$ rpki-client -vvf repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft File: 7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft (raw, json) Hash identifier: GhnA5GxrKernmmkaAe+Ynk+NgVg0CdLRQPHJi/KT1no= Subject key identifier: 26:8A:FC:EF:97:EF:7D:5B:E6:14:17:1D:27:01:9A:82:58:72:68:14 Authority key identifier: 72:71:65:5D:63:18:EC:B0:B7:97:B4:6C:6E:CF:BC:3D:D2:E3:25:04 Certificate issuer: /CN=7271655D6318ECB0B797B46C6ECFBC3DD2E32504 Certificate serial: 03BB5B414617FEC0FC8F5A64ECD86C2BD7209967 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer Subject info access: rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft Manifest number: 1E Signing time: Sat 18 Oct 2025 22:01:26 +0000 Manifest this update: Sat 18 Oct 2025 21:56:26 +0000 Manifest next update: Wed 22 Oct 2025 08:16:26 +0000 Files and hashes: 1: 7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl (hash: J/0N5P3gokb7+xKDs3YfIMUyNNNDp+lw3yL2moIK4tI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 08:16:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:bb:5b:41:46:17:fe:c0:fc:8f:5a:64:ec:d8:6c:2b:d7:20:99:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7271655D6318ECB0B797B46C6ECFBC3DD2E32504 Validity Not Before: Oct 18 21:56:26 2025 GMT Not After : Oct 22 08:16:26 2025 GMT Subject: CN=268AFCEF97EF7D5BE614171D27019A8258726814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d4:a5:b9:41:0a:77:a9:b6:d3:a5:ec:98:84: 46:93:38:e3:5c:30:47:0a:fd:2c:7f:f5:d6:e2:0c: d6:eb:d8:70:33:21:20:aa:73:d8:ee:c3:82:29:00: c5:9d:a2:09:a7:71:0d:fb:d4:b8:03:98:5e:9f:b9: 0a:c6:4f:1d:b9:92:f6:2b:84:08:05:e6:a3:c5:fb: ee:4d:7e:d5:6a:65:7a:50:43:23:41:d1:20:ab:af: 43:d4:57:78:64:8f:61:d6:67:b2:4c:bf:54:5d:b1: fb:41:60:2d:89:0c:9c:d4:42:bf:92:ce:fe:cb:7d: 78:f5:30:0c:5a:21:69:18:eb:03:f8:5c:d3:8d:b9: 07:ad:be:28:ed:93:4f:9e:f4:06:ba:30:21:9c:8a: 0f:38:59:87:20:5b:1e:24:58:fd:6c:60:ce:02:4f: 93:41:71:d3:d8:06:38:2a:fa:13:b8:e2:30:56:3d: 03:41:c4:0b:21:a1:dc:8c:6d:a8:34:26:b9:17:2a: fe:ae:b2:cb:12:ae:54:fe:34:6d:a6:9f:8d:68:ee: cf:0c:35:1d:0f:fd:59:63:8b:77:f8:1e:85:c7:59: 10:5e:3d:a3:ef:d6:9f:09:03:81:a8:0b:b8:44:07: 03:85:c2:6b:3b:8d:99:98:59:3e:3c:c9:f8:c2:87: b6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8A:FC:EF:97:EF:7D:5B:E6:14:17:1D:27:01:9A:82:58:72:68:14 X509v3 Authority Key Identifier: keyid:72:71:65:5D:63:18:EC:B0:B7:97:B4:6C:6E:CF:BC:3D:D2:E3:25:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:8e:95:e4:f2:3f:02:ef:52:61:f3:a4:e2:66:a6:25:90:67: 