$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft File: 1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft (raw, json) Hash identifier: 5p+yiVC8T7Eu93glXJWjA+z1ZVU9zeDhHQRbdtEfLA4= Subject key identifier: B9:22:31:3D:A3:D1:49:C7:7A:46:BA:40:BB:7C:E0:52:28:2C:1A:3C Authority key identifier: 1F:F6:52:DE:54:00:15:05:2E:A0:6B:CE:36:44:C9:C1:C9:B8:3B:32 Certificate issuer: /CN=1FF652DE540015052EA06BCE3644C9C1C9B83B32 Certificate serial: 72929DE468534DDB686DC5BB6F3B6B706906C80F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft Manifest number: 021C Signing time: Tue 04 Nov 2025 19:31:59 +0000 Manifest this update: Tue 04 Nov 2025 19:26:59 +0000 Manifest next update: Sat 08 Nov 2025 02:02:59 +0000 Files and hashes: 1: 1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl (hash: k/DFuOiq5fXOlMh7e1Se32H34vqil4jUX2GvcdbN95Y=) 2: 3130332e3137342e3137362e302f32332d3234203d3e203338333230.roa (hash: BAcGuMLsPgJV3u2WPi981toHkg4Nsmz+4IDaHY/xX1M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:92:9d:e4:68:53:4d:db:68:6d:c5:bb:6f:3b:6b:70:69:06:c8:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF652DE540015052EA06BCE3644C9C1C9B83B32 Validity Not Before: Nov 4 19:26:59 2025 GMT Not After : Nov 8 02:02:59 2025 GMT Subject: CN=B922313DA3D149C77A46BA40BB7CE052282C1A3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ba:6a:73:e5:fa:14:f1:7d:38:7f:57:fb:c5: a4:e2:3a:5b:dc:e7:55:0f:ae:2b:1e:c2:af:bb:b8: fc:e5:36:25:56:f4:7b:d9:86:b8:71:f2:7d:12:a9: 8c:92:77:a4:bc:ba:bb:f7:ff:52:b4:67:db:22:bc: 59:ac:e0:7d:55:33:00:18:c4:10:ed:8a:ed:c0:29: 62:40:9b:1e:75:ea:ed:85:9b:42:35:06:84:a3:9c: 14:41:e3:e5:36:fa:a1:4f:88:ce:09:c0:4f:12:bc: fb:f9:5f:06:ee:fa:21:b1:dd:de:75:2d:d3:3d:5a: 7b:56:5e:64:ad:2e:01:ee:e3:bf:ce:b3:dc:89:1a: ba:6a:46:9b:07:08:79:c5:17:11:64:19:2e:8e:73: 9f:c1:b1:cc:49:60:5b:42:09:79:f9:80:37:8a:f9: 5e:04:25:69:0b:08:95:8e:e7:ab:09:e0:86:e5:52: 29:bb:06:ce:85:04:fd:9d:35:c9:08:6d:bc:74:c0: 1c:7f:38:0d:23:50:41:68:2d:20:0f:0b:70:fb:a4: 36:64:e5:d9:b3:f3:99:48:6d:3a:25:40:6e:ca:22: e7:60:37:41:68:40:d3:4b:59:4d:48:27:17:62:c0: 0c:72:93:c1:a8:db:13:20:3a:b2:08:1e:36:d2:c6: 71:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:22:31:3D:A3:D1:49:C7:7A:46:BA:40:BB:7C:E0:52:28:2C:1A:3C X509v3 Authority Key Identifier: keyid:1F:F6:52:DE:54:00:15:05:2E:A0:6B:CE:36:44:C9:C1:C9:B8:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:b4:6a:29:8c:77:07:8f:58:11:c4:e8:09:db:bb:f3:fb:04: 