$ rpki-client -vvf repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft File: 708351A7D650085780AA7D6B77F317953F16F999.mft (raw, json) Hash identifier: KXsLdOQ4l4z0fu+m0o0dAR9cj/DL4aNI72uXdrOkdhg= Subject key identifier: 4E:EB:D0:F6:FA:06:EA:D9:E1:3D:C1:AD:2E:C3:7F:0B:DB:1E:3A:76 Authority key identifier: 70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99 Certificate issuer: /CN=708351A7D650085780AA7D6B77F317953F16F999 Certificate serial: 4EEAEB9D83DCA9E7B83837C7C9E1917CA11E8E96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft Manifest number: 01AE Signing time: Sun 02 Nov 2025 08:40:44 +0000 Manifest this update: Sun 02 Nov 2025 08:35:44 +0000 Manifest next update: Wed 05 Nov 2025 18:11:44 +0000 Files and hashes: 1: 3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa (hash: 0UTf1+BQXj8Ras4zkWL/wgGnY3awXAg7yXF2OUkmNfo=) 2: 708351A7D650085780AA7D6B77F317953F16F999.crl (hash: hO4kZdzzb0KSNaUrLoqPoHM9yBrtscZsFRqnUkbUQ3Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:ea:eb:9d:83:dc:a9:e7:b8:38:37:c7:c9:e1:91:7c:a1:1e:8e:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708351A7D650085780AA7D6B77F317953F16F999 Validity Not Before: Nov 2 08:35:44 2025 GMT Not After : Nov 5 18:11:44 2025 GMT Subject: CN=4EEBD0F6FA06EAD9E13DC1AD2EC37F0BDB1E3A76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:02:6f:de:09:7f:ae:b7:87:e6:04:fd:b7:7b: 7a:c7:01:16:17:ec:4a:21:9d:92:c7:f9:72:c2:49: e4:69:2f:a3:45:41:40:bf:e8:08:db:18:dc:56:62: 38:75:cf:8d:26:4e:20:20:c9:d7:31:36:37:f2:35: 20:c4:8a:38:66:b0:70:78:42:b8:63:f9:db:90:cc: 43:f4:0d:23:59:c0:44:0a:0f:8d:90:ec:9a:a2:62: cf:f3:e7:63:48:d9:60:f8:ed:60:28:af:0b:ad:64: 52:d0:1b:df:09:bc:d6:79:fe:ed:3a:f9:e8:ce:2b: 4f:96:6b:0f:17:b1:d3:f1:ae:04:b7:3a:b5:7e:f7: cf:c6:d0:02:30:ea:15:6b:18:66:52:52:fd:7c:e3: 51:bd:af:8e:c0:b3:55:55:d7:13:d2:b7:5d:26:2b: cc:11:1c:be:a6:44:e0:61:96:e3:0c:37:18:59:c1: d3:4d:2f:9f:0d:80:a8:29:65:00:b3:c3:f4:5a:d0: 09:25:d7:3d:49:d8:40:f4:58:4d:61:3c:92:8e:8a: fa:41:b5:8a:98:0d:d0:86:77:30:70:3d:fa:fa:67: b1:e7:60:e9:ed:60:fa:01:69:f8:39:4a:56:2d:8f: 5f:f6:fb:d7:27:cc:45:80:a9:04:08:6d:e9:c6:a9: e8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EB:D0:F6:FA:06:EA:D9:E1:3D:C1:AD:2E:C3:7F:0B:DB:1E:3A:76 X509v3 Authority Key Identifier: keyid:70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:e2:1a:c3:89:4b:f8:76:8b:34:2f:86:7e:d5:47:f5:0d:8f: 