$ rpki-client -vvf repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft File: 71C1EFD5DFDE20418A49070671B01D675F9A8917.mft (raw, json) Hash identifier: JAU1DqsEEZiCALrUW/gdTbv6deOPPEj2YdJoEO/B4EM= Subject key identifier: 14:0D:E3:22:DA:E5:EA:68:3A:08:B4:2A:D7:74:04:45:42:26:91:46 Authority key identifier: 71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17 Certificate issuer: /CN=71C1EFD5DFDE20418A49070671B01D675F9A8917 Certificate serial: 29FD24C9AD0D5890C0C22B30A3A8FE213661A442 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft Manifest number: 0281 Signing time: Fri 22 Aug 2025 09:54:09 +0000 Manifest this update: Fri 22 Aug 2025 09:49:09 +0000 Manifest next update: Mon 25 Aug 2025 21:43:09 +0000 Files and hashes: 1: 71C1EFD5DFDE20418A49070671B01D675F9A8917.crl (hash: 6acmkwORdhJNOqPJUocwL6sPQAVCjzS786DCKla9slw=) 2: 3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa (hash: 8ksM/q+y6Lni1XQrvYbOQyNFp8Q4IAzl4uPFuNiAyRE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 21:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:fd:24:c9:ad:0d:58:90:c0:c2:2b:30:a3:a8:fe:21:36:61:a4:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C1EFD5DFDE20418A49070671B01D675F9A8917 Validity Not Before: Aug 22 09:49:09 2025 GMT Not After : Aug 25 21:43:09 2025 GMT Subject: CN=140DE322DAE5EA683A08B42AD774044542269146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:34:3e:03:43:f0:14:93:67:cb:09:f9:22:cb: d7:2f:a9:87:58:43:c6:9d:02:7d:dd:36:74:13:1b: 24:94:cb:56:5e:f5:00:cf:e5:3c:25:fd:b2:6a:7b: 04:35:b5:73:27:4d:41:8f:37:da:00:67:ab:2b:80: 88:e9:c8:4b:56:0c:d7:3c:b6:c5:34:d2:36:11:e3: 75:aa:23:e8:df:02:5d:f9:3f:08:e1:3c:26:9a:d6: 70:ed:29:c0:90:e3:d3:60:c5:95:ea:4b:5b:05:7d: ee:b4:49:c1:13:97:a3:23:62:65:f7:a4:bb:3a:72: 2d:7a:ea:9f:1a:09:83:b7:6a:e9:6b:54:85:0e:bf: 8d:ae:2e:d5:0a:60:27:a4:8b:a3:5a:86:0f:36:c4: 09:c7:0b:c6:ba:a9:b7:47:af:12:72:e0:76:eb:c1: ae:56:1b:6d:6e:0d:82:5b:74:7e:4f:55:90:cc:92: ad:fc:2e:11:cb:0f:04:ae:b6:4f:e5:02:12:c1:e6: 58:ec:42:9e:29:f9:5b:ae:d3:52:86:8d:4b:15:4f: 8e:b6:26:4a:19:a0:4a:96:a0:f1:53:7e:88:fa:14: 12:bd:31:aa:56:d3:8e:f9:e8:88:22:42:c2:23:b3: 7d:0f:d7:d4:09:fb:0f:5f:52:6b:6a:a3:a7:1f:78: 22:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0D:E3:22:DA:E5:EA:68:3A:08:B4:2A:D7:74:04:45:42:26:91:46 X509v3 Authority Key Identifier: keyid:71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ff:5d:29:e9:7f:9d:e8:7c:f4:3a:3d:17:68:56:ba:fa:5d: 