$ rpki-client -vvf repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft File: F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft (raw, json) Hash identifier: 6D9V9ZcFD5kf/Hf8nmDSTuf2swNlCBLbkmzl+CRO2DY= Subject key identifier: F6:C7:75:DB:89:C0:C9:9F:BC:0A:17:A2:85:77:6A:3A:36:8D:26:DE Authority key identifier: F7:1A:5E:A4:A4:63:A0:15:DB:17:D3:29:23:D3:F4:31:A6:F2:0F:62 Certificate issuer: /CN=F71A5EA4A463A015DB17D32923D3F431A6F20F62 Certificate serial: 647A4B33B4E7ED1116C062C7CA3FEB8741D5171B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft Manifest number: 01BF Signing time: Tue 04 Nov 2025 01:01:46 +0000 Manifest this update: Tue 04 Nov 2025 00:56:46 +0000 Manifest next update: Fri 07 Nov 2025 02:42:46 +0000 Files and hashes: 1: F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl (hash: lnHuUzT7VEVz1LCE614Taz2aGQ11ieFgWHC/OWv2yos=) 2: 3130332e37352e36362e302f32332d3234203d3e20313530353231.roa (hash: iletpOTfxixHKxRms6Z2yECRzDZ4SIPJlSYEIU/u2zU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 02:42:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:7a:4b:33:b4:e7:ed:11:16:c0:62:c7:ca:3f:eb:87:41:d5:17:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F71A5EA4A463A015DB17D32923D3F431A6F20F62 Validity Not Before: Nov 4 00:56:46 2025 GMT Not After : Nov 7 02:42:46 2025 GMT Subject: CN=F6C775DB89C0C99FBC0A17A285776A3A368D26DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:51:48:b9:14:ed:62:a1:53:f1:b4:c3:d1:9b: 29:5b:fd:3f:15:ab:c8:7e:2c:5e:2d:96:53:15:c6: 31:eb:5a:1b:d1:fc:c5:21:81:e0:06:e0:3b:a9:df: 3c:6d:7c:6f:16:43:7d:4e:c0:27:ac:10:12:0b:12: e3:98:aa:94:63:80:07:f6:c0:b6:30:7d:33:ea:81: 85:77:67:42:7e:81:fb:3d:b3:a2:0e:de:25:e7:70: 2e:5a:29:5c:50:8b:65:49:92:fb:c4:f5:3e:cb:88: 45:82:b1:e8:ea:ce:50:cd:f5:a1:91:92:c3:73:cf: 1f:32:a3:4c:0d:e0:79:72:b7:4f:d7:31:67:50:92: d4:24:f4:f9:54:74:37:37:84:16:0b:f0:cd:78:14: de:25:e4:87:86:d6:28:f0:1b:39:b8:80:62:3d:d8: 34:7e:44:16:13:d4:70:cd:3c:70:f0:60:4c:af:a5: f3:c5:8b:ce:e1:1f:b2:7d:23:fe:ea:c5:08:cb:ee: 93:03:cb:a4:2d:cb:af:ab:a9:9a:50:89:29:aa:93: be:09:f4:e6:32:18:f4:23:11:90:4e:5d:16:b3:8f: 9d:ae:97:75:b0:a2:bd:94:42:29:b9:da:4d:2b:d6: 78:c9:04:31:6a:2e:18:6a:33:89:13:0b:1e:4d:f4: 61:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C7:75:DB:89:C0:C9:9F:BC:0A:17:A2:85:77:6A:3A:36:8D:26:DE X509v3 Authority Key Identifier: keyid:F7:1A:5E:A4:A4:63:A0:15:DB:17:D3:29:23:D3:F4:31:A6:F2:0F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:54:08:7b:45:ad:b8:b5:55:f7:98:0e:e6:b2:e2:30:4a:06: 