$ rpki-client -vvf repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft File: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft (raw, json) Hash identifier: dZB1Q6hjD36Q3BUJakPZxZKZJeuo59QPWycC76tl0C0= Subject key identifier: CF:BC:58:23:C0:6B:41:95:F4:4D:E6:07:CF:D8:9F:E6:30:56:3E:94 Authority key identifier: 71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 Certificate issuer: /CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Certificate serial: 3331CB712DB7D50AA4F5E4A7115E91C4FAB584B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft Manifest number: 03D9 Signing time: Tue 04 Nov 2025 03:31:11 +0000 Manifest this update: Tue 04 Nov 2025 03:26:11 +0000 Manifest next update: Fri 07 Nov 2025 13:09:11 +0000 Files and hashes: 1: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl (hash: n/24rfWzvhB0C7aX9h16jLYRmQ/iWw2e8Wv6u+rj8CA=) 2: 3130332e3130372e3138372e302f32342d3234203d3e20313337333030.roa (hash: KKxu3hPM0InDJZ99FC0Xq3EDadMAbvI+i8LW1aPaZ8E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:31:cb:71:2d:b7:d5:0a:a4:f5:e4:a7:11:5e:91:c4:fa:b5:84:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Validity Not Before: Nov 4 03:26:11 2025 GMT Not After : Nov 7 13:09:11 2025 GMT Subject: CN=CFBC5823C06B4195F44DE607CFD89FE630563E94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2a:76:47:bd:ca:3e:84:9f:0a:d5:ac:c7:e3: fc:23:bc:a1:bd:04:fc:45:b3:ef:68:17:04:2e:d4: 60:74:1d:d7:d9:55:1f:4c:c2:c7:ab:3b:7b:53:05: 9d:ed:1e:e4:d9:68:28:79:37:95:66:81:22:13:4b: 77:23:fa:b7:e9:b9:89:f9:fb:2a:de:f3:2e:6b:04: de:39:6a:ce:72:77:27:f7:d0:0e:e0:2e:c4:8e:3c: 13:80:34:e1:f4:6b:88:d9:3c:e3:35:94:b9:8c:86: 79:0f:ed:66:21:06:8b:3a:9c:fb:37:0d:a7:52:f4: 71:4b:6e:e2:3b:f4:d9:5b:8b:ee:b2:bc:e6:cd:15: f0:5b:02:59:6f:c9:86:d7:32:58:cb:90:12:79:50: 32:2f:79:52:63:f1:d1:48:61:d7:ba:9e:2e:7c:a2: 1a:d0:e4:4f:c5:5d:e1:89:03:5f:37:9b:9d:0f:b2: e2:79:28:25:c8:c8:1f:d1:4c:e7:2a:9a:ef:a0:dd: b6:e2:9f:3b:b0:c4:9c:89:36:35:5b:b1:0d:07:6b: bd:f1:74:cd:17:6c:ff:2f:db:97:ca:1d:08:f6:1c: 33:1b:18:7e:cd:0c:23:d4:62:51:30:6f:0a:2b:40: 65:a0:79:e9:82:13:43:2c:c6:14:47:eb:0f:d4:26: bd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BC:58:23:C0:6B:41:95:F4:4D:E6:07:CF:D8:9F:E6:30:56:3E:94 X509v3 Authority Key Identifier: keyid:71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:fe:26:d4:74:ab:5b:de:97:cb:4a:0b:f6:a3:1c:a8:7a:06: 