$ rpki-client -vvf repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft File: 1A0FC4695466F0034FDC7BD35D97BF935042446D.mft (raw, json) Hash identifier: iEuvWtPj0+35sEFcMk2E5xRm8p2vftT1USnaB2zcO/E= Subject key identifier: A9:E5:B9:9F:3D:F5:07:19:B0:FF:D5:6C:50:87:53:AF:8A:65:F0:D6 Authority key identifier: 1A:0F:C4:69:54:66:F0:03:4F:DC:7B:D3:5D:97:BF:93:50:42:44:6D Certificate issuer: /CN=1A0FC4695466F0034FDC7BD35D97BF935042446D Certificate serial: 5340B09CB83E0CA90EDD2A11DBEDD415587FEF20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft Manifest number: 051F Signing time: Mon 03 Nov 2025 06:12:04 +0000 Manifest this update: Mon 03 Nov 2025 06:07:04 +0000 Manifest next update: Thu 06 Nov 2025 10:03:04 +0000 Files and hashes: 1: 3130332e32302e3139362e302f32332d3234203d3e203538353536.roa (hash: q1jYn7Xb50WmP2uCHt9tAsO6LxmkwzEXjSuX+S7nEvI=) 2: 1A0FC4695466F0034FDC7BD35D97BF935042446D.crl (hash: jzbS/Tyd+plonjTbnj81u1zUz94VwTw00iiGBtbLJHE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.crl rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:40:b0:9c:b8:3e:0c:a9:0e:dd:2a:11:db:ed:d4:15:58:7f:ef:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A0FC4695466F0034FDC7BD35D97BF935042446D Validity Not Before: Nov 3 06:07:04 2025 GMT Not After : Nov 6 10:03:04 2025 GMT Subject: CN=A9E5B99F3DF50719B0FFD56C508753AF8A65F0D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9d:f6:34:ee:25:8a:ee:50:35:3b:a5:0d:7f: c8:38:f7:62:40:8e:ec:56:cf:ab:f1:be:b1:39:d2: ca:98:ef:c2:15:c2:25:b2:ee:23:b8:f2:94:03:d6: 34:39:98:1f:c5:80:56:2a:4c:51:f4:f1:30:c1:a1: 13:cf:ec:94:45:6f:d9:05:7f:05:07:3c:97:97:02: e6:09:be:d0:ca:0a:43:59:fc:4c:a8:52:53:ee:13: 04:66:07:a2:a2:e3:c6:e0:bf:64:84:be:5f:ea:c7: c9:8c:46:ce:c1:60:6c:c7:b0:75:f0:ea:e9:a6:21: e4:0b:38:94:9c:21:31:7b:da:9d:ff:33:7f:b3:bb: bd:f9:3a:fc:68:4b:d0:55:8f:73:3f:28:2e:27:7a: 8a:e6:a8:00:c7:81:0d:04:74:6b:65:d7:9e:86:c7: b7:0a:52:bf:77:e9:96:74:aa:ac:d7:44:a1:87:c2: 6e:f3:50:6a:71:84:35:d1:c1:72:c6:17:2e:e7:d2: 09:37:05:90:24:55:48:94:b4:8f:f7:ab:9d:15:1d: b5:28:b8:7e:4c:e6:c2:85:99:7e:5e:1c:e1:4c:35: ce:b7:04:7a:cb:37:d0:33:47:cf:85:bb:3e:ac:a9: af:bf:ad:f9:2e:f7:a3:90:b2:28:0c:1d:6f:3a:f3: 40:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E5:B9:9F:3D:F5:07:19:B0:FF:D5:6C:50:87:53:AF:8A:65:F0:D6 X509v3 Authority Key Identifier: keyid:1A:0F:C4:69:54:66:F0:03:4F:DC:7B:D3:5D:97:BF:93:50:42:44:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ab:83:47:f9:86:29:97:9d:c4:a9:11:44:64:ab:8b:dc:35: 