$ rpki-client -vvf repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft File: F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft (raw, json) Hash identifier: PEVqovuRaLfSbjRig8wJk1uR+3xyA2F2BU/gh5N/jKA= Subject key identifier: 69:E9:DB:5B:AD:4B:6A:C8:D9:88:48:E6:59:BA:74:F2:E3:2B:44:11 Authority key identifier: F7:1A:5E:A4:A4:63:A0:15:DB:17:D3:29:23:D3:F4:31:A6:F2:0F:62 Certificate issuer: /CN=F71A5EA4A463A015DB17D32923D3F431A6F20F62 Certificate serial: 7E2255A21682BA72E236BDA2698D2B9DE8A82A2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft Manifest number: 019E Signing time: Thu 21 Aug 2025 11:21:46 +0000 Manifest this update: Thu 21 Aug 2025 11:16:46 +0000 Manifest next update: Sun 24 Aug 2025 22:13:46 +0000 Files and hashes: 1: F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl (hash: srd0aFwa2JdzQHxz858AFLGFx+8JIoJcC47sXy6Mxwk=) 2: 3130332e37352e36362e302f32332d3234203d3e20313530353231.roa (hash: iletpOTfxixHKxRms6Z2yECRzDZ4SIPJlSYEIU/u2zU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 22:13:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:22:55:a2:16:82:ba:72:e2:36:bd:a2:69:8d:2b:9d:e8:a8:2a:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F71A5EA4A463A015DB17D32923D3F431A6F20F62 Validity Not Before: Aug 21 11:16:46 2025 GMT Not After : Aug 24 22:13:46 2025 GMT Subject: CN=69E9DB5BAD4B6AC8D98848E659BA74F2E32B4411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e4:8f:89:5d:c3:1b:77:ef:4d:ea:86:2c:6e: 44:87:52:a8:c8:d0:03:52:47:43:8f:ba:88:6b:c6: 3a:21:12:47:52:51:df:31:b0:e4:35:e7:4d:dc:5d: 87:48:20:32:37:20:1d:29:68:b8:b8:50:31:dd:40: ef:da:32:ee:65:b7:23:4a:4b:13:f2:4f:8a:dd:e8: 56:74:e2:df:78:25:a8:49:ca:1c:e9:7a:9d:6b:9a: dd:80:c7:51:3a:a0:5c:49:2c:ed:7a:8e:54:04:b2: 0f:84:89:73:66:c0:66:5f:c5:c8:a6:f0:1e:19:92: 60:ee:4b:04:80:86:db:86:c3:18:2e:e7:7c:e5:8f: f6:de:1c:29:f8:fd:e4:29:79:94:bb:71:1b:4e:e5: da:10:d0:cd:b1:ec:25:60:73:de:39:7e:17:bd:48: 72:6c:62:c2:50:a3:f3:01:b6:a0:df:fb:e8:d8:e1: 34:74:5e:68:fc:e4:bc:44:ab:ae:2a:d2:18:94:15: df:63:64:5b:22:fc:1a:3f:51:69:b3:e7:7a:ab:99: 2b:b6:a9:29:d0:7c:7d:fc:d6:69:c2:ed:69:17:67: 3e:1c:5e:c8:7c:38:e1:a3:07:31:b4:f8:aa:5f:1c: a2:e2:4d:88:fe:d2:2c:52:4d:d6:02:f6:2a:d3:c0: b3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E9:DB:5B:AD:4B:6A:C8:D9:88:48:E6:59:BA:74:F2:E3:2B:44:11 X509v3 Authority Key Identifier: keyid:F7:1A:5E:A4:A4:63:A0:15:DB:17:D3:29:23:D3:F4:31:A6:F2:0F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:f8:a3:3b:55:ed:28:18:50:8c:c0:5f:02:fe:05:9f:50:81: