$ rpki-client -vvf repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft File: 71C1EFD5DFDE20418A49070671B01D675F9A8917.mft (raw, json) Hash identifier: EyDG0cWVrCtHgDkDASU96K64SH53g1hTvJb5iP13vVw= Subject key identifier: FB:BD:D6:C3:20:FF:86:27:49:41:6C:C5:BF:4E:80:8F:A8:0F:D5:37 Authority key identifier: 71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17 Certificate issuer: /CN=71C1EFD5DFDE20418A49070671B01D675F9A8917 Certificate serial: 531FD14538B33E05A9706E372A010190D720F868 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft Manifest number: 026A Signing time: Wed 02 Jul 2025 11:11:41 +0000 Manifest this update: Wed 02 Jul 2025 11:06:41 +0000 Manifest next update: Sat 05 Jul 2025 15:01:41 +0000 Files and hashes: 1: 3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa (hash: 8ksM/q+y6Lni1XQrvYbOQyNFp8Q4IAzl4uPFuNiAyRE=) 2: 71C1EFD5DFDE20418A49070671B01D675F9A8917.crl (hash: QQ4evLwhq0+Up3vzzNXN4AsXMiAhyvxSAxlx7MWolZo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 15:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:1f:d1:45:38:b3:3e:05:a9:70:6e:37:2a:01:01:90:d7:20:f8:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C1EFD5DFDE20418A49070671B01D675F9A8917 Validity Not Before: Jul 2 11:06:41 2025 GMT Not After : Jul 5 15:01:41 2025 GMT Subject: CN=FBBDD6C320FF862749416CC5BF4E808FA80FD537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:40:a1:e2:d6:3d:19:e8:41:b7:cf:bc:e5:8f: b2:f9:b9:e4:a4:47:83:33:f6:6c:85:15:21:2e:88: 44:19:4c:f1:32:fc:09:31:b7:1b:12:fd:6d:c4:69: 6d:7a:61:60:c9:15:b7:b9:ee:f1:9b:9a:07:f9:23: ac:95:d9:47:95:41:24:ac:90:2e:e8:67:d3:7a:cd: aa:79:42:2c:58:c2:3e:7c:a4:27:21:c6:91:e7:98: 0b:ff:81:99:05:b0:fc:82:9e:93:37:57:45:c1:7a: 61:a1:e3:8a:7e:4e:3a:a2:65:51:90:de:fe:f6:4e: 8f:f6:81:da:5c:45:5c:18:b2:da:8d:12:7b:f4:c6: a4:5b:c4:75:b1:f1:e5:ef:b0:92:4b:cb:95:fa:19: 9c:6e:33:fb:cd:8f:34:06:a0:3e:4f:c9:eb:f7:49: cc:90:22:8d:4c:ed:a3:69:e7:e4:cd:72:98:7e:d3: c7:10:61:33:31:68:8b:6f:f8:13:e7:7c:ad:52:62: 21:44:22:8b:69:65:c3:f7:b9:6e:eb:7d:4b:ea:cf: 2d:e2:4b:6e:e6:1a:60:f0:33:a8:ed:aa:d9:29:ce: 01:5e:d4:6e:e0:6d:3e:42:7f:c3:71:41:8a:ed:93: c2:da:be:db:a3:b2:c6:06:9c:e9:9b:53:98:53:fd: b7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:BD:D6:C3:20:FF:86:27:49:41:6C:C5:BF:4E:80:8F:A8:0F:D5:37 X509v3 Authority Key Identifier: keyid:71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:52:25:9f:2b:6b:44:f4:5d:ee:d2:d2:4a:af:64:d5:c2:7c: 