$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft File: 1F609817DD084C4559EEB9B06E8013157EB82DB8.mft (raw, json) Hash identifier: j6osIvCUMLfJeJrKlQGImPIp2nlLVCaaEs1bC+Ndk5w= Subject key identifier: FD:13:CE:81:0D:64:7E:89:DD:54:4D:C3:B9:61:59:17:A7:CD:44:92 Authority key identifier: 1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 Certificate issuer: /CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Certificate serial: 047DCB94CD0EA221CBEE4FD79843952748E36DAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft Manifest number: 99 Signing time: Tue 04 Nov 2025 01:21:46 +0000 Manifest this update: Tue 04 Nov 2025 01:16:46 +0000 Manifest next update: Fri 07 Nov 2025 11:24:46 +0000 Files and hashes: 1: 1F609817DD084C4559EEB9B06E8013157EB82DB8.crl (hash: FEqtgqmcno7czGrNlKB4QrtgL1gIvogh0DE4Y8hYyqQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 11:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:7d:cb:94:cd:0e:a2:21:cb:ee:4f:d7:98:43:95:27:48:e3:6d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Validity Not Before: Nov 4 01:16:46 2025 GMT Not After : Nov 7 11:24:46 2025 GMT Subject: CN=FD13CE810D647E89DD544DC3B9615917A7CD4492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d5:d5:1e:65:2c:26:90:5f:57:91:ea:46:9a: c1:dc:74:95:bf:06:72:1c:70:5d:27:11:dc:dc:3f: 58:ab:11:31:48:93:fd:d5:9e:ab:dc:0b:dd:2e:84: 52:f2:1c:4c:d7:aa:68:86:ab:e7:5f:26:03:6d:97: 02:fc:c4:96:a6:1f:54:e1:f1:95:bb:6f:9c:02:f8: 3f:4b:d2:10:b6:74:bf:2d:db:d0:ae:41:23:8a:af: 7b:9c:7c:39:1f:ac:bd:4b:77:a0:5e:60:35:31:0a: 23:bb:b3:9d:c6:85:b3:f7:ce:a2:32:24:86:87:1a: 6e:35:b5:8f:1a:48:9d:6f:85:06:24:45:d9:c5:10: 64:7f:c1:8e:39:2d:19:09:73:78:17:9a:44:9e:40: 34:cc:98:eb:45:b2:39:ef:94:e4:89:f5:6a:5d:2f: dd:07:41:10:77:84:6c:95:8c:d4:21:57:3d:dd:a3: 1f:54:19:6f:95:b3:e2:52:03:b8:ce:68:bb:1d:4a: 23:c6:fd:92:d1:e8:82:23:a2:fc:91:81:ba:8a:14: 84:a8:8e:56:36:c1:c0:67:b1:55:f4:a1:45:c3:4c: 62:4b:70:d3:1f:df:90:2f:af:57:67:d6:40:41:27: 35:e9:6a:5a:59:10:5b:b2:45:b7:21:7e:c5:74:cb: 81:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:13:CE:81:0D:64:7E:89:DD:54:4D:C3:B9:61:59:17:A7:CD:44:92 X509v3 Authority Key Identifier: keyid:1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:9a:d9:74:54:e3:af:a8:12:8b:5f:d6:6a:0c:fd:dc:91:91: 86:3e:5c:9e:f1:ab:ec:b7:74:2c:7e:1d:bf:c2:f8:ed:8a:83: 0a:14:fd:f0:19:49:61:94:69:2b:f7:2e:e6:f2:6f:8a:d4:23: 01:7d:34:86:0d:a4:f5:27:37:1b:b3:73:1a:e2:a9:2e:fb:13: 00:ea:5a:2e:50:bd:fe:12:b6:30:a7:44:db:4e:0e:f6:69:d4: f3:06:9a:7d:5a:dc:0c:5b:89:7c:f0:c8:6d:ac:68:0f:39:09: 14:78:f4:a7:71:91:d8:3c:f2:3a:33:8c:c0:1d:1b:bd:55:42: 49:6c:58:54:71:2b:ed:70:dd:88:ce:91:3f:36:ec:38:47:37: ea:14:7b:24:c4:ca:83:ac:35:3a:ec:f4:5f:b8:b9:9d:9f:df: 99:27:75:b0:af:67:ea:a2:02:54:47:c7:c3:b4:9d:8e:c4:11: 94:67:5a:55:f2:94:06:59:a4:ba:31:ef:3a:36:06:ed:98:7e: 33:89:3b:83:2f:d3:91:c7:d7:1f:11:50:f8:de:a3:e6:a6:2a: 3d:0a:85:38:c2:2a:ca:21:fe:9f:67:c2:ed:e4:b9:5a:cb:0a: ef:89:37:ed:a0:e0:7d:1a:8a:59:1f:c3:3f:41:4c:34:a5:e4: 60:56:4a:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBH3LlM0OoiHL7k/XmEOVJ0jjba8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3 RUI4MkRCODAeFw0yNTExMDQwMTE2NDZaFw0yNTExMDcxMTI0NDZaMDMxMTAvBgNV BAMTKEZEMTNDRTgxMEQ2NDdFODlERDU0NERDM0I5NjE1OTE3QTdDRDQ0OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe1dUeZSwmkF9XkepGmsHcdJW/ BnIccF0nEdzcP1irETFIk/3VnqvcC90uhFLyHEzXqmiGq+dfJgNtlwL8xJamH1Th 8ZW7b5wC+D9L0hC2dL8t29CuQSOKr3ucfDkfrL1Ld6BeYDUxCiO7s53GhbP3zqIy JIaHGm41tY8aSJ1vhQYkRdnFEGR/wY45LRkJc3gXmkSeQDTMmOtFsjnvlOSJ9Wpd L90HQRB3hGyVjNQhVz3dox9UGW+Vs+JSA7jOaLsdSiPG/ZLR6IIjovyRgbqKFISo jlY2wcBnsVX0oUXDTGJLcNMf35Avr1dn1kBBJzXpalpZEFuyRbchfsV0y4GnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/RPOgQ1kfondVE3DuWFZF6fNRJIwHwYDVR0j BBgwFoAUH2CYF90ITEVZ7rmwboATFX64LbgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhN2Q5OC0yMzM4LTRkNzctOTY2Mi1mMzNlYTY4Yzg2ZjIvMC8xRjYwOTgxN0RE MDg0QzQ1NTlFRUI5QjA2RTgwMTMxNTdFQjgyREI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3RUI4 MkRCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3YTdkOTgtMjMzOC00ZDc3LTk2 NjItZjMzZWE2OGM4NmYyLzAvMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEz MTU3RUI4MkRCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCa2XRU46+oEotf1moM/dyRkYY+XJ7xq+y3 dCx+Hb/C+O2KgwoU/fAZSWGUaSv3Lubyb4rUIwF9NIYNpPUnNxuzcxriqS77EwDq Wi5Qvf4StjCnRNtODvZp1PMGmn1a3AxbiXzwyG2saA85CRR49Kdxkdg88jozjMAd G71VQklsWFRxK+1w3YjOkT827DhHN+oUeyTEyoOsNTrs9F+4uZ2f35kndbCvZ+qi AlRHx8O0nY7EEZRnWlXylAZZpLox7zo2Bu2YfjOJO4Mv05HH1x8RUPjeo+amKj0K hTjCKsoh/p9nwu3kuVrLCu+JN+2g4H0ailkfwz9BTDSl5GBWSpU= -----END CERTIFICATE-----Generated at Tue Nov 4 12:54:32 2025 by rpki-client