$ rpki-client -vvf repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft File: 1CA9E40710262DA751A67E932477D6E12B4B2DED.mft (raw, json) Hash identifier: bieQvTVmk1Cldg6B/mzEHT8G5F6fWsG+DrUPqg1Kurg= Subject key identifier: 0F:E3:2E:C3:CB:47:4D:19:9D:D5:11:FE:46:69:F0:78:64:86:7D:59 Authority key identifier: 1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED Certificate issuer: /CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Certificate serial: 6AB1C4CCEA78234760B708C4F69A7FAEC049FE9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft Manifest number: 0524 Signing time: Tue 04 Nov 2025 09:50:02 +0000 Manifest this update: Tue 04 Nov 2025 09:45:02 +0000 Manifest next update: Fri 07 Nov 2025 14:42:02 +0000 Files and hashes: 1: 3130332e3132332e3130362e302f32342d3234203d3e20313338303730.roa (hash: 1Qj+0yJlnyRAkhJQW7JxleOTtApsG7fPmAlVCQ6z7p8=) 2: 3130332e3132332e3130352e302f32342d3234203d3e20313338303730.roa (hash: BfFCh7Vfs8z+WKVbxTTngHawwEIYaKlayBm3t+ZFnyU=) 3: 323430333a396663303a3a2f33322d3438203d3e20313338303730.roa (hash: g2I091o7xGYF01O50CUZMPsQctw2lflU2v4s2FAorWY=) 4: 3130332e3132332e3130342e302f32322d3234203d3e20313338303730.roa (hash: Yh/X3wf3xgSBLANEs82b75GugxHKann/OAKH3YrZy2U=) 5: 1CA9E40710262DA751A67E932477D6E12B4B2DED.crl (hash: 0drLT7bAmg7A7HPbK86uIVD/vcebOLaa+CIvY9agIak=) 6: 3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa (hash: cke05Fz1pU7ph5quQU6BQAXvAK/qW0tlFEcIja5SVaM=) 7: 3130332e3132332e3130342e302f32342d3234203d3e20313338303730.roa (hash: yHCpL2jeoTRdKkL9PeW/BmTUh9ZLAObQa8uLRwAc8Ww=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:b1:c4:cc:ea:78:23:47:60:b7:08:c4:f6:9a:7f:ae:c0:49:fe:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Validity Not Before: Nov 4 09:45:02 2025 GMT Not After : Nov 7 14:42:02 2025 GMT Subject: CN=0FE32EC3CB474D199DD511FE4669F07864867D59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:eb:d0:0a:ad:81:0e:2d:ef:ad:99:fa:61:0e: 9e:99:d7:f7:b8:cd:3a:b3:d1:f1:df:29:55:16:d0: be:35:15:8c:8d:0e:0e:b4:26:a2:08:0a:6d:04:d2: b7:76:a2:cd:cd:70:1a:2c:28:ff:61:d2:26:4e:45: ee:01:38:6a:00:d0:39:75:87:c3:af:2c:aa:1a:35: ad:2d:01:e8:91:8c:84:be:f4:7a:00:e6:e5:12:cf: f4:31:59:e1:7c:9e:f4:5d:87:51:8d:7c:dd:ec:8f: 06:76:1b:65:60:d3:b0:f0:fa:7c:b5:13:47:fd:fc: 4e:61:cd:20:e6:01:c1:7e:3f:4b:68:bf:9b:04:95: 07:6d:6b:29:a7:6b:ba:d6:30:76:1b:7b:64:62:2f: 80:e8:28:8f:cd:61:1f:c8:5b:f7:79:a3:9a:77:c4: 36:9c:b0:97:99:d6:a1:23:78:a2:75:c9:68:50:6e: e6:5c:65:bb:83:d8:0c:08:dc:c2:7e:ea:e8:a9:96: 1a:64:92:a1:29:3e:ec:45:24:7b:59:0b:8d:b5:ee: 7b:0a:48:4d:ec:f3:a0:34:2f:a0:c5:8c:94:6d:ec: 61:91:77:f0:40:eb:be:57:58:4e:dc:2c:3f:31:45: 