19:b4:3b:22:21:b9:8f:a8:d3:7d:b3:f1:9b:0c:e0:a8:c1:48: 14:f2:c4:79:b9:a3:b1:2e:6c:7a:2e:d3:e2:a8:66:83:5c:b5: 40:49:ce:2d:3e:8a:ea:58:ef:0a:7b:8d:5a:66:66:85:c6:37: 7b:e3:f6:21:8e:37:f2:33:3b:3c:e0:05:03:0f:3c:bc:67:c1: dc:a7:9e:3d:bf:e0:93:37:9e:c9:04:77:e1:7e:5d:87:1f:a5: a9:3f:99:59:2a:05:4c:2b:83:02:e1:b0:7d:67:80:3e:0a:c6: 4c:54:ff:eb:c3:53:0b:13:cd:e1:d0:41:05:97:2a:25:fa:1f: 22:1e:41:65:f2:d0:de:87:b1:75:42:f3:c2:7a:54:cc:ed:a6: 75:42:96:74:3c:8a:1f:b3:ae:6a:f4:0d:b2:e1:3d:1c:86:eb: 19:f5:30:b3:32:83:67:0b:a9:34:c8:f6:38:a6:c8:9d:5b:34: 44:f3:d3:35:8a:10:a8:c1:20:ab:19:6d:5a:91:8d:02:d3:06: cd:f0:ac:43:f7:cb:b6:c9:6e:88:a7:b2:d6:b9:fc:4d:18:02: cf:1e:fb:82:9c:ac:bc:13:6b:99:ed:fc:e9:88:11:a3:85:71: 2e:34:c0:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUx/RRTizPgWpcG43KgEBkNcg+GgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFENjc1 RjlBODkxNzAeFw0yNTA3MDIxMTA2NDFaFw0yNTA3MDUxNTAxNDFaMDMxMTAvBgNV BAMTKEZCQkRENkMzMjBGRjg2Mjc0OTQxNkNDNUJGNEU4MDhGQTgwRkQ1MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMQKHi1j0Z6EG3z7zlj7L5ueSk R4Mz9myFFSEuiEQZTPEy/AkxtxsS/W3EaW16YWDJFbe57vGbmgf5I6yV2UeVQSSs kC7oZ9N6zap5QixYwj58pCchxpHnmAv/gZkFsPyCnpM3V0XBemGh44p+TjqiZVGQ 3v72To/2gdpcRVwYstqNEnv0xqRbxHWx8eXvsJJLy5X6GZxuM/vNjzQGoD5Pyev3 ScyQIo1M7aNp5+TNcph+08cQYTMxaItv+BPnfK1SYiFEIotpZcP3uW7rfUvqzy3i S27mGmDwM6jtqtkpzgFe1G7gbT5Cf8NxQYrtk8LavtujssYGnOmbU5hT/bezAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+73WwyD/hidJQWzFv06Aj6gP1TcwHwYDVR0j BBgwFoAUccHv1d/eIEGKSQcGcbAdZ1+aiRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWVhYjQ0Mi03NDgwLTQ1ODEtODFkZC0yM2EyMDA2MTQzODIvMC83MUMxRUZENURG REUyMDQxOEE0OTA3MDY3MUIwMUQ2NzVGOUE4OTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFENjc1RjlB ODkxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVlYWI0NDItNzQ4MC00NTgxLTgx ZGQtMjNhMjAwNjE0MzgyLzAvNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFE Njc1RjlBODkxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAENSJZ8ra0T0Xe7S0kqvZNXCfBm0OyIhuY+o 032z8ZsM4KjBSBTyxHm5o7EubHou0+KoZoNctUBJzi0+iupY7wp7jVpmZoXGN3vj 9iGON/IzOzzgBQMPPLxnwdynnj2/4JM3nskEd+F+XYcfpak/mVkqBUwrgwLhsH1n gD4KxkxU/+vDUwsTzeHQQQWXKiX6HyIeQWXy0N6HsXVC88J6VMztpnVClnQ8ih+z rmr0DbLhPRyG6xn1MLMyg2cLqTTI9jimyJ1bNETz0zWKEKjBIKsZbVqRjQLTBs3w rEP3y7bJboinsta5/E0YAs8e+4KcrLwTa5nt/OmIEaOFcS40wOA= -----END CERTIFICATE-----Generated at Thu Jul 3 10:31:31 2025 by rpki-client