10:09:3c:00:6a:9b:c0:e0:d6:6d:d0:41:a4:b2:ca:b6:00:92: 6e:97:ec:14:f0:17:e4:02:88:62:f3:6d:bf:dc:aa:80:64:47: a2:03:d3:a2:6f:e8:ab:49:2c:b9:91:72:6a:c8:cb:4b:ce:f0: 1c:c9:0c:b9:19:b4:43:e1:72:b1:23:80:49:9a:e2:75:d2:ba: a9:d5:f7:d2:bf:df:00:17:20:f8:be:f4:02:ba:07:d5:5d:b3: c6:4d:83:b5:77:a7:5d:f3:16:4a:35:86:63:aa:12:a1:21:03: bc:94:14:83:50:2c:4d:9f:b2:ed:20:95:ed:bd:d1:1b:f9:5b: e2:bb:94:ba:80:81:a4:25:82:68:4a:d7:10:19:45:af:3d:70: 93:a5:6e:58:f5:09:b8:23:f6:3a:fa:19:ea:66:26:b4:da:e3: cf:de:ca:b9:25:02:d3:bd:1d:0d:d2:9f:f9:f1:a8:1b:69:24: f6:c3:9f:dc:7a:7f:2d:e4:be:4b:29:1d:ae:6e:5e:8a:76:5f: ca:6d:d4:79:48:4a:02:4d:3e:b4:28:a3:06:fd:ae:72:43:47: 1e:0c:90:a3:f2:f3:75:3f:24:fc:b4:fc:95:e4:dd:62:4a:2c: 48:58:9d:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA7tbQUYX/sD8j1pk7NhsK9cgmWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI3MTY1NUQ2MzE4RUNCMEI3OTdCNDZDNkVDRkJDM0RE MkUzMjUwNDAeFw0yNTEwMTgyMTU2MjZaFw0yNTEwMjIwODE2MjZaMDMxMTAvBgNV BAMTKDI2OEFGQ0VGOTdFRjdENUJFNjE0MTcxRDI3MDE5QTgyNTg3MjY4MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC41KW5QQp3qbbTpeyYhEaTOONc MEcK/Sx/9dbiDNbr2HAzISCqc9juw4IpAMWdogmncQ371LgDmF6fuQrGTx25kvYr hAgF5qPF++5NftVqZXpQQyNB0SCrr0PUV3hkj2HWZ7JMv1RdsftBYC2JDJzUQr+S zv7LfXj1MAxaIWkY6wP4XNONuQetvijtk0+e9Aa6MCGcig84WYcgWx4kWP1sYM4C T5NBcdPYBjgq+hO44jBWPQNBxAshodyMbag0JrkXKv6usssSrlT+NG2mn41o7s8M NR0P/Vlji3f4HoXHWRBePaPv1p8JA4GoC7hEBwOFwms7jZmYWT48yfjCh7b5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJor875fvfVvmFBcdJwGaglhyaBQwHwYDVR0j BBgwFoAUcnFlXWMY7LC3l7Rsbs+8PdLjJQQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjhkZTkxYi02MzZiLTRkYTQtYjFkMC03MjYzMmNmY2YyMzUvMC83MjcxNjU1RDYz MThFQ0IwQjc5N0I0NkM2RUNGQkMzREQyRTMyNTA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzI3MTY1NUQ2MzE4RUNCMEI3OTdCNDZDNkVDRkJDM0REMkUz MjUwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY4ZGU5MWItNjM2Yi00ZGE0LWIx ZDAtNzI2MzJjZmNmMjM1LzAvNzI3MTY1NUQ2MzE4RUNCMEI3OTdCNDZDNkVDRkJD M0REMkUzMjUwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACSOleTyPwLvUmHzpOJmpiWQZxAJPABqm8Dg 1m3QQaSyyrYAkm6X7BTwF+QCiGLzbb/cqoBkR6ID06Jv6KtJLLmRcmrIy0vO8BzJ DLkZtEPhcrEjgEma4nXSuqnV99K/3wAXIPi+9AK6B9Vds8ZNg7V3p13zFko1hmOq EqEhA7yUFINQLE2fsu0gle290Rv5W+K7lLqAgaQlgmhK1xAZRa89cJOlblj1Cbgj 9jr6GepmJrTa48/eyrklAtO9HQ3Sn/nxqBtpJPbDn9x6fy3kvkspHa5uXop2X8pt 1HlISgJNPrQoowb9rnJDRx4MkKPy83U/JPy0/JXk3WJKLEhYnRc= -----END CERTIFICATE-----Generated at Mon Oct 20 20:32:16 2025 by rpki-client