$ rpki-client -vvf repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft File: A70723C87D2C27B95BE6227C631E7D85EF89D513.mft (raw, json) Hash identifier: waaih2YtfjU4wT9dIEsqqvqsNZbz3PArKU+AI+NT7fE= Subject key identifier: 98:44:02:E9:70:FA:97:DD:76:DF:D5:5F:57:F8:FB:4A:58:D2:B2:B8 Authority key identifier: A7:07:23:C8:7D:2C:27:B9:5B:E6:22:7C:63:1E:7D:85:EF:89:D5:13 Certificate issuer: /CN=A70723C87D2C27B95BE6227C631E7D85EF89D513 Certificate serial: 1E802F8B12DF0C3D448CB049344CFB6DD0540E13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft Manifest number: 051D Signing time: Sun 02 Nov 2025 20:20:54 +0000 Manifest this update: Sun 02 Nov 2025 20:15:54 +0000 Manifest next update: Thu 06 Nov 2025 04:55:54 +0000 Files and hashes: 1: A70723C87D2C27B95BE6227C631E7D85EF89D513.crl (hash: jTqQz+53J7+oujhYkEGFZ4YDczq0cDUlYfVFQpcSB+A=) 2: 3130332e34382e3132382e302f32322d3234203d3e203633383631.roa (hash: QAI5cYTeOrxvcausPsC1CnYV2kULdBh9ytAc4ZJZoM0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.crl rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:80:2f:8b:12:df:0c:3d:44:8c:b0:49:34:4c:fb:6d:d0:54:0e:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A70723C87D2C27B95BE6227C631E7D85EF89D513 Validity Not Before: Nov 2 20:15:54 2025 GMT Not After : Nov 6 04:55:54 2025 GMT Subject: CN=984402E970FA97DD76DFD55F57F8FB4A58D2B2B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b4:49:c4:17:a3:22:80:3f:da:60:8a:d8:6b: 65:c9:dd:dd:d0:49:d2:2c:12:3b:3d:5f:42:24:5a: 4a:50:02:2d:fb:41:6c:8a:a5:fc:77:26:f3:73:51: 6d:5b:f3:09:18:a2:77:5a:1d:5f:7f:96:d9:b4:4a: f7:ff:81:8e:d6:fa:cc:61:17:79:8a:c3:d2:8b:98: 16:23:80:c8:04:28:a9:a7:0b:63:91:65:57:81:73: 80:02:93:68:e2:f1:79:3b:7e:29:5d:34:25:02:13: 2c:4d:f2:b7:e6:56:2e:c2:54:9e:01:95:f5:3e:1a: 4b:da:88:a2:ff:d2:fb:e5:0c:6f:f3:39:e4:30:3e: 20:73:d7:16:0e:88:61:c6:06:a5:26:bd:e8:75:da: 9c:82:46:32:4f:dc:87:fb:3e:b9:ba:ae:ee:05:4a: 4c:c9:a2:e6:63:5f:e1:60:68:c9:35:7b:8d:79:ec: 2c:12:cd:65:85:6d:ab:f9:b6:27:d3:c5:5d:57:1d: 04:a1:e6:92:f1:a0:bf:9a:3b:a8:34:c5:3a:72:6e: 64:c7:b7:65:3f:54:97:90:bc:28:c5:b1:33:e9:b6: a9:8f:e4:5b:51:4a:8b:b5:f3:e3:ef:67:1a:5c:24: 41:48:51:a4:e5:6d:2d:03:fc:4d:a4:7d:cf:c9:5a: b0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:44:02:E9:70:FA:97:DD:76:DF:D5:5F:57:F8:FB:4A:58:D2:B2:B8 X509v3 Authority Key Identifier: keyid:A7:07:23:C8:7D:2C:27:B9:5B:E6:22:7C:63:1E:7D:85:EF:89:D5:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:6a:75:10:1c:b4:77:8b:ee:39:e6:15:4c:e7:57:41:f1:18: 