b2:26:df:29:8a:55:a6:04:73:2b:36:35:07:15:25:b9:91:97: d8:88:19:9c:4f:c6:69:65:d3:ec:0b:1a:a0:9e:00:66:56:45: ae:80:eb:4d:48:40:8b:9b:31:21:2e:0d:c3:a6:9f:44:52:e8: ac:1b:e9:f0:02:56:46:67:27:c5:db:5c:95:f6:e7:48:f5:ec: a3:ee:bf:c4:cb:20:53:68:1c:7d:62:d7:12:cf:ba:94:f2:fe: f6:f8:95:59:ca:b6:66:b7:3d:bb:c8:37:05:21:9b:14:fd:d0: 21:62:25:52:8b:19:a6:4b:c4:13:90:c7:76:f7:f6:45:1d:d3: b2:24:46:e0:af:18:c7:fc:f2:77:5e:80:29:19:3f:12:b0:22: 9c:75:ee:7b:2f:95:f6:63:77:5e:b3:8a:53:3a:77:3e:3f:62: 01:ea:60:d3:18:33:62:6d:69:4c:93:5d:ef:e4:86:75:45:80: 0b:5a:2b:e0:e1:87:81:31:bc:97:0d:3c:ed:46:15:b1:b5:8e: e4:90:d1:1a:9a:3c:c8:04:04:9b:40:ed:f7:67:50:b7:26:a9: 8d:62:44:f3:e1:2f:9b:2a:40:dd:5f:f9:08:fa:52:91:1b:77: 2d:c2:e5:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfiJVohaCunLiNr2iaY0rneioKi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0MzFB NkYyMEY2MjAeFw0yNTA4MjExMTE2NDZaFw0yNTA4MjQyMjEzNDZaMDMxMTAvBgNV BAMTKDY5RTlEQjVCQUQ0QjZBQzhEOTg4NDhFNjU5QkE3NEYyRTMyQjQ0MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd5I+JXcMbd+9N6oYsbkSHUqjI 0ANSR0OPuohrxjohEkdSUd8xsOQ1503cXYdIIDI3IB0paLi4UDHdQO/aMu5ltyNK SxPyT4rd6FZ04t94JahJyhzpep1rmt2Ax1E6oFxJLO16jlQEsg+EiXNmwGZfxcim 8B4ZkmDuSwSAhtuGwxgu53zlj/beHCn4/eQpeZS7cRtO5doQ0M2x7CVgc945fhe9 SHJsYsJQo/MBtqDf++jY4TR0Xmj85LxEq64q0hiUFd9jZFsi/Bo/UWmz53qrmSu2 qSnQfH381mnC7WkXZz4cXsh8OOGjBzG0+KpfHKLiTYj+0ixSTdYC9irTwLP3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaenbW61LasjZiEjmWbp08uMrRBEwHwYDVR0j BBgwFoAU9xpepKRjoBXbF9MpI9P0MabyD2IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2Y3NmM2ZC1mODUwLTRjNDktODU0Yy01NWYzODI4NDRjOTcvMC9GNzFBNUVBNEE0 NjNBMDE1REIxN0QzMjkyM0QzRjQzMUE2RjIwRjYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0MzFBNkYy MEY2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNmNzZjNmQtZjg1MC00YzQ5LTg1 NGMtNTVmMzgyODQ0Yzk3LzAvRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0 MzFBNkYyMEY2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIn4oztV7SgYUIzAXwL+BZ9QgbIm3ymKVaYE cys2NQcVJbmRl9iIGZxPxmll0+wLGqCeAGZWRa6A601IQIubMSEuDcOmn0RS6Kwb 6fACVkZnJ8XbXJX250j17KPuv8TLIFNoHH1i1xLPupTy/vb4lVnKtma3PbvINwUh mxT90CFiJVKLGaZLxBOQx3b39kUd07IkRuCvGMf88ndegCkZPxKwIpx17nsvlfZj d16zilM6dz4/YgHqYNMYM2JtaUyTXe/khnVFgAtaK+Dhh4ExvJcNPO1GFbG1juSQ 0RqaPMgEBJtA7fdnULcmqY1iRPPhL5sqQN1f+Qj6UpEbdy3C5fE= -----END CERTIFICATE-----Generated at Sat Aug 23 15:56:40 2025 by rpki-client