18:c3:80:ce:d6:d3:95:59:45:e7:7f:60:1b:72:17:7e:0f:5f: dc:b9:96:e3:5a:d6:01:28:6b:96:e1:d3:a7:f4:ac:e7:d8:77: 7d:a5:1c:f7:01:79:99:46:a4:09:89:d6:03:55:91:7a:56:09: 9e:72:c1:64:39:c1:3d:bb:9f:96:a8:33:a8:ea:5f:a1:de:1a: 1c:22:f2:77:cc:c2:7c:61:4b:50:a9:b6:27:cb:c9:74:e6:d1: ac:79:32:28:81:db:48:fc:b1:26:f7:ce:c8:5b:af:1a:8c:bf: 19:13:66:cb:b0:1a:40:d6:1b:dc:81:85:cb:17:df:5d:42:2e: a6:11:f5:c5:c2:69:8d:34:1c:25:39:de:f8:54:c8:c3:f2:ae: 8a:35:53:78:89:e5:f3:16:b9:2b:8d:48:98:9c:08:6f:73:6c: 40:a7:0c:2a:31:3d:cc:32:f2:58:1f:76:e7:77:01:73:27:55: 1c:7a:29:18:f6:0e:fc:19:b2:b7:05:2b:57:a1:45:f9:27:bf: c2:66:b1:50:d7:8d:71:0e:84:e4:cd:2e:88:e7:86:d8:04:7b: 93:09:ae:d6:dc:da:75:f6:ca:33:4f:65:fb:4c:6c:68:02:79: b2:2d:26:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcpKd5GhTTdtobcW7bztrcGkGyA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5QzFD OUI4M0IzMjAeFw0yNTExMDQxOTI2NTlaFw0yNTExMDgwMjAyNTlaMDMxMTAvBgNV BAMTKEI5MjIzMTNEQTNEMTQ5Qzc3QTQ2QkE0MEJCN0NFMDUyMjgyQzFBM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUumpz5foU8X04f1f7xaTiOlvc 51UPrisewq+7uPzlNiVW9HvZhrhx8n0SqYySd6S8urv3/1K0Z9sivFms4H1VMwAY xBDtiu3AKWJAmx516u2Fm0I1BoSjnBRB4+U2+qFPiM4JwE8SvPv5Xwbu+iGx3d51 LdM9WntWXmStLgHu47/Os9yJGrpqRpsHCHnFFxFkGS6Oc5/BscxJYFtCCXn5gDeK +V4EJWkLCJWO56sJ4IblUim7Bs6FBP2dNckIbbx0wBx/OA0jUEFoLSAPC3D7pDZk 5dmz85lIbTolQG7KIudgN0FoQNNLWU1IJxdiwAxyk8Go2xMgOrIIHjbSxnHDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuSIxPaPRScd6RrpAu3zgUigsGjwwHwYDVR0j BBgwFoAUH/ZS3lQAFQUuoGvONkTJwcm4OzIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmUxNWU2Zi0wNjg5LTQ3MTMtYjBmYy05NDMwNjJhYzU5MmUvMC8xRkY2NTJERTU0 MDAxNTA1MkVBMDZCQ0UzNjQ0QzlDMUM5QjgzQjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5QzFDOUI4 M0IzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJlMTVlNmYtMDY4OS00NzEzLWIw ZmMtOTQzMDYyYWM1OTJlLzAvMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5 QzFDOUI4M0IzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABe0aimMdwePWBHE6Anbu/P7BBjDgM7W05VZ Red/YBtyF34PX9y5luNa1gEoa5bh06f0rOfYd32lHPcBeZlGpAmJ1gNVkXpWCZ5y wWQ5wT27n5aoM6jqX6HeGhwi8nfMwnxhS1CptifLyXTm0ax5MiiB20j8sSb3zshb rxqMvxkTZsuwGkDWG9yBhcsX311CLqYR9cXCaY00HCU53vhUyMPyroo1U3iJ5fMW uSuNSJicCG9zbECnDCoxPcwy8lgfdud3AXMnVRx6KRj2DvwZsrcFK1ehRfknv8Jm sVDXjXEOhOTNLojnhtgEe5MJrtbc2nX2yjNPZftMbGgCebItJlY= -----END CERTIFICATE-----Generated at Wed Nov 5 00:24:01 2025 by rpki-client