$ rpki-client -vvf repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft File: 1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft (raw, json) Hash identifier: FO6BpJqHOvTp5GO8ak8GTFUDCLuGNspNanHj2BbVu50= Subject key identifier: 44:4D:F5:03:06:1C:F0:86:FD:83:69:2F:D2:B8:66:6E:71:63:EF:40 Authority key identifier: 1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51 Certificate issuer: /CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51 Certificate serial: 74496BE68CCFE92F362290611923390578D89363 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft Manifest number: 0232 Signing time: Sun 02 Nov 2025 08:11:06 +0000 Manifest this update: Sun 02 Nov 2025 08:06:06 +0000 Manifest next update: Wed 05 Nov 2025 19:32:06 +0000 Files and hashes: 1: 1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl (hash: 7XB8vdADAs52hF7RPgfMvyfqBnoeYW2lyv9iHIaG04w=) 2: 3130332e3138352e32372e302f32342d3234203d3e20313439373039.roa (hash: R+hXYDLG/c17YyPsyb/GD72/SjNkAc2qPCjHbpzY5X4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 19:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:49:6b:e6:8c:cf:e9:2f:36:22:90:61:19:23:39:05:78:d8:93:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51 Validity Not Before: Nov 2 08:06:06 2025 GMT Not After : Nov 5 19:32:06 2025 GMT Subject: CN=444DF503061CF086FD83692FD2B8666E7163EF40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bb:1b:90:08:c2:7f:58:d5:fe:f9:1e:77:03: e7:da:33:ea:3c:04:b0:c6:c4:b6:3c:8a:fc:ad:db: 6b:46:52:7f:25:4d:e6:c3:50:6b:d2:c2:47:dc:2f: 6a:bb:73:55:02:fb:a5:fc:1f:2a:9f:8e:dc:ec:fb: 9a:01:52:63:5d:17:78:41:33:ba:fe:84:35:3a:a3: d0:e6:b6:60:6b:51:bc:e5:3d:a7:cc:8c:d9:1e:29: ff:a8:ff:2d:09:31:6d:d5:6d:dc:08:25:25:4f:e6: 15:1a:59:d9:db:7b:9b:1e:0f:4e:65:46:2c:95:b9: a5:bd:9e:e9:2c:e3:cc:c6:bd:9d:90:82:ac:33:7c: 77:1c:23:7b:ee:cc:10:5a:95:4a:d6:86:88:f5:d7: 73:47:bc:99:1c:6c:1c:d5:7b:6e:f8:f9:62:e2:7e: 79:8f:5e:9f:3d:f7:e7:ac:8a:b8:81:76:bc:7b:6a: 1b:5a:28:84:80:ab:5b:ae:35:be:b6:2f:d1:88:e9: 91:df:ad:4b:c9:3f:c5:0f:1c:22:94:67:02:b1:b5: ea:87:12:10:5a:e1:63:ef:57:79:e8:65:47:fc:4e: f6:41:95:3c:d5:ba:75:c5:66:fb:c5:34:df:93:1f: ab:a0:cd:85:81:b6:2d:95:eb:9d:2c:b1:a1:2a:c0: d6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:4D:F5:03:06:1C:F0:86:FD:83:69:2F:D2:B8:66:6E:71:63:EF:40 X509v3 Authority Key Identifier: keyid:1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:df:88:89:4b:d4:ef:68:b4:86:9b:d3:eb:f6:ab:e2:23:b9: 