$ rpki-client -vvf repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft File: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft (raw, json) Hash identifier: xu6mzJUNtTszcZWcRu1SYSOTtE3RK1K9V9GGXJrIX84= Subject key identifier: A6:48:85:EA:ED:86:62:3F:E5:D0:36:49:A4:38:43:39:CA:85:B7:F5 Authority key identifier: A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB Certificate issuer: /CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Certificate serial: 5EBDBB7E1B6055260A6A60B5BABD3AA987300FF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft Manifest number: A8 Signing time: Sat 23 Aug 2025 16:50:57 +0000 Manifest this update: Sat 23 Aug 2025 16:45:57 +0000 Manifest next update: Tue 26 Aug 2025 20:20:57 +0000 Files and hashes: 1: 3136302e32302e33362e302f32332d3234203d3e20313532373631.roa (hash: e3Ye+8KBt0e+GgLTg5uGXR8hoI4RqWYobVVv7ZziGMY=) 2: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl (hash: n8ltm3SIslr/rLFvTLjiiEFqJgyICDSMNQQ9h4zjv7Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:bd:bb:7e:1b:60:55:26:0a:6a:60:b5:ba:bd:3a:a9:87:30:0f:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Validity Not Before: Aug 23 16:45:57 2025 GMT Not After : Aug 26 20:20:57 2025 GMT Subject: CN=A64885EAED86623FE5D03649A4384339CA85B7F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:69:88:b7:42:3f:e1:37:3a:19:df:56:ab:f9: 2c:2f:0d:5a:0b:52:23:5f:49:74:82:40:40:10:89: a5:ad:30:a8:5a:73:24:44:4a:df:e0:e4:22:c2:63: 3a:c1:21:b1:dd:b6:de:4c:9e:d3:99:ca:42:5f:3d: 2b:06:ff:e0:3e:e7:fd:78:af:b9:e5:90:fb:8a:6f: 49:48:1c:0b:0e:5e:f8:fe:b9:d1:98:a2:f0:4e:0e: 71:b8:8a:29:6e:89:91:71:97:56:c5:df:c2:38:8d: a2:9b:ac:ad:58:04:a9:6d:2c:91:7a:cd:e7:53:f1: 63:a7:ac:fc:3f:df:a1:56:67:5c:98:07:0a:09:e9: d3:34:83:a6:4b:b2:a1:f9:4a:5e:ed:30:fa:dc:5e: 98:2b:47:3e:ae:1c:bc:6d:42:0a:54:30:bb:65:b3: 67:17:c1:37:eb:ae:74:1f:1c:ed:42:ec:51:7a:ec: 47:ad:e8:c2:87:a3:02:30:36:fe:c2:4c:9c:ff:e2: 8f:03:a9:19:5f:1e:77:27:18:85:1f:b8:c8:f2:c5: d5:2a:3c:71:48:c3:0b:82:f8:8c:5d:4d:59:e3:bd: cc:07:0a:a2:ad:2c:be:de:d5:62:41:7a:21:c8:0d: cd:32:27:c1:3e:9b:ec:78:df:b3:f8:dc:57:fd:c1: f0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:48:85:EA:ED:86:62:3F:E5:D0:36:49:A4:38:43:39:CA:85:B7:F5 X509v3 Authority Key Identifier: keyid:A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:7e:0c:9d:ed:be:a0:0a:97:0f:c6:0a:51:c4:9f:95:62:a8: 