$ rpki-client -vvf repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft File: C710954C7B301C60B82BA6372CACEB81DA08F190.mft (raw, json) Hash identifier: xy/RLuhLrejnKQjMlr2Cu+FfPKZWDHs+9l4g82WOlRs= Subject key identifier: B5:7E:B2:59:C1:B7:B2:D8:00:9C:68:03:36:EF:B0:47:F2:4D:AD:4F Authority key identifier: C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 Certificate issuer: /CN=C710954C7B301C60B82BA6372CACEB81DA08F190 Certificate serial: 3053A0A8A9051756EAA12FAC823E2A0388BA05AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft Manifest number: 04E5 Signing time: Sat 01 Nov 2025 17:30:04 +0000 Manifest this update: Sat 01 Nov 2025 17:25:04 +0000 Manifest next update: Wed 05 Nov 2025 03:08:04 +0000 Files and hashes: 1: 3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa (hash: KQUN/mjgI9NAwHO1H2+jS+2KNmkSKgxnmq0NRk0bNGg=) 2: 323030313a6466343a343430303a3a2f34382d3438203d3e20313333383332.roa (hash: DYGPu1R9knVMTB6Ioiy1/sQp83HBRZI1WQg4Zdy3cp0=) 3: C710954C7B301C60B82BA6372CACEB81DA08F190.crl (hash: i4R6WrlJewbWQxtbfWYaEwJvUnqR6UNoEI4Mr6/ZFAY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 09:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:53:a0:a8:a9:05:17:56:ea:a1:2f:ac:82:3e:2a:03:88:ba:05:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C710954C7B301C60B82BA6372CACEB81DA08F190 Validity Not Before: Nov 1 17:25:04 2025 GMT Not After : Nov 5 03:08:04 2025 GMT Subject: CN=B57EB259C1B7B2D8009C680336EFB047F24DAD4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:74:26:18:d4:14:90:f8:d4:cf:96:ff:8a:a5: 23:d9:48:95:28:0a:bd:a5:40:68:1f:fa:d6:84:88: 89:c1:91:21:11:41:be:d9:b8:48:7b:b9:26:7c:95: 0a:d0:6e:00:2d:cd:94:fd:59:06:1a:55:36:16:45: 7b:0b:2e:b3:02:f8:e0:c6:53:3d:4a:98:ea:5e:36: c8:7f:3f:7b:48:57:88:71:62:c8:f0:c8:c1:d1:35: 5b:12:4d:8e:1a:89:d4:41:e7:9b:90:ee:4d:2a:5b: 76:c1:8f:ab:b6:37:93:16:3a:97:7e:6d:24:bf:9f: 29:8c:7a:aa:88:2c:14:5e:1d:db:97:71:99:17:6a: 72:9c:f5:17:2c:3b:1c:71:e0:87:7b:64:c7:38:c3: b7:4e:15:80:73:36:8a:b7:85:be:7c:ed:18:b8:93: 90:bd:7f:f8:b0:13:a1:73:88:f6:0b:e6:8f:f7:ce: 50:f4:20:23:17:e5:98:7a:68:55:3b:3c:b1:f7:b8: b7:06:a7:d7:86:3f:17:38:a6:83:be:89:d2:b2:4b: 65:56:ab:9a:b3:ca:a3:fa:75:6a:ff:c1:f5:13:42: dc:cd:12:be:93:97:c0:51:76:82:95:aa:a1:f5:c1: e9:65:c8:f4:b5:84:53:f5:16:30:41:02:00:33:bd: eb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7E:B2:59:C1:B7:B2:D8:00:9C:68:03:36:EF:B0:47:F2:4D:AD:4F X509v3 Authority Key Identifier: