$ rpki-client -vvf repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft File: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft (raw, json) Hash identifier: wodKOx9QVV/Ezlx8lrqckFBXe7M4Lr6F2A5WrsAMAnI= Subject key identifier: 77:6B:68:8B:3D:6E:A0:E8:0B:EB:CA:E1:6C:BD:66:3B:B7:A3:2F:C5 Authority key identifier: A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB Certificate issuer: /CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Certificate serial: 0C3F7F692AA9D3C1766D355C97C342DA86755EC4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft Manifest number: C8 Signing time: Tue 04 Nov 2025 07:40:57 +0000 Manifest this update: Tue 04 Nov 2025 07:35:57 +0000 Manifest next update: Fri 07 Nov 2025 16:10:57 +0000 Files and hashes: 1: 3136302e32302e33362e302f32332d3234203d3e20313532373631.roa (hash: e3Ye+8KBt0e+GgLTg5uGXR8hoI4RqWYobVVv7ZziGMY=) 2: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl (hash: Uj9bL0yTekaerJ1IwTXRwECd5hrQSkAntKrKJaOS03A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 16:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:3f:7f:69:2a:a9:d3:c1:76:6d:35:5c:97:c3:42:da:86:75:5e:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Validity Not Before: Nov 4 07:35:57 2025 GMT Not After : Nov 7 16:10:57 2025 GMT Subject: CN=776B688B3D6EA0E80BEBCAE16CBD663BB7A32FC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:86:3e:24:64:a6:c1:67:06:54:da:7a:18:08: ae:61:c3:a6:fa:4c:62:f0:f2:ca:86:12:bc:6c:33: 0c:ad:46:35:e1:82:0a:45:39:45:43:4a:9c:ac:86: 2d:1f:fe:24:e7:54:46:9b:83:9b:69:32:5d:18:66: f8:f9:28:ce:80:70:9a:0c:a0:4b:b0:19:3e:3c:2d: 8b:32:1b:3e:9a:0e:5e:1a:8c:c9:a9:a6:62:bc:5f: 33:79:d0:84:71:d0:c2:be:8d:38:de:82:6d:1e:19: 26:2c:a9:8d:6c:80:72:73:9c:83:35:06:bf:3f:4a: ac:b5:e1:27:87:fb:c8:7f:12:bf:96:7e:e2:ff:34: 01:22:2e:6d:b4:f9:7a:3c:1d:1e:91:9e:57:ea:cf: 8a:5f:bf:7b:2b:f6:e6:b9:be:fe:86:3d:66:ac:b1: 89:dc:3b:05:ca:7b:d0:2c:b0:40:fa:dc:7a:62:67: 3e:7e:df:1c:42:d4:f7:bc:5f:cf:cf:0e:6c:77:c7: 08:dd:67:85:de:9a:98:8f:49:28:b8:c8:77:ff:0b: 47:33:5d:38:1c:90:d5:b8:e6:06:90:61:3c:d4:9c: 3d:4f:ee:46:28:07:6c:bd:73:fd:07:18:97:9d:fa: 70:14:e8:f4:19:7b:14:55:0f:c6:45:e9:6d:fe:dd: c4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:6B:68:8B:3D:6E:A0:E8:0B:EB:CA:E1:6C:BD:66:3B:B7:A3:2F:C5 X509v3 Authority Key Identifier: keyid:A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:9e:aa:97:d0:a3:92:2b:4a:d1:65:da:e6:e2:55:3c:fe:01: bf:98:90:a9:c9:da:e1:76:0d:f8:35:91:26:fb:f3:8d:b0:69: a9:20:58:6f:ff:e7:e8:fd:a5:2d:ba:00:62:d6:f1:96:91:0a: 90:82:93:b7:a5:d0:a1:09:ad:1e:1a:11:31:81:44:2f:2b:5d: d2:09:80:8f:7c:cc:29:ea:8d:90:95:7f:f8:f1:59:0c:de:8e: 37:d8:24:6a:67:3a:44:2d:0a:45:11:52:80:39:94:7f:9a:bf: 7e:a8:ed:19:85:10:c1:de:d8:2a:52:48:98:b8:88:d0:31:bc: 8b:54:3a:4c:9a:12:fc:d8:93:6c:b3:16:94:10:be:41:87:2c: eb:e9:ce:71:ab:23:ca:5b:f1:1e:ad:08:3f:47:84:7c:ad:d0: bd:b2:57:0e:48:12:98:d9:04:16:77:f6:11:db:1c:85:73:e4: 46:81:64:d8:39:a0:50:57:8f:25:97:d5:1d:af:ab:08:aa:ae: c9:ed:04:23:22:60:46:63:0b:d2:7f:54:6a:bb:8b:a9:52:9c: 99:b0:57:35:74:14:49:63:d3:1b:1f:f8:b0:b0:1f:e8:07:e0: e8:8e:5f:34:7b:81:1b:51:85:fe:bc:78:f3:ae:27:3a:05:e1: d1:83:bb:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDD9/aSqp08F2bTVcl8NC2oZ1XsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1 RTUyRThFQjAeFw0yNTExMDQwNzM1NTdaFw0yNTExMDcxNjEwNTdaMDMxMTAvBgNV BAMTKDc3NkI2ODhCM0Q2RUEwRTgwQkVCQ0FFMTZDQkQ2NjNCQjdBMzJGQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCshj4kZKbBZwZU2noYCK5hw6b6 TGLw8sqGErxsMwytRjXhggpFOUVDSpyshi0f/iTnVEabg5tpMl0YZvj5KM6AcJoM oEuwGT48LYsyGz6aDl4ajMmppmK8XzN50IRx0MK+jTjegm0eGSYsqY1sgHJznIM1 Br8/Sqy14SeH+8h/Er+WfuL/NAEiLm20+Xo8HR6Rnlfqz4pfv3sr9ua5vv6GPWas sYncOwXKe9AssED63HpiZz5+3xxC1Pe8X8/PDmx3xwjdZ4XempiPSSi4yHf/C0cz XTgckNW45gaQYTzUnD1P7kYoB2y9c/0HGJed+nAU6PQZexRVD8ZF6W3+3cTbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd2toiz1uoOgL68rhbL1mO7ejL8UwHwYDVR0j BBgwFoAUpxuqZmI4R7e9nqfEC8vKhV5S6OswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODFlZjQ0MC01YTVmLTRhNGYtYjUwOS1iMTAzMjQ1YzVjZjEvMC9BNzFCQUE2NjYy Mzg0N0I3QkQ5RUE3QzQwQkNCQ0E4NTVFNTJFOEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1RTUy RThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgxZWY0NDAtNWE1Zi00YTRmLWI1 MDktYjEwMzI0NWM1Y2YxLzAvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNB ODU1RTUyRThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImeqpfQo5IrStFl2ubiVTz+Ab+YkKnJ2uF2 Dfg1kSb7842waakgWG//5+j9pS26AGLW8ZaRCpCCk7el0KEJrR4aETGBRC8rXdIJ gI98zCnqjZCVf/jxWQzejjfYJGpnOkQtCkURUoA5lH+av36o7RmFEMHe2CpSSJi4 iNAxvItUOkyaEvzYk2yzFpQQvkGHLOvpznGrI8pb8R6tCD9HhHyt0L2yVw5IEpjZ BBZ39hHbHIVz5EaBZNg5oFBXjyWX1R2vqwiqrsntBCMiYEZjC9J/VGq7i6lSnJmw VzV0FElj0xsf+LCwH+gH4OiOXzR7gRtRhf68ePOuJzoF4dGDu1g= -----END CERTIFICATE-----Generated at Wed Nov 5 10:36:27 2025 by rpki-client