$ rpki-client -vvf repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft File: 7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft (raw, json) Hash identifier: pPYwj988ob20+sMzvOsRqwfcfMVQ+imfxlwFA12G2f8= Subject key identifier: DB:43:41:B8:82:05:A1:76:FD:9B:3D:96:DA:F8:28:28:E1:BF:D4:BA Authority key identifier: 72:71:65:5D:63:18:EC:B0:B7:97:B4:6C:6E:CF:BC:3D:D2:E3:25:04 Certificate issuer: /CN=7271655D6318ECB0B797B46C6ECFBC3DD2E32504 Certificate serial: 2CDFA1FC0CE40F204913FC3A375E0E89A9DE0545 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer Subject info access: rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft Manifest number: 25 Signing time: Mon 03 Nov 2025 18:21:27 +0000 Manifest this update: Mon 03 Nov 2025 18:16:27 +0000 Manifest next update: Thu 06 Nov 2025 23:51:27 +0000 Files and hashes: 1: 7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl (hash: +uG12jEMlak+zslASlFclO/LMWqFQUKRbmw4zs90LWQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 23:51:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:df:a1:fc:0c:e4:0f:20:49:13:fc:3a:37:5e:0e:89:a9:de:05:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7271655D6318ECB0B797B46C6ECFBC3DD2E32504 Validity Not Before: Nov 3 18:16:27 2025 GMT Not After : Nov 6 23:51:27 2025 GMT Subject: CN=DB4341B88205A176FD9B3D96DAF82828E1BFD4BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fb:bd:91:14:36:de:61:ff:52:84:c7:74:1c: 28:a3:f5:d8:a9:f7:73:8c:00:81:e2:3f:37:c0:20: 50:cc:23:82:b7:84:e7:af:85:e8:29:ad:4f:69:24: 60:cf:e8:1c:c7:b1:2d:93:41:79:87:2e:99:9b:2e: 7a:96:60:06:10:19:62:ea:ca:b9:5c:e2:b0:5f:0e: 2c:2b:bb:75:2a:25:48:57:9c:d9:5f:3a:96:2d:3a: a1:10:2e:38:99:f1:41:ad:af:d1:d9:8d:ff:40:7e: 8b:ec:3b:0d:1e:e2:f8:1c:09:05:b5:14:23:4d:00: 25:07:db:01:eb:de:cc:21:a4:f6:1b:00:4a:96:16: ef:ac:e6:9e:b4:76:52:b0:f3:fc:3a:c1:8d:a2:6d: 62:e4:dc:67:58:0d:aa:1d:61:f6:b7:51:50:eb:e4: 03:e8:68:56:ef:9b:cd:af:be:18:d9:db:29:d4:75: e2:71:66:05:04:22:56:56:e3:72:44:aa:00:e4:2d: 74:a6:c1:fa:e2:a8:fc:85:08:24:0f:a8:9c:a4:b9: 09:50:8b:04:5c:de:8f:9c:34:1b:80:29:26:d2:20: be:2e:82:eb:bf:7c:0c:1a:6e:81:ff:a8:3b:9a:45: ed:a6:b9:c1:81:24:fc:5b:17:69:29:66:81:bc:4e: 3e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:43:41:B8:82:05:A1:76:FD:9B:3D:96:DA:F8:28:28:E1:BF:D4:BA X509v3 Authority Key Identifier: keyid:72:71:65:5D:63:18:EC:B0:B7:97:B4:6C:6E:CF:BC:3D:D2:E3:25:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:cc:01:5a:04:2e:74:29:c1:96:cc:8c:ee:90:ff:fe:48:de: 