keyid:C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:9a:a2:3d:bd:54:26:4e:49:55:68:0c:e6:1c:83:9e:fd:55: c4:9a:31:50:80:36:32:5b:74:40:21:6c:4f:32:f6:15:c9:26: aa:92:2d:5f:22:6f:d2:79:96:c8:35:e2:cd:2b:89:e6:b0:bc: b1:6e:f1:d1:c8:5b:51:09:7e:b3:af:6c:3d:18:bb:3b:53:4d: db:11:58:2c:58:67:bd:70:63:33:f1:d8:c8:c6:4d:98:f9:c3: bc:83:99:ba:6c:42:c7:59:6b:25:d2:aa:c0:f5:1f:58:5a:57: 73:f0:42:d0:e7:f2:85:10:e0:e9:9b:2f:40:7d:85:02:4b:0f: 8c:69:4e:fc:81:b2:87:cf:0f:27:06:1d:49:cb:80:e6:ca:8e: 4a:0b:37:d5:2d:b7:f5:52:ed:05:df:0a:45:be:71:8d:2b:53: fa:37:ac:b4:39:39:73:48:eb:14:b3:19:b1:08:bb:d7:25:41: 4c:54:1a:95:81:84:a5:c4:ee:8e:3a:cc:e3:3a:78:ee:08:6b: 50:c3:c5:bf:1b:57:5a:f0:66:56:37:e1:70:f9:0a:aa:18:1d: d3:3d:f6:a6:b6:ff:a6:26:87:e1:de:5e:47:87:8a:7b:00:ab: 36:3e:3c:5d:df:bb:a0:ce:7a:74:68:b6:50:ca:67:87:13:a2: 13:7b:be:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMFOgqKkFF1bqoS+sgj4qA4i6Ba8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VCODFE QTA4RjE5MDAeFw0yNTExMDExNzI1MDRaFw0yNTExMDUwMzA4MDRaMDMxMTAvBgNV BAMTKEI1N0VCMjU5QzFCN0IyRDgwMDlDNjgwMzM2RUZCMDQ3RjI0REFENEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7dCYY1BSQ+NTPlv+KpSPZSJUo Cr2lQGgf+taEiInBkSERQb7ZuEh7uSZ8lQrQbgAtzZT9WQYaVTYWRXsLLrMC+ODG Uz1KmOpeNsh/P3tIV4hxYsjwyMHRNVsSTY4aidRB55uQ7k0qW3bBj6u2N5MWOpd+ bSS/nymMeqqILBReHduXcZkXanKc9RcsOxxx4Id7ZMc4w7dOFYBzNoq3hb587Ri4 k5C9f/iwE6FziPYL5o/3zlD0ICMX5Zh6aFU7PLH3uLcGp9eGPxc4poO+idKyS2VW q5qzyqP6dWr/wfUTQtzNEr6Tl8BRdoKVqqH1wellyPS1hFP1FjBBAgAzvevNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtX6yWcG3stgAnGgDNu+wR/JNrU8wHwYDVR0j BBgwFoAUxxCVTHswHGC4K6Y3LKzrgdoI8ZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2U0MTc3ZC04MDkzLTQ0N2MtODdiNS1jNzljOGNiNGM3MzMvMC9DNzEwOTU0QzdC MzAxQzYwQjgyQkE2MzcyQ0FDRUI4MURBMDhGMTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VCODFEQTA4 RjE5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNlNDE3N2QtODA5My00NDdjLTg3 YjUtYzc5YzhjYjRjNzMzLzAvQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VC ODFEQTA4RjE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAeaoj29VCZOSVVoDOYcg579VcSaMVCANjJb dEAhbE8y9hXJJqqSLV8ib9J5lsg14s0rieawvLFu8dHIW1EJfrOvbD0YuztTTdsR WCxYZ71wYzPx2MjGTZj5w7yDmbpsQsdZayXSqsD1H1haV3PwQtDn8oUQ4OmbL0B9 hQJLD4xpTvyBsofPDycGHUnLgObKjkoLN9Utt/VS7QXfCkW+cY0rU/o3rLQ5OXNI 6xSzGbEIu9clQUxUGpWBhKXE7o46zOM6eO4Ia1DDxb8bV1rwZlY34XD5CqoYHdM9 9qa2/6Ymh+HeXkeHinsAqzY+PF3fu6DOenRotlDKZ4cTohN7vto= -----END CERTIFICATE-----Generated at Sun Nov 2 03:41:12 2025 by rpki-client