05:62:e2:41:e8:21:ae:c4:cf:96:54:67:8d:30:65:6d:10:cd: c6:8d:8f:e3:27:12:bb:73:b4:1e:47:57:b9:49:3a:a2:33:e3: 57:f3:ba:df:21:2d:9c:eb:d8:32:a4:8f:f1:4d:15:43:70:ca: ba:2d:82:2c:8c:0c:e8:1a:f2:61:b0:ac:65:02:dc:ea:3b:f8: ed:15:38:07:21:9f:d7:36:b9:a3:77:da:21:ac:e2:b7:f1:ac: 88:94:7b:b7:1b:8a:c6:34:a3:51:95:4e:30:f5:21:fc:0f:fe: 93:f6:2e:84:5d:28:9d:49:e1:16:4a:d9:95:1b:15:6a:9c:28: 2e:34:6a:a4:c1:9d:8c:98:0a:76:00:5c:18:24:42:fd:9e:73: c6:2a:d1:6c:2f:41:02:67:9f:75:fb:2d:83:28:3f:76:72:a3: b6:0e:3a:d1:80:c9:09:eb:01:a4:b7:f4:d8:d6:8c:21:29:24: 1c:fe:1e:75:13:c4:9e:c6:d8:34:a5:7d:f9:e4:9f:4e:a6:cd: 93:94:7a:70:c7:9c:a5:7c:79:35:3d:98:fc:95:94:e3:b5:52: be:46:0b:8b:6c:49:95:18:90:7b:ba:2b:e0:2d:7b:01:88:4f: 66:4c:eb:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZHpLM7Tn7REWwGLHyj/rh0HVFxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0MzFB NkYyMEY2MjAeFw0yNTExMDQwMDU2NDZaFw0yNTExMDcwMjQyNDZaMDMxMTAvBgNV BAMTKEY2Qzc3NURCODlDMEM5OUZCQzBBMTdBMjg1Nzc2QTNBMzY4RDI2REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClUUi5FO1ioVPxtMPRmylb/T8V q8h+LF4tllMVxjHrWhvR/MUhgeAG4Dup3zxtfG8WQ31OwCesEBILEuOYqpRjgAf2 wLYwfTPqgYV3Z0J+gfs9s6IO3iXncC5aKVxQi2VJkvvE9T7LiEWCsejqzlDN9aGR ksNzzx8yo0wN4Hlyt0/XMWdQktQk9PlUdDc3hBYL8M14FN4l5IeG1ijwGzm4gGI9 2DR+RBYT1HDNPHDwYEyvpfPFi87hH7J9I/7qxQjL7pMDy6Qty6+rqZpQiSmqk74J 9OYyGPQjEZBOXRazj52ul3Wwor2UQim52k0r1njJBDFqLhhqM4kTCx5N9GHjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9sd124nAyZ+8CheihXdqOjaNJt4wHwYDVR0j BBgwFoAU9xpepKRjoBXbF9MpI9P0MabyD2IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2Y3NmM2ZC1mODUwLTRjNDktODU0Yy01NWYzODI4NDRjOTcvMC9GNzFBNUVBNEE0 NjNBMDE1REIxN0QzMjkyM0QzRjQzMUE2RjIwRjYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0MzFBNkYy MEY2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNmNzZjNmQtZjg1MC00YzQ5LTg1 NGMtNTVmMzgyODQ0Yzk3LzAvRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0 MzFBNkYyMEY2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK9UCHtFrbi1VfeYDuay4jBKBgVi4kHoIa7E z5ZUZ40wZW0QzcaNj+MnErtztB5HV7lJOqIz41fzut8hLZzr2DKkj/FNFUNwyrot giyMDOga8mGwrGUC3Oo7+O0VOAchn9c2uaN32iGs4rfxrIiUe7cbisY0o1GVTjD1 IfwP/pP2LoRdKJ1J4RZK2ZUbFWqcKC40aqTBnYyYCnYAXBgkQv2ec8Yq0WwvQQJn n3X7LYMoP3Zyo7YOOtGAyQnrAaS39NjWjCEpJBz+HnUTxJ7G2DSlffnkn06mzZOU enDHnKV8eTU9mPyVlOO1Ur5GC4tsSZUYkHu6K+AtewGIT2ZM6+A= -----END CERTIFICATE-----Generated at Tue Nov 4 18:54:05 2025 by rpki-client