$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft File: 1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft (raw, json) Hash identifier: hR1Fw2SaWBi1ul7KF+ZRqxh29Hx9A64lVr+OAVhlAts= Subject key identifier: BF:D5:09:C7:F0:13:CB:3A:B6:1D:29:5B:8A:B5:A9:7A:11:58:9C:1C Authority key identifier: 1F:98:5A:F8:4B:69:45:80:4B:85:3C:2E:7C:09:AE:DC:28:B6:B2:E5 Certificate issuer: /CN=1F985AF84B6945804B853C2E7C09AEDC28B6B2E5 Certificate serial: 1851DADAC5C90D3EAD0690784D29DE4BFFFA8D9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft Manifest number: 44 Signing time: Mon 03 Nov 2025 07:41:48 +0000 Manifest this update: Mon 03 Nov 2025 07:36:48 +0000 Manifest next update: Thu 06 Nov 2025 12:20:48 +0000 Files and hashes: 1: 1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.crl (hash: 20dJgY+ac/lt5XnrI5LYL8RrFijfkTJmQdhPTyYsxOQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.crl rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 12:20:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:51:da:da:c5:c9:0d:3e:ad:06:90:78:4d:29:de:4b:ff:fa:8d:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F985AF84B6945804B853C2E7C09AEDC28B6B2E5 Validity Not Before: Nov 3 07:36:48 2025 GMT Not After : Nov 6 12:20:48 2025 GMT Subject: CN=BFD509C7F013CB3AB61D295B8AB5A97A11589C1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cf:37:55:47:8d:29:a2:2d:57:22:0d:81:eb: e4:41:a3:d1:9f:e3:dc:88:7e:fd:3b:77:0f:43:e2: e3:36:6e:8e:d6:02:77:cc:a4:17:2d:f2:fd:e5:ff: 94:a1:83:bf:81:cf:aa:d2:db:2e:b2:ae:da:58:92: 73:9b:38:ac:3c:8e:46:46:0d:0c:39:37:e7:5e:07: 35:a6:89:49:ae:6b:56:98:df:ec:86:24:a2:c0:81: d9:28:0a:cd:d7:b3:6d:77:7e:90:15:96:c7:8c:c2: 8d:46:37:8f:e1:48:b8:21:0c:bf:a8:da:6e:6c:3f: 3a:8d:bb:94:7d:b6:a1:ea:07:e3:f9:a3:96:92:48: fc:c3:29:24:58:c4:37:98:ff:f0:47:db:55:d3:44: 65:61:b8:a4:70:61:34:d1:ca:5a:25:49:77:0c:48: 44:f3:6e:20:6c:f6:30:16:a4:62:76:ad:6a:fb:f6: ca:ed:a0:7d:b4:64:7b:ca:9a:b4:8d:74:bb:04:a3: d7:90:c3:7d:d0:7f:96:1a:da:6f:23:8f:fc:f8:84: 66:c4:38:06:1a:13:e3:e7:c1:97:a7:10:52:21:14: b2:28:2d:3d:09:c7:ac:2e:a6:9f:99:28:81:a5:ae: 89:67:a8:ef:ed:11:4a:f9:d3:c8:36:ff:ea:ab:0d: 1b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D5:09:C7:F0:13:CB:3A:B6:1D:29:5B:8A:B5:A9:7A:11:58:9C:1C X509v3 Authority Key Identifier: keyid:1F:98:5A:F8:4B:69:45:80:4B:85:3C:2E:7C:09:AE:DC:28:B6:B2:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:fe:1b:f8:9d:fe:bb:7a:e7:84:f9:7b:05:56:ec:13:3a:66: 