$ rpki-client -vvf repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft File: 71C1EFD5DFDE20418A49070671B01D675F9A8917.mft (raw, json) Hash identifier: ClOBSaNrO/y01yCNECVRvtGRb2jHr188LkYGZTnn4Gg= Subject key identifier: BC:0B:8C:67:AB:D6:A3:39:74:28:CC:49:F4:23:6B:C8:4A:B5:CF:A9 Authority key identifier: 71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17 Certificate issuer: /CN=71C1EFD5DFDE20418A49070671B01D675F9A8917 Certificate serial: 5C09C2D309814D9C0C43FBD88050BEB6E51DC5C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft Manifest number: 029B Signing time: Sun 19 Oct 2025 05:41:43 +0000 Manifest this update: Sun 19 Oct 2025 05:36:43 +0000 Manifest next update: Wed 22 Oct 2025 08:22:43 +0000 Files and hashes: 1: 3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa (hash: 8ksM/q+y6Lni1XQrvYbOQyNFp8Q4IAzl4uPFuNiAyRE=) 2: 71C1EFD5DFDE20418A49070671B01D675F9A8917.crl (hash: m+2THHGMPtVVhq3XvXd954yxxqsWK8YrjQhgdcZVn6w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 08:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:09:c2:d3:09:81:4d:9c:0c:43:fb:d8:80:50:be:b6:e5:1d:c5:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C1EFD5DFDE20418A49070671B01D675F9A8917 Validity Not Before: Oct 19 05:36:43 2025 GMT Not After : Oct 22 08:22:43 2025 GMT Subject: CN=BC0B8C67ABD6A3397428CC49F4236BC84AB5CFA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:84:4f:93:60:b5:e1:01:54:de:99:f9:99:74: 87:96:72:53:6b:9d:26:17:bc:3d:64:0f:12:e0:ee: 7b:8d:01:e7:14:73:3e:e6:12:c3:2c:ec:e7:9b:64: af:d0:81:b5:96:99:7f:32:bd:b9:14:83:c6:09:ae: a7:29:a0:4e:c9:07:fa:cf:09:ef:fc:fd:22:e4:44: b3:fe:df:a2:50:f6:7e:4b:c8:01:b0:e4:a3:3a:1a: d0:38:90:8f:da:5d:d1:23:ac:24:6c:3a:b3:0a:ce: 88:22:e2:31:34:d7:7d:5a:3b:10:33:6f:2d:60:22: 10:52:d2:1d:7b:26:53:71:2a:ce:e0:4e:22:49:78: a8:fb:63:e5:b1:56:a5:c6:7c:d9:ec:6e:36:5a:3b: c6:3b:af:23:0b:0f:8b:0c:61:78:8a:8e:f8:42:9b: d5:4b:47:79:5f:9d:b7:53:ae:71:00:14:18:7b:4b: a0:89:da:b6:86:9b:8c:45:f1:7d:10:9e:87:88:11: 72:91:c5:9f:52:39:f6:f3:41:85:9d:1f:ab:27:ac: b0:be:59:6d:80:60:c1:63:b4:db:ea:3a:12:0c:56: 91:a5:80:76:5c:28:04:c1:da:82:f9:54:19:9a:e6: 17:81:53:29:dd:7f:dd:5d:81:8b:96:5a:8c:19:16: c3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:0B:8C:67:AB:D6:A3:39:74:28:CC:49:F4:23:6B:C8:4A:B5:CF:A9 X509v3 Authority Key Identifier: keyid:71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:62:5f:f6:79:84:bb:28:f3:c2:4a:7c:28:72:6d:ca:12:20: 