82:3c:33:66:af:5a:80:a2:4b:2b:f0:8e:3d:7c:72:70:a3:96: 46:72:7d:5b:fe:bc:82:c5:9e:58:c4:ce:b0:41:a3:1f:73:46: 17:1c:94:4d:9c:b2:31:0b:5e:a1:f2:23:cb:d4:03:72:23:75: 9c:91:54:4f:d9:6b:a4:6d:83:52:4f:48:5b:51:2c:a8:95:e6: af:83:48:cc:b2:51:52:4b:d5:d2:13:7f:45:91:e4:6f:dd:bf: 17:17:ff:7c:b7:5e:eb:15:28:5c:5f:99:3b:ef:86:31:ac:7e: cc:bb:41:ec:e3:69:dd:71:35:98:66:15:f9:2e:98:18:e9:d1: f6:0d:8a:38:79:fd:b5:2b:e9:d6:18:d7:41:36:8a:54:ba:da: 92:a3:57:41:7d:5d:20:bd:90:e6:7c:96:9d:8b:41:68:fa:e7: 2d:26:9c:43:74:66:9d:62:8e:b0:53:c9:3b:ec:75:cd:64:05: 21:26:b7:49:1e:ed:91:bf:a7:28:49:90:7d:5b:47:6c:1c:93: f7:f6:d9:7e:ea:61:d7:dd:ae:d0:da:4a:6d:05:88:18:fd:b9: 85:02:f1:d8:3d:d4:a1:ea:11:0a:e2:2e:56:67:2f:3b:e9:c2: a4:58:2c:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHoAvixLfDD1EjLBJNEz7bdBUDhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdEODVF Rjg5RDUxMzAeFw0yNTExMDIyMDE1NTRaFw0yNTExMDYwNDU1NTRaMDMxMTAvBgNV BAMTKDk4NDQwMkU5NzBGQTk3REQ3NkRGRDU1RjU3RjhGQjRBNThEMkIyQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTtEnEF6MigD/aYIrYa2XJ3d3Q SdIsEjs9X0IkWkpQAi37QWyKpfx3JvNzUW1b8wkYondaHV9/ltm0Svf/gY7W+sxh F3mKw9KLmBYjgMgEKKmnC2ORZVeBc4ACk2ji8Xk7fildNCUCEyxN8rfmVi7CVJ4B lfU+GkvaiKL/0vvlDG/zOeQwPiBz1xYOiGHGBqUmveh12pyCRjJP3If7Prm6ru4F SkzJouZjX+FgaMk1e4157CwSzWWFbav5tifTxV1XHQSh5pLxoL+aO6g0xTpybmTH t2U/VJeQvCjFsTPptqmP5FtRSou18+PvZxpcJEFIUaTlbS0D/E2kfc/JWrA7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmEQC6XD6l91239VfV/j7SljSsrgwHwYDVR0j BBgwFoAUpwcjyH0sJ7lb5iJ8Yx59he+J1RMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjcwOTA0NC01NzE4LTRmMWQtYTZkMC04NzY2ZWE3M2VhZjQvMC9BNzA3MjNDODdE MkMyN0I5NUJFNjIyN0M2MzFFN0Q4NUVGODlENTEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdEODVFRjg5 RDUxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MDkwNDQtNTcxOC00ZjFkLWE2 ZDAtODc2NmVhNzNlYWY0LzAvQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdE ODVFRjg5RDUxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdqdRActHeL7jnmFUznV0HxGII8M2avWoCi Syvwjj18cnCjlkZyfVv+vILFnljEzrBBox9zRhcclE2csjELXqHyI8vUA3IjdZyR VE/Za6Rtg1JPSFtRLKiV5q+DSMyyUVJL1dITf0WR5G/dvxcX/3y3XusVKFxfmTvv hjGsfsy7Qezjad1xNZhmFfkumBjp0fYNijh5/bUr6dYY10E2ilS62pKjV0F9XSC9 kOZ8lp2LQWj65y0mnEN0Zp1ijrBTyTvsdc1kBSEmt0ke7ZG/pyhJkH1bR2wck/f2 2X7qYdfdrtDaSm0FiBj9uYUC8dg91KHqEQriLlZnLzvpwqRYLOI= -----END CERTIFICATE-----Generated at Tue Nov 4 12:39:47 2025 by rpki-client