$ rpki-client -vvf repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft File: 71876CD3DD087E9543A347F614A4D24A87A40F95.mft (raw, json) Hash identifier: tDSlFaV+KO9wN8cTzBVMiDddplpu/vvf7a8JI7RaLv0= Subject key identifier: 62:16:36:E2:C4:56:6C:15:12:54:46:A9:54:DB:C9:F6:CA:7F:EB:A8 Authority key identifier: 71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95 Certificate issuer: /CN=71876CD3DD087E9543A347F614A4D24A87A40F95 Certificate serial: 5F867354DCED31823F41FB81F447AC2375856086 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft Manifest number: 0191 Signing time: Sat 28 Jun 2025 05:50:44 +0000 Manifest this update: Sat 28 Jun 2025 05:45:44 +0000 Manifest next update: Tue 01 Jul 2025 16:16:44 +0000 Files and hashes: 1: 3130332e3135382e3133302e302f32342d3234203d3e20313431313238.roa (hash: V2nbf4Xerdo+UlaGtEEFCDfKfKUg2cbilII6qfqHQqs=) 2: 3130332e3130372e3230362e302f32342d3234203d3e20313431313238.roa (hash: ci5I/MxrgoJ1rfjV0dWp5xS5P0hJgjy6xXmWTHTwpMQ=) 3: 71876CD3DD087E9543A347F614A4D24A87A40F95.crl (hash: ctW3tegfXXJdQrPztfu+lOWqKLigKm52YS8H0Y49xO4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 16:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:86:73:54:dc:ed:31:82:3f:41:fb:81:f4:47:ac:23:75:85:60:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71876CD3DD087E9543A347F614A4D24A87A40F95 Validity Not Before: Jun 28 05:45:44 2025 GMT Not After : Jul 1 16:16:44 2025 GMT Subject: CN=621636E2C4566C15125446A954DBC9F6CA7FEBA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:94:8f:de:d1:3e:83:ea:9d:bf:9a:c0:d9:ea: 7a:09:23:99:70:e5:ff:84:69:5c:62:ec:76:e8:bb: cf:69:95:60:3e:fc:8c:6f:5a:6c:33:87:85:8f:7f: c9:b6:2e:41:cf:b2:8e:bd:7e:7b:f9:18:89:a7:5b: bd:12:11:d8:09:d7:ce:e1:61:ff:e4:46:f0:ab:47: 73:ad:c2:d2:29:78:9c:7a:ca:10:c3:5b:ba:cb:f8: 30:2e:c9:82:09:5e:b4:5f:b5:f1:18:c1:16:5c:95: 10:57:ed:2c:74:f4:7b:e1:d8:2b:e9:90:96:b5:5e: 34:fa:48:ae:d3:4b:2d:b9:a1:90:d1:ef:85:c0:11: 50:70:1e:69:99:c5:a8:fb:0b:33:c3:de:86:c0:ea: e4:dd:62:57:c7:16:f4:b1:b9:e5:7d:67:b9:72:ff: 1c:e8:f7:c0:2b:33:3b:bf:d5:a4:64:58:cc:31:7f: 99:8f:b7:9d:43:9f:d0:e1:6a:a0:5d:fd:3d:70:76: 49:c1:71:89:42:e6:c3:39:b5:77:35:81:15:43:9b: d1:fb:16:70:e2:14:af:b8:50:fa:3d:9a:6e:ef:ef: ca:42:50:9b:e8:4e:3e:0a:e2:75:92:3a:dc:98:a5: 19:4e:b0:f0:bd:f7:f5:d6:3d:81:18:54:74:8e:2c: 12:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:16:36:E2:C4:56:6C:15:12:54:46:A9:54:DB:C9:F6:CA:7F:EB:A8 X509v3 Authority Key Identifier: keyid:71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:9d:30:f3:0f:79:c0:37:02:40:20:5c:96:2b:55:3c:25:b3: 72:56:75:fa:84:5a:e2:ae:5d:b5:03:ca:93:86:f5:f4:8d:7f: b0:b5:6e:d7:ca:44:58:29:7a:e6:34:3b:18:3c:93:7c:3f:a0: c3:fa:13:2d:6a:c5:ff:89:b9:38:7c:69:0a:b7:77:f9:33:f4: f7:12:68:3a:0a:02:1d:af:96:23:62:8c:c5:af:30:2d:f1:dc: c9:4f:61:5b:c5:31:2b:07:a9:09:6a:a8:1f:d1:73:15:a5:8d: 11:90:dc:4e:f0:22:78:79:98:d7:62:9c:7f:e9:22:ee:31:81: 02:94:87:06:e8:e1:39:1d:e2:b9:d0:97:72:4d:fb:8f:33:1d: 0c:37:7f:0e:cc:5e:87:ac:70:36:d5:bd:f3:69:4d:a3:38:3f: ce:79:b2:fb:94:11:be:68:36:56:e9:72:f8:fe:b7:3b:07:a6: 48:63:1f:81:aa:fd:5b:b2:1b:aa:e5:fe:e5:92:4a:e5:28:3b: 0a:cc:fe:02:47:ef:ec:db:b7:d2:e6:21:f2:34:9e:23:6d:4d: 77:62:ad:97:a3:fc:1c:e2:14:db:ea:28:ad:43:db:d0:77:50: 0d:75:f9:91:37:a1:0f:11:7a:1b:58:1e:23:7d:e4:9d:30:05: 1d:77:7d:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX4ZzVNztMYI/QfuB9EesI3WFYIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4 N0E0MEY5NTAeFw0yNTA2MjgwNTQ1NDRaFw0yNTA3MDExNjE2NDRaMDMxMTAvBgNV BAMTKDYyMTYzNkUyQzQ1NjZDMTUxMjU0NDZBOTU0REJDOUY2Q0E3RkVCQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCklI/e0T6D6p2/msDZ6noJI5lw 5f+EaVxi7Hbou89plWA+/IxvWmwzh4WPf8m2LkHPso69fnv5GImnW70SEdgJ187h Yf/kRvCrR3OtwtIpeJx6yhDDW7rL+DAuyYIJXrRftfEYwRZclRBX7Sx09Hvh2Cvp kJa1XjT6SK7TSy25oZDR74XAEVBwHmmZxaj7CzPD3obA6uTdYlfHFvSxueV9Z7ly /xzo98ArMzu/1aRkWMwxf5mPt51Dn9DhaqBd/T1wdknBcYlC5sM5tXc1gRVDm9H7 FnDiFK+4UPo9mm7v78pCUJvoTj4K4nWSOtyYpRlOsPC99/XWPYEYVHSOLBLnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYhY24sRWbBUSVEapVNvJ9sp/66gwHwYDVR0j BBgwFoAUcYds090IfpVDo0f2FKTSSoekD5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWRlY2E4Mi04OWFiLTQ1ODItOGU4Mi04ZWM4YTUxZmVjNDIvMC83MTg3NkNEM0RE MDg3RTk1NDNBMzQ3RjYxNEE0RDI0QTg3QTQwRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4N0E0 MEY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTVkZWNhODItODlhYi00NTgyLThl ODItOGVjOGE1MWZlYzQyLzAvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQy NEE4N0E0MEY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALydMPMPecA3AkAgXJYrVTwls3JWdfqEWuKu XbUDypOG9fSNf7C1btfKRFgpeuY0Oxg8k3w/oMP6Ey1qxf+JuTh8aQq3d/kz9PcS aDoKAh2vliNijMWvMC3x3MlPYVvFMSsHqQlqqB/RcxWljRGQ3E7wInh5mNdinH/p Iu4xgQKUhwbo4Tkd4rnQl3JN+48zHQw3fw7MXoescDbVvfNpTaM4P855svuUEb5o Nlbpcvj+tzsHpkhjH4Gq/VuyG6rl/uWSSuUoOwrM/gJH7+zbt9LmIfI0niNtTXdi rZej/BziFNvqKK1D29B3UA11+ZE3oQ8RehtYHiN95J0wBR13fUk= -----END CERTIFICATE-----Generated at Sun Jun 29 19:55:05 2025 by rpki-client