$ rpki-client -vvf repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft File: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft (raw, json) Hash identifier: Vesna4MIxHdCSrANNz+BFwg9dt+hywOtuIEz2PFba+k= Subject key identifier: 06:28:53:69:BF:F9:31:30:13:F2:C7:AD:EB:06:76:F3:25:D9:1F:06 Authority key identifier: 71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 Certificate issuer: /CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Certificate serial: 6F0CE388EC446B98120E7E5C594AA20F85B0494D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft Manifest number: 03B8 Signing time: Fri 22 Aug 2025 05:21:11 +0000 Manifest this update: Fri 22 Aug 2025 05:16:11 +0000 Manifest next update: Mon 25 Aug 2025 12:09:11 +0000 Files and hashes: 1: 3130332e3130372e3138372e302f32342d3234203d3e20313337333030.roa (hash: KKxu3hPM0InDJZ99FC0Xq3EDadMAbvI+i8LW1aPaZ8E=) 2: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl (hash: ilRQH5/lVHsc1dt/dSAufVVv9g7wzN5XVeFf0ltLjuk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 12:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:0c:e3:88:ec:44:6b:98:12:0e:7e:5c:59:4a:a2:0f:85:b0:49:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Validity Not Before: Aug 22 05:16:11 2025 GMT Not After : Aug 25 12:09:11 2025 GMT Subject: CN=06285369BFF9313013F2C7ADEB0676F325D91F06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b6:04:fa:ab:e1:6e:9d:fa:38:0c:fe:a5:a1: 3f:f2:5d:47:6e:14:b5:24:ca:fe:c0:90:59:b4:a6: e2:62:a5:8f:a5:bd:13:9f:bb:fc:19:50:13:37:55: 85:ef:78:6d:11:5c:e9:1d:80:eb:be:93:67:ad:d9: 75:20:ec:c2:e9:e5:b1:0c:82:6d:ee:8a:a9:13:c7: d9:b2:68:35:67:94:77:6a:7a:bd:3c:0d:e9:01:5a: 08:ba:92:39:30:e5:85:78:a6:ca:c7:0e:e7:7f:25: cb:8e:31:bc:1b:14:21:42:9f:02:af:fd:e1:c8:60: 68:07:85:39:a2:34:da:25:52:06:77:25:48:4e:e8: 4f:0e:31:19:b5:8f:02:1b:07:a9:5d:4d:8d:2c:39: 3e:1b:6d:52:00:f9:65:aa:61:53:38:bf:5c:de:0f: e8:b7:7c:05:37:6b:71:68:3e:67:6f:ca:40:3b:0e: ab:50:a8:8c:ab:af:06:49:30:ce:f0:05:00:9a:21: 85:8b:88:de:ee:10:60:d4:4b:44:20:8f:e1:3c:06: d2:e3:74:a8:60:3d:19:86:0d:82:52:2c:2a:d3:4c: 52:f4:3c:9d:78:ba:43:d1:d1:29:7e:bc:3c:30:8c: eb:35:5e:05:52:c2:4d:50:cc:3a:fc:6d:8d:cd:53: 47:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:28:53:69:BF:F9:31:30:13:F2:C7:AD:EB:06:76:F3:25:D9:1F:06 X509v3 Authority Key Identifier: keyid:71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:95:6e:e2:6e:45:40:f7:58:33:bc:84:1d:eb:eb:b0:ef:2f: 