$ rpki-client -vvf repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft File: 71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft (raw, json) Hash identifier: rIylK6y7VGpprbRgDfOL0LL1TfANuO9H8cQ+JENs0K8= Subject key identifier: 93:B1:D2:05:E4:D2:CD:B7:95:38:02:06:49:00:15:53:50:09:6A:10 Authority key identifier: 71:FC:3F:7B:27:22:F6:A1:5C:55:7F:63:F8:F4:95:A9:CD:BC:A9:D7 Certificate issuer: /CN=71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7 Certificate serial: 40D52A2BF67B2F4A78E3BC929296821EA5D0E3BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft Manifest number: 04FC Signing time: Fri 22 Aug 2025 04:21:29 +0000 Manifest this update: Fri 22 Aug 2025 04:16:29 +0000 Manifest next update: Mon 25 Aug 2025 06:32:29 +0000 Files and hashes: 1: 3130332e3134372e38322e302f32342d3234203d3e20313339393538.roa (hash: vC4SL0uw9D8xmCXitMGfoUsUZzvLg4me8B5U0xhWjR0=) 2: 3130332e3134372e38332e302f32342d3234203d3e20313339393538.roa (hash: +BIBQAINF/5Qw6Z/inMjF3BgXwfPJiU1L7MDXOLb6hY=) 3: 71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl (hash: xpoxQJuj8SzlauD26aqvZ/3bMrxZdjDcbQP0KIOyXQw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 06:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:d5:2a:2b:f6:7b:2f:4a:78:e3:bc:92:92:96:82:1e:a5:d0:e3:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7 Validity Not Before: Aug 22 04:16:29 2025 GMT Not After : Aug 25 06:32:29 2025 GMT Subject: CN=93B1D205E4D2CDB7953802064900155350096A10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bd:87:d2:a5:cf:ab:a0:f7:ed:96:58:79:ad: 83:d1:53:9c:31:49:b4:9a:b3:df:06:c3:38:9c:35: 59:a4:d5:18:32:80:cc:4a:8d:4c:27:a2:6a:56:40: 57:d5:68:dd:8e:93:9a:47:66:50:32:96:39:a5:2b: ba:ed:95:8c:3f:ba:55:1f:a1:81:75:41:9f:47:a5: e9:dc:ff:e5:f3:7b:87:d6:64:7b:a0:85:13:42:71: d3:8f:0f:e0:d4:2a:d4:64:eb:e5:b7:e1:39:38:46: 0d:05:70:29:ca:4f:1b:6d:fc:29:f6:53:6f:40:bd: ac:9f:cb:e4:1a:2a:5d:76:e8:78:71:ef:46:2d:ce: 32:44:48:e6:12:53:fe:0b:47:f7:70:73:99:23:53: c5:dd:bb:e7:10:c2:a0:94:67:ec:b5:96:8a:6f:85: b1:40:5f:19:1c:1f:18:b7:b2:66:25:86:2e:12:9c: 95:73:74:ef:da:3f:89:b4:c6:be:9f:8c:55:a6:9f: a2:28:1e:f7:fa:cf:db:5d:b9:f4:ed:c7:92:ed:04: b9:fe:af:46:74:03:87:82:41:0c:9b:6a:c1:a2:97: fb:46:fa:2f:9b:68:28:6e:ff:29:0b:a9:41:2e:40: dc:6e:b6:e7:bc:d3:3c:3a:d8:3c:5a:32:4f:bb:3b: f3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B1:D2:05:E4:D2:CD:B7:95:38:02:06:49:00:15:53:50:09:6A:10 X509v3 Authority Key Identifier: keyid:71:FC:3F:7B:27:22:F6:A1:5C:55:7F:63:F8:F4:95:A9:CD:BC:A9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:ab:06:f8:a5:03:96:6a:76:78:4f:6e:74:81:fe:df:f9:7e: f6:4f:69:4d:ed:5d:ff:a9:c6:9b:d5:7c:2e:67:03:ca:f5:d0: 85:5b:28:5c:f9:a4:f7:1e:68:cc:2d:61:2c:57:b5:db:7b:2e: 8d:fa:10:92:d0:42:f5:82:c2:49:fb:8c:27:8b:42:4a:36:12: 35:7c:a0:d6:59:af:30:ee:20:05:04:bb:f6:72:cd:cd:36:95: 46:31:46:01:3a:51:9e:af:1e:62:9e:fd:72:01:e9:d4:af:50: eb:c2:d9:7b:1e:24:a3:68:4d:6a:0a:3d:8e:76:a5:46:6c:98: ef:9c:9d:48:f0:3c:69:5a:6f:39:1d:20:28:f2:bd:5a:26:2f: ce:7f:78:5e:77:b3:52:35:80:a5:ad:df:de:a5:ca:42:be:ab: 66:f7:91:da:d8:9a:98:9d:b2:60:8a:5e:91:85:c3:65:2d:27: d1:1b:4a:a0:a7:a6:4e:60:76:7c:c9:a6:b1:14:a0:ee:aa:54: ec:03:4e:a5:3b:c4:ca:0b:5b:74:b3:dd:c3:21:72:ca:98:13: 84:31:42:ed:8a:d8:af:03:c4:02:2a:e7:87:41:34:e0:1b:c9: ac:0f:53:02:18:1c:14:37:2e:0d:98:2b:90:2a:02:46:99:97: 73:1f:56:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQNUqK/Z7L0p447ySkpaCHqXQ47owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1QTlD REJDQTlENzAeFw0yNTA4MjIwNDE2MjlaFw0yNTA4MjUwNjMyMjlaMDMxMTAvBgNV BAMTKDkzQjFEMjA1RTREMkNEQjc5NTM4MDIwNjQ5MDAxNTUzNTAwOTZBMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUvYfSpc+roPftllh5rYPRU5wx SbSas98GwzicNVmk1RgygMxKjUwnompWQFfVaN2Ok5pHZlAyljmlK7rtlYw/ulUf oYF1QZ9Hpenc/+Xze4fWZHughRNCcdOPD+DUKtRk6+W34Tk4Rg0FcCnKTxtt/Cn2 U29Avayfy+QaKl126Hhx70YtzjJESOYSU/4LR/dwc5kjU8Xdu+cQwqCUZ+y1lopv hbFAXxkcHxi3smYlhi4SnJVzdO/aP4m0xr6fjFWmn6IoHvf6z9tdufTtx5LtBLn+ r0Z0A4eCQQybasGil/tG+i+baChu/ykLqUEuQNxutue80zw62DxaMk+7O/NvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk7HSBeTSzbeVOAIGSQAVU1AJahAwHwYDVR0j BBgwFoAUcfw/eyci9qFcVX9j+PSVqc28qdcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWE1YWM2NS02MDcxLTQ2ZTItYmI5ZC1kNzcwZDExN2M0YjQvMC83MUZDM0Y3QjI3 MjJGNkExNUM1NTdGNjNGOEY0OTVBOUNEQkNBOUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1QTlDREJD QTlENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFhNWFjNjUtNjA3MS00NmUyLWJi OWQtZDc3MGQxMTdjNGI0LzAvNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1 QTlDREJDQTlENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOrBvilA5ZqdnhPbnSB/t/5fvZPaU3tXf+p xpvVfC5nA8r10IVbKFz5pPceaMwtYSxXtdt7Lo36EJLQQvWCwkn7jCeLQko2EjV8 oNZZrzDuIAUEu/Zyzc02lUYxRgE6UZ6vHmKe/XIB6dSvUOvC2XseJKNoTWoKPY52 pUZsmO+cnUjwPGlabzkdICjyvVomL85/eF53s1I1gKWt396lykK+q2b3kdrYmpid smCKXpGFw2UtJ9EbSqCnpk5gdnzJprEUoO6qVOwDTqU7xMoLW3Sz3cMhcsqYE4Qx Qu2K2K8DxAIq54dBNOAbyawPUwIYHBQ3Lg2YK5AqAkaZl3MfVoM= -----END CERTIFICATE-----Generated at Sat Aug 23 12:29:07 2025 by rpki-client