27:7f:8b:d8:09:af:04:d4:84:cd:31:20:19:35:73:b6:c3:ad: b6:7f:c8:45:2b:a3:c0:f7:4f:bb:4b:d3:26:b1:80:31:a1:82: 0e:a2:3e:0d:ba:f2:9e:c3:4a:18:44:9e:2c:6b:c3:79:99:35: 1d:a4:a9:32:f9:1f:5d:55:a5:00:8b:09:68:ba:b2:a5:da:a1: f2:08:be:cb:d1:3d:ab:97:5c:95:e8:c3:ec:e6:73:c2:54:1d: a3:5e:c4:7f:e0:b7:8a:c8:55:6c:73:4a:89:cf:c9:43:25:6b: d8:7a:90:12:1a:d6:31:83:60:c2:7f:6b:7e:a9:38:31:31:2f: b6:e8:b3:64:66:b5:4a:fb:0a:dc:6d:27:fa:4e:88:5e:bb:90: b5:b5:26:99:33:8e:47:dd:7b:e7:4c:49:4c:9a:24:da:a6:c3: 90:0c:c9:f1:5b:a6:c4:93:cc:b9:fd:70:ab:5e:83:cc:53:bb: d5:af:64:64:ab:d5:2b:3d:f5:9a:24:4f:a8:c6:c5:1c:d8:b9: 61:1a:4b:fe:57:eb:09:f4:2b:06:e4:fd:fc:6c:89:18:4d:c8: 8a:16:1f:41:bf:ff:28:02:1d:d0:15:9e:fd:e0:53:d7:04:18: 5a:2b:4d:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKf0kya0NWJDAwiswo6j+ITZhpEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFENjc1 RjlBODkxNzAeFw0yNTA4MjIwOTQ5MDlaFw0yNTA4MjUyMTQzMDlaMDMxMTAvBgNV BAMTKDE0MERFMzIyREFFNUVBNjgzQTA4QjQyQUQ3NzQwNDQ1NDIyNjkxNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxND4DQ/AUk2fLCfkiy9cvqYdY Q8adAn3dNnQTGySUy1Ze9QDP5Twl/bJqewQ1tXMnTUGPN9oAZ6srgIjpyEtWDNc8 tsU00jYR43WqI+jfAl35PwjhPCaa1nDtKcCQ49NgxZXqS1sFfe60ScETl6MjYmX3 pLs6ci166p8aCYO3aulrVIUOv42uLtUKYCeki6Nahg82xAnHC8a6qbdHrxJy4Hbr wa5WG21uDYJbdH5PVZDMkq38LhHLDwSutk/lAhLB5ljsQp4p+Vuu01KGjUsVT462 JkoZoEqWoPFTfoj6FBK9MapW04756IgiQsIjs30P19QJ+w9fUmtqo6cfeCLzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFA3jItrl6mg6CLQq13QERUImkUYwHwYDVR0j BBgwFoAUccHv1d/eIEGKSQcGcbAdZ1+aiRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWVhYjQ0Mi03NDgwLTQ1ODEtODFkZC0yM2EyMDA2MTQzODIvMC83MUMxRUZENURG REUyMDQxOEE0OTA3MDY3MUIwMUQ2NzVGOUE4OTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFENjc1RjlB ODkxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVlYWI0NDItNzQ4MC00NTgxLTgx ZGQtMjNhMjAwNjE0MzgyLzAvNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFE Njc1RjlBODkxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG//XSnpf53ofPQ6PRdoVrr6XSd/i9gJrwTU hM0xIBk1c7bDrbZ/yEUro8D3T7tL0yaxgDGhgg6iPg268p7DShhEnixrw3mZNR2k qTL5H11VpQCLCWi6sqXaofIIvsvRPauXXJXow+zmc8JUHaNexH/gt4rIVWxzSonP yUMla9h6kBIa1jGDYMJ/a36pODExL7bos2RmtUr7CtxtJ/pOiF67kLW1Jpkzjkfd e+dMSUyaJNqmw5AMyfFbpsSTzLn9cKteg8xTu9WvZGSr1Ss99ZokT6jGxRzYuWEa S/5X6wn0Kwbk/fxsiRhNyIoWH0G//ygCHdAVnv3gU9cEGForTRU= -----END CERTIFICATE-----Generated at Sat Aug 23 10:40:20 2025 by rpki-client