$ rpki-client -vvf repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft File: 71876CD3DD087E9543A347F614A4D24A87A40F95.mft (raw, json) Hash identifier: e63yCfphTmgkFhB7YvgT2VwlHSBYFgA9/gF0RGH7AtY= Subject key identifier: BA:F8:55:85:B3:30:08:E7:1B:B4:44:2F:EA:80:F7:E4:EB:DC:D9:D0 Authority key identifier: 71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95 Certificate issuer: /CN=71876CD3DD087E9543A347F614A4D24A87A40F95 Certificate serial: 40BA7C8BB248C3A1E16B8C0AD7577B38ED809ED3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft Manifest number: 019B Signing time: Sun 20 Jul 2025 18:40:45 +0000 Manifest this update: Sun 20 Jul 2025 18:35:45 +0000 Manifest next update: Thu 24 Jul 2025 02:31:45 +0000 Files and hashes: 1: 71876CD3DD087E9543A347F614A4D24A87A40F95.crl (hash: KZM43Xehfgd89aXLrTjEXcyaAQHsJmKwWDyQ536+trw=) 2: 3130332e3130372e3230362e302f32342d3234203d3e20313431313238.roa (hash: ci5I/MxrgoJ1rfjV0dWp5xS5P0hJgjy6xXmWTHTwpMQ=) 3: 3130332e3135382e3133302e302f32342d3234203d3e20313431313238.roa (hash: V2nbf4Xerdo+UlaGtEEFCDfKfKUg2cbilII6qfqHQqs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ba:7c:8b:b2:48:c3:a1:e1:6b:8c:0a:d7:57:7b:38:ed:80:9e:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71876CD3DD087E9543A347F614A4D24A87A40F95 Validity Not Before: Jul 20 18:35:45 2025 GMT Not After : Jul 24 02:31:45 2025 GMT Subject: CN=BAF85585B33008E71BB4442FEA80F7E4EBDCD9D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:82:c9:9b:c5:74:b7:2d:bf:af:7e:0f:40:21: 30:83:c0:26:d6:a2:e2:07:6f:d1:e9:2e:79:46:e8: 12:e0:38:53:3e:db:a3:e7:96:b5:f4:67:ff:e6:6f: 97:43:7c:9c:d1:33:f8:bc:f3:b4:54:af:3b:b5:58: 66:85:59:a8:29:8d:82:dc:d2:71:02:a0:f6:09:e0: c6:65:f8:a3:ac:65:d4:ad:a2:1f:68:2e:ab:f7:46: e6:f7:0e:6d:43:4d:65:30:0b:87:ab:7f:fd:82:eb: 16:40:8e:77:06:c4:e5:74:6a:be:e2:ee:14:ef:2e: 0e:b5:48:f0:47:b6:71:95:fd:f4:53:79:11:ff:37: 09:99:cd:95:66:46:89:6c:01:c7:00:24:5d:26:83: 43:6c:ba:68:b9:4e:18:5d:45:d0:1c:2c:57:30:3c: 5c:1c:e6:bc:3b:d0:5e:52:a8:61:29:8c:de:4c:91: a5:1e:b6:6a:a0:a1:34:91:51:b5:0d:ad:3f:df:1a: bb:33:34:56:57:79:2f:b9:ac:37:69:74:50:db:80: d3:22:f6:a7:92:51:95:e7:bd:f0:dc:2c:67:32:6e: d6:37:f7:63:28:1f:04:c9:86:64:b4:74:b2:32:2d: 90:fb:e0:f2:4d:07:bd:43:62:a8:4e:53:85:12:d9: d0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F8:55:85:B3:30:08:E7:1B:B4:44:2F:EA:80:F7:E4:EB:DC:D9:D0 X509v3 Authority Key Identifier: keyid:71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:33:a3:a0:5b:4e:83:3c:0a:94:57:b8:11:f9:16:6c:a0:1d: 5e:67:f8:22:fb:8e:71:b6:81:3a:79:ce:0c:e3:ad:e2:83:c1: 2e:82:38:3a:9b:c6:28:8f:f1:38:62:53:ca:8c:d9:1a:e2:54: cb:13:9f:b3:12:8d:6a:32:3c:e0:8c:6c:40:08:cb:90:68:fa: 7a:e8:1c:66:18:5c:93:8e:26:a5:48:78:1e:57:f9:de:88:5c: 72:19:4f:a3:4f:62:4f:22:84:7a:3f:78:80:eb:37:7f:bd:33: 9d:4d:35:55:43:76:4c:06:5c:91:91:b1:ce:9f:f5:3a:25:ce: 07:8d:b0:d3:b0:66:2b:ab:0f:62:7a:61:11:04:ab:b4:19:4f: 35:c8:9a:1f:ce:e4:d8:2c:33:ca:df:d2:28:6f:14:2a:fd:2d: 11:62:fd:2a:c4:0b:c5:79:a5:18:1f:40:c5:09:de:7e:c1:66: c8:7e:48:27:19:9e:80:ba:cb:26:ff:25:bf:48:fa:8d:07:49: c6:94:c2:50:b1:99:9b:bf:94:42:c5:9d:73:ee:0b:74:04:87: 6f:64:ef:56:1c:23:52:07:d4:1f:8a:08:09:b9:c8:5c:39:68: 5e:21:8b:2d:30:1c:d8:be:c6:1e:53:ce:c7:1a:5b:19:98:35: 45:fb:6a:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQLp8i7JIw6Hha4wK11d7OO2AntMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4 N0E0MEY5NTAeFw0yNTA3MjAxODM1NDVaFw0yNTA3MjQwMjMxNDVaMDMxMTAvBgNV BAMTKEJBRjg1NTg1QjMzMDA4RTcxQkI0NDQyRkVBODBGN0U0RUJEQ0Q5RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAgsmbxXS3Lb+vfg9AITCDwCbW ouIHb9HpLnlG6BLgOFM+26PnlrX0Z//mb5dDfJzRM/i887RUrzu1WGaFWagpjYLc 0nECoPYJ4MZl+KOsZdStoh9oLqv3Rub3Dm1DTWUwC4erf/2C6xZAjncGxOV0ar7i 7hTvLg61SPBHtnGV/fRTeRH/NwmZzZVmRolsAccAJF0mg0Nsumi5ThhdRdAcLFcw PFwc5rw70F5SqGEpjN5MkaUetmqgoTSRUbUNrT/fGrszNFZXeS+5rDdpdFDbgNMi 9qeSUZXnvfDcLGcybtY392MoHwTJhmS0dLIyLZD74PJNB71DYqhOU4US2dCfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuvhVhbMwCOcbtEQv6oD35Ovc2dAwHwYDVR0j BBgwFoAUcYds090IfpVDo0f2FKTSSoekD5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWRlY2E4Mi04OWFiLTQ1ODItOGU4Mi04ZWM4YTUxZmVjNDIvMC83MTg3NkNEM0RE MDg3RTk1NDNBMzQ3RjYxNEE0RDI0QTg3QTQwRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4N0E0 MEY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTVkZWNhODItODlhYi00NTgyLThl ODItOGVjOGE1MWZlYzQyLzAvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQy NEE4N0E0MEY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0zo6BbToM8CpRXuBH5FmygHV5n+CL7jnG2 gTp5zgzjreKDwS6CODqbxiiP8ThiU8qM2RriVMsTn7MSjWoyPOCMbEAIy5Bo+nro HGYYXJOOJqVIeB5X+d6IXHIZT6NPYk8ihHo/eIDrN3+9M51NNVVDdkwGXJGRsc6f 9TolzgeNsNOwZiurD2J6YREEq7QZTzXImh/O5NgsM8rf0ihvFCr9LRFi/SrEC8V5 pRgfQMUJ3n7BZsh+SCcZnoC6yyb/Jb9I+o0HScaUwlCxmZu/lELFnXPuC3QEh29k 71YcI1IH1B+KCAm5yFw5aF4hiy0wHNi+xh5TzscaWxmYNUX7als= -----END CERTIFICATE-----Generated at Sun Jul 20 21:29:27 2025 by rpki-client