$ rpki-client -vvf repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft File: 71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft (raw, json) Hash identifier: F/h/JcdAk+RITXr3aVwBsfF3ier+5VQ/n7SLL7+wvvo= Subject key identifier: D2:BC:5A:FC:21:E2:C1:15:56:A7:5E:F1:21:96:71:24:F7:D1:DE:20 Authority key identifier: 71:FC:3F:7B:27:22:F6:A1:5C:55:7F:63:F8:F4:95:A9:CD:BC:A9:D7 Certificate issuer: /CN=71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7 Certificate serial: 57CAD705FC6DA849D709C03B2F5669704AF05CE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft Manifest number: 051D Signing time: Tue 04 Nov 2025 06:41:30 +0000 Manifest this update: Tue 04 Nov 2025 06:36:30 +0000 Manifest next update: Fri 07 Nov 2025 16:06:30 +0000 Files and hashes: 1: 71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl (hash: kRfsTgPzsVQ71WSum31TiIPnMHqMzSvLzD2Ono7QTK8=) 2: 3130332e3134372e38322e302f32342d3234203d3e20313339393538.roa (hash: vC4SL0uw9D8xmCXitMGfoUsUZzvLg4me8B5U0xhWjR0=) 3: 3130332e3134372e38332e302f32342d3234203d3e20313339393538.roa (hash: +BIBQAINF/5Qw6Z/inMjF3BgXwfPJiU1L7MDXOLb6hY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ca:d7:05:fc:6d:a8:49:d7:09:c0:3b:2f:56:69:70:4a:f0:5c:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7 Validity Not Before: Nov 4 06:36:30 2025 GMT Not After : Nov 7 16:06:30 2025 GMT Subject: CN=D2BC5AFC21E2C11556A75EF121967124F7D1DE20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a7:28:21:76:01:31:0d:cf:a9:ff:c0:89:81: 27:4f:0e:fa:cc:fb:89:a4:90:a3:11:9e:50:15:34: 7f:d1:69:0b:22:fe:0a:c9:0e:92:0b:c9:f2:9e:cb: 07:b6:3c:b8:34:ab:b2:5a:a9:a9:0a:78:7b:a6:23: ce:c1:58:d7:45:ed:57:13:46:cd:75:40:e7:68:22: 99:fc:b1:7c:a1:00:3a:5a:72:ef:50:b0:83:6e:a8: e7:04:33:f0:cd:3f:92:a4:cf:8a:ca:20:fb:f9:77: 79:c4:6d:b6:d3:29:bc:5f:31:ae:87:5e:e9:67:5e: d5:a8:43:4e:05:c0:09:de:1a:be:76:d0:17:a5:a5: 9d:bd:30:9f:f7:91:77:9b:14:20:39:c1:4c:0d:c8: cd:39:09:2e:8e:11:8a:3c:2b:9e:60:68:66:92:7c: e8:bf:1b:d5:e9:5a:84:31:64:b1:c2:c4:b6:3a:3a: b3:0f:2c:c3:bc:5a:3b:90:06:48:24:73:ca:aa:6f: 56:9f:f9:70:62:6b:28:7e:59:dd:89:c6:d6:d8:8a: 71:02:78:b4:79:d6:ed:aa:52:55:78:56:72:d1:a5: 56:60:6a:79:65:99:47:33:da:c7:9c:03:ed:c3:b5: 8b:18:36:5f:d2:fc:67:b7:f4:01:1c:5d:70:ca:af: f9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BC:5A:FC:21:E2:C1:15:56:A7:5E:F1:21:96:71:24:F7:D1:DE:20 X509v3 Authority Key Identifier: keyid:71:FC:3F:7B:27:22:F6:A1:5C:55:7F:63:F8:F4:95:A9:CD:BC:A9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:ee:76:fb:f8:af:68:c6:a0:d9:30:30:2f:2a:a0:d7:e9:81: d7:b2:c8:53:c0:0a:b0:8e:a0:98:9a:6e:7b:8a:81:2b:1e:f6: 09:49:8a:c6:10:55:11:8c:ae:68:ad:6b:f5:c1:a8:4a:82:06: 0e:4b:bb:8c:4e:73:61:77:2b:ca:94:07:36:a5:52:08:e1:dd: 9e:a3:be:77:53:e5:0b:48:16:ca:9a:83:f2:d0:a8:ec:be:e4: 92:35:46:25:3a:08:ae:69:8b:8c:8b:d9:44:39:86:bc:cd:d5: e1:8b:22:df:31:fe:cc:ff:14:67:84:f1:41:13:53:1c:ec:d4: 76:0c:9a:3a:d2:6a:40:eb:bc:01:ae:d4:b4:d0:87:7c:59:09: a6:18:b1:b5:30:30:4c:d7:4c:37:b0:3f:5d:b0:f2:84:af:b5: 90:94:a6:e0:e3:a5:01:10:05:83:0a:86:17:77:c2:b7:b0:93: 30:67:d3:e2:ad:a9:25:f7:45:a7:56:77:4c:23:bc:c8:90:c3: c2:09:66:ec:a7:c9:e5:b2:97:30:b2:db:57:5b:2b:d3:a0:0d: ff:33:bf:5f:24:73:d8:f4:e5:1d:55:a7:45:58:0b:05:bb:c3: e4:27:28:fc:68:7b:f8:a6:d8:41:f7:a7:6c:bb:43:96:56:6a: 56:51:a1:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV8rXBfxtqEnXCcA7L1ZpcErwXOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1QTlD REJDQTlENzAeFw0yNTExMDQwNjM2MzBaFw0yNTExMDcxNjA2MzBaMDMxMTAvBgNV BAMTKEQyQkM1QUZDMjFFMkMxMTU1NkE3NUVGMTIxOTY3MTI0RjdEMURFMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfpyghdgExDc+p/8CJgSdPDvrM +4mkkKMRnlAVNH/RaQsi/grJDpILyfKeywe2PLg0q7JaqakKeHumI87BWNdF7VcT Rs11QOdoIpn8sXyhADpacu9QsINuqOcEM/DNP5Kkz4rKIPv5d3nEbbbTKbxfMa6H XulnXtWoQ04FwAneGr520BelpZ29MJ/3kXebFCA5wUwNyM05CS6OEYo8K55gaGaS fOi/G9XpWoQxZLHCxLY6OrMPLMO8WjuQBkgkc8qqb1af+XBiayh+Wd2JxtbYinEC eLR51u2qUlV4VnLRpVZganllmUcz2secA+3DtYsYNl/S/Ge39AEcXXDKr/nRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0rxa/CHiwRVWp17xIZZxJPfR3iAwHwYDVR0j BBgwFoAUcfw/eyci9qFcVX9j+PSVqc28qdcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWE1YWM2NS02MDcxLTQ2ZTItYmI5ZC1kNzcwZDExN2M0YjQvMC83MUZDM0Y3QjI3 MjJGNkExNUM1NTdGNjNGOEY0OTVBOUNEQkNBOUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1QTlDREJD QTlENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFhNWFjNjUtNjA3MS00NmUyLWJi OWQtZDc3MGQxMTdjNGI0LzAvNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1 QTlDREJDQTlENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALXudvv4r2jGoNkwMC8qoNfpgdeyyFPACrCO oJiabnuKgSse9glJisYQVRGMrmita/XBqEqCBg5Lu4xOc2F3K8qUBzalUgjh3Z6j vndT5QtIFsqag/LQqOy+5JI1RiU6CK5pi4yL2UQ5hrzN1eGLIt8x/sz/FGeE8UET Uxzs1HYMmjrSakDrvAGu1LTQh3xZCaYYsbUwMEzXTDewP12w8oSvtZCUpuDjpQEQ BYMKhhd3wrewkzBn0+KtqSX3RadWd0wjvMiQw8IJZuynyeWylzCy21dbK9OgDf8z v18kc9j05R1Vp0VYCwW7w+QnKPxoe/im2EH3p2y7Q5ZWalZRoVE= -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:04 2025 by rpki-client