$ rpki-client -vvf repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft File: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft (raw, json) Hash identifier: 0tCi8871XPYzhvKYjl3EzRCDE8HHytu8vboLpaSHN9E= Subject key identifier: 39:F8:41:85:55:2D:29:3C:1B:0F:ED:F1:7E:17:4C:F7:BC:FB:74:3C Authority key identifier: 1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 Certificate issuer: /CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Certificate serial: 5A08BCA86ED56366E3B2A48BE920FB96BF4AA500 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft Manifest number: 01D2 Signing time: Mon 03 Nov 2025 07:31:40 +0000 Manifest this update: Mon 03 Nov 2025 07:26:40 +0000 Manifest next update: Thu 06 Nov 2025 15:25:40 +0000 Files and hashes: 1: 3130332e38372e3230322e302f32342d3234203d3e20313530323539.roa (hash: 6g8PbhkbZbLbnKoZLBgTfyMpeWvcwwbeUmAnxaDznuY=) 2: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl (hash: VGF2ZNmrFHb+BiJIOVNZQhb7KlfsfCsc4QXaaw80L8w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 15:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:08:bc:a8:6e:d5:63:66:e3:b2:a4:8b:e9:20:fb:96:bf:4a:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Validity Not Before: Nov 3 07:26:40 2025 GMT Not After : Nov 6 15:25:40 2025 GMT Subject: CN=39F84185552D293C1B0FEDF17E174CF7BCFB743C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e6:86:0d:eb:09:34:ff:7b:16:b3:3d:25:3b: d3:3b:fc:06:33:00:19:30:45:a2:53:56:c5:3f:0e: bb:86:b3:0d:37:03:af:a1:59:ac:6c:0d:a4:47:ed: 7c:da:f4:05:4f:fc:85:e7:d3:49:ad:ef:ff:14:83: 64:74:a1:e5:8a:d1:77:86:69:05:50:94:1c:eb:41: 94:1b:80:03:f6:a5:7f:fc:29:0d:92:29:ad:93:8b: cd:9b:93:99:9b:2d:84:c8:3e:55:7e:92:5b:8e:00: 3f:3b:2b:73:9d:96:f3:e4:61:fe:78:03:8a:46:b0: 4c:fa:b9:10:6a:32:88:09:f3:b5:8a:cb:70:1f:9e: 21:f4:86:85:36:7c:3d:83:6a:ee:b3:69:49:66:37: 3f:47:37:55:de:27:b7:38:79:5e:24:a5:7e:7d:91: cc:66:94:73:2e:62:be:70:d6:52:d3:80:5b:60:f8: 9d:b1:c7:af:15:b3:61:1b:60:6d:d1:67:a0:aa:7e: b1:bd:61:74:1b:6f:ab:a7:0a:97:be:e9:54:94:f6: cd:62:da:78:82:1f:41:e3:4c:93:f6:10:0e:da:cf: a0:cd:dd:f1:93:df:90:ca:d2:73:05:82:e7:9d:95: 0a:97:3e:31:1c:e0:8f:b1:32:5c:25:70:8a:56:b1: 94:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F8:41:85:55:2D:29:3C:1B:0F:ED:F1:7E:17:4C:F7:BC:FB:74:3C X509v3 Authority Key Identifier: keyid:1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c6:91:4b:dc:27:ea:29:26:46:50:24:ce:c0:23:4c:da:95: 42:8a:8d:12:c6:bc:0a:f7:f9:6d:1d:ac:89:77:9f:56:e0:66: 75:eb:73:f8:31:75:2e:67:58:bf:4f:09:51:3f:4d:4f:5a:61: ac:ba:46:fb:5a:31:5a:c8:48:a1:f6:6e:7e:4a:7c:29:9b:b8: e5:0d:8d:fd:7c:47:52:96:4a:25:4e:17:8f:18:ee:7c:0a:e2: 12:a6:0c:30:9a:79:2a:3e:64:da:cd:96:0a:b1:fb:a0:5b:82: 18:57:71:6d:5a:c4:02:ad:6d:63:f6:db:be:07:b6:cb:96:64: 30:aa:28:a2:40:12:4c:28:a8:17:7c:dd:10:e4:37:f4:8e:51: 69:58:d9:03:1b:f2:00:3a:2f:64:5a:ac:e5:d6:16:3d:2b:4e: 30:f8:5e:00:f1:ff:7a:f3:e5:81:a9:fd:b1:e3:77:5e:76:63: d9:96:e0:a0:99:18:cc:d6:fe:f7:d9:74:ce:94:be:37:be:9c: 9c:67:5c:09:50:29:3d:5d:e2:27:21:45:07:62:8e:9b:13:e8: e4:a9:3f:d2:94:b6:1b:1b:1a:2a:35:57:1e:1d:22:32:2e:b1: e0:93:10:84:fd:36:b3:4b:fa:fb:4f:7e:3c:44:1a:14:0d:ac: 0d:01:1e:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWgi8qG7VY2bjsqSL6SD7lr9KpQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJE NUNCOEExNzAeFw0yNTExMDMwNzI2NDBaFw0yNTExMDYxNTI1NDBaMDMxMTAvBgNV BAMTKDM5Rjg0MTg1NTUyRDI5M0MxQjBGRURGMTdFMTc0Q0Y3QkNGQjc0M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC65oYN6wk0/3sWsz0lO9M7/AYz ABkwRaJTVsU/DruGsw03A6+hWaxsDaRH7Xza9AVP/IXn00mt7/8Ug2R0oeWK0XeG aQVQlBzrQZQbgAP2pX/8KQ2SKa2Ti82bk5mbLYTIPlV+kluOAD87K3OdlvPkYf54 A4pGsEz6uRBqMogJ87WKy3AfniH0hoU2fD2Dau6zaUlmNz9HN1XeJ7c4eV4kpX59 kcxmlHMuYr5w1lLTgFtg+J2xx68Vs2EbYG3RZ6CqfrG9YXQbb6unCpe+6VSU9s1i 2niCH0HjTJP2EA7az6DN3fGT35DK0nMFguedlQqXPjEc4I+xMlwlcIpWsZQHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOfhBhVUtKTwbD+3xfhdM97z7dDwwHwYDVR0j BBgwFoAUHPEV0CGMq04xZ6fVsND6wtXLihcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGQ1OTQzMC1kZTc4LTQ1MzItOGUxYS0zNGI1M2I4ZjI2ZmEvMC8xQ0YxMTVEMDIx OENBQjRFMzE2N0E3RDVCMEQwRkFDMkQ1Q0I4QTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJENUNC OEExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhkNTk0MzAtZGU3OC00NTMyLThl MWEtMzRiNTNiOGYyNmZhLzAvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZB QzJENUNCOEExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLGkUvcJ+opJkZQJM7AI0zalUKKjRLGvAr3 +W0drIl3n1bgZnXrc/gxdS5nWL9PCVE/TU9aYay6RvtaMVrISKH2bn5KfCmbuOUN jf18R1KWSiVOF48Y7nwK4hKmDDCaeSo+ZNrNlgqx+6BbghhXcW1axAKtbWP2274H tsuWZDCqKKJAEkwoqBd83RDkN/SOUWlY2QMb8gA6L2RarOXWFj0rTjD4XgDx/3rz 5YGp/bHjd152Y9mW4KCZGMzW/vfZdM6Uvje+nJxnXAlQKT1d4ichRQdijpsT6OSp P9KUthsbGio1Vx4dIjIuseCTEIT9NrNL+vtPfjxEGhQNrA0BHnQ= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:24 2025 by rpki-client