$ rpki-client -vvf repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft File: 871B4235DFC56C482416E7BBA192562092FFE055.mft (raw, json) Hash identifier: 529hmc7pl9+rAL2dD8HU4hSh3VXypf/1zX2nVmgV+T0= Subject key identifier: B7:20:E8:3E:99:0D:10:7F:5F:12:BE:FB:8F:DF:3E:32:71:CB:F0:11 Authority key identifier: 87:1B:42:35:DF:C5:6C:48:24:16:E7:BB:A1:92:56:20:92:FF:E0:55 Certificate issuer: /CN=871B4235DFC56C482416E7BBA192562092FFE055 Certificate serial: 0772C2D270723FDC4224370EF75B0CFACAD6FE93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft Manifest number: D1 Signing time: Mon 30 Jun 2025 06:02:08 +0000 Manifest this update: Mon 30 Jun 2025 05:57:08 +0000 Manifest next update: Thu 03 Jul 2025 12:23:08 +0000 Files and hashes: 1: 3135372e32302e39322e302f32332d3234203d3e20313532343037.roa (hash: dOMygz5zltbqlA4IY/6P2zi8X+0Vf9OQi3HjL4HaSVo=) 2: 871B4235DFC56C482416E7BBA192562092FFE055.crl (hash: 5RCJnwAmip63y2vtWdhHiPWV/JmMLu4h2++CorKlGls=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.crl rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 12:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:72:c2:d2:70:72:3f:dc:42:24:37:0e:f7:5b:0c:fa:ca:d6:fe:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871B4235DFC56C482416E7BBA192562092FFE055 Validity Not Before: Jun 30 05:57:08 2025 GMT Not After : Jul 3 12:23:08 2025 GMT Subject: CN=B720E83E990D107F5F12BEFB8FDF3E3271CBF011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:aa:7a:bf:b8:64:b4:88:ee:cf:c6:eb:80:a6: 94:2c:24:1d:49:1d:60:6e:1e:0c:08:65:59:e5:ed: a5:4b:82:da:cd:56:7e:05:04:08:b2:f7:3f:78:c9: 75:23:a5:87:3f:0d:8e:a8:de:91:a7:c4:2b:e0:4f: 2e:aa:e3:02:91:50:f3:95:ef:07:2f:69:bd:62:95: f1:02:53:4a:4f:9d:c2:6d:b2:3b:94:21:b4:20:fe: c3:06:d1:8b:d6:a2:e3:15:11:38:5b:7b:38:e7:14: 36:fa:0f:0a:9c:0e:08:f7:3b:02:47:28:a2:66:9e: 43:d5:cd:46:84:68:24:0b:17:e7:81:ff:98:14:60: 07:c4:4e:5a:cb:16:e8:7b:c7:49:0a:ca:bf:a2:87: 7d:f9:57:85:6b:df:ba:d9:ef:91:b4:16:4f:d1:5a: b5:6d:e8:6b:4c:c1:98:3d:63:2f:e9:97:1f:3d:e1: 3f:70:a9:84:14:3b:b5:26:64:3d:81:32:c0:65:d5: dc:74:ce:14:fa:ee:3d:fc:87:ce:54:34:7b:df:9d: d1:e9:cd:72:92:38:01:9e:b2:2f:27:21:b5:b8:13: 19:cf:e6:aa:a2:3d:cf:ac:21:a9:96:e5:eb:1f:c1: 8e:dd:54:ab:81:eb:3d:b8:74:4f:14:dd:45:92:c5: 17:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:20:E8:3E:99:0D:10:7F:5F:12:BE:FB:8F:DF:3E:32:71:CB:F0:11 X509v3 Authority Key Identifier: keyid:87:1B:42:35:DF:C5:6C:48:24:16:E7:BB:A1:92:56:20:92:FF:E0:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:bd:32:57:bd:e3:60:8e:88:56:1b:ab:3c:b0:3f:98:72:fd: 