$ rpki-client -vvf repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft File: 71876CD3DD087E9543A347F614A4D24A87A40F95.mft (raw, json) Hash identifier: 1h1kcvK32hbFf8ByaPZpcvmhUBEi6K991apK/DngwEU= Subject key identifier: EC:C8:F5:14:36:A2:12:59:8C:37:C8:82:A9:76:20:BD:39:68:29:2A Authority key identifier: 71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95 Certificate issuer: /CN=71876CD3DD087E9543A347F614A4D24A87A40F95 Certificate serial: 4690444031DB5D54853BFFF98D62944200C1881E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft Manifest number: 01A9 Signing time: Thu 21 Aug 2025 10:10:46 +0000 Manifest this update: Thu 21 Aug 2025 10:05:46 +0000 Manifest next update: Sun 24 Aug 2025 15:43:46 +0000 Files and hashes: 1: 3130332e3135382e3133302e302f32342d3234203d3e20313431313238.roa (hash: V2nbf4Xerdo+UlaGtEEFCDfKfKUg2cbilII6qfqHQqs=) 2: 71876CD3DD087E9543A347F614A4D24A87A40F95.crl (hash: +BIo4ZcsmglEi4iWk2mI/d2/osrwpYE3e0T09zs5+cc=) 3: 3130332e3130372e3230362e302f32342d3234203d3e20313431313238.roa (hash: ci5I/MxrgoJ1rfjV0dWp5xS5P0hJgjy6xXmWTHTwpMQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 15:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:90:44:40:31:db:5d:54:85:3b:ff:f9:8d:62:94:42:00:c1:88:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71876CD3DD087E9543A347F614A4D24A87A40F95 Validity Not Before: Aug 21 10:05:46 2025 GMT Not After : Aug 24 15:43:46 2025 GMT Subject: CN=ECC8F51436A212598C37C882A97620BD3968292A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:99:28:75:29:d3:93:9d:98:7b:99:7c:d3:1f: 6e:33:fd:24:0a:fb:a5:b9:52:dd:43:9b:28:32:bf: 21:70:0a:90:17:17:b9:1d:8a:84:62:4e:97:c4:a7: c2:34:fe:c8:ef:c3:c4:88:c0:86:c8:a3:3e:f7:bb: bb:0b:d6:cd:78:6a:59:41:96:45:d9:48:f4:aa:b9: 1c:f9:a5:77:a6:39:42:10:57:98:26:c6:a4:df:e5: 2f:95:25:10:86:64:49:2e:18:8b:39:24:9c:86:ba: 3f:3f:c8:e8:22:c3:48:79:a9:18:8a:2a:c9:c0:0e: db:17:6b:dd:f5:0c:32:c9:10:e6:8b:d2:22:6f:cf: 74:8d:39:79:bf:df:13:ce:82:c3:89:df:84:8c:13: e0:b9:92:28:2a:43:49:6d:a3:0e:22:16:e7:9c:24: e7:1b:cd:15:cf:af:22:79:72:ec:12:c1:1d:6c:f3: 21:a2:3c:a2:12:26:6b:2b:30:14:bf:e6:a7:1d:cf: 0a:28:e0:0e:62:5b:14:de:45:cd:97:fb:05:ed:c5: ce:21:9d:3d:0b:cb:79:ea:5c:68:57:2b:ce:86:2c: 3a:cb:c9:95:23:50:24:75:17:da:70:da:8c:18:f7: 2b:ee:83:f3:c0:f6:11:1d:93:d7:1e:94:c3:e3:2d: a1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C8:F5:14:36:A2:12:59:8C:37:C8:82:A9:76:20:BD:39:68:29:2A X509v3 Authority Key Identifier: keyid:71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:81:6e:85:57:16:5d:27:87:d8:e6:8d:60:44:7f:c8:4f:52: 64:55:b5:b8:0c:6b:ab:db:0d:1b:8e:a4:46:14:fa:b0:04:05: 19:45:d2:5e:71:26:4f:e6:18:88:bf:c8:38:25:7a:4b:05:8f: 23:a3:4e:92:8d:57:e1:3a:7a:e8:81:e8:fa:d3:ba:e7:ef:e6: d6:b7:c9:e7:9e:67:1d:51:91:38:ea:8a:19:34:e7:28:ae:41: f1:7f:8f:88:b0:0a:51:39:3d:30:9b:f4:10:5b:60:aa:57:fe: 54:d2:a7:29:8e:d4:d4:71:8d:c7:a9:c0:27:f3:95:cc:57:f0: c1:3a:88:a3:b6:a8:5d:89:0d:b9:c4:b1:09:0a:2e:c9:72:6f: 7b:5d:55:76:39:ac:5d:cb:2d:27:52:e8:d4:81:90:f3:90:a2: c3:ba:fe:21:dd:83:b9:53:76:7a:ae:05:87:a4:6a:81:63:74: da:b6:81:11:de:e7:d5:87:ff:79:07:fd:1c:4e:69:37:c9:69: fc:f5:b2:eb:05:12:7f:17:c7:1d:3b:16:11:8d:27:38:33:fb: 60:40:5a:33:9e:37:9b:8d:82:34:f3:5f:14:42:16:53:ef:4f: 6b:ed:dc:b0:e5:29:b4:7f:5c:eb:14:5d:00:a1:d0:e1:0b:19: d6:38:fd:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURpBEQDHbXVSFO//5jWKUQgDBiB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4 N0E0MEY5NTAeFw0yNTA4MjExMDA1NDZaFw0yNTA4MjQxNTQzNDZaMDMxMTAvBgNV BAMTKEVDQzhGNTE0MzZBMjEyNTk4QzM3Qzg4MkE5NzYyMEJEMzk2ODI5MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJmSh1KdOTnZh7mXzTH24z/SQK +6W5Ut1DmygyvyFwCpAXF7kdioRiTpfEp8I0/sjvw8SIwIbIoz73u7sL1s14allB lkXZSPSquRz5pXemOUIQV5gmxqTf5S+VJRCGZEkuGIs5JJyGuj8/yOgiw0h5qRiK KsnADtsXa931DDLJEOaL0iJvz3SNOXm/3xPOgsOJ34SME+C5kigqQ0ltow4iFuec JOcbzRXPryJ5cuwSwR1s8yGiPKISJmsrMBS/5qcdzwoo4A5iWxTeRc2X+wXtxc4h nT0Ly3nqXGhXK86GLDrLyZUjUCR1F9pw2owY9yvug/PA9hEdk9celMPjLaEVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Mj1FDaiElmMN8iCqXYgvTloKSowHwYDVR0j BBgwFoAUcYds090IfpVDo0f2FKTSSoekD5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWRlY2E4Mi04OWFiLTQ1ODItOGU4Mi04ZWM4YTUxZmVjNDIvMC83MTg3NkNEM0RE MDg3RTk1NDNBMzQ3RjYxNEE0RDI0QTg3QTQwRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4N0E0 MEY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTVkZWNhODItODlhYi00NTgyLThl ODItOGVjOGE1MWZlYzQyLzAvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQy NEE4N0E0MEY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABiBboVXFl0nh9jmjWBEf8hPUmRVtbgMa6vb DRuOpEYU+rAEBRlF0l5xJk/mGIi/yDgleksFjyOjTpKNV+E6euiB6PrTuufv5ta3 yeeeZx1RkTjqihk05yiuQfF/j4iwClE5PTCb9BBbYKpX/lTSpymO1NRxjcepwCfz lcxX8ME6iKO2qF2JDbnEsQkKLslyb3tdVXY5rF3LLSdS6NSBkPOQosO6/iHdg7lT dnquBYekaoFjdNq2gRHe59WH/3kH/RxOaTfJafz1susFEn8Xxx07FhGNJzgz+2BA WjOeN5uNgjTzXxRCFlPvT2vt3LDlKbR/XOsUXQCh0OELGdY4/Vk= -----END CERTIFICATE-----Generated at Sat Aug 23 12:21:42 2025 by rpki-client