$ rpki-client -vvf repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft File: F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft (raw, json) Hash identifier: PIpizsIRNK/brEuTrknC0/ao+NodnDBOHCF4ehFjNuc= Subject key identifier: FE:53:BA:9B:FA:B1:0E:17:08:9F:48:7C:FE:E6:15:7E:C6:AA:8A:38 Authority key identifier: F7:1A:5E:A4:A4:63:A0:15:DB:17:D3:29:23:D3:F4:31:A6:F2:0F:62 Certificate issuer: /CN=F71A5EA4A463A015DB17D32923D3F431A6F20F62 Certificate serial: 17495771C085F2C4B51E1EAA8675334E2CA72263 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft Manifest number: 0189 Signing time: Thu 03 Jul 2025 07:41:43 +0000 Manifest this update: Thu 03 Jul 2025 07:36:43 +0000 Manifest next update: Sun 06 Jul 2025 08:02:43 +0000 Files and hashes: 1: F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl (hash: bzPA55D9vYvRdPvbmWcKJUdnsA/qMr4KW9t86M6Oy0w=) 2: 3130332e37352e36362e302f32332d3234203d3e20313530353231.roa (hash: iletpOTfxixHKxRms6Z2yECRzDZ4SIPJlSYEIU/u2zU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 08:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:49:57:71:c0:85:f2:c4:b5:1e:1e:aa:86:75:33:4e:2c:a7:22:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F71A5EA4A463A015DB17D32923D3F431A6F20F62 Validity Not Before: Jul 3 07:36:43 2025 GMT Not After : Jul 6 08:02:43 2025 GMT Subject: CN=FE53BA9BFAB10E17089F487CFEE6157EC6AA8A38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e5:cd:56:35:e5:ce:2b:87:9f:52:81:26:b0: 69:2a:dd:53:89:ce:14:f3:a1:1d:a8:98:24:44:41: ad:30:3c:66:86:24:d7:b5:35:a4:f4:e3:43:b7:d2: 6b:92:ca:2e:98:55:04:6b:6f:22:9f:20:6b:ff:97: d3:83:cf:45:8b:fe:d5:8c:aa:05:ac:40:ca:90:53: fc:0c:53:1d:e9:bc:96:02:aa:94:10:28:33:b9:c6: b0:ca:d5:ee:b7:cd:11:e6:7f:d6:60:cf:b4:43:44: 29:5f:74:59:8c:4b:39:24:77:fb:d8:18:57:aa:be: 06:d3:c4:8b:29:08:40:c5:47:99:2b:eb:2d:5f:52: 6b:c8:26:88:84:ee:d8:f6:88:82:3b:b9:71:f8:ca: 0f:69:aa:e5:ef:7e:52:aa:05:5e:f4:3c:90:29:39: e3:95:c4:bf:d3:d4:c4:4b:aa:92:7b:d7:6f:2e:26: 17:30:42:2e:b0:e0:35:40:36:ca:a1:ba:eb:12:f7: 34:52:d2:fa:36:ac:6d:86:11:48:f7:b1:fb:7f:f6: e5:11:ec:b5:ba:2b:25:3c:99:f3:b6:29:7f:08:61: fa:0f:47:8e:00:6c:72:c1:eb:2b:3c:a0:e6:5d:a5: e6:9d:f1:f7:55:13:52:fc:71:cb:16:90:ba:a3:b2: 66:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:53:BA:9B:FA:B1:0E:17:08:9F:48:7C:FE:E6:15:7E:C6:AA:8A:38 X509v3 Authority Key Identifier: keyid:F7:1A:5E:A4:A4:63:A0:15:DB:17:D3:29:23:D3:F4:31:A6:F2:0F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f6:a6:f7:6c:17:1c:e5:22:dd:de:d3:2c:34:b0:da:47:6d: 