$ rpki-client -vvf repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft File: 71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft (raw, json) Hash identifier: V6sbzN4bH6IEAvDV5Q3mMLh+SUutact4v/2Y0R6jibM= Subject key identifier: 54:09:75:03:EA:3D:A9:56:C7:1A:AD:D5:87:C8:11:01:17:62:8D:6F Authority key identifier: 71:FC:3F:7B:27:22:F6:A1:5C:55:7F:63:F8:F4:95:A9:CD:BC:A9:D7 Certificate issuer: /CN=71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7 Certificate serial: 3BA852BB683FBFDEC1BA67E630F1E41584D3D6FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft Manifest number: 0516 Signing time: Sun 19 Oct 2025 04:21:29 +0000 Manifest this update: Sun 19 Oct 2025 04:16:29 +0000 Manifest next update: Wed 22 Oct 2025 11:51:29 +0000 Files and hashes: 1: 71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl (hash: uQLIHZHNvtuzpGSBgscnyssIUODgd7EXRdGq+d73uHg=) 2: 3130332e3134372e38322e302f32342d3234203d3e20313339393538.roa (hash: vC4SL0uw9D8xmCXitMGfoUsUZzvLg4me8B5U0xhWjR0=) 3: 3130332e3134372e38332e302f32342d3234203d3e20313339393538.roa (hash: +BIBQAINF/5Qw6Z/inMjF3BgXwfPJiU1L7MDXOLb6hY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 11:51:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:a8:52:bb:68:3f:bf:de:c1:ba:67:e6:30:f1:e4:15:84:d3:d6:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7 Validity Not Before: Oct 19 04:16:29 2025 GMT Not After : Oct 22 11:51:29 2025 GMT Subject: CN=54097503EA3DA956C71AADD587C8110117628D6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6b:17:b0:38:d4:8d:42:8e:f4:f3:57:2e:89: a6:50:4e:94:9b:4d:34:9c:3c:f5:ce:12:a3:da:97: 43:79:36:c4:c4:48:81:3e:68:c2:5b:28:32:5f:52: 45:9b:e0:36:11:0d:c3:02:2e:94:22:b2:d5:95:88: 3d:c2:60:ca:7b:98:f1:35:79:ad:bd:6f:64:c1:08: 67:cd:a3:a2:e1:73:b0:59:10:24:9e:50:dc:55:77: c7:88:d6:d5:2c:a5:46:4f:76:c3:3a:5a:41:2c:c8: ae:e9:6f:ea:b0:1a:09:89:b8:48:06:3a:69:20:06: 68:3c:1c:26:9d:e2:90:8d:32:dd:2d:da:b8:bc:14: 2b:ca:59:f9:0d:08:c5:9c:93:82:29:e9:2b:af:18: 10:ce:61:5f:05:a6:c7:ee:af:47:2c:27:52:85:be: 7c:9d:d0:03:e8:c8:65:34:3d:1d:ed:b1:5f:0d:00: 03:e6:d1:d8:8e:fb:eb:ed:af:27:73:81:14:b1:b2: 76:14:91:c4:d5:97:5b:c9:27:e4:0e:82:a1:3c:5e: 59:2d:17:30:74:33:c0:a4:c6:1b:f4:cd:5b:4a:2f: af:c4:e9:83:de:8e:79:aa:fe:c2:e3:6a:f2:61:3f: 48:34:db:e5:2e:51:1a:33:ed:98:91:10:b2:5b:1b: 41:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:09:75:03:EA:3D:A9:56:C7:1A:AD:D5:87:C8:11:01:17:62:8D:6F X509v3 Authority Key Identifier: keyid:71:FC:3F:7B:27:22:F6:A1:5C:55:7F:63:F8:F4:95:A9:CD:BC:A9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ce:6d:b7:53:93:e8:2a:f3:22:38:eb:c6:ba:0f:9e:79:da: 87:3c:9d:b7:af:52:dd:5e:c8:6f:ae:a2:7a:8c:29:08:fc:84: b8:a8:59:b6:e0:7c:43:23:b9:00:6b:4a:10:c0:fe:55:53:83: 7e:42:f1:69:1a:5a:2a:52:e8:d3:b2:06:36:58:cd:9a:98:ce: dd:39:1f:c6:61:f3:3a:35:e3:6c:a5:f4:30:f2:9f:02:1c:d9: 60:42:2a:e3:7a:85:aa:7c:ee:8f:86:ba:ad:87:8d:bb:dd:de: 7a:56:ff:ef:fa:f3:94:e6:e0:6d:b1:1d:a1:81:55:96:fb:a7: b8:95:eb:aa:3d:52:65:96:74:a9:90:ec:bb:66:79:59:cf:88: 68:95:8d:5c:56:b6:29:a1:8c:ef:a2:5c:83:4f:59:6b:52:57: 14:cc:aa:32:5f:d5:4a:10:c6:ba:84:9a:84:b5:68:96:67:02: 85:aa:92:e2:57:e9:ce:0e:12:fc:86:8d:d3:a2:d5:03:80:63: 36:c6:c7:71:e7:68:5e:72:46:54:81:26:a2:d9:00:77:da:78: 30:5d:0c:bc:9b:e1:74:c4:25:08:d9:b8:1e:bb:aa:ca:e7:fa: 94:9e:b5:fa:37:4a:e1:32:94:0a:f3:22:5c:da:e8:44:43:1d: f2:30:b7:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO6hSu2g/v97BumfmMPHkFYTT1vwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1QTlD REJDQTlENzAeFw0yNTEwMTkwNDE2MjlaFw0yNTEwMjIxMTUxMjlaMDMxMTAvBgNV BAMTKDU0MDk3NTAzRUEzREE5NTZDNzFBQURENTg3QzgxMTAxMTc2MjhENkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSaxewONSNQo7081cuiaZQTpSb TTScPPXOEqPal0N5NsTESIE+aMJbKDJfUkWb4DYRDcMCLpQistWViD3CYMp7mPE1 ea29b2TBCGfNo6Lhc7BZECSeUNxVd8eI1tUspUZPdsM6WkEsyK7pb+qwGgmJuEgG OmkgBmg8HCad4pCNMt0t2ri8FCvKWfkNCMWck4Ip6SuvGBDOYV8Fpsfur0csJ1KF vnyd0APoyGU0PR3tsV8NAAPm0diO++vtrydzgRSxsnYUkcTVl1vJJ+QOgqE8Xlkt FzB0M8Ckxhv0zVtKL6/E6YPejnmq/sLjavJhP0g02+UuURoz7ZiRELJbG0HNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVAl1A+o9qVbHGq3Vh8gRARdijW8wHwYDVR0j BBgwFoAUcfw/eyci9qFcVX9j+PSVqc28qdcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWE1YWM2NS02MDcxLTQ2ZTItYmI5ZC1kNzcwZDExN2M0YjQvMC83MUZDM0Y3QjI3 MjJGNkExNUM1NTdGNjNGOEY0OTVBOUNEQkNBOUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1QTlDREJD QTlENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFhNWFjNjUtNjA3MS00NmUyLWJi OWQtZDc3MGQxMTdjNGI0LzAvNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1 QTlDREJDQTlENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJbObbdTk+gq8yI468a6D5552oc8nbevUt1e yG+uonqMKQj8hLioWbbgfEMjuQBrShDA/lVTg35C8WkaWipS6NOyBjZYzZqYzt05 H8Zh8zo142yl9DDynwIc2WBCKuN6hap87o+Guq2Hjbvd3npW/+/685Tm4G2xHaGB VZb7p7iV66o9UmWWdKmQ7LtmeVnPiGiVjVxWtimhjO+iXINPWWtSVxTMqjJf1UoQ xrqEmoS1aJZnAoWqkuJX6c4OEvyGjdOi1QOAYzbGx3HnaF5yRlSBJqLZAHfaeDBd DLyb4XTEJQjZuB67qsrn+pSetfo3SuEylArzIlza6ERDHfIwt0I= -----END CERTIFICATE-----Generated at Mon Oct 20 07:13:12 2025 by rpki-client