$ rpki-client -vvf repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft File: 71054E3C02E22D607A90FACC4DE7369B65367EBD.mft (raw, json) Hash identifier: 0MYG+Yc9kl1Ij8YM8r94jq5mPuD9KKTPepzNAdUwZRo= Subject key identifier: 4A:C8:83:70:D8:B7:CE:9F:DB:C2:A2:A9:2E:B0:33:43:1D:56:77:D0 Authority key identifier: 71:05:4E:3C:02:E2:2D:60:7A:90:FA:CC:4D:E7:36:9B:65:36:7E:BD Certificate issuer: /CN=71054E3C02E22D607A90FACC4DE7369B65367EBD Certificate serial: 64609FD3E52852D523E010255A43C860C3A9B8C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft Manifest number: 0154 Signing time: Fri 22 Aug 2025 13:00:46 +0000 Manifest this update: Fri 22 Aug 2025 12:55:46 +0000 Manifest next update: Mon 25 Aug 2025 15:33:46 +0000 Files and hashes: 1: 71054E3C02E22D607A90FACC4DE7369B65367EBD.crl (hash: A2DM1VZZeGpLFmhNQZrcuLOz43zwWq/qsDHFaYv0aFE=) 2: 3130332e32392e31302e302f32332d3234203d3e20313530323530.roa (hash: WJMrEDY6+yYCu4Iz5tUshsi6eLGdRGAnm2hsfXk5iwc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.crl rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:60:9f:d3:e5:28:52:d5:23:e0:10:25:5a:43:c8:60:c3:a9:b8:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71054E3C02E22D607A90FACC4DE7369B65367EBD Validity Not Before: Aug 22 12:55:46 2025 GMT Not After : Aug 25 15:33:46 2025 GMT Subject: CN=4AC88370D8B7CE9FDBC2A2A92EB033431D5677D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d1:b2:b5:87:3c:c4:d3:58:8c:00:c4:57:d4: 8b:9d:ba:2f:da:6c:4d:2d:54:af:00:8c:6c:79:b9: 64:da:72:72:92:70:54:f5:18:39:20:b9:43:06:e0: 29:fc:b4:9a:80:b3:00:6d:7f:91:3e:7a:6f:51:4c: 90:79:f1:7d:c6:3b:12:db:9f:83:84:89:8f:9d:b8: c3:11:3e:04:0a:35:a7:11:35:8a:e1:fb:c7:51:62: c5:20:5e:68:ae:75:24:9e:de:47:de:b7:ba:e2:1b: 56:35:c4:69:60:8f:22:2d:07:31:63:10:9d:f1:af: 71:85:20:5f:4b:dc:da:eb:80:ce:96:26:b7:2d:94: 1a:94:aa:1f:05:9b:c8:b6:d6:d1:00:ac:03:ca:80: df:90:cf:cf:98:dd:07:de:d9:80:e5:97:15:25:12: b9:77:fc:e2:53:3b:29:de:21:e2:71:c6:2f:db:50: 52:d5:70:f8:02:65:75:b4:fc:c3:ea:14:c4:5c:fd: 25:02:12:6f:66:ba:fd:d5:83:9c:ef:2a:78:39:94: 64:4d:3d:39:04:6d:dd:7d:57:54:a9:e5:22:56:2e: 4c:ec:6e:ee:56:c6:4d:b8:23:52:93:b7:15:97:32: 72:f1:4e:0a:a9:c3:81:55:27:49:8a:04:89:43:b3: 5e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C8:83:70:D8:B7:CE:9F:DB:C2:A2:A9:2E:B0:33:43:1D:56:77:D0 X509v3 Authority Key Identifier: keyid:71:05:4E:3C:02:E2:2D:60:7A:90:FA:CC:4D:E7:36:9B:65:36:7E:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:43:b5:fe:5c:09:10:d6:85:58:95:f4:9a:50:82:9b:ba:8d: 