25:8e:9d:c1:63:62:41:e9:dd:77:9c:a9:6c:40:dc:df:18:0e: 32:68:e8:26:7b:64:bd:5c:06:a8:94:45:a9:7a:c4:5b:fa:b8: 11:03:c2:65:41:58:44:69:1f:43:c9:42:36:e6:f8:fd:9e:2f: f8:bc:cd:91:fd:4f:d9:70:0c:40:7f:8f:ea:cd:93:85:e1:30: a2:85:8d:fb:98:b3:3c:42:64:16:d7:72:8f:af:60:12:1c:12: 91:fa:42:68:6c:ef:e3:c1:47:d4:6d:29:d4:45:ea:6b:0d:c9: 4e:01:53:0b:b4:c8:d6:dc:a1:79:a5:dd:6d:fd:21:ad:c4:0a: 4c:a9:12:37:e3:75:a4:35:5f:11:6b:21:df:28:2d:cd:1f:82: 21:07:18:63:52:50:84:de:65:1e:c0:4d:6e:da:a1:1e:71:cc: 12:69:74:39:91:1c:f0:b0:92:ed:d8:09:6c:4a:40:3d:9b:4b: df:6c:72:75:c1:46:4e:97:54:a7:90:ac:aa:21:54:f2:15:75: 92:cc:d2:e4:34:00:d6:5d:ee:50:a4:b0:a8:75:92:3e:6e:3f: 50:48:38:89:a0:95:f0:c7:ed:c6:ea:7e:cd:f4:0f:e2:af:f6: e4:0a:6d:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdElr5ozP6S82IpBhGSM5BXjYk2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFCRDRB NUMxMkM1MTAeFw0yNTExMDIwODA2MDZaFw0yNTExMDUxOTMyMDZaMDMxMTAvBgNV BAMTKDQ0NERGNTAzMDYxQ0YwODZGRDgzNjkyRkQyQjg2NjZFNzE2M0VGNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7uxuQCMJ/WNX++R53A+faM+o8 BLDGxLY8ivyt22tGUn8lTebDUGvSwkfcL2q7c1UC+6X8Hyqfjtzs+5oBUmNdF3hB M7r+hDU6o9DmtmBrUbzlPafMjNkeKf+o/y0JMW3VbdwIJSVP5hUaWdnbe5seD05l RiyVuaW9nuks48zGvZ2QgqwzfHccI3vuzBBalUrWhoj113NHvJkcbBzVe274+WLi fnmPXp899+esiriBdrx7ahtaKISAq1uuNb62L9GI6ZHfrUvJP8UPHCKUZwKxteqH EhBa4WPvV3noZUf8TvZBlTzVunXFZvvFNN+TH6ugzYWBti2V650ssaEqwNarAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURE31AwYc8Ib9g2kv0rhmbnFj70AwHwYDVR0j BBgwFoAUGn5SW1aenK4DNb/2bPob1KXBLFEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDZjYWNkNC00ZTA4LTRkZDgtYTVhZS05YTVhNjNhOGQyZmEvMC8xQTdFNTI1QjU2 OUU5Q0FFMDMzNUJGRjY2Q0ZBMUJENEE1QzEyQzUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFCRDRBNUMx MkM1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ2Y2FjZDQtNGUwOC00ZGQ4LWE1 YWUtOWE1YTYzYThkMmZhLzAvMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFC RDRBNUMxMkM1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3fiIlL1O9otIab0+v2q+IjuSWOncFjYkHp 3XecqWxA3N8YDjJo6CZ7ZL1cBqiURal6xFv6uBEDwmVBWERpH0PJQjbm+P2eL/i8 zZH9T9lwDEB/j+rNk4XhMKKFjfuYszxCZBbXco+vYBIcEpH6Qmhs7+PBR9RtKdRF 6msNyU4BUwu0yNbcoXml3W39Ia3ECkypEjfjdaQ1XxFrId8oLc0fgiEHGGNSUITe ZR7ATW7aoR5xzBJpdDmRHPCwku3YCWxKQD2bS99scnXBRk6XVKeQrKohVPIVdZLM 0uQ0ANZd7lCksKh1kj5uP1BIOImglfDH7cbqfs30D+Kv9uQKbTU= -----END CERTIFICATE-----Generated at Tue Nov 4 18:54:20 2025 by rpki-client