$ rpki-client -vvf repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft File: 71C1EFD5DFDE20418A49070671B01D675F9A8917.mft (raw, json) Hash identifier: USZQIwF2ILt+D7kSddZkSwip/2KfFwQ0b2G4AaGC8y0= Subject key identifier: 6E:2A:34:BD:5B:79:D9:3B:6A:62:86:4B:27:87:8A:20:63:F6:1B:CC Authority key identifier: 71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17 Certificate issuer: /CN=71C1EFD5DFDE20418A49070671B01D675F9A8917 Certificate serial: 265CF4B7DA2A67420C99168B87A9E84123A2FC58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft Manifest number: 0273 Signing time: Tue 22 Jul 2025 08:51:41 +0000 Manifest this update: Tue 22 Jul 2025 08:46:41 +0000 Manifest next update: Fri 25 Jul 2025 17:37:41 +0000 Files and hashes: 1: 71C1EFD5DFDE20418A49070671B01D675F9A8917.crl (hash: h32+WRDyDKc14tz8rtdkAP3gSv1ILm1/w10gCuYqGGM=) 2: 3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa (hash: 8ksM/q+y6Lni1XQrvYbOQyNFp8Q4IAzl4uPFuNiAyRE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:5c:f4:b7:da:2a:67:42:0c:99:16:8b:87:a9:e8:41:23:a2:fc:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C1EFD5DFDE20418A49070671B01D675F9A8917 Validity Not Before: Jul 22 08:46:41 2025 GMT Not After : Jul 25 17:37:41 2025 GMT Subject: CN=6E2A34BD5B79D93B6A62864B27878A2063F61BCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:92:6e:15:34:66:91:da:7f:10:26:3b:99:94: 63:cb:15:7a:44:3d:84:09:e2:b2:5d:e3:0e:57:c2: f4:b9:88:17:58:f8:e3:a7:77:48:8e:2c:dd:ac:b6: e9:38:df:5c:04:8a:bf:de:0a:17:4f:92:1e:59:f8: 43:03:b7:09:28:74:64:0f:e4:a9:64:6e:3b:e1:22: fc:3c:8f:1b:c7:70:0a:a6:d5:6d:7d:1a:60:63:c6: 30:f4:dd:1f:6c:0b:02:d8:c1:fe:6a:8b:48:d9:b7: dd:b6:08:ff:fa:b5:68:c6:19:b5:cf:93:77:ed:66: 1f:a9:a8:cb:6b:c3:09:08:f8:2f:17:9d:3a:92:0a: f0:70:fe:c3:8f:2a:a9:52:81:73:c4:b5:08:7c:de: b3:f9:e4:81:93:19:3e:fa:5f:7f:a0:b7:a1:9b:e0: 14:6a:8a:1d:9b:93:3a:28:4f:db:4f:9a:b3:56:fc: ca:0f:64:93:02:20:09:96:5f:f4:13:0d:c4:fb:1b: ef:4b:e8:04:73:32:21:62:76:1c:d3:f3:57:9b:dd: 0d:89:68:34:1c:30:41:7f:e8:1f:eb:1d:08:0f:e6: 3e:f5:63:55:38:58:1f:83:42:1b:d2:0a:cf:e5:61: ce:8c:8c:e8:d8:fb:f5:e3:25:91:2e:a0:96:e4:e0: b9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:2A:34:BD:5B:79:D9:3B:6A:62:86:4B:27:87:8A:20:63:F6:1B:CC X509v3 Authority Key Identifier: keyid:71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:14:42:bc:df:4d:d3:0e:bc:74:f5:95:a2:47:85:18:4d:b4: fb:bb:d6:e1:4c:6d:9a:7a:92:dc:06:19:df:e7:27:a9:fd:51: 95:ba:26:f8:0e:e5:9d:a9:d2:33:da:bb:7f:9d:a4:8b:05:08: 93:68:52:ec:ab:72:24:17:8e:56:8a:b0:dd:7b:74:20:10:46: ba:f5:c8:a9:2e:86:42:a0:da:fd:58:fd:94:e6:42:ac:9a:da: 74:16:9b:bf:e9:87:f1:db:2b:46:4a:8f:cf:f5:1d:ca:18:63: 76:0a:0c:de:71:dd:4a:01:93:2e:b9:5d:72:3e:c3:a6:3d:a9: 52:be:d2:02:a0:ec:c5:cf:92:2b:55:ed:e5:fe:eb:a9:fe:64: 59:82:23:7e:b1:3d:f7:b1:7d:c1:1f:e1:8e:af:0b:bf:10:bf: 89:5a:9a:7b:a0:f9:fc:54:5e:ca:cf:4f:3e:af:17:7f:86:7e: ff:36:c0:01:be:bc:1c:f0:2d:67:a7:59:31:8d:96:69:07:0e: 60:0e:91:ca:81:3b:26:52:be:f0:de:a5:87:93:c6:32:5a:6d: af:6c:3c:00:ad:64:11:34:3e:26:ef:32:57:1b:d0:e9:6e:41: 7b:11:9a:e7:f0:ea:51:33:7e:09:8f:a7:25:70:93:62:9c:75: 52:2c:b2:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJlz0t9oqZ0IMmRaLh6noQSOi/FgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFENjc1 RjlBODkxNzAeFw0yNTA3MjIwODQ2NDFaFw0yNTA3MjUxNzM3NDFaMDMxMTAvBgNV BAMTKDZFMkEzNEJENUI3OUQ5M0I2QTYyODY0QjI3ODc4QTIwNjNGNjFCQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvkm4VNGaR2n8QJjuZlGPLFXpE PYQJ4rJd4w5XwvS5iBdY+OOnd0iOLN2stuk431wEir/eChdPkh5Z+EMDtwkodGQP 5KlkbjvhIvw8jxvHcAqm1W19GmBjxjD03R9sCwLYwf5qi0jZt922CP/6tWjGGbXP k3ftZh+pqMtrwwkI+C8XnTqSCvBw/sOPKqlSgXPEtQh83rP55IGTGT76X3+gt6Gb 4BRqih2bkzooT9tPmrNW/MoPZJMCIAmWX/QTDcT7G+9L6ARzMiFidhzT81eb3Q2J aDQcMEF/6B/rHQgP5j71Y1U4WB+DQhvSCs/lYc6MjOjY+/XjJZEuoJbk4Lm7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbio0vVt52TtqYoZLJ4eKIGP2G8wwHwYDVR0j BBgwFoAUccHv1d/eIEGKSQcGcbAdZ1+aiRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWVhYjQ0Mi03NDgwLTQ1ODEtODFkZC0yM2EyMDA2MTQzODIvMC83MUMxRUZENURG REUyMDQxOEE0OTA3MDY3MUIwMUQ2NzVGOUE4OTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFENjc1RjlB ODkxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVlYWI0NDItNzQ4MC00NTgxLTgx ZGQtMjNhMjAwNjE0MzgyLzAvNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFE Njc1RjlBODkxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMoUQrzfTdMOvHT1laJHhRhNtPu71uFMbZp6 ktwGGd/nJ6n9UZW6JvgO5Z2p0jPau3+dpIsFCJNoUuyrciQXjlaKsN17dCAQRrr1 yKkuhkKg2v1Y/ZTmQqya2nQWm7/ph/HbK0ZKj8/1HcoYY3YKDN5x3UoBky65XXI+ w6Y9qVK+0gKg7MXPkitV7eX+66n+ZFmCI36xPfexfcEf4Y6vC78Qv4lamnug+fxU XsrPTz6vF3+Gfv82wAG+vBzwLWenWTGNlmkHDmAOkcqBOyZSvvDepYeTxjJaba9s PACtZBE0PibvMlcb0OluQXsRmufw6lEzfgmPpyVwk2KcdVIsskU= -----END CERTIFICATE-----Generated at Wed Jul 23 12:20:15 2025 by rpki-client