33:f3:78:b1:6d:79:3b:13:c9:c9:38:32:46:27:6f: e3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E3:2E:C3:CB:47:4D:19:9D:D5:11:FE:46:69:F0:78:64:86:7D:59 X509v3 Authority Key Identifier: keyid:1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:bc:e5:18:e2:32:11:eb:ea:5d:d0:75:c4:d3:e5:84:c5:f5: 07:c9:d2:dd:30:b8:68:f3:7a:93:a6:d2:68:af:55:41:c2:ed: 0e:bd:c5:25:b6:f4:a0:cc:3b:c2:5a:fb:bb:85:89:94:4d:97: ab:59:54:59:2c:0e:22:22:ee:20:dc:55:a2:15:8b:b0:88:aa: f2:79:81:05:80:0c:da:93:40:6f:54:a4:d1:c6:84:72:7d:db: 60:91:32:f6:50:f4:62:32:32:45:62:a8:73:6b:da:b4:05:5f: 13:61:c6:4d:75:26:27:59:ed:4d:5d:b4:1d:91:20:2d:49:04: 4f:d4:e1:de:dc:64:ed:b5:db:80:07:0a:52:0d:46:5e:c7:6e: 7e:b4:f8:d9:43:b8:e2:a9:26:14:06:b9:62:4f:f3:a8:dd:b1: 0d:32:88:ab:83:65:15:24:fa:cf:63:39:2a:74:e5:9e:c0:55: 9f:64:21:c2:00:23:4f:d5:1c:ec:2c:98:b2:3b:8a:49:77:c8: c7:60:1e:70:25:e3:8a:e1:43:c7:64:96:f3:23:34:37:59:c0: b6:c1:46:22:d9:cb:84:99:70:4f:3b:97:47:87:d8:96:0c:c6: d9:7f:db:8a:50:e7:e9:c7:b5:23:39:3e:80:ce:0e:30:92:b5: d1:32:7f:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUarHEzOp4I0dgtwjE9pp/rsBJ/p4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEy QjRCMkRFRDAeFw0yNTExMDQwOTQ1MDJaFw0yNTExMDcxNDQyMDJaMDMxMTAvBgNV BAMTKDBGRTMyRUMzQ0I0NzREMTk5REQ1MTFGRTQ2NjlGMDc4NjQ4NjdENTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW69AKrYEOLe+tmfphDp6Z1/e4 zTqz0fHfKVUW0L41FYyNDg60JqIICm0E0rd2os3NcBosKP9h0iZORe4BOGoA0Dl1 h8OvLKoaNa0tAeiRjIS+9HoA5uUSz/QxWeF8nvRdh1GNfN3sjwZ2G2Vg07Dw+ny1 E0f9/E5hzSDmAcF+P0tov5sElQdtaymna7rWMHYbe2RiL4DoKI/NYR/IW/d5o5p3 xDacsJeZ1qEjeKJ1yWhQbuZcZbuD2AwI3MJ+6uiplhpkkqEpPuxFJHtZC4217nsK SE3s86A0L6DFjJRt7GGRd/BA675XWE7cLD8xRTPzeLFteTsTyck4MkYnb+ORAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD+Muw8tHTRmd1RH+RmnweGSGfVkwHwYDVR0j BBgwFoAUHKnkBxAmLadRpn6TJHfW4StLLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWQ2N2Q1Zi01NzEzLTQxNTMtODcxYi0xYjAwOGY3ZmZkZDIvMC8xQ0E5RTQwNzEw MjYyREE3NTFBNjdFOTMyNDc3RDZFMTJCNEIyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEyQjRC MkRFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFkNjdkNWYtNTcxMy00MTUzLTg3 MWItMWIwMDhmN2ZmZGQyLzAvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2 RTEyQjRCMkRFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+85RjiMhHr6l3QdcTT5YTF9QfJ0t0wuGjz epOm0mivVUHC7Q69xSW29KDMO8Ja+7uFiZRNl6tZVFksDiIi7iDcVaIVi7CIqvJ5 gQWADNqTQG9UpNHGhHJ922CRMvZQ9GIyMkViqHNr2rQFXxNhxk11JidZ7U1dtB2R IC1JBE/U4d7cZO2124AHClINRl7Hbn60+NlDuOKpJhQGuWJP86jdsQ0yiKuDZRUk +s9jOSp05Z7AVZ9kIcIAI0/VHOwsmLI7ikl3yMdgHnAl44rhQ8dklvMjNDdZwLbB RiLZy4SZcE87l0eH2JYMxtl/24pQ5+nHtSM5PoDODjCStdEyf5g= -----END CERTIFICATE-----Generated at Tue Nov 4 12:54:34 2025 by rpki-client