$ rpki-client -vvf repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft File: 1F56B4FADE1163027086547FBCB424EDF45191FD.mft (raw, json) Hash identifier: BTp3JOOHQVH5wZ8kGO8zphxlXNQck8oIXO4+wPPxYDg= Subject key identifier: 3F:4C:E2:FE:5F:41:E8:87:F9:44:9B:45:B8:B7:93:D1:11:E0:81:50 Authority key identifier: 1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD Certificate issuer: /CN=1F56B4FADE1163027086547FBCB424EDF45191FD Certificate serial: 32826A6AFEA1B5B97840985EC3FB932038B38ABC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft Manifest number: 021C Signing time: Mon 03 Nov 2025 13:11:33 +0000 Manifest this update: Mon 03 Nov 2025 13:06:33 +0000 Manifest next update: Thu 06 Nov 2025 16:52:33 +0000 Files and hashes: 1: 1F56B4FADE1163027086547FBCB424EDF45191FD.crl (hash: syaRNNxfiZ2L+YFe4+QdtRO5e4qZFpxhVwPc/bMBjzg=) 2: 3130332e3133362e342e302f32322d3234203d3e203338333230.roa (hash: MgjQuZZ4Lo3TWUBhrnPqAcWFkrZSN9rapanfesBZ5eM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.crl rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 16:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:82:6a:6a:fe:a1:b5:b9:78:40:98:5e:c3:fb:93:20:38:b3:8a:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F56B4FADE1163027086547FBCB424EDF45191FD Validity Not Before: Nov 3 13:06:33 2025 GMT Not After : Nov 6 16:52:33 2025 GMT Subject: CN=3F4CE2FE5F41E887F9449B45B8B793D111E08150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cb:a7:3b:45:12:53:ea:68:5b:16:c5:e6:59: 81:af:81:56:2b:99:e9:49:6e:4b:b4:48:0b:dc:fb: 29:cd:f4:d3:a9:df:e0:cd:78:40:53:e4:ca:a8:ac: 0b:b9:ad:40:ec:8f:30:d4:24:0b:54:8f:93:b2:15: 8b:51:66:5e:6e:10:bf:74:cc:b0:0b:ff:55:ce:83: 40:e7:c8:62:53:66:a7:8a:39:34:19:1c:4e:1f:bd: 07:bb:af:7d:44:8a:19:e0:4d:06:ae:44:8b:f5:56: 19:cc:73:08:95:41:8a:80:21:cc:04:67:85:1d:4a: 88:14:ec:15:c9:df:18:83:e2:7f:c5:cf:93:5d:51: 40:f1:32:f4:3f:c9:b0:8b:16:c3:da:be:d1:db:0d: 97:a6:7f:64:ab:1f:0f:06:6e:2a:73:0e:2e:de:e2: e5:f0:11:56:88:59:93:73:86:04:b3:70:fe:f0:bd: 58:7f:6a:9e:8d:30:7b:6d:76:5f:59:0a:d7:99:1d: cb:8b:76:2e:ba:4b:7c:b1:4a:2c:9b:2f:31:5f:df: b9:ba:eb:4f:29:65:0a:a0:f9:1f:09:04:a0:00:84: 84:da:2d:44:63:ac:d7:2b:4d:b0:45:a8:f1:f6:c5: 91:6b:f9:7c:19:10:77:38:bb:d0:c0:7d:0a:2b:27: a4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:4C:E2:FE:5F:41:E8:87:F9:44:9B:45:B8:B7:93:D1:11:E0:81:50 X509v3 Authority Key Identifier: keyid:1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:74:25:71:df:94:4e:86:4b:bc:9b:f3:30:63:4a:51:cb:4f: 