8xRjU2QjRGQURF MTE2MzAyNzA4NjU0N0ZCQ0I0MjRFREY0NTE5MUZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY1NkI0RkFERTExNjMwMjcwODY1NDdGQkNCNDI0RURGNDUx OTFGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM0NWMyMmMtMjc1Yi00Mjk1LWI0 NTMtNjBhNzgzYjljNDJhLzAvMUY1NkI0RkFERTExNjMwMjcwODY1NDdGQkNCNDI0 RURGNDUxOTFGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKvlfIgbzUA0dED0qbTloRMftjxLW3I5XiKH YW9suwdShy0pcwKe/lE7P2t6/HCI6TOZmQtkAaPxJg2MjP1gVePmDrTN5QJquO5a qqkPXS8UBm2/Y/Cl/f67OM87/kJwqBhBlyGgsZPAg66kx4iezFnVD/zcyaCMwgCX lCDcutkdjkL6VeAIYDEGhqL6E4uMYJCObfQhP7+nho3uf+05EEgAvqiRN4Mm2mFv nfErlntsUowI/JdVLzWtP2TPDL0t45qqD/el8UJb1lEf4j3YuxwYuJNCcAS12kiN 1bNkyHHuEKnOZPJmi2lWxXOfn0V4mo8sAmQbZBeWbkU92R750XI= -----END CERTIFICATE-----Generated at Wed Nov 5 23:39:19 2025 by rpki-client