$ rpki-client -vvf repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft File: A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft (raw, json) Hash identifier: qlIZbjH4DtInCqqiiH2gCwLrm0mUYYgGr1wqLjpEWic= Subject key identifier: DE:9E:6B:EF:EB:2F:15:FA:80:BD:D9:28:0F:B5:97:4B:C1:A6:F5:7A Authority key identifier: A2:1B:A7:0D:F8:EE:47:0F:E7:A6:03:85:B6:65:38:42:57:0E:D3:A4 Certificate issuer: /CN=A21BA70DF8EE470FE7A60385B6653842570ED3A4 Certificate serial: 34FFC10CEBFA237062992A01DE087816CEDF0803 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft Manifest number: 70 Signing time: Mon 03 Nov 2025 01:11:19 +0000 Manifest this update: Mon 03 Nov 2025 01:06:19 +0000 Manifest next update: Thu 06 Nov 2025 10:50:19 +0000 Files and hashes: 1: 3136302e32352e3234392e302f32342d3234203d3e20313336303939.roa (hash: fAL9MfqpRcilmiK6cDbN2CreeawZppTYa6tvP1zgN7Y=) 2: A21BA70DF8EE470FE7A60385B6653842570ED3A4.crl (hash: x/vvnE5s2u4yFt1NQC+I8QS6xAxGGS5CZhHOHEU1LY0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.crl rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ff:c1:0c:eb:fa:23:70:62:99:2a:01:de:08:78:16:ce:df:08:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A21BA70DF8EE470FE7A60385B6653842570ED3A4 Validity Not Before: Nov 3 01:06:19 2025 GMT Not After : Nov 6 10:50:19 2025 GMT Subject: CN=DE9E6BEFEB2F15FA80BDD9280FB5974BC1A6F57A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f3:56:c5:97:f4:f3:9c:44:8a:96:cf:c9:02: b3:90:22:ec:40:2f:d2:3c:aa:7a:ee:05:72:b3:d8: 91:8d:43:1b:82:44:63:bf:75:c4:ca:b5:39:8a:86: b6:d8:f1:83:13:38:5b:1b:9b:17:f4:bf:e2:67:89: 43:79:80:90:ed:86:b4:d4:27:f5:06:d9:1d:77:fc: 3d:b1:ed:33:01:ae:a7:94:30:27:ea:c3:21:77:81: a4:ec:0d:fa:a2:5b:c5:fc:c5:4a:ac:8e:a7:50:f8: 44:4a:b0:ba:a3:54:ea:14:49:15:ba:6c:9c:8d:3f: 90:23:5f:d2:7d:3b:ef:74:17:be:9a:08:05:73:84: 07:bb:61:95:9c:eb:6f:35:33:a9:21:2e:a8:01:5d: ec:72:f5:55:a6:60:08:a7:b9:f1:0e:23:d2:26:e3: 5b:80:50:1a:df:09:de:06:1c:ee:91:a5:1e:f1:e7: 6f:27:07:d7:0e:9d:f3:81:76:42:5d:3d:26:36:88: c3:5c:3f:e9:4a:36:de:42:4c:d8:07:06:1b:40:88: 2e:d0:91:f5:20:e6:22:9e:d8:07:91:58:a4:33:b5: c1:36:59:78:33:fc:96:e6:b1:35:63:85:63:24:5c: b5:e9:92:63:1d:5b:19:9e:b1:ee:b2:dd:a3:2e:da: 67:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9E:6B:EF:EB:2F:15:FA:80:BD:D9:28:0F:B5:97:4B:C1:A6:F5:7A X509v3 Authority Key Identifier: keyid:A2:1B:A7:0D:F8:EE:47:0F:E7:A6:03:85:B6:65:38:42:57:0E:D3:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ae:92:22:db:e2:82:25:45:97:d9:94:c1:09:07:f3:74:b5: 