73:40:fb:4e:07:fc:12:85:63:42:58:ac:ef:e3:28:ae:e4:73: 5c:50:e1:26:e9:79:d9:2e:4d:c0:45:1a:88:98:e6:d2:84:e2: 98:39:a4:c2:54:0a:0b:40:c3:17:e9:ba:49:18:5c:96:40:cf: 63:5a:66:f1:95:ea:75:73:c9:46:60:46:0b:bc:6f:87:2f:df: cc:82:01:be:1c:65:71:3a:5f:a2:05:4e:61:ff:6f:1d:75:a7: c3:f1:5a:31:f5:bc:73:ff:ae:46:8f:9f:0c:c0:82:0f:fe:24: 1a:f3:ec:d4:31:89:7e:99:04:36:be:d1:da:41:5b:dc:64:9d: e4:ee:1f:06:16:e3:f7:8b:b4:d3:77:8d:bd:f1:32:72:78:14: b6:42:e4:97:2e:a3:51:76:ad:ca:fc:b0:79:d8:c4:f0:69:d2: e2:72:5d:30:d1:89:7b:29:d8:ed:bb:37:f1:8b:80:c4:64:85: 14:20:61:c4:e1:cc:53:9b:91:7d:a7:47:0b:82:47:9c:0a:1b: ad:9d:46:59:bc:2e:9a:dc:f8:ab:58:49:7a:a0:2f:c0:ae:89: 0d:30:51:a2:b5:6f:fd:36:12:96:44:03:b7:ad:f7:3d:cb:b3: 63:d4:c0:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB3LC0nByP9xCJDcO91sM+srW/pMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxQjQyMzVERkM1NkM0ODI0MTZFN0JCQTE5MjU2MjA5 MkZGRTA1NTAeFw0yNTA2MzAwNTU3MDhaFw0yNTA3MDMxMjIzMDhaMDMxMTAvBgNV BAMTKEI3MjBFODNFOTkwRDEwN0Y1RjEyQkVGQjhGREYzRTMyNzFDQkYwMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwqnq/uGS0iO7PxuuAppQsJB1J HWBuHgwIZVnl7aVLgtrNVn4FBAiy9z94yXUjpYc/DY6o3pGnxCvgTy6q4wKRUPOV 7wcvab1ilfECU0pPncJtsjuUIbQg/sMG0YvWouMVEThbezjnFDb6DwqcDgj3OwJH KKJmnkPVzUaEaCQLF+eB/5gUYAfETlrLFuh7x0kKyr+ih335V4Vr37rZ75G0Fk/R WrVt6GtMwZg9Yy/plx894T9wqYQUO7UmZD2BMsBl1dx0zhT67j38h85UNHvfndHp zXKSOAGesi8nIbW4ExnP5qqiPc+sIamW5esfwY7dVKuB6z24dE8U3UWSxRfjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtyDoPpkNEH9fEr77j98+MnHL8BEwHwYDVR0j BBgwFoAUhxtCNd/FbEgkFue7oZJWIJL/4FUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YTg5NmZkYy01NjM4LTQxZDItOGE5OS02OGNlODE2YmQzY2YvMC84NzFCNDIzNURG QzU2QzQ4MjQxNkU3QkJBMTkyNTYyMDkyRkZFMDU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODcxQjQyMzVERkM1NkM0ODI0MTZFN0JCQTE5MjU2MjA5MkZG RTA1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmE4OTZmZGMtNTYzOC00MWQyLThh OTktNjhjZTgxNmJkM2NmLzAvODcxQjQyMzVERkM1NkM0ODI0MTZFN0JCQTE5MjU2 MjA5MkZGRTA1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOK9Mle942COiFYbqzywP5hy/XNA+04H/BKF Y0JYrO/jKK7kc1xQ4SbpedkuTcBFGoiY5tKE4pg5pMJUCgtAwxfpukkYXJZAz2Na ZvGV6nVzyUZgRgu8b4cv38yCAb4cZXE6X6IFTmH/bx11p8PxWjH1vHP/rkaPnwzA gg/+JBrz7NQxiX6ZBDa+0dpBW9xkneTuHwYW4/eLtNN3jb3xMnJ4FLZC5Jcuo1F2 rcr8sHnYxPBp0uJyXTDRiXsp2O27N/GLgMRkhRQgYcThzFObkX2nRwuCR5wKG62d Rlm8Lprc+KtYSXqgL8CuiQ0wUaK1b/02EpZEA7et9z3Ls2PUwDc= -----END CERTIFICATE-----Generated at Mon Jun 30 16:27:59 2025 by rpki-client