0b:b6:67:8d:33:9e:b3:66:ad:63:34:a6:e3:98:ef:b1:57:92: ac:67:d9:01:36:dd:3d:07:ec:af:c7:78:e7:3d:50:c3:f4:f3: f4:25:13:b2:69:4c:ba:04:bb:ae:a2:ce:b4:5b:b1:b4:bc:ad: f9:ed:9d:24:20:40:50:82:f7:c0:f1:a4:94:f8:02:4f:fe:9a: fb:0a:97:23:85:28:07:da:96:7f:7e:45:b8:fe:cb:6a:ec:58: dd:f4:35:02:3d:0a:17:07:dd:ad:99:5a:43:b3:de:09:5b:5d: 56:26:d5:c5:f6:5f:b5:ab:51:39:2e:a8:81:e1:7e:29:13:a1: e4:b3:89:88:36:6f:af:21:03:58:f8:09:c5:6a:55:fa:dd:2d: c7:d7:f4:d3:e5:59:9c:8b:a3:0e:17:b8:cf:09:68:55:8b:08: fc:f9:45:f8:2d:00:75:1c:fb:6b:56:16:5e:fa:3a:d5:7e:c7: e2:79:68:67:99:75:b4:13:da:a4:70:de:01:89:39:ce:79:6c: 95:b7:e7:21:ec:e2:ec:3c:c2:10:5e:7f:5b:4a:25:5e:df:6c: d4:2a:f2:2c:49:9e:2e:0b:58:14:07:7f:ac:e8:43:f5:a4:fc: 30:8d:f2:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTurrnYPcqee4ODfHyeGRfKEejpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3OTUz RjE2Rjk5OTAeFw0yNTExMDIwODM1NDRaFw0yNTExMDUxODExNDRaMDMxMTAvBgNV BAMTKDRFRUJEMEY2RkEwNkVBRDlFMTNEQzFBRDJFQzM3RjBCREIxRTNBNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlAm/eCX+ut4fmBP23e3rHARYX 7EohnZLH+XLCSeRpL6NFQUC/6AjbGNxWYjh1z40mTiAgydcxNjfyNSDEijhmsHB4 Qrhj+duQzEP0DSNZwEQKD42Q7JqiYs/z52NI2WD47WAorwutZFLQG98JvNZ5/u06 +ejOK0+Waw8XsdPxrgS3OrV+98/G0AIw6hVrGGZSUv1841G9r47As1VV1xPSt10m K8wRHL6mROBhluMMNxhZwdNNL58NgKgpZQCzw/Ra0Akl1z1J2ED0WE1hPJKOivpB tYqYDdCGdzBwPfr6Z7HnYOntYPoBafg5SlYtj1/2+9cnzEWAqQQIbenGqeghAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTuvQ9voG6tnhPcGtLsN/C9seOnYwHwYDVR0j BBgwFoAUcINRp9ZQCFeAqn1rd/MXlT8W+ZkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWUwZDE3Yy1lZGQxLTQyMDItYjczNi0zYjUyN2VmYTZiYTIvMC83MDgzNTFBN0Q2 NTAwODU3ODBBQTdENkI3N0YzMTc5NTNGMTZGOTk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3OTUzRjE2 Rjk5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFlMGQxN2MtZWRkMS00MjAyLWI3 MzYtM2I1MjdlZmE2YmEyLzAvNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3 OTUzRjE2Rjk5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHfiGsOJS/h2izQvhn7VR/UNjwu2Z40znrNm rWM0puOY77FXkqxn2QE23T0H7K/HeOc9UMP08/QlE7JpTLoEu66izrRbsbS8rfnt nSQgQFCC98DxpJT4Ak/+mvsKlyOFKAfaln9+Rbj+y2rsWN30NQI9ChcH3a2ZWkOz 3glbXVYm1cX2X7WrUTkuqIHhfikToeSziYg2b68hA1j4CcVqVfrdLcfX9NPlWZyL ow4XuM8JaFWLCPz5RfgtAHUc+2tWFl76OtV+x+J5aGeZdbQT2qRw3gGJOc55bJW3 5yHs4uw8whBef1tKJV7fbNQq8ixJni4LWBQHf6zoQ/Wk/DCN8jc= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:38 2025 by rpki-client