$ rpki-client -vvf repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft File: F71ADE61635D40E729AD7D386CF8F90E391AB884.mft (raw, json) Hash identifier: 8UkCUrgQDxpheiLNpwIWehEIel4VzzE1vY/StdeGEtc= Subject key identifier: D4:67:23:93:1C:82:EB:9D:2A:F1:2C:0D:3F:4B:57:0C:4E:FC:5E:45 Authority key identifier: F7:1A:DE:61:63:5D:40:E7:29:AD:7D:38:6C:F8:F9:0E:39:1A:B8:84 Certificate issuer: /CN=F71ADE61635D40E729AD7D386CF8F90E391AB884 Certificate serial: 187CD64AF695452AC9E0CDE6BF32446F74934CE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft Manifest number: 01C5 Signing time: Mon 03 Nov 2025 02:20:52 +0000 Manifest this update: Mon 03 Nov 2025 02:15:52 +0000 Manifest next update: Thu 06 Nov 2025 04:55:52 +0000 Files and hashes: 1: F71ADE61635D40E729AD7D386CF8F90E391AB884.crl (hash: jj4TkDLjsfrVMSPhTPHvpSKYMD0Lyw5VbhGApSZRsvQ=) 2: 3130332e3134372e3231312e302f32342d3234203d3e20313530353434.roa (hash: 5CmAHoxqMaeNE699lYg+ydVRs8BbrTW2xLv4KFQbvVM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.crl rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:55:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:7c:d6:4a:f6:95:45:2a:c9:e0:cd:e6:bf:32:44:6f:74:93:4c:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F71ADE61635D40E729AD7D386CF8F90E391AB884 Validity Not Before: Nov 3 02:15:52 2025 GMT Not After : Nov 6 04:55:52 2025 GMT Subject: CN=D46723931C82EB9D2AF12C0D3F4B570C4EFC5E45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:84:18:41:ca:fd:7e:27:14:0a:4f:31:5e:dd: da:5e:51:b9:b8:4d:87:5d:c7:9c:c8:73:2c:84:8f: 05:d3:98:44:c2:c5:14:b5:82:14:a5:84:5c:e2:d4: 41:dd:21:74:5a:5f:2b:f3:00:b3:64:2c:5f:02:ab: 17:05:0d:a1:01:60:35:26:e7:ab:01:70:d5:0b:ae: 76:1d:73:15:a3:e1:cc:c4:60:4a:a8:25:3e:1c:b6: c1:f7:ce:ab:40:cb:95:57:d5:11:5e:35:5f:27:bd: b9:56:8f:12:1d:3c:8f:d5:7e:bf:68:3d:bf:4f:7e: 11:00:94:2f:b5:84:73:cf:44:c8:0f:8a:69:60:5a: 97:9b:85:1b:13:05:d5:3a:71:aa:ab:af:f2:2e:22: 4e:21:47:89:73:58:b8:eb:2e:61:eb:8b:e0:ce:19: 22:4a:e3:a8:aa:e1:06:90:f7:b3:6e:71:2b:00:69: 36:14:4b:98:7c:32:e8:3d:f7:c9:12:f2:dc:db:ec: df:56:cd:1e:a3:7f:ff:e2:fe:7a:93:1d:9b:13:8e: ed:3e:bd:16:e0:7c:da:42:48:31:24:21:0b:ab:88: 04:2c:ee:2c:d8:fd:2b:e3:07:fa:ab:7a:a2:fc:60: f0:ac:11:70:b0:aa:d3:83:10:61:1c:14:5b:67:fb: e5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:67:23:93:1C:82:EB:9D:2A:F1:2C:0D:3F:4B:57:0C:4E:FC:5E:45 X509v3 Authority Key Identifier: keyid:F7:1A:DE:61:63:5D:40:E7:29:AD:7D:38:6C:F8:F9:0E:39:1A:B8:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:b9:d8:ed:25:23:3b:65:ca:4c:00:a0:5d:75:51:5f:f9:53: b0:df:2c:e1:46:bc:86:8a:34:23:fd:d1:96:dc:bf:8e:b7:1c: 33:6d:91:7a:56:95:69:8e:20:f8:35:01:05:26:b4:b3:88:53: 14:d8:af:ba:92:7e:56:2d:32:ac:5f:e4:0d:24:29:04:0e:da: 25:48:a3:68:b6:b1:09:e6:9b:cf:ce:54:27:ed:c2:98:bc:35: 70:2b:d1:3f:54:90:ed:83:f0:1f:a8:87:5d:db:00:fa:fe:5b: f1:c8:1a:c0:b4:f6:4c:f9:22:77:08:ad:d7:fd:46:ff:9a:7e: 06:e9:ea:f8:9f:0c:1a:fc:47:9e:e5:82:69:1f:7e:84:32:d9: 5e:ba:38:a2:a4:c5:15:03:ad:28:16:7a:cc:6f:a9:50:3a:8e: e5:fb:65:a0:50:b5:d0:fa:ef:87:94:a3:07:63:10:ae:12:35: fd:11:90:28:0a:31:4e:2c:c0:15:bd:3d:4d:d1:8a:79:66:61: 20:bf:91:ea:f4:df:49:76:47:9e:50:92:5f:ff:78:67:fd:02: ad:84:01:1d:1b:d7:59:06:26:c2:a1:c1:16:cd:b2:36:9b:e1: c2:70:a5:ef:3c:3b:f3:65:ee:b2:c5:ab:46:39:83:9a:a1:c7: d4:75:41:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGHzWSvaVRSrJ4M3mvzJEb3STTOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5MEUz OTFBQjg4NDAeFw0yNTExMDMwMjE1NTJaFw0yNTExMDYwNDU1NTJaMDMxMTAvBgNV BAMTKEQ0NjcyMzkzMUM4MkVCOUQyQUYxMkMwRDNGNEI1NzBDNEVGQzVFNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0hBhByv1+JxQKTzFe3dpeUbm4 TYddx5zIcyyEjwXTmETCxRS1ghSlhFzi1EHdIXRaXyvzALNkLF8CqxcFDaEBYDUm 56sBcNULrnYdcxWj4czEYEqoJT4ctsH3zqtAy5VX1RFeNV8nvblWjxIdPI/Vfr9o Pb9PfhEAlC+1hHPPRMgPimlgWpebhRsTBdU6caqrr/IuIk4hR4lzWLjrLmHri+DO GSJK46iq4QaQ97NucSsAaTYUS5h8Mug998kS8tzb7N9WzR6jf//i/nqTHZsTju0+ vRbgfNpCSDEkIQuriAQs7izY/SvjB/qreqL8YPCsEXCwqtODEGEcFFtn++VTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1GcjkxyC650q8SwNP0tXDE78XkUwHwYDVR0j BBgwFoAU9xreYWNdQOcprX04bPj5DjkauIQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZjBhMmJlYy1mODFhLTRhM2ItYTE0NC0xNzViMTY4ZTIyZmQvMC9GNzFBREU2MTYz NUQ0MEU3MjlBRDdEMzg2Q0Y4RjkwRTM5MUFCODg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5MEUzOTFB Qjg4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWYwYTJiZWMtZjgxYS00YTNiLWEx NDQtMTc1YjE2OGUyMmZkLzAvRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5 MEUzOTFBQjg4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGe52O0lIztlykwAoF11UV/5U7DfLOFGvIaK NCP90Zbcv463HDNtkXpWlWmOIPg1AQUmtLOIUxTYr7qSflYtMqxf5A0kKQQO2iVI o2i2sQnmm8/OVCftwpi8NXAr0T9UkO2D8B+oh13bAPr+W/HIGsC09kz5IncIrdf9 Rv+afgbp6vifDBr8R57lgmkffoQy2V66OKKkxRUDrSgWesxvqVA6juX7ZaBQtdD6 74eUowdjEK4SNf0RkCgKMU4swBW9PU3RinlmYSC/ker030l2R55Qkl//eGf9Aq2E AR0b11kGJsKhwRbNsjab4cJwpe88O/Nl7rLFq0Y5g5qhx9R1QXA= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:06 2025 by rpki-client