$ rpki-client -vvf repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft File: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft (raw, json) Hash identifier: L1tosmTVdZiwTa5SjNnwuvkwxws8VEoe+m75O02+ZnY= Subject key identifier: 82:1A:F8:06:D0:9B:86:74:7F:72:3A:C8:22:DA:B1:A2:4F:CF:8B:D3 Authority key identifier: 71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 Certificate issuer: /CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Certificate serial: 7703B74EAEB9968429AFC8ECFC1ECAB08FC72EE1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft Manifest number: 03A1 Signing time: Wed 02 Jul 2025 00:21:09 +0000 Manifest this update: Wed 02 Jul 2025 00:16:09 +0000 Manifest next update: Sat 05 Jul 2025 09:00:09 +0000 Files and hashes: 1: 3130332e3130372e3138372e302f32342d3234203d3e20313337333030.roa (hash: KKxu3hPM0InDJZ99FC0Xq3EDadMAbvI+i8LW1aPaZ8E=) 2: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl (hash: IDJs4k965d4xARgxHRHOxB7o8UPaJUk0nNEBEq5RgOI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 09:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:03:b7:4e:ae:b9:96:84:29:af:c8:ec:fc:1e:ca:b0:8f:c7:2e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Validity Not Before: Jul 2 00:16:09 2025 GMT Not After : Jul 5 09:00:09 2025 GMT Subject: CN=821AF806D09B86747F723AC822DAB1A24FCF8BD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:41:c2:e2:76:97:f3:7a:47:a8:e3:84:0b:6c: d9:b2:52:85:91:23:2d:94:b8:9b:15:a9:ca:88:ea: a7:a7:d8:d9:d8:63:65:e4:0a:b9:7c:ae:02:a0:77: 1f:ac:75:ab:6e:82:67:57:85:8d:fb:6b:99:1a:a7: e3:0b:de:41:d6:1c:c7:6c:5a:48:2f:d9:f3:4c:ef: 37:0c:41:44:66:dd:85:26:cf:d8:75:cf:15:6d:b6: 6e:30:e8:6e:7b:1d:75:4a:25:d0:dc:df:ef:10:d9: cc:d8:5b:e9:a0:f1:4e:2c:4e:c3:59:ef:7a:eb:8d: e9:0e:88:3a:50:60:8a:00:81:b2:16:0b:b6:fe:50: 08:10:ec:36:dd:fe:6e:57:d8:99:5a:87:a3:94:c8: ba:8f:c7:fe:45:92:68:c9:38:c1:17:2d:90:ae:23: d0:5b:3d:c8:01:e0:51:91:a3:58:81:9b:4f:c6:25: b9:84:8b:81:f6:2c:7a:d3:b9:ff:35:a1:7b:d4:4c: 92:c6:eb:6b:5c:7c:12:0e:5e:18:0e:f3:34:f4:39: 81:93:5a:c1:46:cd:ca:50:9e:5b:17:da:9f:6d:94: 6a:36:cb:ba:3f:f6:a5:10:96:04:94:41:71:92:7d: a6:ae:46:79:2b:d7:22:29:29:e9:51:62:f1:7f:fa: 6f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1A:F8:06:D0:9B:86:74:7F:72:3A:C8:22:DA:B1:A2:4F:CF:8B:D3 X509v3 Authority Key Identifier: keyid:71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:0e:bc:0a:94:df:23:c6:b0:2d:e3:ca:b8:48:f5:f5:db:d5: bf:ec:82:22:3d:64:db:71:90:25:51:5d:92:14:a0:9c:57:2b: 28:64:5e:14:87:2a:45:fa:24:52:de:a2:ed:65:07:12:d6:7b: ec:58:17:b5:d5:93:6a:41:9d:5c:35:6e:54:95:55:87:70:a9: 93:ac:6b:22:ff:1e:67:e0:fc:e3:b8:67:1a:65:ad:ce:5f:cb: 46:6e:82:e5:71:96:a7:c4:4e:f4:5f:9c:ae:85:f2:32:b9:90: ba:0f:d7:30:1e:96:a1:61:21:01:38:6b:79:a8:b2:25:7c:50: ba:32:61:38:eb:69:2c:95:8b:16:d7:09:71:6d:2e:2c:b4:d9: 2f:58:31:95:42:fb:a0:43:40:c7:c4:4b:ce:08:3e:b4:65:1d: 18:6a:a7:b6:e6:ac:b0:a4:56:dd:0e:44:d7:12:90:42:95:81: 05:b0:82:1b:3d:48:13:48:3c:c2:61:3d:a0:9e:f9:af:75:19: 23:f1:44:75:c8:b9:4d:8e:e7:68:91:e6:37:ce:75:71:f9:93: ac:27:b2:9e:91:8c:13:4d:dd:12:70:74:ef:f2:dc:08:df:64: a7:97:cc:bc:cc:90:c0:7b:af:df:56:92:0a:f0:49:79:99:40: fd:c0:fe:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdwO3Tq65loQpr8js/B7KsI/HLuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2 QzlCNzJFMjAeFw0yNTA3MDIwMDE2MDlaFw0yNTA3MDUwOTAwMDlaMDMxMTAvBgNV BAMTKDgyMUFGODA2RDA5Qjg2NzQ3RjcyM0FDODIyREFCMUEyNEZDRjhCRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjQcLidpfzekeo44QLbNmyUoWR Iy2UuJsVqcqI6qen2NnYY2XkCrl8rgKgdx+sdatugmdXhY37a5kap+ML3kHWHMds Wkgv2fNM7zcMQURm3YUmz9h1zxVttm4w6G57HXVKJdDc3+8Q2czYW+mg8U4sTsNZ 73rrjekOiDpQYIoAgbIWC7b+UAgQ7Dbd/m5X2Jlah6OUyLqPx/5FkmjJOMEXLZCu I9BbPcgB4FGRo1iBm0/GJbmEi4H2LHrTuf81oXvUTJLG62tcfBIOXhgO8zT0OYGT WsFGzcpQnlsX2p9tlGo2y7o/9qUQlgSUQXGSfaauRnkr1yIpKelRYvF/+m8RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUghr4BtCbhnR/cjrIItqxok/Pi9MwHwYDVR0j BBgwFoAUceUam2XYoSNROjUPDZn5jWybcuIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDQ4YmQwNC1mNzg3LTQxNGEtYTUwMS01MTM4YTZkNmIzZTEvMC83MUU1MUE5QjY1 RDhBMTIzNTEzQTM1MEYwRDk5Rjk4RDZDOUI3MkUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2QzlC NzJFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ0OGJkMDQtZjc4Ny00MTRhLWE1 MDEtNTEzOGE2ZDZiM2UxLzAvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5 OEQ2QzlCNzJFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALQOvAqU3yPGsC3jyrhI9fXb1b/sgiI9ZNtx kCVRXZIUoJxXKyhkXhSHKkX6JFLeou1lBxLWe+xYF7XVk2pBnVw1blSVVYdwqZOs ayL/Hmfg/OO4Zxplrc5fy0ZuguVxlqfETvRfnK6F8jK5kLoP1zAelqFhIQE4a3mo siV8ULoyYTjraSyVixbXCXFtLiy02S9YMZVC+6BDQMfES84IPrRlHRhqp7bmrLCk Vt0ORNcSkEKVgQWwghs9SBNIPMJhPaCe+a91GSPxRHXIuU2O52iR5jfOdXH5k6wn sp6RjBNN3RJwdO/y3AjfZKeXzLzMkMB7r99WkgrwSXmZQP3A/k8= -----END CERTIFICATE-----Generated at Thu Jul 3 06:52:24 2025 by rpki-client