89:08:76:f6:73:82:36:b5:b0:9b:1c:3f:44:10:04:61:9f:76: 6a:34:bb:3b:c8:c2:b7:4c:98:e9:5c:01:5d:29:30:47:26:b8: b4:bd:a4:c4:02:e9:7e:8b:14:2e:e7:62:dc:3f:ad:6b:3d:e0: 57:13:b1:62:a3:cc:52:20:e0:a9:40:b7:c1:8c:cb:f6:45:3e: e7:9c:0c:9a:06:fd:84:71:f9:0e:e9:bd:db:b3:e9:e6:b8:c1: b0:b6:70:2d:2e:b4:27:ef:00:51:03:5a:8f:a0:c2:fd:fc:59: aa:26:2b:97:87:d6:9d:d5:5d:cf:f8:a6:d2:78:44:c2:00:3b: d3:59:fc:0a:91:19:e4:28:11:04:9f:71:13:16:99:c9:ab:17: 61:a7:48:90:a2:f6:39:5c:e2:43:48:4d:8a:e7:44:57:0d:f2: 4a:ee:93:ed:8d:ba:4a:98:e1:d2:8e:5a:5e:1c:de:59:a9:db: 4d:2f:23:62:81:3e:7b:af:66:53:4c:ce:09:63:f9:6d:2f:7f: 34:48:84:63:d1:58:7a:78:0a:ac:b1:f2:fc:9b:10:98:86:fb: 7a:01:39:fa:33:5f:eb:1d:55:73:d1:f2:c4:31:3e:77:29:f8: e8:2c:66:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXr27fhtgVSYKamC1ur06qYcwD/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1 RTUyRThFQjAeFw0yNTA4MjMxNjQ1NTdaFw0yNTA4MjYyMDIwNTdaMDMxMTAvBgNV BAMTKEE2NDg4NUVBRUQ4NjYyM0ZFNUQwMzY0OUE0Mzg0MzM5Q0E4NUI3RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmaYi3Qj/hNzoZ31ar+SwvDVoL UiNfSXSCQEAQiaWtMKhacyRESt/g5CLCYzrBIbHdtt5MntOZykJfPSsG/+A+5/14 r7nlkPuKb0lIHAsOXvj+udGYovBODnG4iiluiZFxl1bF38I4jaKbrK1YBKltLJF6 zedT8WOnrPw/36FWZ1yYBwoJ6dM0g6ZLsqH5Sl7tMPrcXpgrRz6uHLxtQgpUMLtl s2cXwTfrrnQfHO1C7FF67Eet6MKHowIwNv7CTJz/4o8DqRlfHncnGIUfuMjyxdUq PHFIwwuC+IxdTVnjvcwHCqKtLL7e1WJBeiHIDc0yJ8E+m+x437P43Ff9wfBnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpkiF6u2GYj/l0DZJpDhDOcqFt/UwHwYDVR0j BBgwFoAUpxuqZmI4R7e9nqfEC8vKhV5S6OswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODFlZjQ0MC01YTVmLTRhNGYtYjUwOS1iMTAzMjQ1YzVjZjEvMC9BNzFCQUE2NjYy Mzg0N0I3QkQ5RUE3QzQwQkNCQ0E4NTVFNTJFOEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1RTUy RThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgxZWY0NDAtNWE1Zi00YTRmLWI1 MDktYjEwMzI0NWM1Y2YxLzAvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNB ODU1RTUyRThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG5+DJ3tvqAKlw/GClHEn5ViqIkIdvZzgja1 sJscP0QQBGGfdmo0uzvIwrdMmOlcAV0pMEcmuLS9pMQC6X6LFC7nYtw/rWs94FcT sWKjzFIg4KlAt8GMy/ZFPuecDJoG/YRx+Q7pvduz6ea4wbC2cC0utCfvAFEDWo+g wv38WaomK5eH1p3VXc/4ptJ4RMIAO9NZ/AqRGeQoEQSfcRMWmcmrF2GnSJCi9jlc 4kNITYrnRFcN8kruk+2NukqY4dKOWl4c3lmp200vI2KBPnuvZlNMzglj+W0vfzRI hGPRWHp4Cqyx8vybEJiG+3oBOfozX+sdVXPR8sQxPncp+OgsZus= -----END CERTIFICATE-----Generated at Sat Aug 23 21:59:44 2025 by rpki-client