82:da:5c:8d:58:6e:fb:62:ff:34:5c:f7:ba:cb:34:b0:1d:54: 73:84:67:a3:4a:0c:9e:ae:c4:27:ce:8c:0a:30:e7:d1:c9:33: 4b:b3:4e:87:85:78:e8:9c:2e:d1:92:4a:d2:96:6f:1b:5a:7f: ba:9c:92:ba:25:a7:9e:01:de:21:dd:3b:cc:7d:3e:ac:62:76: cc:27:ce:5f:ac:0e:c4:6f:ce:85:7c:95:33:54:2b:f3:66:b7: f5:b8:08:9a:2c:00:ec:29:f6:48:ef:8f:7a:fe:7d:04:1e:27: ce:5d:79:2a:55:53:18:c2:b6:e1:5a:e0:06:18:4e:e2:d8:2c: d0:99:06:8f:9a:d6:8c:73:f6:4c:7c:bd:15:ab:73:b4:e4:db: c3:2a:83:75:bf:1f:8f:9a:69:b0:f6:cd:9e:0a:d0:b3:47:2d: 2a:54:e0:62:87:00:b5:91:0a:84:9e:a2:b8:ce:41:15:ed:13: 40:3b:c8:e2:bd:c5:ed:d9:b5:2b:56:df:46:d8:74:55:e6:5b: d2:25:af:6d:96:e2:dc:c9:10:2e:7c:78:be:66:11:a7:65:c0: 35:2f:f3:4d:71:9c:a5:a2:09:26:fe:52:62:39:15:ce:13:88: 61:f1:db:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF0lXccCF8sS1Hh6qhnUzTiynImMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0MzFB NkYyMEY2MjAeFw0yNTA3MDMwNzM2NDNaFw0yNTA3MDYwODAyNDNaMDMxMTAvBgNV BAMTKEZFNTNCQTlCRkFCMTBFMTcwODlGNDg3Q0ZFRTYxNTdFQzZBQThBMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx5c1WNeXOK4efUoEmsGkq3VOJ zhTzoR2omCREQa0wPGaGJNe1NaT040O30muSyi6YVQRrbyKfIGv/l9ODz0WL/tWM qgWsQMqQU/wMUx3pvJYCqpQQKDO5xrDK1e63zRHmf9Zgz7RDRClfdFmMSzkkd/vY GFeqvgbTxIspCEDFR5kr6y1fUmvIJoiE7tj2iII7uXH4yg9pquXvflKqBV70PJAp OeOVxL/T1MRLqpJ7128uJhcwQi6w4DVANsqhuusS9zRS0vo2rG2GEUj3sft/9uUR 7LW6KyU8mfO2KX8IYfoPR44AbHLB6ys8oOZdpead8fdVE1L8ccsWkLqjsmZfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/lO6m/qxDhcIn0h8/uYVfsaqijgwHwYDVR0j BBgwFoAU9xpepKRjoBXbF9MpI9P0MabyD2IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2Y3NmM2ZC1mODUwLTRjNDktODU0Yy01NWYzODI4NDRjOTcvMC9GNzFBNUVBNEE0 NjNBMDE1REIxN0QzMjkyM0QzRjQzMUE2RjIwRjYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0MzFBNkYy MEY2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNmNzZjNmQtZjg1MC00YzQ5LTg1 NGMtNTVmMzgyODQ0Yzk3LzAvRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0 MzFBNkYyMEY2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAz2pvdsFxzlIt3e0yw0sNpHbYLaXI1Ybvti /zRc97rLNLAdVHOEZ6NKDJ6uxCfOjAow59HJM0uzToeFeOicLtGSStKWbxtaf7qc krolp54B3iHdO8x9Pqxidswnzl+sDsRvzoV8lTNUK/Nmt/W4CJosAOwp9kjvj3r+ fQQeJ85deSpVUxjCtuFa4AYYTuLYLNCZBo+a1oxz9kx8vRWrc7Tk28Mqg3W/H4+a abD2zZ4K0LNHLSpU4GKHALWRCoSeorjOQRXtE0A7yOK9xe3ZtStW30bYdFXmW9Il r22W4tzJEC58eL5mEadlwDUv801xnKWiCSb+UmI5Fc4TiGHx21I= -----END CERTIFICATE-----Generated at Thu Jul 3 09:59:25 2025 by rpki-client