$ rpki-client -vvf repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft File: 571E2EFA23FEA611810611410635E23A090F4550.mft (raw, json) Hash identifier: qb1IHfTzcAHcFFK0YapfTC8dOdIfLE+BxnGGt51xjc0= Subject key identifier: B4:41:3F:66:61:C3:9E:85:6E:86:2E:6C:99:02:60:80:79:44:C8:2C Authority key identifier: 57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50 Certificate issuer: /CN=571E2EFA23FEA611810611410635E23A090F4550 Certificate serial: 3AB8F1A49937E23542BD12B88264E6FCEE731EA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft Manifest number: 0530 Signing time: Sun 26 Oct 2025 04:42:14 +0000 Manifest this update: Sun 26 Oct 2025 04:37:14 +0000 Manifest next update: Wed 29 Oct 2025 09:08:14 +0000 Files and hashes: 1: 571E2EFA23FEA611810611410635E23A090F4550.crl (hash: XPQmamgs730f3c+Or40hCR+EVZfbS3nmJbI6Sr9V9FE=) 2: 3130332e3135352e36342e302f32342d3234203d3e20313432333831.roa (hash: oMW/juSzl+5S8B2tH+GiR7KV/7mKnJINuimdyFIaiWU=) 3: 3130332e3135352e36352e302f32342d3234203d3e20313431363231.roa (hash: CeAdG0+iQqX7R4GwVIJ8BeduoZGnHUGjqn0LAsOfmaQ=) 4: 3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa (hash: YxNi6/uAllHxRs/TmMjIhKw+j/AevGbXCAwCtWlO7/Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 09:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b8:f1:a4:99:37:e2:35:42:bd:12:b8:82:64:e6:fc:ee:73:1e:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571E2EFA23FEA611810611410635E23A090F4550 Validity Not Before: Oct 26 04:37:14 2025 GMT Not After : Oct 29 09:08:14 2025 GMT Subject: CN=B4413F6661C39E856E862E6C990260807944C82C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:93:91:dc:25:4d:84:0f:2d:75:38:33:28:6a: 8e:7e:8c:28:f2:c4:36:d8:81:6e:a3:70:38:2e:04: 0b:a8:87:bf:5b:79:58:0b:bf:ca:f9:2e:55:13:6a: c2:50:e4:ca:ae:69:ff:b9:b4:d9:8b:05:31:f9:4c: 22:0e:fe:89:0a:63:77:3c:09:e1:74:29:a9:db:46: 95:3d:41:46:31:e4:a1:b2:e7:d9:c3:6b:67:7c:c0: 41:61:54:3e:ca:cd:fc:eb:ce:b8:a9:fc:f0:27:1a: 99:98:d7:60:ad:11:23:f7:30:f2:ef:59:3a:c3:aa: e6:b3:6a:18:0e:6b:a1:ee:fb:87:be:67:64:58:09: ee:f9:66:9d:83:1d:94:3d:63:e0:a9:03:c4:76:ae: b7:1e:a1:ba:cb:87:7e:2b:fe:40:4d:75:58:c8:ba: 21:e6:18:e8:39:23:29:5e:86:4e:6c:cb:85:e8:e0: 58:ae:90:92:08:58:c8:b2:07:ef:b2:e8:b0:6b:e6: 41:59:40:73:8a:50:50:ff:5f:10:05:5a:19:ba:64: f6:23:63:45:13:35:51:bc:eb:34:fb:e3:99:98:e9: 4a:2a:3e:30:26:65:b4:dd:44:e5:c3:60:9a:eb:1e: df:71:d5:b6:a2:fc:2b:0d:48:98:b7:94:97:67:74: ec:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:41:3F:66:61:C3:9E:85:6E:86:2E:6C:99:02:60:80:79:44:C8:2C X509v3 