78:8a:4b:63:4f:a2:a4:84:e3:3f:6c:62:45:dd:7e:58:f4:47: 60:06:32:ed:c4:6c:6b:02:72:b3:d3:b3:a1:ae:9e:9d:88:49: f1:1c:9b:ba:92:cd:91:06:7b:fe:81:1c:d5:42:ce:65:c5:3e: 7a:47:64:1a:f0:0c:4e:3b:88:3a:df:61:28:d4:3e:a8:26:eb: 25:11:41:2d:3b:ad:4c:0c:18:bb:96:99:66:89:30:e9:51:29: 3d:0b:92:d5:1c:e7:dd:3e:82:0f:48:88:d0:ca:2f:00:e3:f3: f4:d7:dd:fa:b4:f2:8d:ce:c2:ee:1d:c9:c7:e1:e8:b1:e6:be: 0f:09:c4:b5:fd:85:22:d0:a8:49:52:b5:2b:5f:73:04:6c:03: e4:e2:12:5f:7e:65:13:65:de:e0:8a:9a:34:e5:27:dd:f6:02: 03:54:55:6e:b0:07:1e:ef:59:fc:b9:24:7e:66:79:6a:72:ff: 41:76:64:1b:e5:6f:64:17:73:f9:4c:92:3a:cc:a9:5b:82:dc: 68:7b:13:c5:52:5c:dc:87:13:2f:2f:c8:c9:d8:77:24:dd:b5: 1a:7a:67:c7:c6:9f:7a:e7:31:cc:46:5c:41:d5:15:a7:d3:37: 0a:27:0b:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULN+h/AzkDyBJE/w6N14OianeBUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI3MTY1NUQ2MzE4RUNCMEI3OTdCNDZDNkVDRkJDM0RE MkUzMjUwNDAeFw0yNTExMDMxODE2MjdaFw0yNTExMDYyMzUxMjdaMDMxMTAvBgNV BAMTKERCNDM0MUI4ODIwNUExNzZGRDlCM0Q5NkRBRjgyODI4RTFCRkQ0QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk+72RFDbeYf9ShMd0HCij9dip 93OMAIHiPzfAIFDMI4K3hOevhegprU9pJGDP6BzHsS2TQXmHLpmbLnqWYAYQGWLq yrlc4rBfDiwru3UqJUhXnNlfOpYtOqEQLjiZ8UGtr9HZjf9AfovsOw0e4vgcCQW1 FCNNACUH2wHr3swhpPYbAEqWFu+s5p60dlKw8/w6wY2ibWLk3GdYDaodYfa3UVDr 5APoaFbvm82vvhjZ2ynUdeJxZgUEIlZW43JEqgDkLXSmwfriqPyFCCQPqJykuQlQ iwRc3o+cNBuAKSbSIL4uguu/fAwaboH/qDuaRe2mucGBJPxbF2kpZoG8Tj55AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU20NBuIIFoXb9mz2W2vgoKOG/1LowHwYDVR0j BBgwFoAUcnFlXWMY7LC3l7Rsbs+8PdLjJQQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjhkZTkxYi02MzZiLTRkYTQtYjFkMC03MjYzMmNmY2YyMzUvMC83MjcxNjU1RDYz MThFQ0IwQjc5N0I0NkM2RUNGQkMzREQyRTMyNTA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzI3MTY1NUQ2MzE4RUNCMEI3OTdCNDZDNkVDRkJDM0REMkUz MjUwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY4ZGU5MWItNjM2Yi00ZGE0LWIx ZDAtNzI2MzJjZmNmMjM1LzAvNzI3MTY1NUQ2MzE4RUNCMEI3OTdCNDZDNkVDRkJD M0REMkUzMjUwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPMAVoELnQpwZbMjO6Q//5I3niKS2NPoqSE 4z9sYkXdflj0R2AGMu3EbGsCcrPTs6Gunp2ISfEcm7qSzZEGe/6BHNVCzmXFPnpH ZBrwDE47iDrfYSjUPqgm6yURQS07rUwMGLuWmWaJMOlRKT0LktUc590+gg9IiNDK LwDj8/TX3fq08o3Owu4dycfh6LHmvg8JxLX9hSLQqElStStfcwRsA+TiEl9+ZRNl 3uCKmjTlJ932AgNUVW6wBx7vWfy5JH5meWpy/0F2ZBvlb2QXc/lMkjrMqVuC3Gh7 E8VSXNyHEy8vyMnYdyTdtRp6Z8fGn3rnMcxGXEHVFafTNwonC0s= -----END CERTIFICATE-----Generated at Tue Nov 4 02:05:50 2025 by rpki-client