$ rpki-client -vvf repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft File: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft (raw, json) Hash identifier: R47o4ELf/4390qEOzLS7ty7oXveqe66KdhDWee/K8hs= Subject key identifier: D8:5F:A6:C5:C4:D8:B5:03:39:A3:DB:7D:AA:28:A9:A4:15:0E:CE:31 Authority key identifier: A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB Certificate issuer: /CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Certificate serial: 3F4DE3CF3C2DB86A78E08E04FB25E107710BB787 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft Manifest number: 8F Signing time: Sat 28 Jun 2025 17:50:56 +0000 Manifest this update: Sat 28 Jun 2025 17:45:56 +0000 Manifest next update: Tue 01 Jul 2025 22:24:56 +0000 Files and hashes: 1: 3136302e32302e33362e302f32332d3234203d3e20313532373631.roa (hash: avjOhQMHcwWGlDF7WDzZoOiS3u3B2hy6xJEOi4n8Cr0=) 2: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl (hash: f0EEroM+y/i/Kx7p3mliXncZxQrKDiitvDJUjKnpYkw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 22:24:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:4d:e3:cf:3c:2d:b8:6a:78:e0:8e:04:fb:25:e1:07:71:0b:b7:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Validity Not Before: Jun 28 17:45:56 2025 GMT Not After : Jul 1 22:24:56 2025 GMT Subject: CN=D85FA6C5C4D8B50339A3DB7DAA28A9A4150ECE31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:83:f6:98:50:76:4a:7f:df:10:0f:4c:8a:ff: 7f:15:01:95:ec:5e:0e:f6:19:39:96:8f:33:80:89: d0:7a:bc:1f:ee:d6:e2:a4:3e:02:5d:50:a0:ee:26: ff:57:59:f3:0a:f9:cd:3e:c7:b7:0c:aa:b2:43:08: 79:df:46:7d:6f:55:5e:f3:dc:91:c3:de:dc:95:1b: e3:da:77:66:95:24:1b:1b:28:4e:5f:78:84:3c:aa: 8d:d2:b7:12:77:93:bf:8d:47:da:37:73:c1:23:8c: ab:e7:ab:36:2d:8d:c1:fa:bd:e1:cd:4c:33:88:86: ad:1f:13:88:ca:62:38:85:b9:ed:31:d4:32:20:83: 84:a6:7c:6a:79:3b:99:3c:34:f5:f4:0b:ac:28:1a: a3:55:22:c3:bb:44:c0:c7:22:a2:81:fc:a0:3d:f9: 57:0f:5d:3a:f7:e0:aa:39:41:32:0c:1a:f5:c8:01: 0b:5b:ab:b0:19:77:c2:8e:82:1a:04:81:9e:92:34: 2d:e9:9c:65:8e:8a:26:5d:33:26:25:5b:7a:9a:06: bc:4c:ed:1f:6d:3b:40:46:ca:53:04:ee:74:f3:e9: 4a:73:b8:b7:48:0e:00:d9:12:02:6c:8d:89:7c:19: 9b:ff:22:4c:49:42:93:eb:21:ef:84:e9:08:8c:5a: 6f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5F:A6:C5:C4:D8:B5:03:39:A3:DB:7D:AA:28:A9:A4:15:0E:CE:31 X509v3 Authority Key Identifier: keyid:A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:c9:2e:cd:44:d0:0c:14:f7:5e:65:70:e9:19:e6:3b:19:6d: 