Authority Key Identifier: keyid:57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:67:b3:a6:9c:3e:82:74:69:cb:73:c0:e4:1d:74:bf:d8:36: af:d9:0e:8e:fe:5e:4d:3d:38:41:82:df:4d:69:07:71:02:2d: 8e:01:1a:ae:16:5e:f9:67:39:fa:7f:f1:44:be:a8:94:ff:77: 9d:45:8c:f0:e0:7b:5d:ba:16:3f:6d:5b:8c:5c:9e:30:e1:af: 5a:05:cc:02:fc:70:74:9c:43:39:d1:f7:c3:4e:f3:4e:e8:70: af:75:1f:6b:49:79:5b:e5:a3:fe:2f:e7:7f:b9:37:a3:d7:18: 8c:e3:db:1a:ef:e5:7e:58:5a:01:87:da:b6:f0:43:44:bb:0e: c1:85:54:fe:7c:5e:d9:dd:69:bc:5c:5e:82:ad:59:14:64:27: b6:d2:d0:97:75:0d:5f:a7:86:b4:8b:fe:54:d8:f1:2d:04:ee: a3:a6:6f:2a:c9:e4:63:4f:25:3c:b0:8b:79:6f:db:87:36:1c: 84:7b:20:37:cd:e0:33:a2:ff:9e:21:85:a2:79:76:95:55:ce: 2a:47:65:a8:70:ff:44:fd:3a:11:a7:d8:01:4e:92:21:ba:51: 34:fc:58:7f:3c:51:0b:39:46:db:30:1c:15:be:9f:89:63:fe: e5:79:77:d5:88:fa:54:25:97:7e:0a:35:8c:e5:98:99:ed:b6: ef:7f:78:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOrjxpJk34jVCvRK4gmTm/O5zHqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUyM0Ew OTBGNDU1MDAeFw0yNTEwMjYwNDM3MTRaFw0yNTEwMjkwOTA4MTRaMDMxMTAvBgNV BAMTKEI0NDEzRjY2NjFDMzlFODU2RTg2MkU2Qzk5MDI2MDgwNzk0NEM4MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRk5HcJU2EDy11ODMoao5+jCjy xDbYgW6jcDguBAuoh79beVgLv8r5LlUTasJQ5Mquaf+5tNmLBTH5TCIO/okKY3c8 CeF0KanbRpU9QUYx5KGy59nDa2d8wEFhVD7Kzfzrzrip/PAnGpmY12CtESP3MPLv WTrDquazahgOa6Hu+4e+Z2RYCe75Zp2DHZQ9Y+CpA8R2rrceobrLh34r/kBNdVjI uiHmGOg5Iylehk5sy4Xo4FiukJIIWMiyB++y6LBr5kFZQHOKUFD/XxAFWhm6ZPYj Y0UTNVG86zT745mY6UoqPjAmZbTdROXDYJrrHt9x1bai/CsNSJi3lJdndOxpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtEE/ZmHDnoVuhi5smQJggHlEyCwwHwYDVR0j BBgwFoAUVx4u+iP+phGBBhFBBjXiOgkPRVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTY0YWJmYi0xOTYyLTQ0YTktODM3Ni1jYmZiMWVmY2RhYmEvMC81NzFFMkVGQTIz RkVBNjExODEwNjExNDEwNjM1RTIzQTA5MEY0NTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUyM0EwOTBG NDU1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU2NGFiZmItMTk2Mi00NGE5LTgz NzYtY2JmYjFlZmNkYWJhLzAvNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUy M0EwOTBGNDU1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAElns6acPoJ0actzwOQddL/YNq/ZDo7+Xk09 OEGC301pB3ECLY4BGq4WXvlnOfp/8US+qJT/d51FjPDge126Fj9tW4xcnjDhr1oF zAL8cHScQznR98NO807ocK91H2tJeVvlo/4v53+5N6PXGIzj2xrv5X5YWgGH2rbw Q0S7DsGFVP58XtndabxcXoKtWRRkJ7bS0Jd1DV+nhrSL/lTY8S0E7qOmbyrJ5GNP JTywi3lv24c2HIR7IDfN4DOi/54hhaJ5dpVVzipHZahw/0T9OhGn2AFOkiG6UTT8 WH88UQs5RtswHBW+n4lj/uV5d9WI+lQll34KNYzlmJnttu9/eDo= -----END CERTIFICATE-----Generated at Tue Oct 28 07:09:26 2025 by rpki-client