$ rpki-client -vvf repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft File: 71054E3C02E22D607A90FACC4DE7369B65367EBD.mft (raw, json) Hash identifier: u3eLhFLZguRCsSxskDrTAVD7VTbIHmSQva02xWoenhc= Subject key identifier: 5A:30:2D:C7:35:24:A1:71:77:11:E3:8E:48:50:A6:75:4E:31:1B:B8 Authority key identifier: 71:05:4E:3C:02:E2:2D:60:7A:90:FA:CC:4D:E7:36:9B:65:36:7E:BD Certificate issuer: /CN=71054E3C02E22D607A90FACC4DE7369B65367EBD Certificate serial: 17DD8A49F5548E6F0BD60760167377386791A88D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft Manifest number: 013B Signing time: Sat 28 Jun 2025 07:10:45 +0000 Manifest this update: Sat 28 Jun 2025 07:05:45 +0000 Manifest next update: Tue 01 Jul 2025 12:09:45 +0000 Files and hashes: 1: 71054E3C02E22D607A90FACC4DE7369B65367EBD.crl (hash: b2l5vHfDltOL1Ye+a1rnze3jKqBaSrXmx0mk4MKG4b8=) 2: 3130332e32392e31302e302f32332d3234203d3e20313530323530.roa (hash: WJMrEDY6+yYCu4Iz5tUshsi6eLGdRGAnm2hsfXk5iwc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.crl rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 12:09:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:dd:8a:49:f5:54:8e:6f:0b:d6:07:60:16:73:77:38:67:91:a8:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71054E3C02E22D607A90FACC4DE7369B65367EBD Validity Not Before: Jun 28 07:05:45 2025 GMT Not After : Jul 1 12:09:45 2025 GMT Subject: CN=5A302DC73524A1717711E38E4850A6754E311BB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bb:5c:c7:e6:f1:1c:f5:2d:94:72:44:04:cc: 85:2d:f1:e4:1a:34:01:67:15:de:65:8c:25:a5:27: 57:ac:fa:1c:15:11:4c:22:08:24:25:ee:64:34:2e: 8a:f7:f9:fd:4a:e4:5a:1d:26:67:5b:6a:a7:ab:38: 45:16:83:7e:2d:b6:2b:0f:5b:eb:8c:bb:aa:13:74: cf:e6:31:89:f7:69:a9:2f:91:5f:8a:86:27:60:f2: fb:17:f2:2e:a9:45:c4:e5:5d:b9:87:f1:be:bd:f4: be:27:ce:71:6d:de:14:c8:46:d9:35:84:5d:8a:4a: fc:ae:ec:54:8a:0a:73:a4:fd:2f:9f:28:34:a2:56: 4f:ae:6f:c5:3a:a4:77:32:bc:ce:1d:fb:08:75:78: 35:bc:4f:d3:c5:10:d6:b9:9f:15:5c:08:05:0c:c6: be:0c:ea:3d:cf:f7:b8:ca:6c:82:8f:ca:55:e0:5d: 52:f9:fb:81:e5:e0:68:c3:0b:bf:b8:fa:fd:13:94: bb:b3:21:b1:d7:d3:43:d1:73:c5:27:2a:3a:a8:4f: 84:90:e9:61:e6:09:1f:f0:48:f7:c8:e5:78:c8:e0: f6:80:b3:7f:69:01:59:15:8f:8c:8a:d3:43:a0:48: 12:28:00:b7:a2:2c:c9:50:33:0c:cc:a7:b4:93:0e: b3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:30:2D:C7:35:24:A1:71:77:11:E3:8E:48:50:A6:75:4E:31:1B:B8 X509v3 Authority Key Identifier: keyid:71:05:4E:3C:02:E2:2D:60:7A:90:FA:CC:4D:E7:36:9B:65:36:7E:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:58:ca:b3:ad:3c:56:af:c4:de:78:00:19:c2:78:fb:66:cd: ef:a7:c5:b7:04:fa:a5:23:08:3c:80:09:bf:d7:78:3f:6a:f0: 10:07:ad:00:e8:70:5b:5b:2e:d8:e7:1f:f3:2d:5a:66:6e:c6: 71:1c:68:0d:d3:eb:2a:fd:2c:bc:cd:0b:e3:4b:8b:37:84:d2: 76:da:09:ee:67:37:0b:38:98:c1:26:f7:9c:38:5e:8e:79:8e: ae:87:2d:9a:ff:22:0e:a3:78:f9:d2:26:8f:22:f8:28:67:3c: 52:0d:d8:dd:dd:14:90:5a:e1:69:cf:8c:b7:fd:fb:55:6e:d7: 91:71:30:bd:6f:0e:76:b9:c1:b9:60:3c:df:0a:cb:8a:b5:01: 73:ba:d0:ff:15:0c:56:4f:78:a3:d7:11:61:9e:87:0e:a9:96: f3:67:22:80:fe:be:72:69:d7:44:13:c3:18:e2:a2:02:c1:0c: dd:ad:ed:f4:45:1a:f7:92:1f:55:df:dd:07:13:90:1d:58:d3: e8:94:82:fc:7e:05:3e:cd:4b:4f:3d:93:f8:d6:19:74:a6:af: 06:00:0b:9a:b9:cd:55:d1:d0:9f:b9:b5:40:d2:37:ee:51:c8: 33:8e:81:02:a0:d6:6b:28:f4:fe:69:99:aa:a8:bd:b8:85:41: 9a:dc:09:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF92KSfVUjm8L1gdgFnN3OGeRqI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzEwNTRFM0MwMkUyMkQ2MDdBOTBGQUNDNERFNzM2OUI2 NTM2N0VCRDAeFw0yNTA2MjgwNzA1NDVaFw0yNTA3MDExMjA5NDVaMDMxMTAvBgNV BAMTKDVBMzAyREM3MzUyNEExNzE3NzExRTM4RTQ4NTBBNjc1NEUzMTFCQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqu1zH5vEc9S2UckQEzIUt8eQa NAFnFd5ljCWlJ1es+hwVEUwiCCQl7mQ0Lor3+f1K5FodJmdbaqerOEUWg34ttisP W+uMu6oTdM/mMYn3aakvkV+Khidg8vsX8i6pRcTlXbmH8b699L4nznFt3hTIRtk1 hF2KSvyu7FSKCnOk/S+fKDSiVk+ub8U6pHcyvM4d+wh1eDW8T9PFENa5nxVcCAUM xr4M6j3P97jKbIKPylXgXVL5+4Hl4GjDC7+4+v0TlLuzIbHX00PRc8UnKjqoT4SQ 6WHmCR/wSPfI5XjI4PaAs39pAVkVj4yK00OgSBIoALeiLMlQMwzMp7STDrMpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWjAtxzUkoXF3EeOOSFCmdU4xG7gwHwYDVR0j BBgwFoAUcQVOPALiLWB6kPrMTec2m2U2fr0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTUzMmM2NS04MGJlLTRmZGUtODdkMC0zNmM1YmQyODhjZDgvMC83MTA1NEUzQzAy RTIyRDYwN0E5MEZBQ0M0REU3MzY5QjY1MzY3RUJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzEwNTRFM0MwMkUyMkQ2MDdBOTBGQUNDNERFNzM2OUI2NTM2 N0VCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1MzJjNjUtODBiZS00ZmRlLTg3 ZDAtMzZjNWJkMjg4Y2Q4LzAvNzEwNTRFM0MwMkUyMkQ2MDdBOTBGQUNDNERFNzM2 OUI2NTM2N0VCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMtYyrOtPFavxN54ABnCePtmze+nxbcE+qUj CDyACb/XeD9q8BAHrQDocFtbLtjnH/MtWmZuxnEcaA3T6yr9LLzNC+NLizeE0nba Ce5nNws4mMEm95w4Xo55jq6HLZr/Ig6jePnSJo8i+ChnPFIN2N3dFJBa4WnPjLf9 +1Vu15FxML1vDna5wblgPN8Ky4q1AXO60P8VDFZPeKPXEWGehw6plvNnIoD+vnJp 10QTwxjiogLBDN2t7fRFGveSH1Xf3QcTkB1Y0+iUgvx+BT7NS089k/jWGXSmrwYA C5q5zVXR0J+5tUDSN+5RyDOOgQKg1mso9P5pmaqovbiFQZrcCcI= -----END CERTIFICATE-----Generated at Mon Jun 30 02:20:49 2025 by rpki-client