15:e5:c0:d1:18:c5:9c:97:90:19:fa:c7:1d:0e:09:71:5f:f4: ac:c3:2f:d4:10:9c:73:3b:a2:9a:d6:4d:42:de:6f:91:dd:73: 5a:07:8b:c4:bc:0e:7d:61:2e:fb:ac:52:98:65:84:bb:a3:74: 1f:36:b2:a2:6b:ad:50:74:e5:65:13:25:dc:d1:54:72:b0:ae: 6c:d5:63:73:5f:0b:1e:93:02:e4:70:10:d2:e8:18:2e:0f:18: 2b:4a:08:09:67:ff:73:9a:04:1c:c9:86:e8:c1:70:a2:60:cc: e8:49:ae:00:c1:52:15:f8:af:71:a5:45:04:ef:ea:64:5d:7a: f5:da:99:81:32:f2:79:05:24:2c:49:ec:c7:8d:eb:a9:f1:59: b4:1b:62:22:70:82:d5:2e:8c:99:df:a2:1a:d4:cc:23:e7:ba: 18:63:bc:5f:fb:d7:38:67:ac:e3:a5:56:25:ea:2f:dd:bc:3c: a4:a2:65:47:cf:01:69:7f:28:d9:e5:de:ab:f4:74:78:b0:bf: 6f:16:a9:bf:75:28:aa:ec:59:28:48:da:c0:d3:f3:ee:c0:4d: 29:c6:a0:7e:92:54:15:95:58:09:52:ce:3c:7b:9d:ee:b1:c7: fb:25:b6:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP03jzzwtuGp44I4E+yXhB3ELt4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1 RTUyRThFQjAeFw0yNTA2MjgxNzQ1NTZaFw0yNTA3MDEyMjI0NTZaMDMxMTAvBgNV BAMTKEQ4NUZBNkM1QzREOEI1MDMzOUEzREI3REFBMjhBOUE0MTUwRUNFMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0g/aYUHZKf98QD0yK/38VAZXs Xg72GTmWjzOAidB6vB/u1uKkPgJdUKDuJv9XWfMK+c0+x7cMqrJDCHnfRn1vVV7z 3JHD3tyVG+Pad2aVJBsbKE5feIQ8qo3StxJ3k7+NR9o3c8EjjKvnqzYtjcH6veHN TDOIhq0fE4jKYjiFue0x1DIgg4SmfGp5O5k8NPX0C6woGqNVIsO7RMDHIqKB/KA9 +VcPXTr34Ko5QTIMGvXIAQtbq7AZd8KOghoEgZ6SNC3pnGWOiiZdMyYlW3qaBrxM 7R9tO0BGylME7nTz6UpzuLdIDgDZEgJsjYl8GZv/IkxJQpPrIe+E6QiMWm9TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2F+mxcTYtQM5o9t9qiippBUOzjEwHwYDVR0j BBgwFoAUpxuqZmI4R7e9nqfEC8vKhV5S6OswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODFlZjQ0MC01YTVmLTRhNGYtYjUwOS1iMTAzMjQ1YzVjZjEvMC9BNzFCQUE2NjYy Mzg0N0I3QkQ5RUE3QzQwQkNCQ0E4NTVFNTJFOEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1RTUy RThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgxZWY0NDAtNWE1Zi00YTRmLWI1 MDktYjEwMzI0NWM1Y2YxLzAvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNB ODU1RTUyRThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHJLs1E0AwU915lcOkZ5jsZbRXlwNEYxZyX kBn6xx0OCXFf9KzDL9QQnHM7oprWTULeb5Hdc1oHi8S8Dn1hLvusUphlhLujdB82 sqJrrVB05WUTJdzRVHKwrmzVY3NfCx6TAuRwENLoGC4PGCtKCAln/3OaBBzJhujB cKJgzOhJrgDBUhX4r3GlRQTv6mRdevXamYEy8nkFJCxJ7MeN66nxWbQbYiJwgtUu jJnfohrUzCPnuhhjvF/71zhnrOOlViXqL928PKSiZUfPAWl/KNnl3qv0dHiwv28W qb91KKrsWShI2sDT8+7ATSnGoH6SVBWVWAlSzjx7ne6xx/sltpk= -----END CERTIFICATE-----Generated at Mon Jun 30 10:59:44 2025 by rpki-client