$ rpki-client -vvf repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft File: 71876CD3DD087E9543A347F614A4D24A87A40F95.mft (raw, json) Hash identifier: V7IGgWcZrFyiRZsuBn/FNk953iC7M0e8ktSLohuNqv0= Subject key identifier: DA:D3:01:99:73:2D:B4:0C:60:B9:72:C2:02:0F:19:3F:B7:DC:3E:58 Authority key identifier: 71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95 Certificate issuer: /CN=71876CD3DD087E9543A347F614A4D24A87A40F95 Certificate serial: 54B1F80BC2E8E47E430D8F03B80AB02AF89B8934 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft Manifest number: 017A Signing time: Wed 07 May 2025 19:50:44 +0000 Manifest this update: Wed 07 May 2025 19:45:44 +0000 Manifest next update: Sun 11 May 2025 01:37:44 +0000 Files and hashes: 1: 71876CD3DD087E9543A347F614A4D24A87A40F95.crl (hash: eDR6PPwIaUIAFxOIk9aPyywA2waJjeMrtpz/cPanY4k=) 2: 3130332e3130372e3230362e302f32342d3234203d3e20313431313238.roa (hash: ci5I/MxrgoJ1rfjV0dWp5xS5P0hJgjy6xXmWTHTwpMQ=) 3: 3130332e3135382e3133302e302f32342d3234203d3e20313431313238.roa (hash: V2nbf4Xerdo+UlaGtEEFCDfKfKUg2cbilII6qfqHQqs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 01:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:b1:f8:0b:c2:e8:e4:7e:43:0d:8f:03:b8:0a:b0:2a:f8:9b:89:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71876CD3DD087E9543A347F614A4D24A87A40F95 Validity Not Before: May 7 19:45:44 2025 GMT Not After : May 11 01:37:44 2025 GMT Subject: CN=DAD30199732DB40C60B972C2020F193FB7DC3E58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a9:1a:0b:b9:85:84:53:32:49:69:c5:3e:02: aa:a1:4c:3c:ee:c1:ff:b7:77:25:c1:55:5a:a8:c5: bc:6e:f9:30:d0:96:db:9f:10:a6:42:68:f8:a1:55: 9f:41:68:40:54:4e:db:2f:ad:9c:4d:ea:f3:1f:8f: 9e:9c:67:b2:e1:57:f6:21:af:14:a3:88:06:d4:ed: eb:f9:e3:fe:3e:df:7c:e6:24:31:7d:7a:1e:68:c2: b9:fd:2c:39:14:d3:4a:18:ac:6d:5e:51:3e:57:b6: 16:98:bc:67:50:ff:7c:6c:7a:72:10:89:04:ec:4f: 67:25:a1:4b:76:95:c9:ea:b2:f1:a9:d0:ff:46:11: 00:6c:e4:8e:9c:0a:64:6b:e2:8d:50:e3:db:9a:b8: 53:80:28:8e:9e:23:7f:4a:49:9e:ab:84:8b:08:dd: 44:ba:ad:d0:69:05:64:bb:77:18:98:21:36:a3:08: 03:5f:4c:da:2d:8c:e4:f5:71:0b:12:c6:88:f3:62: 39:9b:dc:08:a9:65:62:99:c1:91:28:a7:e3:96:f8: be:9b:9c:57:f6:04:7a:fb:33:ac:4e:57:d7:c3:0c: 5c:5d:7a:70:4d:d4:f0:78:bd:25:24:8a:e8:09:6f: 73:13:dc:c7:e6:17:40:3a:45:c1:c1:08:6e:5b:ff: d4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D3:01:99:73:2D:B4:0C:60:B9:72:C2:02:0F:19:3F:B7:DC:3E:58 X509v3 Authority Key Identifier: keyid:71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:b1:72:03:6a:a7:c7:62:52:a6:fb:d3:71:30:53:3f:ba:59: 8e:99:9a:98:1d:62:37:3b:33:d5:8f:56:60:c0:bb:2b:9a:e0: 51:d1:d6:95:45:a4:ac:9b:2e:ab:cf:a7:39:a8:4a:11:e4:93: e5:ad:f7:62:c5:44:5d:53:d0:f3:1b:26:f3:dc:7e:6e:c7:e5: f7:17:cc:f8:93:39:54:6d:78:60:ba:56:9a:89:f5:e3:f1:cb: d5:9b:3b:fc:ec:c5:7e:c4:02:e8:33:fe:8d:ce:9d:9d:16:fe: b9:66:bf:ea:24:5f:27:44:9a:58:8c:cc:ac:a9:79:0a:e8:c8: 85:a2:4d:e0:9c:16:18:83:c4:a3:15:c0:36:d6:a0:76:fb:a9: c5:53:d8:4b:2c:a5:89:5d:bd:4e:3a:83:ff:e7:88:a9:ce:29: 0d:c8:b6:b0:71:8c:0f:14:e7:7d:dd:0c:a3:0d:e9:9e:72:6a: 02:55:b1:a6:76:4a:3a:65:1c:aa:7b:ce:a9:cd:66:d1:b8:6f: 56:49:ff:4a:ac:10:07:41:67:d2:18:2c:26:bb:d3:ab:84:a9: da:53:dd:c6:f3:08:2d:61:8b:65:40:b7:1a:f7:e1:db:a2:68: a7:bc:4d:77:b4:fc:93:b7:41:e3:c6:47:98:e4:df:4d:38:d0: 3c:30:6f:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVLH4C8Lo5H5DDY8DuAqwKvibiTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4 N0E0MEY5NTAeFw0yNTA1MDcxOTQ1NDRaFw0yNTA1MTEwMTM3NDRaMDMxMTAvBgNV BAMTKERBRDMwMTk5NzMyREI0MEM2MEI5NzJDMjAyMEYxOTNGQjdEQzNFNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClqRoLuYWEUzJJacU+AqqhTDzu wf+3dyXBVVqoxbxu+TDQltufEKZCaPihVZ9BaEBUTtsvrZxN6vMfj56cZ7LhV/Yh rxSjiAbU7ev54/4+33zmJDF9eh5owrn9LDkU00oYrG1eUT5XthaYvGdQ/3xsenIQ iQTsT2cloUt2lcnqsvGp0P9GEQBs5I6cCmRr4o1Q49uauFOAKI6eI39KSZ6rhIsI 3US6rdBpBWS7dxiYITajCANfTNotjOT1cQsSxojzYjmb3AipZWKZwZEop+OW+L6b nFf2BHr7M6xOV9fDDFxdenBN1PB4vSUkiugJb3MT3MfmF0A6RcHBCG5b/9TLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2tMBmXMttAxguXLCAg8ZP7fcPlgwHwYDVR0j BBgwFoAUcYds090IfpVDo0f2FKTSSoekD5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWRlY2E4Mi04OWFiLTQ1ODItOGU4Mi04ZWM4YTUxZmVjNDIvMC83MTg3NkNEM0RE MDg3RTk1NDNBMzQ3RjYxNEE0RDI0QTg3QTQwRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4N0E0 MEY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTVkZWNhODItODlhYi00NTgyLThl ODItOGVjOGE1MWZlYzQyLzAvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQy NEE4N0E0MEY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSxcgNqp8diUqb703EwUz+6WY6ZmpgdYjc7 M9WPVmDAuyua4FHR1pVFpKybLqvPpzmoShHkk+Wt92LFRF1T0PMbJvPcfm7H5fcX zPiTOVRteGC6VpqJ9ePxy9WbO/zsxX7EAugz/o3OnZ0W/rlmv+okXydEmliMzKyp eQroyIWiTeCcFhiDxKMVwDbWoHb7qcVT2EsspYldvU46g//niKnOKQ3ItrBxjA8U 533dDKMN6Z5yagJVsaZ2SjplHKp7zqnNZtG4b1ZJ/0qsEAdBZ9IYLCa706uEqdpT 3cbzCC1hi2VAtxr34duiaKe8TXe0/JO3QePGR5jk30040Dwwb0I= -----END CERTIFICATE-----Generated at Thu May 8 09:35:01 2025 by rpki-client