79:3f:80:b6:cb:f8:53:00:81:f8:9c:a4:6c:8b:4a:f5:72:95: 9b:8b:f9:de:a4:77:0f:b1:a9:75:35:b6:12:6c:4d:36:52:ab: d3:8e:3b:64:7c:fc:89:75:c6:eb:11:29:fc:42:88:d7:12:38: 40:04:6b:71:6c:3a:7c:b3:f3:46:b5:1b:6e:c3:72:4d:d5:7c: 35:a6:3a:08:03:ce:10:2d:45:cb:fa:79:33:bb:4b:e5:e9:4a: 87:df:91:8a:d6:21:34:38:6c:a5:59:69:1b:78:6a:e5:bf:4e: 70:43:d3:d0:eb:61:7f:d4:33:87:22:1b:32:f5:95:8b:3d:e4: b6:14:0f:70:11:51:a3:2c:05:ab:be:35:97:4f:bd:8b:51:e6: e9:d4:8a:71:f4:c2:99:f9:f6:83:b2:07:e1:ee:26:f1:89:44: f8:aa:7c:63:08:59:32:21:7a:a8:d2:4c:2b:8a:56:36:d0:fd: 9e:3a:1f:f7:fe:51:05:13:66:17:ee:0a:48:48:77:f9:3c:80: 00:b9:6f:61:ba:31:d1:25:41:59:e7:2b:31:b1:3d:20:b0:45: 48:f7:b2:c7:5d:1d:11:b8:09:85:72:41:35:ab:d9:fe:e7:01: fd:fd:ae:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNP/BDOv6I3BimSoB3gh4Fs7fCAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIxQkE3MERGOEVFNDcwRkU3QTYwMzg1QjY2NTM4NDI1 NzBFRDNBNDAeFw0yNTExMDMwMTA2MTlaFw0yNTExMDYxMDUwMTlaMDMxMTAvBgNV BAMTKERFOUU2QkVGRUIyRjE1RkE4MEJERDkyODBGQjU5NzRCQzFBNkY1N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz81bFl/TznESKls/JArOQIuxA L9I8qnruBXKz2JGNQxuCRGO/dcTKtTmKhrbY8YMTOFsbmxf0v+JniUN5gJDthrTU J/UG2R13/D2x7TMBrqeUMCfqwyF3gaTsDfqiW8X8xUqsjqdQ+ERKsLqjVOoUSRW6 bJyNP5AjX9J9O+90F76aCAVzhAe7YZWc6281M6khLqgBXexy9VWmYAinufEOI9Im 41uAUBrfCd4GHO6RpR7x528nB9cOnfOBdkJdPSY2iMNcP+lKNt5CTNgHBhtAiC7Q kfUg5iKe2AeRWKQztcE2WXgz/JbmsTVjhWMkXLXpkmMdWxmese6y3aMu2mcpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3p5r7+svFfqAvdkoD7WXS8Gm9XowHwYDVR0j BBgwFoAUohunDfjuRw/npgOFtmU4QlcO06QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTQwNTU0NS1jMzVkLTRkZTEtOTYxOC00NGI1ZjQxN2EzMDMvMS9BMjFCQTcwREY4 RUU0NzBGRTdBNjAzODVCNjY1Mzg0MjU3MEVEM0E0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTIxQkE3MERGOEVFNDcwRkU3QTYwMzg1QjY2NTM4NDI1NzBF RDNBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE0MDU1NDUtYzM1ZC00ZGUxLTk2 MTgtNDRiNWY0MTdhMzAzLzEvQTIxQkE3MERGOEVFNDcwRkU3QTYwMzg1QjY2NTM4 NDI1NzBFRDNBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqukiLb4oIlRZfZlMEJB/N0tXk/gLbL+FMA gficpGyLSvVylZuL+d6kdw+xqXU1thJsTTZSq9OOO2R8/Il1xusRKfxCiNcSOEAE a3FsOnyz80a1G27Dck3VfDWmOggDzhAtRcv6eTO7S+XpSoffkYrWITQ4bKVZaRt4 auW/TnBD09DrYX/UM4ciGzL1lYs95LYUD3ARUaMsBau+NZdPvYtR5unUinH0wpn5 9oOyB+HuJvGJRPiqfGMIWTIheqjSTCuKVjbQ/Z46H/f+UQUTZhfuCkhId/k8gAC5 b2G6MdElQVnnKzGxPSCwRUj3ssddHRG4CYVyQTWr2f7nAf39ruk= -----END CERTIFICATE-----Generated at Wed Nov 5 04:14:52 2025 by rpki-client