43:e5:f2:92:99:69:23:a6:fc:33:a7:01:d2:55:e4:e4:b3:52: 7b:4b:7b:79:16:09:91:c7:57:33:9f:21:71:f7:53:86:62:fc: f9:6c:08:14:6a:4d:8e:89:c3:cb:db:f1:60:09:6f:e9:44:d9: 5a:48:d3:df:61:51:01:96:14:30:a4:28:f3:ff:04:6b:d8:d5: 3a:43:36:ab:45:7f:e6:b3:73:c4:69:4f:9c:b2:41:a9:8b:98: 62:d3:4f:d3:ca:37:b0:8b:76:f9:05:50:fa:73:96:ef:b4:55: 41:de:01:3b:78:09:b4:f9:95:0b:b5:dd:f8:09:e2:3c:91:37: 0b:45:1a:c3:47:3e:94:67:ee:3f:74:51:d2:f9:46:39:14:b0: c0:50:fa:59:c6:7c:f7:1e:24:ec:45:b5:dc:96:3d:d4:af:42: b5:eb:2b:d6:51:c5:10:cf:d0:22:0a:e4:02:da:39:54:4d:1c: cd:c4:87:f1:a6:f7:bc:62:ea:1c:dc:5c:fc:bc:65:b5:4c:f9: c8:02:88:fc:e3:d2:c9:37:65:83:d0:db:39:75:e5:cd:a8:6e: a5:d6:f4:87:26:d5:e7:2c:6e:23:3f:d1:f8:dc:97:5b:0c:92: 05:82:52:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXAnC0wmBTZwMQ/vYgFC+tuUdxcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFENjc1 RjlBODkxNzAeFw0yNTEwMTkwNTM2NDNaFw0yNTEwMjIwODIyNDNaMDMxMTAvBgNV BAMTKEJDMEI4QzY3QUJENkEzMzk3NDI4Q0M0OUY0MjM2QkM4NEFCNUNGQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDShE+TYLXhAVTemfmZdIeWclNr nSYXvD1kDxLg7nuNAecUcz7mEsMs7OebZK/QgbWWmX8yvbkUg8YJrqcpoE7JB/rP Ce/8/SLkRLP+36JQ9n5LyAGw5KM6GtA4kI/aXdEjrCRsOrMKzogi4jE0131aOxAz by1gIhBS0h17JlNxKs7gTiJJeKj7Y+WxVqXGfNnsbjZaO8Y7ryMLD4sMYXiKjvhC m9VLR3lfnbdTrnEAFBh7S6CJ2raGm4xF8X0QnoeIEXKRxZ9SOfbzQYWdH6snrLC+ WW2AYMFjtNvqOhIMVpGlgHZcKATB2oL5VBma5heBUyndf91dgYuWWowZFsPdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvAuMZ6vWozl0KMxJ9CNryEq1z6kwHwYDVR0j BBgwFoAUccHv1d/eIEGKSQcGcbAdZ1+aiRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWVhYjQ0Mi03NDgwLTQ1ODEtODFkZC0yM2EyMDA2MTQzODIvMC83MUMxRUZENURG REUyMDQxOEE0OTA3MDY3MUIwMUQ2NzVGOUE4OTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFENjc1RjlB ODkxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVlYWI0NDItNzQ4MC00NTgxLTgx ZGQtMjNhMjAwNjE0MzgyLzAvNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFE Njc1RjlBODkxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9iX/Z5hLso88JKfChybcoSIEPl8pKZaSOm /DOnAdJV5OSzUntLe3kWCZHHVzOfIXH3U4Zi/PlsCBRqTY6Jw8vb8WAJb+lE2VpI 099hUQGWFDCkKPP/BGvY1TpDNqtFf+azc8RpT5yyQamLmGLTT9PKN7CLdvkFUPpz lu+0VUHeATt4CbT5lQu13fgJ4jyRNwtFGsNHPpRn7j90UdL5RjkUsMBQ+lnGfPce JOxFtdyWPdSvQrXrK9ZRxRDP0CIK5ALaOVRNHM3Eh/Gm97xi6hzcXPy8ZbVM+cgC iPzj0sk3ZYPQ2zl15c2obqXW9Icm1ecsbiM/0fjcl1sMkgWCUj8= -----END CERTIFICATE-----Generated at Mon Oct 20 12:15:44 2025 by rpki-client