59:7e:78:5a:21:1c:7a:fa:10:52:eb:cf:92:03:a2:75:e1:a8: cf:a8:f0:44:d5:8f:82:63:d8:8c:d4:5b:1d:43:5e:2a:55:c5: 64:92:eb:08:a1:67:ee:19:88:d1:42:92:60:31:05:da:53:10: 69:d9:f5:22:1c:83:b2:bf:7c:44:65:56:cb:bf:31:8b:c1:9a: 4b:fb:67:30:03:ad:e7:ce:16:c9:28:58:73:1e:79:7e:9a:04: 70:1d:09:8a:92:97:b9:3e:d1:09:2a:2c:8f:10:c6:35:99:fc: ab:79:aa:b2:a2:c0:2d:87:c3:fd:ab:5c:36:f3:f0:07:5b:93: 1c:17:e2:3a:d2:4e:ca:3f:2b:c3:c7:75:4f:23:e2:ea:d2:1e: e7:24:8f:48:4d:2b:3e:5b:b9:b7:53:8a:c6:6c:dd:67:f6:e6: 52:bc:85:37:30:52:0b:c4:86:5e:33:a1:01:47:16:50:76:1e: e5:82:d6:77:db:1c:3b:2d:48:59:f3:f4:a2:ca:bb:e3:05:0d: 93:e1:7a:85:5a:4a:a8:fa:a1:d3:25:7d:f7:84:26:b7:70:3d: 2d:21:9b:1b:b0:00:84:0f:71:21:ed:1f:67:e8:58:b6:a6:b5: 85:97:42:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMoJqav6htbl4QJhew/uTIDizirwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY1NkI0RkFERTExNjMwMjcwODY1NDdGQkNCNDI0RURG NDUxOTFGRDAeFw0yNTExMDMxMzA2MzNaFw0yNTExMDYxNjUyMzNaMDMxMTAvBgNV BAMTKDNGNENFMkZFNUY0MUU4ODdGOTQ0OUI0NUI4Qjc5M0QxMTFFMDgxNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFy6c7RRJT6mhbFsXmWYGvgVYr melJbku0SAvc+ynN9NOp3+DNeEBT5MqorAu5rUDsjzDUJAtUj5OyFYtRZl5uEL90 zLAL/1XOg0DnyGJTZqeKOTQZHE4fvQe7r31EihngTQauRIv1VhnMcwiVQYqAIcwE Z4UdSogU7BXJ3xiD4n/Fz5NdUUDxMvQ/ybCLFsPavtHbDZemf2SrHw8GbipzDi7e 4uXwEVaIWZNzhgSzcP7wvVh/ap6NMHttdl9ZCteZHcuLdi66S3yxSiybLzFf37m6 608pZQqg+R8JBKAAhITaLURjrNcrTbBFqPH2xZFr+XwZEHc4u9DAfQorJ6TBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP0zi/l9B6If5RJtFuLeT0RHggVAwHwYDVR0j BBgwFoAUH1a0+t4RYwJwhlR/vLQk7fRRkf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzQ1YzIyYy0yNzViLTQyOTUtYjQ1My02MGE3ODNiOWM0MmEvMC8xRjU2QjRGQURF MTE2MzAyNzA4NjU0N0ZCQ0I0MjRFREY0NTE5MUZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY1NkI0RkFERTExNjMwMjcwODY1NDdGQkNCNDI0RURGNDUx OTFGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM0NWMyMmMtMjc1Yi00Mjk1LWI0 NTMtNjBhNzgzYjljNDJhLzAvMUY1NkI0RkFERTExNjMwMjcwODY1NDdGQkNCNDI0 RURGNDUxOTFGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM10JXHflE6GS7yb8zBjSlHLT1l+eFohHHr6 EFLrz5IDonXhqM+o8ETVj4Jj2IzUWx1DXipVxWSS6wihZ+4ZiNFCkmAxBdpTEGnZ 9SIcg7K/fERlVsu/MYvBmkv7ZzADrefOFskoWHMeeX6aBHAdCYqSl7k+0QkqLI8Q xjWZ/Kt5qrKiwC2Hw/2rXDbz8AdbkxwX4jrSTso/K8PHdU8j4urSHuckj0hNKz5b ubdTisZs3Wf25lK8hTcwUgvEhl4zoQFHFlB2HuWC1nfbHDstSFnz9KLKu+MFDZPh eoVaSqj6odMlffeEJrdwPS0hmxuwAIQPcSHtH2foWLamtYWXQmQ= -----END CERTIFICATE-----Generated at Wed Nov 5 08:39:56 2025 by rpki-client