$ rpki-client -vvf repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft File: 871B4235DFC56C482416E7BBA192562092FFE055.mft (raw, json) Hash identifier: NCHRtoKoEnSePJrreL00GEF1vd3wzBNnuDvHEHUv4Pw= Subject key identifier: A5:D0:7E:CE:70:C4:0D:41:F7:D2:7A:6A:D3:3A:69:96:7E:20:24:4D Authority key identifier: 87:1B:42:35:DF:C5:6C:48:24:16:E7:BB:A1:92:56:20:92:FF:E0:55 Certificate issuer: /CN=871B4235DFC56C482416E7BBA192562092FFE055 Certificate serial: 0F223755A40D8F68DC2E2C350F45C0E122CA41C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft Manifest number: 010F Signing time: Tue 04 Nov 2025 14:22:10 +0000 Manifest this update: Tue 04 Nov 2025 14:17:10 +0000 Manifest next update: Sat 08 Nov 2025 01:36:10 +0000 Files and hashes: 1: 3135372e32302e39322e302f32342d3234203d3e20313532343037.roa (hash: QrSBRaxGaWU8ZoD0zYmeD1ZaWtynoFSmr/bVUUg5r5E=) 2: 3135372e32302e39332e302f32342d3234203d3e20313532343037.roa (hash: 7xhwBLoxBcZfSoTZvdUTvLkraKKygpQjYGPK+6LQ1oA=) 3: 3135372e32302e39322e302f32332d3233203d3e20313532343037.roa (hash: P7Y8t8QlzVHnPDCRyEAdHrWqFac2Md1CGzVdP33gimk=) 4: 871B4235DFC56C482416E7BBA192562092FFE055.crl (hash: r1NAyI2DBOYs4EAtZUPIQ69g2zGF+NbnuDAb8ikg1zA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.crl rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:22:37:55:a4:0d:8f:68:dc:2e:2c:35:0f:45:c0:e1:22:ca:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871B4235DFC56C482416E7BBA192562092FFE055 Validity Not Before: Nov 4 14:17:10 2025 GMT Not After : Nov 8 01:36:10 2025 GMT Subject: CN=A5D07ECE70C40D41F7D27A6AD33A69967E20244D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:77:ba:0e:9a:3b:c2:1b:b5:01:1c:e2:23:f5: 06:ea:74:72:e2:c3:16:63:a7:09:53:8d:7c:3b:49: d6:82:b3:03:ae:fa:28:56:91:d5:4e:6c:ee:b9:3e: 0d:6f:21:32:e0:f9:de:8a:51:bb:37:4e:19:f9:ec: 62:76:8f:cc:a5:bd:91:37:74:03:43:7c:25:b0:2b: a9:b2:80:10:29:84:cd:05:47:a0:85:ed:b1:e8:66: d9:81:4e:ae:66:c2:3e:6e:cc:4e:7d:ab:b9:04:2a: 53:7a:57:72:0f:62:69:d4:a3:56:cc:9a:1c:ef:04: cd:d7:04:01:ec:eb:a9:e7:ff:7a:e8:e4:64:3c:2e: 90:74:ee:c6:33:47:7e:f1:c8:cf:73:8e:43:5b:64: c2:78:9f:6a:da:f5:4e:c6:30:83:01:9e:c4:06:02: b6:9e:e7:ad:2b:3d:5a:57:59:8b:05:af:34:34:15: 9a:55:fc:78:a2:66:d0:22:45:bd:49:1b:3d:78:23: 84:93:84:37:f9:de:5d:2f:75:94:7b:e1:8b:25:3a: c7:38:4f:89:06:d6:1e:ec:77:ee:a9:b5:93:5c:84: be:fc:25:a7:33:1f:29:45:1e:b9:c2:48:36:83:e7: 07:f5:18:75:b2:14:ba:22:3d:26:b4:61:e2:05:91: b2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D0:7E:CE:70:C4:0D:41:F7:D2:7A:6A:D3:3A:69:96:7E:20:24:4D X509v3 Authority Key Identifier: keyid:87:1B:42:35:DF:C5:6C:48:24:16:E7:BB:A1:92:56:20:92:FF:E0:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:5b:73:8f:c7:25:5d:99:18:b7:55:5b:cc:bc:78:7a:f0:8d: 39:2d:26:c8:49:aa:b0:51:0c:0a:c9:e8:c1:3f:73:0f:87:06: b0:86:de:61:65:e9:e8:ec:92:35:48:eb:69:ee:57:c3:06:49: 64:35:8e:b6:dd:41:7c:c7:fa:9d:d2:94:af:3f:3b:9f:d2:c8: 3d:aa:f5:d1:ce:ad:6e:8b:05:33:25:30:90:f3:2d:ce:eb:fb: 7b:fb:aa:98:34:bf:cb:06:82:85:09:b5:a4:4f:cb:5f:d7:2c: 15:90:92:e5:3f:cf:87:50:ab:00:4a:03:81:69:ee:55:52:a8: 2e:b0:3e:a4:e8:20:8c:79:da:6e:aa:09:1b:dd:40:89:df:56: 1a:32:55:f4:ea:48:69:00:c0:5a:48:38:07:4b:d1:07:27:ac: 4e:1a:ae:ff:58:ab:35:08:d1:e8:07:13:b5:d7:8a:d5:56:39: ec:65:10:43:c0:b1:48:e2:01:e6:b1:db:ed:f7:61:b3:ea:a7: 62:b4:da:0e:1a:f9:60:75:f3:f8:c1:3e:12:4e:e4:9d:ac:8c: 8f:b4:f1:13:63:99:9d:bc:a7:8e:73:69:f2:c9:81:6f:e6:c4: fb:10:77:ad:b6:e4:35:06:67:02:1c:39:74:a4:1d:df:11:14: d2:11:6a:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDyI3VaQNj2jcLiw1D0XA4SLKQcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxQjQyMzVERkM1NkM0ODI0MTZFN0JCQTE5MjU2MjA5 MkZGRTA1NTAeFw0yNTExMDQxNDE3MTBaFw0yNTExMDgwMTM2MTBaMDMxMTAvBgNV BAMTKEE1RDA3RUNFNzBDNDBENDFGN0QyN0E2QUQzM0E2OTk2N0UyMDI0NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUd7oOmjvCG7UBHOIj9QbqdHLi wxZjpwlTjXw7SdaCswOu+ihWkdVObO65Pg1vITLg+d6KUbs3Thn57GJ2j8ylvZE3 dANDfCWwK6mygBAphM0FR6CF7bHoZtmBTq5mwj5uzE59q7kEKlN6V3IPYmnUo1bM mhzvBM3XBAHs66nn/3ro5GQ8LpB07sYzR37xyM9zjkNbZMJ4n2ra9U7GMIMBnsQG Arae560rPVpXWYsFrzQ0FZpV/HiiZtAiRb1JGz14I4SThDf53l0vdZR74YslOsc4 T4kG1h7sd+6ptZNchL78JaczHylFHrnCSDaD5wf1GHWyFLoiPSa0YeIFkbL9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpdB+znDEDUH30npq0zppln4gJE0wHwYDVR0j BBgwFoAUhxtCNd/FbEgkFue7oZJWIJL/4FUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YTg5NmZkYy01NjM4LTQxZDItOGE5OS02OGNlODE2YmQzY2YvMC84NzFCNDIzNURG QzU2QzQ4MjQxNkU3QkJBMTkyNTYyMDkyRkZFMDU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODcxQjQyMzVERkM1NkM0ODI0MTZFN0JCQTE5MjU2MjA5MkZG RTA1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmE4OTZmZGMtNTYzOC00MWQyLThh OTktNjhjZTgxNmJkM2NmLzAvODcxQjQyMzVERkM1NkM0ODI0MTZFN0JCQTE5MjU2 MjA5MkZGRTA1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRbc4/HJV2ZGLdVW8y8eHrwjTktJshJqrBR DArJ6ME/cw+HBrCG3mFl6ejskjVI62nuV8MGSWQ1jrbdQXzH+p3SlK8/O5/SyD2q 9dHOrW6LBTMlMJDzLc7r+3v7qpg0v8sGgoUJtaRPy1/XLBWQkuU/z4dQqwBKA4Fp 7lVSqC6wPqToIIx52m6qCRvdQInfVhoyVfTqSGkAwFpIOAdL0QcnrE4arv9YqzUI 0egHE7XXitVWOexlEEPAsUjiAeax2+33YbPqp2K02g4a+WB18/jBPhJO5J2sjI+0 8RNjmZ28p45zafLJgW/mxPsQd6225DUGZwIcOXSkHd8RFNIRavk= -----END CERTIFICATE-----Generated at Tue Nov 4 19:00:16 2025 by rpki-client