$ rpki-client -vvf repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft File: 41071AAF0C0E6BD84877680334B4F604B4B4E786.mft (raw, json) Hash identifier: J9sCRimw8spHVcBVvUOQk/+2TkBISsgPjXeLbbvgUuc= Subject key identifier: D8:D0:F7:C1:FE:E5:17:69:8F:64:FC:13:5D:0B:FA:63:2A:7C:39:E3 Authority key identifier: 41:07:1A:AF:0C:0E:6B:D8:48:77:68:03:34:B4:F6:04:B4:B4:E7:86 Certificate issuer: /CN=41071AAF0C0E6BD84877680334B4F604B4B4E786 Certificate serial: 624867AC5F0FA2D637DA0E3D2A06365754F0B52F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft Manifest number: 0216 Signing time: Mon 03 Nov 2025 15:52:11 +0000 Manifest this update: Mon 03 Nov 2025 15:47:11 +0000 Manifest next update: Thu 06 Nov 2025 22:02:11 +0000 Files and hashes: 1: 41071AAF0C0E6BD84877680334B4F604B4B4E786.crl (hash: 3PjSj3l8gAal9Aaj17GrY1aDixbmSiMDqwU/HjElSHk=) 2: 3130332e3136372e322e302f32342d3234203d3e20313431393637.roa (hash: S3FgE0+gcaLyx6nH2zsRG+Hi0BgVRkLf/ndGC4F7z/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.crl rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 22:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:48:67:ac:5f:0f:a2:d6:37:da:0e:3d:2a:06:36:57:54:f0:b5:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41071AAF0C0E6BD84877680334B4F604B4B4E786 Validity Not Before: Nov 3 15:47:11 2025 GMT Not After : Nov 6 22:02:11 2025 GMT Subject: CN=D8D0F7C1FEE517698F64FC135D0BFA632A7C39E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1b:15:d0:51:eb:83:23:64:81:a5:ed:28:27: 33:b0:f1:bb:88:fc:3d:1a:30:0f:cd:fb:76:9c:f0: d1:28:b3:ad:4b:7e:c4:31:b2:4c:36:bb:a0:a6:f9: c4:1c:02:1a:45:4d:3b:2f:9c:bb:81:a7:00:74:19: 06:93:cc:83:69:7e:2b:0f:36:d9:4f:6d:e7:b9:43: f0:88:5e:a9:66:5c:b8:36:da:f7:4f:4c:10:55:1e: 4c:b2:0e:ad:8b:aa:e1:d5:25:fa:30:65:cb:a4:e1: 2c:a0:7b:16:84:f5:07:97:4a:d2:d8:55:45:62:fc: ab:b6:08:e4:ae:a6:54:eb:52:15:d2:8e:0b:0d:fc: bc:49:1b:1b:85:95:ec:69:11:c4:6f:c3:48:8e:53: 90:b3:8a:59:57:a3:4e:1e:53:b6:f7:fb:d8:c1:62: b5:10:73:34:ad:e5:0b:33:86:b8:1e:90:43:e2:4a: b1:49:0e:c5:31:53:65:1c:3e:cf:2f:9f:04:30:7e: a0:b7:b3:0c:cc:4c:f0:3e:4a:c6:07:29:2a:64:ce: d0:d3:d8:79:c1:69:a9:50:1f:52:df:71:91:2b:7e: 17:df:9a:b9:3d:8b:66:8d:66:8b:0b:c2:de:cb:cf: ab:3a:5f:0b:96:87:d0:10:ac:93:0a:dc:7f:f0:6f: 3c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D0:F7:C1:FE:E5:17:69:8F:64:FC:13:5D:0B:FA:63:2A:7C:39:E3 X509v3 Authority Key Identifier: keyid:41:07:1A:AF:0C:0E:6B:D8:48:77:68:03:34:B4:F6:04:B4:B4:E7:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:1e:98:1f:2d:96:74:46:01:64:20:24:b8:8c:6a:32:cf:15: 