$ rpki-client -vvf repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft File: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft (raw, json) Hash identifier: y6jrtBsn03MkLMXwAdtA2da25AUVGUxjhNRY44V8iyc= Subject key identifier: FA:E9:9F:8D:4E:30:E4:AC:E9:89:2E:AF:F3:80:4F:C5:6F:FA:4D:92 Authority key identifier: A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB Certificate issuer: /CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Certificate serial: 59F1F3E98231057AFD34BE69E070E68A935EDA07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft Manifest number: 78 Signing time: Wed 07 May 2025 15:20:56 +0000 Manifest this update: Wed 07 May 2025 15:15:56 +0000 Manifest next update: Sat 10 May 2025 19:05:56 +0000 Files and hashes: 1: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl (hash: bavi71eGI1t9b+kBxlG1jZvIDLgT0dKUc70F9PwmrK4=) 2: 3136302e32302e33362e302f32332d3234203d3e20313532373631.roa (hash: avjOhQMHcwWGlDF7WDzZoOiS3u3B2hy6xJEOi4n8Cr0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 19:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f1:f3:e9:82:31:05:7a:fd:34:be:69:e0:70:e6:8a:93:5e:da:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Validity Not Before: May 7 15:15:56 2025 GMT Not After : May 10 19:05:56 2025 GMT Subject: CN=FAE99F8D4E30E4ACE9892EAFF3804FC56FFA4D92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c7:d1:14:c7:55:6b:1e:8f:fe:30:97:c9:49: 06:6d:2f:48:51:98:38:a8:76:0f:12:83:82:72:e0: ba:97:64:2a:0e:00:10:ff:79:65:ba:a7:ab:fe:ac: 1b:b8:c9:05:0a:73:06:0d:66:e8:d0:3b:af:66:2e: 79:e7:56:c9:59:07:03:a9:56:fe:ff:84:3e:5e:0f: 05:b9:91:18:e9:78:35:04:c5:31:ce:a3:04:a0:0d: f3:e9:c8:ba:14:ef:49:88:cd:5b:63:03:8f:73:d2: 51:98:5f:eb:7a:81:17:fb:dd:de:5c:19:a0:06:c2: 7e:08:f2:f3:46:b5:0d:53:9b:27:d5:7f:f4:dd:9a: 46:75:ab:93:73:a0:36:29:42:0e:53:86:1f:34:79: af:42:22:29:e4:30:af:76:23:8f:73:5f:d0:35:fa: c5:46:e9:0b:02:db:a7:79:7c:87:15:d1:d9:21:90: 34:d1:cd:82:c6:23:f9:36:0c:12:e1:83:cf:ab:3c: 74:85:1a:ee:f2:4c:35:9b:9c:32:07:44:b6:1a:65: c4:4c:49:43:21:49:6f:4f:3c:d0:bb:88:56:76:ef: f7:93:c2:e3:84:1e:5b:9f:b5:ca:6e:0f:e8:c8:e7: 8f:07:03:1f:a7:b9:e4:93:34:c9:4c:1b:ed:59:52: 74:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E9:9F:8D:4E:30:E4:AC:E9:89:2E:AF:F3:80:4F:C5:6F:FA:4D:92 X509v3 Authority Key Identifier: keyid:A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:2c:ec:3f:c1:af:b3:9d:d6:2b:e2:5b:a4:d2:57:58:60:3c: dd:4c:f2:a0:b9:62:12:ed:8b:7d:0e:ac:e6:91:89:5d:7e:1c: 31:8f:0b:80:d4:60:94:ee:f2:2f:f0:37:3e:ca:c8:ab:14:37: c1:40:5a:97:d9:d2:97:9f:5d:b8:1b:78:2d:28:f7:6e:8a:8f: 54:c8:38:be:22:02:d6:19:38:7b:f6:af:0e:50:39:3a:7e:2e: a1:77:18:42:73:94:cd:a9:18:c9:35:b6:b9:81:f7:37:ad:8b: de:e4:b1:8a:ed:59:0f:05:41:03:10:54:fc:6e:c2:be:8c:30: 0c:ba:a6:81:e0:68:31:6a:60:9a:98:d7:e2:2b:80:f3:53:5e: 37:39:ec:41:c0:2c:2b:48:33:83:5c:f9:59:e1:21:d6:2e:57: e5:b0:41:33:84:5f:aa:31:1b:d8:5f:23:10:7d:43:82:d5:c9: de:5b:c4:7b:2b:17:82:d0:70:7d:e0:7d:e7:c1:75:60:23:63: 5c:34:ba:53:ca:7b:e3:4a:0a:ea:48:00:ea:8e:4d:cd:f5:39: b4:de:fd:e4:bd:57:aa:ac:f3:16:3e:29:e5:02:f1:fd:a8:47: 05:47:f7:55:a5:6b:3b:64:3d:d9:0d:87:08:97:df:e7:87:de: 88:af:7a:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWfHz6YIxBXr9NL5p4HDmipNe2gcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1 RTUyRThFQjAeFw0yNTA1MDcxNTE1NTZaFw0yNTA1MTAxOTA1NTZaMDMxMTAvBgNV BAMTKEZBRTk5RjhENEUzMEU0QUNFOTg5MkVBRkYzODA0RkM1NkZGQTREOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChx9EUx1VrHo/+MJfJSQZtL0hR mDiodg8Sg4Jy4LqXZCoOABD/eWW6p6v+rBu4yQUKcwYNZujQO69mLnnnVslZBwOp Vv7/hD5eDwW5kRjpeDUExTHOowSgDfPpyLoU70mIzVtjA49z0lGYX+t6gRf73d5c GaAGwn4I8vNGtQ1TmyfVf/TdmkZ1q5NzoDYpQg5Thh80ea9CIinkMK92I49zX9A1 +sVG6QsC26d5fIcV0dkhkDTRzYLGI/k2DBLhg8+rPHSFGu7yTDWbnDIHRLYaZcRM SUMhSW9PPNC7iFZ27/eTwuOEHluftcpuD+jI548HAx+nueSTNMlMG+1ZUnQ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+umfjU4w5KzpiS6v84BPxW/6TZIwHwYDVR0j BBgwFoAUpxuqZmI4R7e9nqfEC8vKhV5S6OswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODFlZjQ0MC01YTVmLTRhNGYtYjUwOS1iMTAzMjQ1YzVjZjEvMC9BNzFCQUE2NjYy Mzg0N0I3QkQ5RUE3QzQwQkNCQ0E4NTVFNTJFOEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1RTUy RThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgxZWY0NDAtNWE1Zi00YTRmLWI1 MDktYjEwMzI0NWM1Y2YxLzAvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNB ODU1RTUyRThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8s7D/Br7Od1iviW6TSV1hgPN1M8qC5YhLt i30OrOaRiV1+HDGPC4DUYJTu8i/wNz7KyKsUN8FAWpfZ0pefXbgbeC0o926Kj1TI OL4iAtYZOHv2rw5QOTp+LqF3GEJzlM2pGMk1trmB9zeti97ksYrtWQ8FQQMQVPxu wr6MMAy6poHgaDFqYJqY1+IrgPNTXjc57EHALCtIM4Nc+VnhIdYuV+WwQTOEX6ox G9hfIxB9Q4LVyd5bxHsrF4LQcH3gfefBdWAjY1w0ulPKe+NKCupIAOqOTc31ObTe /eS9V6qs8xY+KeUC8f2oRwVH91WlaztkPdkNhwiX3+eH3oivehY= -----END CERTIFICATE-----Generated at Wed May 7 21:35:05 2025 by rpki-client