$ rpki-client -vvf repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft File: 71054E3C02E22D607A90FACC4DE7369B65367EBD.mft (raw, json) Hash identifier: hv/fwSa13s2Smb6u0UVNTExyX0+H99V6X1GCJsl1oNA= Subject key identifier: B1:5A:C8:DD:EA:C7:46:75:30:19:82:0C:1C:D1:BB:7E:63:81:67:B8 Authority key identifier: 71:05:4E:3C:02:E2:2D:60:7A:90:FA:CC:4D:E7:36:9B:65:36:7E:BD Certificate issuer: /CN=71054E3C02E22D607A90FACC4DE7369B65367EBD Certificate serial: 62385C3BC2D38A6EBA98D3C62C8AE55B7067F49F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft Manifest number: 016E Signing time: Mon 20 Oct 2025 01:00:46 +0000 Manifest this update: Mon 20 Oct 2025 00:55:46 +0000 Manifest next update: Thu 23 Oct 2025 06:48:46 +0000 Files and hashes: 1: 71054E3C02E22D607A90FACC4DE7369B65367EBD.crl (hash: OlSskym8d0Fs5jPp2YRFhGgO9jUrjvCiV3k2YOUjU3w=) 2: 3130332e32392e31302e302f32332d3234203d3e20313530323530.roa (hash: WJMrEDY6+yYCu4Iz5tUshsi6eLGdRGAnm2hsfXk5iwc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.crl rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 06:48:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:38:5c:3b:c2:d3:8a:6e:ba:98:d3:c6:2c:8a:e5:5b:70:67:f4:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71054E3C02E22D607A90FACC4DE7369B65367EBD Validity Not Before: Oct 20 00:55:46 2025 GMT Not After : Oct 23 06:48:46 2025 GMT Subject: CN=B15AC8DDEAC746753019820C1CD1BB7E638167B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:66:bd:7d:6e:91:0e:fa:86:5f:65:d4:19:49: 17:d0:7c:fa:c0:f6:a0:05:bd:6d:5c:05:a0:c2:87: 24:f4:cc:ca:02:78:be:92:47:54:f0:b7:c3:93:79: 89:dc:a1:df:47:73:cd:47:9d:73:93:93:b8:e9:5d: b9:25:7b:33:16:93:26:98:51:85:58:fa:b0:10:92: 79:9e:00:e4:bf:d8:73:38:90:82:de:25:d8:ef:2f: d1:5c:07:0b:57:9e:42:1e:43:34:19:9c:a0:bf:20: 33:54:bc:20:90:52:a5:78:99:6f:d7:ee:37:f0:cf: 5f:cc:e8:cb:f7:22:97:90:e3:62:32:94:8a:29:76: 03:c1:43:3f:11:2a:bb:78:45:aa:0a:51:6d:cf:18: 2c:e5:9e:55:4c:a4:f6:26:73:1d:f0:cd:3f:0c:9f: f9:24:19:5a:20:0f:64:a4:7a:b9:71:7c:37:e8:81: 74:6c:52:45:42:91:ec:d5:5c:a4:4b:e4:ae:92:bd: 40:f6:ee:0d:ad:0e:05:d3:23:71:e1:98:7d:b0:10: c2:b7:b1:66:8d:32:c7:11:bc:fe:3c:98:0c:c0:ef: e4:56:5a:16:67:71:4c:1c:f4:55:2b:9b:77:bd:ea: 9d:f6:87:cb:e8:5f:1f:48:a0:04:17:db:c5:08:80: 75:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:5A:C8:DD:EA:C7:46:75:30:19:82:0C:1C:D1:BB:7E:63:81:67:B8 X509v3 Authority Key Identifier: keyid:71:05:4E:3C:02:E2:2D:60:7A:90:FA:CC:4D:E7:36:9B:65:36:7E:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:80:ab:bc:44:a5:76:9c:e9:64:46:10:50:81:4c:19:1b:36: e4:3e:49:68:f2:d1:17:8b:c4:dd:9c:d5:06:6a:e6:1a:f2:ab: 3f:de:14:fb:02:64:e0:ca:cc:dd:4b:12:a9:af:59:4a:1d:24: 4a:5c:45:a0:fb:78:01:de:17:f9:73:4e:6e:26:ba:45:4f:87: 19:59:af:37:3b:d7:67:4e:a0:1c:5c:87:93:ff:cf:cb:d8:01: 9c:6e:3c:87:31:ea:24:3f:4f:b3:14:2a:45:1a:7a:6a:97:9d: 98:55:eb:c3:b1:a6:36:2e:0a:91:1d:04:4b:be:0b:6f:2d:63: 04:21:bd:2c:54:62:93:bd:7f:b9:ac:b0:4e:c2:07:7c:07:03: af:cd:f3:7d:e0:97:e5:5f:f3:2b:c8:42:ce:8b:50:2b:98:78: 14:81:87:e9:c9:18:ef:97:88:d4:06:43:b4:17:f2:b5:cc:0a: e8:66:33:56:5c:22:d8:b0:88:93:fd:ce:4c:1b:33:36:aa:ac: 4b:42:cc:57:30:49:47:26:c0:2f:a0:fa:a5:55:e0:a9:61:76: af:5d:b1:9b:8e:35:5e:e4:f9:77:e7:18:ae:cb:da:ca:f9:e4: 62:d5:fd:b4:26:d8:8d:d3:33:cc:da:f5:c3:4f:8c:9e:8a:a6: 12:68:9e:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYjhcO8LTim66mNPGLIrlW3Bn9J8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzEwNTRFM0MwMkUyMkQ2MDdBOTBGQUNDNERFNzM2OUI2 NTM2N0VCRDAeFw0yNTEwMjAwMDU1NDZaFw0yNTEwMjMwNjQ4NDZaMDMxMTAvBgNV BAMTKEIxNUFDOERERUFDNzQ2NzUzMDE5ODIwQzFDRDFCQjdFNjM4MTY3QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWZr19bpEO+oZfZdQZSRfQfPrA 9qAFvW1cBaDChyT0zMoCeL6SR1Twt8OTeYncod9Hc81HnXOTk7jpXbklezMWkyaY UYVY+rAQknmeAOS/2HM4kILeJdjvL9FcBwtXnkIeQzQZnKC/IDNUvCCQUqV4mW/X 7jfwz1/M6Mv3IpeQ42IylIopdgPBQz8RKrt4RaoKUW3PGCzlnlVMpPYmcx3wzT8M n/kkGVogD2SkerlxfDfogXRsUkVCkezVXKRL5K6SvUD27g2tDgXTI3HhmH2wEMK3 sWaNMscRvP48mAzA7+RWWhZncUwc9FUrm3e96p32h8voXx9IoAQX28UIgHVJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsVrI3erHRnUwGYIMHNG7fmOBZ7gwHwYDVR0j BBgwFoAUcQVOPALiLWB6kPrMTec2m2U2fr0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTUzMmM2NS04MGJlLTRmZGUtODdkMC0zNmM1YmQyODhjZDgvMC83MTA1NEUzQzAy RTIyRDYwN0E5MEZBQ0M0REU3MzY5QjY1MzY3RUJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzEwNTRFM0MwMkUyMkQ2MDdBOTBGQUNDNERFNzM2OUI2NTM2 N0VCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1MzJjNjUtODBiZS00ZmRlLTg3 ZDAtMzZjNWJkMjg4Y2Q4LzAvNzEwNTRFM0MwMkUyMkQ2MDdBOTBGQUNDNERFNzM2 OUI2NTM2N0VCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCAq7xEpXac6WRGEFCBTBkbNuQ+SWjy0ReL xN2c1QZq5hryqz/eFPsCZODKzN1LEqmvWUodJEpcRaD7eAHeF/lzTm4mukVPhxlZ rzc712dOoBxch5P/z8vYAZxuPIcx6iQ/T7MUKkUaemqXnZhV68OxpjYuCpEdBEu+ C28tYwQhvSxUYpO9f7mssE7CB3wHA6/N833gl+Vf8yvIQs6LUCuYeBSBh+nJGO+X iNQGQ7QX8rXMCuhmM1ZcItiwiJP9zkwbMzaqrEtCzFcwSUcmwC+g+qVV4Klhdq9d sZuONV7k+XfnGK7L2sr55GLV/bQm2I3TM8za9cNPjJ6KphJonlk= -----END CERTIFICATE-----Generated at Mon Oct 20 09:23:28 2025 by rpki-client