$ rpki-client -vvf repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft File: 71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft (raw, json) Hash identifier: JPEP9EKJKYWls5fFmYxckqQGIn57YjcOGzE4p2pwY3Q= Subject key identifier: 38:BA:9A:31:0A:B5:F0:39:96:C3:4F:42:4C:AE:29:6B:48:19:E8:9A Authority key identifier: 71:FC:3F:7B:27:22:F6:A1:5C:55:7F:63:F8:F4:95:A9:CD:BC:A9:D7 Certificate issuer: /CN=71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7 Certificate serial: 4B1E719CF7A1EF61C01E02D065273A6DAA031A27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft Manifest number: 04E5 Signing time: Mon 30 Jun 2025 15:21:26 +0000 Manifest this update: Mon 30 Jun 2025 15:16:26 +0000 Manifest next update: Thu 03 Jul 2025 19:19:26 +0000 Files and hashes: 1: 3130332e3134372e38322e302f32342d3234203d3e20313339393538.roa (hash: vC4SL0uw9D8xmCXitMGfoUsUZzvLg4me8B5U0xhWjR0=) 2: 3130332e3134372e38332e302f32342d3234203d3e20313339393538.roa (hash: +BIBQAINF/5Qw6Z/inMjF3BgXwfPJiU1L7MDXOLb6hY=) 3: 71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl (hash: CkpCZb5ReGHPYD4lLgwRlNwjHK5RmaJf1lZU0ft+qd4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 19:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:1e:71:9c:f7:a1:ef:61:c0:1e:02:d0:65:27:3a:6d:aa:03:1a:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7 Validity Not Before: Jun 30 15:16:26 2025 GMT Not After : Jul 3 19:19:26 2025 GMT Subject: CN=38BA9A310AB5F03996C34F424CAE296B4819E89A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b5:64:d3:01:4d:30:0f:73:f4:ab:df:8c:27: a7:9c:37:2f:bc:c6:d0:de:dd:b1:be:b9:11:44:5d: e9:44:d2:2b:fe:b7:7b:b8:fa:6d:31:ce:ba:ef:69: 94:02:39:4d:72:4e:1f:f7:1c:24:73:46:d9:49:1e: 03:da:64:23:86:4c:58:c4:90:1a:05:ad:1c:01:72: c7:17:ac:c9:a5:7f:57:23:79:13:15:f2:e5:8a:77: ad:8f:fe:03:29:e7:86:63:65:e8:b4:b2:48:8c:4a: 10:12:78:df:2f:64:4d:62:6f:84:7e:a6:3e:ca:e1: 68:c5:03:a9:b7:7b:5a:9e:1c:53:b0:78:cf:45:07: 34:dc:c9:09:0f:09:b1:7e:53:20:41:1c:f1:d1:05: 66:58:27:82:ce:de:4c:31:4a:53:2d:e2:2d:0f:15: c6:1d:65:5a:20:65:2c:8a:e1:11:9a:54:c7:b0:d5: dc:c7:cd:d5:b7:8e:53:70:61:91:04:6a:8a:6a:ce: b5:75:eb:4d:63:ea:7c:43:a0:f7:6d:d4:16:8b:68: d5:e3:9e:34:67:75:0f:96:ef:2b:7e:22:72:f5:06: 77:40:86:b4:b1:1b:22:83:3b:10:6e:65:1c:1a:cf: 3c:32:da:a0:84:4a:9b:17:69:a5:b7:48:d7:58:05: cf:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BA:9A:31:0A:B5:F0:39:96:C3:4F:42:4C:AE:29:6B:48:19:E8:9A X509v3 Authority Key Identifier: keyid:71:FC:3F:7B:27:22:F6:A1:5C:55:7F:63:F8:F4:95:A9:CD:BC:A9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:b2:32:c9:15:fb:39:15:fa:af:5e:46:da:72:ef:20:0f:63: c2:1a:19:23:5e:3b:e7:fb:b7:35:41:6e:46:0f:7a:df:fc:aa: e6:15:72:60:f9:0a:f9:31:a7:5e:6b:07:11:eb:29:86:ee:11: 69:af:df:14:6a:68:25:f4:c2:56:ae:22:a7:b9:c1:13:2b:fc: 5f:f0:18:94:ec:83:ba:38:c5:91:77:24:72:91:92:9f:55:10: 5a:3a:79:3c:84:fe:49:7b:b4:98:06:ac:bb:85:c1:88:66:8b: 66:ad:8a:de:ca:59:b1:19:49:dc:cc:50:56:a1:fe:a9:0f:57: 7f:ed:fc:9b:a6:03:51:ab:0a:a5:b8:ef:7f:ef:04:b0:b9:19: 5c:18:68:2d:58:42:c1:1e:0d:8d:ed:44:42:2b:8f:0e:68:f4: 29:fa:26:1e:dd:94:0f:0c:f6:74:7b:3f:bf:7c:09:7b:b2:aa: c5:d1:16:58:ff:9d:c7:75:bf:3b:89:6b:03:66:78:2d:db:2d: 6d:5d:b4:4d:af:64:59:af:83:2c:f7:95:32:73:f3:0f:a9:cb: 25:28:51:38:9f:fe:39:cc:60:60:89:f4:f9:6b:86:24:a9:fe: fc:1e:4b:ae:d3:00:92:cd:f7:e7:0e:1f:b1:90:85:7a:ac:2b: dd:55:4f:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSx5xnPeh72HAHgLQZSc6baoDGicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1QTlD REJDQTlENzAeFw0yNTA2MzAxNTE2MjZaFw0yNTA3MDMxOTE5MjZaMDMxMTAvBgNV BAMTKDM4QkE5QTMxMEFCNUYwMzk5NkMzNEY0MjRDQUUyOTZCNDgxOUU4OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHtWTTAU0wD3P0q9+MJ6ecNy+8 xtDe3bG+uRFEXelE0iv+t3u4+m0xzrrvaZQCOU1yTh/3HCRzRtlJHgPaZCOGTFjE kBoFrRwBcscXrMmlf1cjeRMV8uWKd62P/gMp54ZjZei0skiMShASeN8vZE1ib4R+ pj7K4WjFA6m3e1qeHFOweM9FBzTcyQkPCbF+UyBBHPHRBWZYJ4LO3kwxSlMt4i0P FcYdZVogZSyK4RGaVMew1dzHzdW3jlNwYZEEaopqzrV1601j6nxDoPdt1BaLaNXj njRndQ+W7yt+InL1BndAhrSxGyKDOxBuZRwazzwy2qCESpsXaaW3SNdYBc+/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOLqaMQq18DmWw09CTK4pa0gZ6JowHwYDVR0j BBgwFoAUcfw/eyci9qFcVX9j+PSVqc28qdcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWE1YWM2NS02MDcxLTQ2ZTItYmI5ZC1kNzcwZDExN2M0YjQvMC83MUZDM0Y3QjI3 MjJGNkExNUM1NTdGNjNGOEY0OTVBOUNEQkNBOUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1QTlDREJD QTlENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFhNWFjNjUtNjA3MS00NmUyLWJi OWQtZDc3MGQxMTdjNGI0LzAvNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1 QTlDREJDQTlENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqyMskV+zkV+q9eRtpy7yAPY8IaGSNeO+f7 tzVBbkYPet/8quYVcmD5Cvkxp15rBxHrKYbuEWmv3xRqaCX0wlauIqe5wRMr/F/w GJTsg7o4xZF3JHKRkp9VEFo6eTyE/kl7tJgGrLuFwYhmi2atit7KWbEZSdzMUFah /qkPV3/t/JumA1GrCqW473/vBLC5GVwYaC1YQsEeDY3tREIrjw5o9Cn6Jh7dlA8M 9nR7P798CXuyqsXRFlj/ncd1vzuJawNmeC3bLW1dtE2vZFmvgyz3lTJz8w+pyyUo UTif/jnMYGCJ9PlrhiSp/vweS67TAJLN9+cOH7GQhXqsK91VT4E= -----END CERTIFICATE-----Generated at Tue Jul 1 16:47:19 2025 by rpki-client