92:99:da:d3:3e:98:68:28:b4:a2:84:27:b9:06:0c:d1:e8:85: 0f:4f:7c:bb:41:1f:45:23:e8:96:f2:9c:85:6e:d7:45:50:bc: 2b:3c:13:8e:ab:01:f4:66:cc:1c:2e:2a:e8:82:c7:40:40:66: 0e:70:0e:96:80:de:6b:b9:b1:5d:88:f2:f9:42:3d:29:5b:e5: 2d:05:89:01:b4:b8:80:e7:f4:86:80:32:46:4e:4a:d2:f3:c4: 4c:0d:1a:64:b8:10:6f:3e:ee:34:82:b8:55:80:87:14:90:dc: 41:c7:6c:57:67:af:1f:0f:bd:85:41:50:af:6b:fc:87:e1:24: 3c:8f:18:ef:db:50:6f:f6:c7:71:6b:67:9a:15:c9:96:d3:78: ae:c4:7c:79:40:1f:01:8f:23:41:6e:a8:7f:a6:fd:f1:a3:c4: 98:63:db:8a:c7:ea:45:e0:46:42:e6:02:8d:ad:15:59:87:24: f8:3a:bc:21:63:20:33:7c:2c:39:91:1b:05:16:5a:8d:1b:1d: 18:9e:d8:e8:de:d6:97:2f:07:5d:da:ac:a6:56:b2:88:29:77: 4f:62:d4:d6:0f:6a:96:dc:e5:1e:dd:a8:3b:b8:41:ce:b9:76: ac:c5:8b:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMzHLcS231Qqk9eSnEV6RxPq1hLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2 QzlCNzJFMjAeFw0yNTExMDQwMzI2MTFaFw0yNTExMDcxMzA5MTFaMDMxMTAvBgNV BAMTKENGQkM1ODIzQzA2QjQxOTVGNDRERTYwN0NGRDg5RkU2MzA1NjNFOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9KnZHvco+hJ8K1azH4/wjvKG9 BPxFs+9oFwQu1GB0HdfZVR9MwserO3tTBZ3tHuTZaCh5N5VmgSITS3cj+rfpuYn5 +yre8y5rBN45as5ydyf30A7gLsSOPBOANOH0a4jZPOM1lLmMhnkP7WYhBos6nPs3 DadS9HFLbuI79Nlbi+6yvObNFfBbAllvyYbXMljLkBJ5UDIveVJj8dFIYde6ni58 ohrQ5E/FXeGJA183m50PsuJ5KCXIyB/RTOcqmu+g3bbinzuwxJyJNjVbsQ0Ha73x dM0XbP8v25fKHQj2HDMbGH7NDCPUYlEwbworQGWgeemCE0MsxhRH6w/UJr0tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz7xYI8BrQZX0TeYHz9if5jBWPpQwHwYDVR0j BBgwFoAUceUam2XYoSNROjUPDZn5jWybcuIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDQ4YmQwNC1mNzg3LTQxNGEtYTUwMS01MTM4YTZkNmIzZTEvMC83MUU1MUE5QjY1 RDhBMTIzNTEzQTM1MEYwRDk5Rjk4RDZDOUI3MkUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2QzlC NzJFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ0OGJkMDQtZjc4Ny00MTRhLWE1 MDEtNTEzOGE2ZDZiM2UxLzAvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5 OEQ2QzlCNzJFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMb+JtR0q1vel8tKC/ajHKh6BpKZ2tM+mGgo tKKEJ7kGDNHohQ9PfLtBH0Uj6JbynIVu10VQvCs8E46rAfRmzBwuKuiCx0BAZg5w DpaA3mu5sV2I8vlCPSlb5S0FiQG0uIDn9IaAMkZOStLzxEwNGmS4EG8+7jSCuFWA hxSQ3EHHbFdnrx8PvYVBUK9r/IfhJDyPGO/bUG/2x3FrZ5oVyZbTeK7EfHlAHwGP I0FuqH+m/fGjxJhj24rH6kXgRkLmAo2tFVmHJPg6vCFjIDN8LDmRGwUWWo0bHRie 2Oje1pcvB13arKZWsogpd09i1NYPapbc5R7dqDu4Qc65dqzFi/Q= -----END CERTIFICATE-----Generated at Wed Nov 5 23:06:43 2025 by rpki-client