8d:ed:92:24:e5:67:26:54:4c:75:4b:34:9e:91:6e:8e:bc:8c: 30:fa:7a:ad:06:68:f7:b2:d2:40:0d:44:75:b1:c6:85:80:f1: 2f:ee:8f:5f:29:05:f1:e3:be:a3:d2:d7:d2:64:41:88:63:9b: 6b:03:0d:e4:17:f7:c2:6f:39:83:de:a0:13:f2:99:dc:4f:1e: 22:3d:e6:53:97:be:da:32:72:da:01:dc:82:80:76:f8:58:2c: 29:55:f4:76:89:35:72:68:bc:78:63:97:b5:7c:45:33:d7:e3: 31:09:4a:ff:ff:df:67:17:ba:99:00:c6:14:71:77:c6:8b:b9: b2:c3:ef:01:a3:90:31:37:d2:f0:99:cf:56:02:db:c8:29:09: 82:f9:bb:b6:ba:a9:26:3c:36:bc:e1:8a:5c:2a:18:fe:98:38: ee:29:d9:2c:ea:df:8b:e3:2b:ce:de:a8:aa:b4:8d:7c:b6:5a: 2f:aa:b9:5c:91:30:0f:ad:55:4a:19:da:f3:5d:57:d6:74:31: a7:a2:e6:bf:91:26:61:dc:59:39:88:6a:10:fd:3e:aa:b5:08: d6:74:cb:71:f2:96:b3:5e:70:7f:d0:21:cc:81:b8:59:4e:fb: d3:6b:51:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU0CwnLg+DKkO3SoR2+3UFVh/7yAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEwRkM0Njk1NDY2RjAwMzRGREM3QkQzNUQ5N0JGOTM1 MDQyNDQ2RDAeFw0yNTExMDMwNjA3MDRaFw0yNTExMDYxMDAzMDRaMDMxMTAvBgNV BAMTKEE5RTVCOTlGM0RGNTA3MTlCMEZGRDU2QzUwODc1M0FGOEE2NUYwRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0nfY07iWK7lA1O6UNf8g492JA juxWz6vxvrE50sqY78IVwiWy7iO48pQD1jQ5mB/FgFYqTFH08TDBoRPP7JRFb9kF fwUHPJeXAuYJvtDKCkNZ/EyoUlPuEwRmB6Ki48bgv2SEvl/qx8mMRs7BYGzHsHXw 6ummIeQLOJScITF72p3/M3+zu735OvxoS9BVj3M/KC4neormqADHgQ0EdGtl156G x7cKUr936ZZ0qqzXRKGHwm7zUGpxhDXRwXLGFy7n0gk3BZAkVUiUtI/3q50VHbUo uH5M5sKFmX5eHOFMNc63BHrLN9AzR8+Fuz6sqa+/rfku96OQsigMHW8680DJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqeW5nz31Bxmw/9VsUIdTr4pl8NYwHwYDVR0j BBgwFoAUGg/EaVRm8ANP3HvTXZe/k1BCRG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODdhZWU3Zi1kNjViLTQ2ZWMtYTc4MS03Y2JlZjVhYWViODAvMC8xQTBGQzQ2OTU0 NjZGMDAzNEZEQzdCRDM1RDk3QkY5MzUwNDI0NDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUEwRkM0Njk1NDY2RjAwMzRGREM3QkQzNUQ5N0JGOTM1MDQy NDQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTg3YWVlN2YtZDY1Yi00NmVjLWE3 ODEtN2NiZWY1YWFlYjgwLzAvMUEwRkM0Njk1NDY2RjAwMzRGREM3QkQzNUQ5N0JG OTM1MDQyNDQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6rg0f5himXncSpEURkq4vcNY3tkiTlZyZU THVLNJ6Rbo68jDD6eq0GaPey0kANRHWxxoWA8S/uj18pBfHjvqPS19JkQYhjm2sD DeQX98JvOYPeoBPymdxPHiI95lOXvtoyctoB3IKAdvhYLClV9HaJNXJovHhjl7V8 RTPX4zEJSv//32cXupkAxhRxd8aLubLD7wGjkDE30vCZz1YC28gpCYL5u7a6qSY8 NrzhilwqGP6YOO4p2Szq34vjK87eqKq0jXy2Wi+quVyRMA+tVUoZ2vNdV9Z0Maei 5r+RJmHcWTmIahD9Pqq1CNZ0y3HylrNecH/QIcyBuFlO+9NrUQY= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:53 2025 by rpki-client