$ rpki-client -vvf repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft File: 71C1EFD5DFDE20418A49070671B01D675F9A8917.mft (raw, json) Hash identifier: NB/zAQvN932hYvYsYTShoOQVItFZfzENdZsH63qtzRY= Subject key identifier: 19:69:7B:3F:18:FE:3F:12:C2:C7:A7:03:47:2D:89:C0:17:75:83:FF Authority key identifier: 71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17 Certificate issuer: /CN=71C1EFD5DFDE20418A49070671B01D675F9A8917 Certificate serial: 74621652B7AE124F1B30CB9DF1AC26B0993D0D25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft Manifest number: 0253 Signing time: Sun 11 May 2025 11:01:40 +0000 Manifest this update: Sun 11 May 2025 10:56:40 +0000 Manifest next update: Wed 14 May 2025 18:03:40 +0000 Files and hashes: 1: 71C1EFD5DFDE20418A49070671B01D675F9A8917.crl (hash: G1mKPxoVuDFfWqamid7lMEg43F3tBzq9XRmQa1QmteM=) 2: 3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa (hash: 8ksM/q+y6Lni1XQrvYbOQyNFp8Q4IAzl4uPFuNiAyRE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 18:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:62:16:52:b7:ae:12:4f:1b:30:cb:9d:f1:ac:26:b0:99:3d:0d:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C1EFD5DFDE20418A49070671B01D675F9A8917 Validity Not Before: May 11 10:56:40 2025 GMT Not After : May 14 18:03:40 2025 GMT Subject: CN=19697B3F18FE3F12C2C7A703472D89C0177583FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:14:16:f4:71:f0:9d:b1:3f:04:db:90:69:b3: 95:70:d2:32:6e:6f:fd:76:1c:ba:30:d5:58:58:3b: 7a:7d:1d:20:76:f0:9d:04:cf:52:fd:dc:3a:7a:3f: 5c:d0:5d:b4:e7:c6:b2:15:db:4d:9e:8e:8d:87:81: 36:08:39:46:31:34:38:39:cb:09:ca:08:9d:e8:a9: 26:c8:14:6f:6d:95:5a:00:8e:16:03:20:85:31:a3: dd:49:cc:f4:eb:3a:33:91:36:df:3c:db:5b:d2:5e: a4:16:75:ff:33:12:38:14:ea:12:73:9e:7c:00:46: da:02:48:da:b4:81:e5:76:96:f0:08:57:05:0f:8a: 14:d0:c4:82:71:c1:eb:ca:2f:00:17:03:56:bd:5e: 04:75:18:44:e2:fa:61:e5:24:88:b6:4c:b5:6f:a6: 8c:ec:2c:9f:66:70:e3:52:5f:e0:5a:ac:28:d8:2c: 7b:76:3d:66:35:33:7d:d5:14:56:1b:a2:81:f7:90: 96:94:51:8f:1e:ce:c2:a0:a9:6d:da:00:03:76:c6: 92:9b:fc:be:50:57:9f:77:6e:71:de:1a:50:7f:47: 99:84:4e:bc:b7:1e:70:aa:49:61:47:aa:a1:ac:38: 8d:36:84:e0:97:bc:9a:ad:b5:90:a3:d1:cb:d2:41: c2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:69:7B:3F:18:FE:3F:12:C2:C7:A7:03:47:2D:89:C0:17:75:83:FF X509v3 Authority Key Identifier: keyid:71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:24:43:4d:e8:f4:39:51:bc:31:3b:b0:8a:18:22:92:f0:b9: 