$ rpki-client -vvf repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft File: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft (raw, json) Hash identifier: QDWb438yv5+E9rQRRqwtNglmi0PgrRzxgA9WAwhoDUQ= Subject key identifier: 92:FC:CE:11:21:FE:DF:80:79:65:56:3A:97:13:7D:6A:51:88:2A:DA Authority key identifier: 71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 Certificate issuer: /CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Certificate serial: 0C3B8FCB5FD9B62EDC37B75CA3D1E4878AE55235 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft Manifest number: 0389 Signing time: Fri 09 May 2025 02:51:10 +0000 Manifest this update: Fri 09 May 2025 02:46:10 +0000 Manifest next update: Mon 12 May 2025 05:30:10 +0000 Files and hashes: 1: 3130332e3130372e3138372e302f32342d3234203d3e20313337333030.roa (hash: KKxu3hPM0InDJZ99FC0Xq3EDadMAbvI+i8LW1aPaZ8E=) 2: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl (hash: oxP6j48LIth2XZ6Agn2GrjXxesmv4l9+K/t1EzbUnqQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 05:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:3b:8f:cb:5f:d9:b6:2e:dc:37:b7:5c:a3:d1:e4:87:8a:e5:52:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Validity Not Before: May 9 02:46:10 2025 GMT Not After : May 12 05:30:10 2025 GMT Subject: CN=92FCCE1121FEDF807965563A97137D6A51882ADA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f5:54:d5:b3:2c:50:76:b2:80:56:a2:7c:43: 72:70:ad:38:28:f6:3f:f1:29:9c:f6:93:3b:4e:67: 2c:7d:4d:25:90:b8:95:1f:c2:0e:ea:6e:1a:1d:66: 06:56:4a:19:00:f2:75:2e:4a:77:10:50:eb:87:f9: 0a:65:57:c3:08:9f:44:50:ee:a4:a7:95:3a:ce:dc: 19:e8:77:8f:6e:88:03:e4:58:03:a5:76:69:d5:2e: 95:d5:2f:1a:f5:0f:ab:0f:4a:2c:9f:b3:ea:28:87: 92:15:5b:a8:e3:19:82:69:82:07:6d:57:20:9e:96: 3f:88:5e:00:cd:3b:8c:88:44:50:15:af:17:da:da: f8:bd:2d:a4:dd:d6:66:61:97:62:80:fb:76:e2:e6: 17:33:a9:a5:d3:c8:8c:53:c4:f6:4d:9a:59:34:de: be:c5:db:cc:ad:78:0d:b2:9f:d4:ba:6a:1d:48:bd: 1c:d0:3d:19:81:2d:d1:a6:4d:7e:36:97:dd:cb:90: 65:68:83:18:9d:4a:c1:9a:74:05:a3:73:e0:57:9b: 8a:74:69:1f:4c:86:6d:7c:cd:b9:4f:66:b1:e1:ea: 95:32:3c:f4:3d:30:e5:1e:e9:8a:e3:56:8c:df:8f: c2:48:f4:87:e0:9f:08:77:a7:11:72:56:5e:a7:4d: 7b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FC:CE:11:21:FE:DF:80:79:65:56:3A:97:13:7D:6A:51:88:2A:DA X509v3 Authority Key Identifier: keyid:71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:57:08:84:d0:08:ab:07:91:b8:bc:74:99:ac:8c:7a:cb:4e: 52:77:20:1e:04:f8:03:7a:63:11:0d:fa:d4:d2:03:66:9d:83: ba:51:95:de:d4:a4:96:4a:6e:10:0c:21:0b:16:d4:ba:8d:e2: b4:5e:be:f8:eb:6a:18:ad:16:d1:31:b5:81:b3:7f:71:f0:8c: d5:a6:99:7c:6b:4c:25:68:68:7c:12:d0:3e:2b:85:2c:2b:87: 96:eb:19:81:58:8f:8c:cc:34:82:52:bf:9e:ab:1e:a6:99:8b: 6b:b6:5a:23:a9:49:77:0d:c2:89:ed:89:24:f1:13:26:11:b1: 49:bb:d8:16:f6:d1:32:05:07:33:d7:54:da:06:ca:d5:f9:7d: 58:f4:66:79:bb:32:08:a8:3f:8d:83:04:47:d1:5b:4f:23:5b: ab:00:c2:77:9c:33:1c:0c:18:d6:fb:ef:6e:c1:a2:72:07:e5: b5:68:40:c0:50:e8:71:26:0a:07:c1:44:22:51:da:44:6d:9d: 8c:f6:78:dd:34:0e:38:90:d3:a8:8d:00:2e:f7:6f:ae:fd:2d: 16:a4:26:75:3f:e5:6a:8d:b3:f9:d0:b9:0e:dc:6e:80:29:6c: 88:b0:b1:da:22:db:a7:63:fc:fe:cf:d4:6f:4d:8f:74:80:f8: 61:6f:96:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDDuPy1/Zti7cN7dco9Hkh4rlUjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2 QzlCNzJFMjAeFw0yNTA1MDkwMjQ2MTBaFw0yNTA1MTIwNTMwMTBaMDMxMTAvBgNV BAMTKDkyRkNDRTExMjFGRURGODA3OTY1NTYzQTk3MTM3RDZBNTE4ODJBREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC59VTVsyxQdrKAVqJ8Q3JwrTgo 9j/xKZz2kztOZyx9TSWQuJUfwg7qbhodZgZWShkA8nUuSncQUOuH+QplV8MIn0RQ 7qSnlTrO3Bnod49uiAPkWAOldmnVLpXVLxr1D6sPSiyfs+ooh5IVW6jjGYJpggdt VyCelj+IXgDNO4yIRFAVrxfa2vi9LaTd1mZhl2KA+3bi5hczqaXTyIxTxPZNmlk0 3r7F28yteA2yn9S6ah1IvRzQPRmBLdGmTX42l93LkGVogxidSsGadAWjc+BXm4p0 aR9Mhm18zblPZrHh6pUyPPQ9MOUe6YrjVozfj8JI9Ifgnwh3pxFyVl6nTXufAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkvzOESH+34B5ZVY6lxN9alGIKtowHwYDVR0j BBgwFoAUceUam2XYoSNROjUPDZn5jWybcuIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDQ4YmQwNC1mNzg3LTQxNGEtYTUwMS01MTM4YTZkNmIzZTEvMC83MUU1MUE5QjY1 RDhBMTIzNTEzQTM1MEYwRDk5Rjk4RDZDOUI3MkUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2QzlC NzJFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ0OGJkMDQtZjc4Ny00MTRhLWE1 MDEtNTEzOGE2ZDZiM2UxLzAvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5 OEQ2QzlCNzJFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZXCITQCKsHkbi8dJmsjHrLTlJ3IB4E+AN6 YxEN+tTSA2adg7pRld7UpJZKbhAMIQsW1LqN4rRevvjrahitFtExtYGzf3HwjNWm mXxrTCVoaHwS0D4rhSwrh5brGYFYj4zMNIJSv56rHqaZi2u2WiOpSXcNwontiSTx EyYRsUm72Bb20TIFBzPXVNoGytX5fVj0Znm7MgioP42DBEfRW08jW6sAwnecMxwM GNb7727BonIH5bVoQMBQ6HEmCgfBRCJR2kRtnYz2eN00DjiQ06iNAC73b679LRak JnU/5WqNs/nQuQ7cboApbIiwsdoi26dj/P7P1G9Nj3SA+GFvlk4= -----END CERTIFICATE-----Generated at Sat May 10 16:38:14 2025 by rpki-client