15:89:d2:1a:d2:d6:54:2a:09:b6:64:7d:a0:ed:73:04:89:18: ab:32:6e:49:cc:dd:cc:20:b5:cb:19:96:cc:d3:17:d0:18:ef: 90:5f:c2:88:9b:76:7c:b6:0e:68:8e:0e:81:8f:e1:a1:ba:6e: f6:0f:d8:10:65:96:87:9d:1e:02:67:55:96:17:27:e8:91:b2: 36:19:4b:c8:a3:df:16:26:93:8b:c7:03:75:a9:24:9f:31:67: 6a:f0:21:19:ec:e1:db:94:bc:7a:37:0f:2f:3c:49:df:64:81: ba:8d:24:1c:1c:93:3b:fc:f5:89:b2:b0:db:65:ab:50:a9:00: fb:77:7b:f9:70:d3:aa:fd:a2:11:09:79:1d:18:50:b1:2a:81: 28:28:45:47:9d:cd:5b:2d:a8:52:42:1b:d5:14:0f:78:aa:02: cc:59:16:4f:a8:a0:1a:ea:6d:10:f2:0a:be:16:8f:44:dd:5b: 07:46:a1:ea:12:d3:31:68:24:af:91:bc:bc:b1:35:8d:07:14: 31:fc:d9:ae:8c:08:d4:66:25:7d:e3:6f:c8:06:e9:f0:4b:c4: e0:ed:b7:7f:99:90:68:6c:32:68:ce:b4:15:85:ac:05:05:d3: d3:5b:ff:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZGCf0+UoUtUj4BAlWkPIYMOpuMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzEwNTRFM0MwMkUyMkQ2MDdBOTBGQUNDNERFNzM2OUI2 NTM2N0VCRDAeFw0yNTA4MjIxMjU1NDZaFw0yNTA4MjUxNTMzNDZaMDMxMTAvBgNV BAMTKDRBQzg4MzcwRDhCN0NFOUZEQkMyQTJBOTJFQjAzMzQzMUQ1Njc3RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY0bK1hzzE01iMAMRX1Iudui/a bE0tVK8AjGx5uWTacnKScFT1GDkguUMG4Cn8tJqAswBtf5E+em9RTJB58X3GOxLb n4OEiY+duMMRPgQKNacRNYrh+8dRYsUgXmiudSSe3kfet7riG1Y1xGlgjyItBzFj EJ3xr3GFIF9L3NrrgM6WJrctlBqUqh8Fm8i21tEArAPKgN+Qz8+Y3Qfe2YDllxUl Erl3/OJTOyneIeJxxi/bUFLVcPgCZXW0/MPqFMRc/SUCEm9muv3Vg5zvKng5lGRN PTkEbd19V1Sp5SJWLkzsbu5Wxk24I1KTtxWXMnLxTgqpw4FVJ0mKBIlDs17fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSsiDcNi3zp/bwqKpLrAzQx1Wd9AwHwYDVR0j BBgwFoAUcQVOPALiLWB6kPrMTec2m2U2fr0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTUzMmM2NS04MGJlLTRmZGUtODdkMC0zNmM1YmQyODhjZDgvMC83MTA1NEUzQzAy RTIyRDYwN0E5MEZBQ0M0REU3MzY5QjY1MzY3RUJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzEwNTRFM0MwMkUyMkQ2MDdBOTBGQUNDNERFNzM2OUI2NTM2 N0VCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1MzJjNjUtODBiZS00ZmRlLTg3 ZDAtMzZjNWJkMjg4Y2Q4LzAvNzEwNTRFM0MwMkUyMkQ2MDdBOTBGQUNDNERFNzM2 OUI2NTM2N0VCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChDtf5cCRDWhViV9JpQgpu6jRWJ0hrS1lQq CbZkfaDtcwSJGKsybknM3cwgtcsZlszTF9AY75Bfwoibdny2DmiODoGP4aG6bvYP 2BBlloedHgJnVZYXJ+iRsjYZS8ij3xYmk4vHA3WpJJ8xZ2rwIRns4duUvHo3Dy88 Sd9kgbqNJBwckzv89YmysNtlq1CpAPt3e/lw06r9ohEJeR0YULEqgSgoRUedzVst qFJCG9UUD3iqAsxZFk+ooBrqbRDyCr4Wj0TdWwdGoeoS0zFoJK+RvLyxNY0HFDH8 2a6MCNRmJX3jb8gG6fBLxODtt3+ZkGhsMmjOtBWFrAUF09Nb/2k= -----END CERTIFICATE-----Generated at Sat Aug 23 13:04:15 2025 by rpki-client