23:e1:ee:b8:ae:62:a5:39:17:ee:96:71:cd:6a:6b:be:aa:fd: 99:4d:99:9a:27:81:34:57:a1:eb:2c:98:b3:3f:76:a6:db:e5: 47:c7:21:3c:a7:f3:f7:a8:4b:d7:47:39:e0:fa:ad:97:70:09: c8:3c:d7:b1:f1:80:8f:fa:fd:61:93:10:bb:32:85:06:90:b4: 08:bc:aa:6c:37:91:97:6e:8b:27:b4:f3:67:1b:2f:b2:83:41: 3c:b3:ec:44:be:c7:0e:54:0a:b0:e2:dc:e3:be:2d:cb:8a:fb: 6e:ad:78:55:82:be:4d:df:dc:b9:79:e8:8a:a7:46:2e:b2:54: 05:23:30:f8:fb:e9:6a:d0:1b:76:53:d9:fb:fd:a2:ea:35:93: ef:63:d2:ee:9d:37:9c:c4:9c:e4:2e:53:6e:4f:26:2b:8b:7e: 27:df:28:47:22:49:98:74:8d:84:58:af:33:d5:5c:bd:93:73: 18:b8:f8:96:76:65:30:c0:8a:ad:20:44:a4:6a:84:0f:1e:65: 67:3f:05:5e:54:33:55:d0:c2:d5:34:2c:09:02:1c:fc:52:49: 84:66:36:9c:09:36:04:77:97:64:44:ee:85:2f:4e:8c:57:0d: 9d:15:9b:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGFHa2sXJDT6tBpB4TSneS//6jZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY5ODVBRjg0QjY5NDU4MDRCODUzQzJFN0MwOUFFREMy OEI2QjJFNTAeFw0yNTExMDMwNzM2NDhaFw0yNTExMDYxMjIwNDhaMDMxMTAvBgNV BAMTKEJGRDUwOUM3RjAxM0NCM0FCNjFEMjk1QjhBQjVBOTdBMTE1ODlDMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgzzdVR40poi1XIg2B6+RBo9Gf 49yIfv07dw9D4uM2bo7WAnfMpBct8v3l/5Shg7+Bz6rS2y6yrtpYknObOKw8jkZG DQw5N+deBzWmiUmua1aY3+yGJKLAgdkoCs3Xs213fpAVlseMwo1GN4/hSLghDL+o 2m5sPzqNu5R9tqHqB+P5o5aSSPzDKSRYxDeY//BH21XTRGVhuKRwYTTRylolSXcM SETzbiBs9jAWpGJ2rWr79srtoH20ZHvKmrSNdLsEo9eQw33Qf5Ya2m8jj/z4hGbE OAYaE+PnwZenEFIhFLIoLT0Jx6wupp+ZKIGlrolnqO/tEUr508g2/+qrDRthAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv9UJx/ATyzq2HSlbirWpehFYnBwwHwYDVR0j BBgwFoAUH5ha+EtpRYBLhTwufAmu3Ci2suUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWI5MjZlMC02YzZiLTQ4NTUtYTc1Ni1lMGNiYjdhZDAxZjgvMC8xRjk4NUFGODRC Njk0NTgwNEI4NTNDMkU3QzA5QUVEQzI4QjZCMkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY5ODVBRjg0QjY5NDU4MDRCODUzQzJFN0MwOUFFREMyOEI2 QjJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiOTI2ZTAtNmM2Yi00ODU1LWE3 NTYtZTBjYmI3YWQwMWY4LzAvMUY5ODVBRjg0QjY5NDU4MDRCODUzQzJFN0MwOUFF REMyOEI2QjJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJX+G/id/rt654T5ewVW7BM6ZiPh7riuYqU5 F+6Wcc1qa76q/ZlNmZongTRXoessmLM/dqbb5UfHITyn8/eoS9dHOeD6rZdwCcg8 17HxgI/6/WGTELsyhQaQtAi8qmw3kZduiye082cbL7KDQTyz7ES+xw5UCrDi3OO+ LcuK+26teFWCvk3f3Ll56IqnRi6yVAUjMPj76WrQG3ZT2fv9ouo1k+9j0u6dN5zE nOQuU25PJiuLfiffKEciSZh0jYRYrzPVXL2Tcxi4+JZ2ZTDAiq0gRKRqhA8eZWc/ BV5UM1XQwtU0LAkCHPxSSYRmNpwJNgR3l2RE7oUvToxXDZ0Vm2s= -----END CERTIFICATE-----Generated at Tue Nov 4 01:57:26 2025 by rpki-client