$ rpki-client -vvf repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft File: 71876CD3DD087E9543A347F614A4D24A87A40F95.mft (raw, json) Hash identifier: dEMmDsv3JylperZOzkTtXJaXUnQgyoSpTTfxlAgN+us= Subject key identifier: 2C:35:6B:98:5C:0C:B9:F6:88:69:AA:F3:0E:43:DE:53:4C:78:85:FD Authority key identifier: 71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95 Certificate issuer: /CN=71876CD3DD087E9543A347F614A4D24A87A40F95 Certificate serial: 199EE759FFC0E01279A5FD39EE23733D1554C152 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft Manifest number: 01C3 Signing time: Sun 19 Oct 2025 00:40:47 +0000 Manifest this update: Sun 19 Oct 2025 00:35:47 +0000 Manifest next update: Wed 22 Oct 2025 11:11:47 +0000 Files and hashes: 1: 3130332e3135382e3133302e302f32342d3234203d3e20313431313238.roa (hash: V2nbf4Xerdo+UlaGtEEFCDfKfKUg2cbilII6qfqHQqs=) 2: 71876CD3DD087E9543A347F614A4D24A87A40F95.crl (hash: nTOO/2BW1n8bNALduD9QNQ1dr2BTW+1Of66l4eamskU=) 3: 3130332e3130372e3230362e302f32342d3234203d3e20313431313238.roa (hash: ci5I/MxrgoJ1rfjV0dWp5xS5P0hJgjy6xXmWTHTwpMQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 11:11:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:9e:e7:59:ff:c0:e0:12:79:a5:fd:39:ee:23:73:3d:15:54:c1:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71876CD3DD087E9543A347F614A4D24A87A40F95 Validity Not Before: Oct 19 00:35:47 2025 GMT Not After : Oct 22 11:11:47 2025 GMT Subject: CN=2C356B985C0CB9F68869AAF30E43DE534C7885FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e7:bb:6e:e0:17:7d:6c:25:4e:10:76:e8:3f: ff:76:e7:47:44:2e:80:85:44:14:c1:9e:09:44:35: 1d:6e:51:3d:c4:93:97:55:07:d4:bb:ea:dd:a3:99: 24:92:b1:5c:0d:fd:30:43:ae:b7:be:d0:cc:be:b6: d4:39:c9:c3:0f:0e:d9:0b:d1:c8:6b:7a:1b:39:96: 30:80:b3:97:f1:70:e5:77:67:47:1a:e0:4d:e2:5d: b0:3c:e7:ee:a2:b2:a9:98:bc:c9:90:fb:59:a4:c2: 17:a7:5f:ec:2f:c8:3c:84:a8:72:19:e1:5c:98:46: ad:25:64:da:3b:5f:46:d7:5d:dc:38:3e:35:36:b9: 9e:7d:80:a8:3e:ca:18:b3:d4:e7:69:7a:df:6f:7c: 48:78:08:6c:b2:c5:c8:fc:07:9d:d5:94:58:93:4d: 49:b9:4d:69:97:1f:d3:bb:f8:d8:cd:a8:3c:51:c1: 58:d6:79:2d:cb:76:bf:af:70:cf:61:26:8d:b7:50: f4:53:2f:dc:a0:d1:ae:c9:e3:2e:9b:5b:ad:d0:6e: 61:9b:e3:7b:cd:72:60:be:4d:5c:c6:4b:14:ff:4b: 89:e6:7f:9b:0d:a3:57:20:3d:29:99:40:ed:37:56: b9:c9:9b:8c:3e:51:ba:c0:9e:d9:80:31:bf:3f:8d: de:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:35:6B:98:5C:0C:B9:F6:88:69:AA:F3:0E:43:DE:53:4C:78:85:FD X509v3 Authority Key Identifier: keyid:71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:de:f4:87:00:15:0f:e1:ff:cd:23:ff:71:9d:20:ee:63:3a: 15:b0:05:f9:0d:d9:e8:a9:da:d7:76:f7:b8:a5:4f:1c:7d:3a: b5:0a:f4:2a:96:a7:07:df:96:c8:b7:e9:8c:36:6c:77:ee:9b: 33:2b:03:97:a7:fa:a7:2c:42:a4:31:6a:d7:a0:24:bf:4b:ce: 9f:d6:e0:c9:46:bd:24:d3:e4:1a:d4:b8:fd:47:2c:2c:eb:37: 72:bb:2d:34:18:7f:7a:fe:2d:f3:0f:0c:bf:3d:36:5a:39:68: 04:b8:a2:91:a0:54:c9:55:7f:43:0b:99:39:4b:1b:21:37:ad: 4f:81:86:e6:15:44:ea:97:31:6c:19:18:a2:39:cd:b8:c6:e9: 78:a2:15:c8:28:5c:ad:a1:d6:5d:62:2f:7c:5e:3a:18:82:93: 96:ac:49:6e:ce:a5:f4:8b:53:10:cf:ff:63:bc:f2:57:3d:b0: e2:ce:95:2c:82:14:46:95:5f:8b:56:3a:2d:e5:a1:ed:13:31: 2f:7e:04:5b:3e:30:00:7a:1a:cf:61:97:8f:57:cd:bb:03:60: 56:fd:3b:c2:b6:e7:c3:d0:16:a1:db:d4:73:2f:aa:b7:88:82: f0:f8:d1:51:f8:42:89:8b:fd:8d:45:18:6f:7f:97:0f:70:cb: 78:6e:48:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGZ7nWf/A4BJ5pf057iNzPRVUwVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4 N0E0MEY5NTAeFw0yNTEwMTkwMDM1NDdaFw0yNTEwMjIxMTExNDdaMDMxMTAvBgNV BAMTKDJDMzU2Qjk4NUMwQ0I5RjY4ODY5QUFGMzBFNDNERTUzNEM3ODg1RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj57tu4Bd9bCVOEHboP/9250dE LoCFRBTBnglENR1uUT3Ek5dVB9S76t2jmSSSsVwN/TBDrre+0My+ttQ5ycMPDtkL 0chrehs5ljCAs5fxcOV3Z0ca4E3iXbA85+6isqmYvMmQ+1mkwhenX+wvyDyEqHIZ 4VyYRq0lZNo7X0bXXdw4PjU2uZ59gKg+yhiz1Odpet9vfEh4CGyyxcj8B53VlFiT TUm5TWmXH9O7+NjNqDxRwVjWeS3Ldr+vcM9hJo23UPRTL9yg0a7J4y6bW63QbmGb 43vNcmC+TVzGSxT/S4nmf5sNo1cgPSmZQO03VrnJm4w+UbrAntmAMb8/jd6zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULDVrmFwMufaIaarzDkPeU0x4hf0wHwYDVR0j BBgwFoAUcYds090IfpVDo0f2FKTSSoekD5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWRlY2E4Mi04OWFiLTQ1ODItOGU4Mi04ZWM4YTUxZmVjNDIvMC83MTg3NkNEM0RE MDg3RTk1NDNBMzQ3RjYxNEE0RDI0QTg3QTQwRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4N0E0 MEY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTVkZWNhODItODlhYi00NTgyLThl ODItOGVjOGE1MWZlYzQyLzAvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQy NEE4N0E0MEY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL/e9IcAFQ/h/80j/3GdIO5jOhWwBfkN2eip 2td297ilTxx9OrUK9CqWpwfflsi36Yw2bHfumzMrA5en+qcsQqQxategJL9Lzp/W 4MlGvSTT5BrUuP1HLCzrN3K7LTQYf3r+LfMPDL89Nlo5aAS4opGgVMlVf0MLmTlL GyE3rU+BhuYVROqXMWwZGKI5zbjG6XiiFcgoXK2h1l1iL3xeOhiCk5asSW7OpfSL UxDP/2O88lc9sOLOlSyCFEaVX4tWOi3loe0TMS9+BFs+MAB6Gs9hl49XzbsDYFb9 O8K258PQFqHb1HMvqreIgvD40VH4QomL/Y1FGG9/lw9wy3huSKk= -----END CERTIFICATE-----Generated at Mon Oct 20 09:23:20 2025 by rpki-client