53:a5:64:03:46:a1:f1:f4:71:22:b8:10:93:a7:7b:13:40:7e: 49:7e:03:93:4e:b7:19:c6:6e:ee:63:bc:f9:9e:93:73:7a:7d: 40:ba:de:04:a0:d0:1e:4f:d3:45:b8:da:d4:06:a2:d0:9e:cd: 99:a4:42:79:44:2e:1f:56:b4:3f:f6:57:e6:5c:62:c6:3f:39: cf:0e:8c:e1:2f:1e:54:4b:ad:c5:cc:91:2b:dc:74:dd:ae:f4: 38:d9:fe:19:8e:ab:a0:a4:33:c8:2d:b7:ba:fe:67:a8:b8:86: af:f6:96:fa:1b:f4:bd:9e:db:dd:23:ea:bc:b7:99:31:a8:aa: b6:cd:08:50:cb:80:bc:1d:aa:dc:57:f7:78:19:bc:9d:c1:c1: 69:6d:27:88:33:4b:c7:18:d6:47:71:e9:86:66:2d:3b:8e:5e: d6:3b:e6:81:fd:24:50:c3:c1:62:44:ef:8c:61:84:d5:a0:c9: ba:4d:c8:73:f1:29:8a:ec:b0:fb:38:b4:45:0c:44:21:8e:9c: a9:1d:b1:2b:3c:02:d5:f2:1b:b5:01:84:97:d1:07:80:85:a3: 09:a3:01:18:5e:e5:7d:42:6c:2c:a4:68:33:8e:66:78:6a:dd: 49:a2:a8:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbwzjiOxEa5gSDn5cWUqiD4WwSU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2 QzlCNzJFMjAeFw0yNTA4MjIwNTE2MTFaFw0yNTA4MjUxMjA5MTFaMDMxMTAvBgNV BAMTKDA2Mjg1MzY5QkZGOTMxMzAxM0YyQzdBREVCMDY3NkYzMjVEOTFGMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDstgT6q+Funfo4DP6loT/yXUdu FLUkyv7AkFm0puJipY+lvROfu/wZUBM3VYXveG0RXOkdgOu+k2et2XUg7MLp5bEM gm3uiqkTx9myaDVnlHdqer08DekBWgi6kjkw5YV4psrHDud/JcuOMbwbFCFCnwKv /eHIYGgHhTmiNNolUgZ3JUhO6E8OMRm1jwIbB6ldTY0sOT4bbVIA+WWqYVM4v1ze D+i3fAU3a3FoPmdvykA7DqtQqIyrrwZJMM7wBQCaIYWLiN7uEGDUS0Qgj+E8BtLj dKhgPRmGDYJSLCrTTFL0PJ14ukPR0Sl+vDwwjOs1XgVSwk1QzDr8bY3NU0cPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBihTab/5MTAT8set6wZ28yXZHwYwHwYDVR0j BBgwFoAUceUam2XYoSNROjUPDZn5jWybcuIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDQ4YmQwNC1mNzg3LTQxNGEtYTUwMS01MTM4YTZkNmIzZTEvMC83MUU1MUE5QjY1 RDhBMTIzNTEzQTM1MEYwRDk5Rjk4RDZDOUI3MkUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2QzlC NzJFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ0OGJkMDQtZjc4Ny00MTRhLWE1 MDEtNTEzOGE2ZDZiM2UxLzAvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5 OEQ2QzlCNzJFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCVbuJuRUD3WDO8hB3r67DvL1OlZANGofH0 cSK4EJOnexNAfkl+A5NOtxnGbu5jvPmek3N6fUC63gSg0B5P00W42tQGotCezZmk QnlELh9WtD/2V+ZcYsY/Oc8OjOEvHlRLrcXMkSvcdN2u9DjZ/hmOq6CkM8gtt7r+ Z6i4hq/2lvob9L2e290j6ry3mTGoqrbNCFDLgLwdqtxX93gZvJ3BwWltJ4gzS8cY 1kdx6YZmLTuOXtY75oH9JFDDwWJE74xhhNWgybpNyHPxKYrssPs4tEUMRCGOnKkd sSs8AtXyG7UBhJfRB4CFowmjARhe5X1CbCykaDOOZnhq3UmiqHM= -----END CERTIFICATE-----Generated at Sat Aug 23 10:35:35 2025 by rpki-client