7b:d7:a5:35:a9:d8:30:f7:97:d9:08:e6:3b:8d:93:f4:7b:b7: eb:62:32:ff:6f:ee:34:42:a7:65:45:cb:52:65:72:ca:3a:3d: 4e:e0:e4:8e:18:86:48:d1:54:a3:5e:af:2b:b4:f4:9a:4a:67: 7d:70:67:97:b3:41:ff:76:a2:c0:66:57:cf:28:2d:7b:78:6f: 71:1b:7c:c4:99:66:9c:1c:8c:a9:ab:f3:47:2c:90:af:2a:64: b4:85:ad:18:9e:c2:3e:15:eb:2a:ba:7c:75:ce:04:b8:78:a6: 6e:27:27:3f:78:71:60:03:d8:13:09:3a:48:ef:ce:0d:a6:07: 10:97:82:dc:ac:f7:11:a0:4a:b5:48:b7:91:17:54:84:de:2b: 94:6a:fd:1a:f5:b7:fa:7d:83:c6:37:9f:15:b9:87:d2:63:2c: 41:6c:92:87:90:e8:b6:bf:40:d9:0e:87:ca:23:b5:c2:86:11: 73:7b:b9:03:c4:6d:a1:87:29:53:d7:db:4e:63:5e:a4:e1:00: d2:4e:85:16:a9:c5:e2:dd:3c:8b:0f:54:04:46:41:e1:7b:22: e0:64:12:81:35:40:e9:23:e5:2a:54:5b:09:c7:dc:f6:80:7a: b4:90:ae:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYkhnrF8PotY32g49KgY2V1TwtS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDEwNzFBQUYwQzBFNkJEODQ4Nzc2ODAzMzRCNEY2MDRC NEI0RTc4NjAeFw0yNTExMDMxNTQ3MTFaFw0yNTExMDYyMjAyMTFaMDMxMTAvBgNV BAMTKEQ4RDBGN0MxRkVFNTE3Njk4RjY0RkMxMzVEMEJGQTYzMkE3QzM5RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7GxXQUeuDI2SBpe0oJzOw8buI /D0aMA/N+3ac8NEos61LfsQxskw2u6Cm+cQcAhpFTTsvnLuBpwB0GQaTzINpfisP NtlPbee5Q/CIXqlmXLg22vdPTBBVHkyyDq2LquHVJfowZcuk4SygexaE9QeXStLY VUVi/Ku2COSuplTrUhXSjgsN/LxJGxuFlexpEcRvw0iOU5CzillXo04eU7b3+9jB YrUQczSt5QszhrgekEPiSrFJDsUxU2UcPs8vnwQwfqC3swzMTPA+SsYHKSpkztDT 2HnBaalQH1LfcZErfhffmrk9i2aNZosLwt7Lz6s6XwuWh9AQrJMK3H/wbzydAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2ND3wf7lF2mPZPwTXQv6Yyp8OeMwHwYDVR0j BBgwFoAUQQcarwwOa9hId2gDNLT2BLS054YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTI3YjNlMS1mNjExLTRhZmUtOWE0OS01ZmE0ZmQ1NTc2NTMvMC80MTA3MUFBRjBD MEU2QkQ4NDg3NzY4MDMzNEI0RjYwNEI0QjRFNzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDEwNzFBQUYwQzBFNkJEODQ4Nzc2ODAzMzRCNEY2MDRCNEI0 RTc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2UyN2IzZTEtZjYxMS00YWZlLTlh NDktNWZhNGZkNTU3NjUzLzAvNDEwNzFBQUYwQzBFNkJEODQ4Nzc2ODAzMzRCNEY2 MDRCNEI0RTc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsemB8tlnRGAWQgJLiMajLPFXvXpTWp2DD3 l9kI5juNk/R7t+tiMv9v7jRCp2VFy1Jlcso6PU7g5I4YhkjRVKNeryu09JpKZ31w Z5ezQf92osBmV88oLXt4b3EbfMSZZpwcjKmr80cskK8qZLSFrRiewj4V6yq6fHXO BLh4pm4nJz94cWAD2BMJOkjvzg2mBxCXgtys9xGgSrVIt5EXVITeK5Rq/Rr1t/p9 g8Y3nxW5h9JjLEFskoeQ6La/QNkOh8ojtcKGEXN7uQPEbaGHKVPX205jXqThANJO hRapxeLdPIsPVARGQeF7IuBkEoE1QOkj5SpUWwnH3PaAerSQrkY= -----END CERTIFICATE-----Generated at Wed Nov 5 05:50:25 2025 by rpki-client