62:86:07:97:76:85:b8:75:f7:f3:95:d9:99:94:5d:c8:48:b1: b1:80:f8:30:25:4d:a8:eb:f0:9f:e9:d4:50:07:37:15:86:cd: ed:70:a0:0b:d3:07:51:57:5a:ae:c2:13:ef:5b:d8:c4:8f:ea: 92:60:6b:ad:25:57:30:fb:48:e9:6f:3f:7b:b2:18:d6:8e:3b: ba:94:29:41:34:d6:09:12:2b:f9:b4:c8:c4:3c:5c:1b:10:ec: 33:c3:c0:0d:49:07:89:03:d9:16:b5:82:e8:fc:9e:fc:22:53: 31:3a:2e:f6:4e:b8:5a:fa:cd:a7:aa:6f:41:8f:b6:b0:9e:91: 8a:43:f7:33:a4:eb:67:31:58:97:f5:24:9e:92:57:b0:d1:d1: 09:c5:53:64:aa:4d:ee:25:2c:67:29:4f:84:97:ff:54:8e:32: e0:54:33:41:14:e7:26:95:40:17:07:f7:9e:a8:93:a3:31:8a: 41:da:67:32:f1:54:10:25:c8:04:4e:dc:cc:ff:23:02:08:e2: 04:4c:45:02:9c:e9:ae:c0:66:7b:37:7e:eb:c6:b8:dd:6a:c8: d6:fb:81:bf:7b:38:5b:9b:c1:41:4e:c3:bc:6e:db:bd:3a:b6: fb:09:39:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdGIWUreuEk8bMMud8awmsJk9DSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFENjc1 RjlBODkxNzAeFw0yNTA1MTExMDU2NDBaFw0yNTA1MTQxODAzNDBaMDMxMTAvBgNV BAMTKDE5Njk3QjNGMThGRTNGMTJDMkM3QTcwMzQ3MkQ4OUMwMTc3NTgzRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBFBb0cfCdsT8E25Bps5Vw0jJu b/12HLow1VhYO3p9HSB28J0Ez1L93Dp6P1zQXbTnxrIV202ejo2HgTYIOUYxNDg5 ywnKCJ3oqSbIFG9tlVoAjhYDIIUxo91JzPTrOjORNt8821vSXqQWdf8zEjgU6hJz nnwARtoCSNq0geV2lvAIVwUPihTQxIJxwevKLwAXA1a9XgR1GETi+mHlJIi2TLVv pozsLJ9mcONSX+BarCjYLHt2PWY1M33VFFYbooH3kJaUUY8ezsKgqW3aAAN2xpKb /L5QV593bnHeGlB/R5mETry3HnCqSWFHqqGsOI02hOCXvJqttZCj0cvSQcIRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGWl7Pxj+PxLCx6cDRy2JwBd1g/8wHwYDVR0j BBgwFoAUccHv1d/eIEGKSQcGcbAdZ1+aiRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWVhYjQ0Mi03NDgwLTQ1ODEtODFkZC0yM2EyMDA2MTQzODIvMC83MUMxRUZENURG REUyMDQxOEE0OTA3MDY3MUIwMUQ2NzVGOUE4OTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFENjc1RjlB ODkxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVlYWI0NDItNzQ4MC00NTgxLTgx ZGQtMjNhMjAwNjE0MzgyLzAvNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFE Njc1RjlBODkxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4kQ03o9DlRvDE7sIoYIpLwuWKGB5d2hbh1 9/OV2ZmUXchIsbGA+DAlTajr8J/p1FAHNxWGze1woAvTB1FXWq7CE+9b2MSP6pJg a60lVzD7SOlvP3uyGNaOO7qUKUE01gkSK/m0yMQ8XBsQ7DPDwA1JB4kD2Ra1guj8 nvwiUzE6LvZOuFr6zaeqb0GPtrCekYpD9zOk62cxWJf1JJ6SV7DR0QnFU2SqTe4l LGcpT4SX/1SOMuBUM0EU5yaVQBcH956ok6MxikHaZzLxVBAlyARO3Mz/IwII4gRM RQKc6a7AZns3fuvGuN1qyNb7gb97OFubwUFOw7xu2706tvsJOXc= -----END CERTIFICATE-----Generated at Tue May 13 19:53:34 2025 by rpki-client