$ rpki-client -vvf repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft File: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft (raw, json) Hash identifier: z34/0NAUi78+0Z1Slg9yCPxj00+ufWb4osFYmgEaxwc= Subject key identifier: 46:E1:1C:26:90:EB:6F:EF:BE:62:6D:40:60:1F:1F:8D:42:BE:15:FA Authority key identifier: 71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 Certificate issuer: /CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Certificate serial: 74200F39C208EC72F3B9FFB8F21740EBA7DE1AFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft Manifest number: 03D2 Signing time: Sun 19 Oct 2025 03:01:11 +0000 Manifest this update: Sun 19 Oct 2025 02:56:11 +0000 Manifest next update: Wed 22 Oct 2025 12:58:11 +0000 Files and hashes: 1: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl (hash: 113B9qf44hOnaIKvSvG0wktTMHZrQ23L+G0h13YULl4=) 2: 3130332e3130372e3138372e302f32342d3234203d3e20313337333030.roa (hash: KKxu3hPM0InDJZ99FC0Xq3EDadMAbvI+i8LW1aPaZ8E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 12:58:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:20:0f:39:c2:08:ec:72:f3:b9:ff:b8:f2:17:40:eb:a7:de:1a:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Validity Not Before: Oct 19 02:56:11 2025 GMT Not After : Oct 22 12:58:11 2025 GMT Subject: CN=46E11C2690EB6FEFBE626D40601F1F8D42BE15FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:dc:bc:71:91:fb:1d:bf:38:44:e3:58:32:9e: a0:75:31:e6:2e:b3:01:aa:58:78:83:55:62:b4:62: da:89:31:da:b6:89:5a:74:c0:74:d6:1a:e7:f0:b1: 66:72:ae:07:9d:a1:be:f1:0f:f5:39:90:07:5a:00: c6:58:d2:d8:18:21:0e:c7:83:62:a7:80:d9:54:68: 6e:c4:25:12:0d:e3:fe:f0:b8:2e:63:2e:a2:b6:eb: 52:f5:61:f3:87:7a:25:c1:53:9f:6c:aa:27:b1:fd: 4b:b2:fd:b6:f3:5f:21:c4:11:a7:bb:f2:30:95:f6: 67:c4:af:4a:25:7f:82:79:58:77:34:d3:74:5d:47: 90:07:9b:cf:d0:35:60:bc:03:36:e9:be:94:fb:6e: 1c:3a:e5:d7:2a:a7:da:00:c5:5b:e1:66:aa:11:b1: 4d:ca:78:0a:fd:f8:f2:49:85:79:a1:41:96:f0:4c: 06:67:b9:43:f2:4e:cc:d3:34:e6:37:a6:3e:75:3a: bc:83:45:c7:a1:95:88:d3:54:fe:9a:9f:ab:b9:7c: ff:e8:74:5e:6c:a0:d3:94:a3:9a:c7:cb:4b:bc:87: 98:ae:bd:51:ef:0a:42:f0:3d:da:ac:7d:02:ac:57: a2:1a:df:15:8c:31:83:64:a0:6b:cd:db:54:57:96: c1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E1:1C:26:90:EB:6F:EF:BE:62:6D:40:60:1F:1F:8D:42:BE:15:FA X509v3 Authority Key Identifier: keyid:71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:aa:d9:ed:c1:07:5c:dc:7d:42:21:ed:b6:f8:06:fa:d5:65: b2:a3:dd:a6:05:d9:f9:16:d3:c3:8e:43:53:f9:d9:23:ee:33: 1b:fa:cc:0c:13:ee:62:df:cc:9f:c8:ac:f1:a8:0a:4c:18:1e: ac:77:0e:7a:4b:eb:1d:2e:f2:9e:32:c0:79:9a:bc:9a:09:89: d2:bd:8d:a2:97:ad:ca:92:a3:68:97:0e:85:d9:99:52:76:c5: 8c:43:73:30:00:25:98:d5:04:ea:1c:85:e0:3a:68:7c:2c:65: c6:a1:12:fb:1f:7d:11:a4:0e:53:5a:25:48:c8:07:e5:60:ec: b8:92:dd:44:48:47:81:a8:28:73:1f:e3:0b:d1:2c:1d:85:ab: 6d:22:7f:b3:5d:99:07:36:0b:f4:3c:e8:e0:18:01:58:d9:85: 77:8e:56:b1:3b:ea:b6:f4:7b:d7:45:30:1e:9a:fc:65:79:04: 4d:a7:22:68:3c:08:9b:54:c8:f9:e4:98:12:1e:35:25:de:85: 33:2e:68:24:03:db:6b:c7:6f:16:43:10:5e:3e:65:7f:c0:ba: 6f:53:4a:db:e9:da:80:eb:0e:89:89:fd:2a:a9:13:67:84:75: 4d:1b:a9:1e:c5:e5:59:2e:28:17:4a:7f:ed:d2:40:71:c0:f1: b4:c3:3e:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdCAPOcII7HLzuf+48hdA66feGvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2 QzlCNzJFMjAeFw0yNTEwMTkwMjU2MTFaFw0yNTEwMjIxMjU4MTFaMDMxMTAvBgNV BAMTKDQ2RTExQzI2OTBFQjZGRUZCRTYyNkQ0MDYwMUYxRjhENDJCRTE1RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN3LxxkfsdvzhE41gynqB1MeYu swGqWHiDVWK0YtqJMdq2iVp0wHTWGufwsWZyrgedob7xD/U5kAdaAMZY0tgYIQ7H g2KngNlUaG7EJRIN4/7wuC5jLqK261L1YfOHeiXBU59sqiex/Uuy/bbzXyHEEae7 8jCV9mfEr0olf4J5WHc003RdR5AHm8/QNWC8AzbpvpT7bhw65dcqp9oAxVvhZqoR sU3KeAr9+PJJhXmhQZbwTAZnuUPyTszTNOY3pj51OryDRcehlYjTVP6an6u5fP/o dF5soNOUo5rHy0u8h5iuvVHvCkLwPdqsfQKsV6Ia3xWMMYNkoGvN21RXlsHXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURuEcJpDrb+++Ym1AYB8fjUK+FfowHwYDVR0j BBgwFoAUceUam2XYoSNROjUPDZn5jWybcuIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDQ4YmQwNC1mNzg3LTQxNGEtYTUwMS01MTM4YTZkNmIzZTEvMC83MUU1MUE5QjY1 RDhBMTIzNTEzQTM1MEYwRDk5Rjk4RDZDOUI3MkUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2QzlC NzJFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ0OGJkMDQtZjc4Ny00MTRhLWE1 MDEtNTEzOGE2ZDZiM2UxLzAvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5 OEQ2QzlCNzJFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMWq2e3BB1zcfUIh7bb4BvrVZbKj3aYF2fkW 08OOQ1P52SPuMxv6zAwT7mLfzJ/IrPGoCkwYHqx3DnpL6x0u8p4ywHmavJoJidK9 jaKXrcqSo2iXDoXZmVJ2xYxDczAAJZjVBOocheA6aHwsZcahEvsffRGkDlNaJUjI B+Vg7LiS3URIR4GoKHMf4wvRLB2Fq20if7NdmQc2C/Q86OAYAVjZhXeOVrE76rb0 e9dFMB6a/GV5BE2nImg8CJtUyPnkmBIeNSXehTMuaCQD22vHbxZDEF4+ZX/Aum9T Stvp2oDrDomJ/SqpE2eEdU0bqR7F5VkuKBdKf+3SQHHA8bTDPkY= -----END CERTIFICATE-----Generated at Mon Oct 20 08:46:07 2025 by rpki-client