$ rpki-client -vvf repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft File: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft (raw, json) Hash identifier: W3K75MsV4rn9pC4zH8D5RruZG1qHDP5SUlJnKqItJ8s= Subject key identifier: FE:44:2A:C8:62:EC:74:4B:0D:EF:BC:4F:C4:47:34:6E:2C:75:6B:FE Authority key identifier: 71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 Certificate issuer: /CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Certificate serial: 5ECD2FAC97D034E48584463847BFE622DB7F203F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft Manifest number: 03AB Signing time: Wed 23 Jul 2025 23:21:11 +0000 Manifest this update: Wed 23 Jul 2025 23:16:11 +0000 Manifest next update: Sat 26 Jul 2025 23:36:11 +0000 Files and hashes: 1: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl (hash: Jb2Ls43vBM0Z3NPRo1DQSnWAPN1mf/N91sUibDbtIIc=) 2: 3130332e3130372e3138372e302f32342d3234203d3e20313337333030.roa (hash: KKxu3hPM0InDJZ99FC0Xq3EDadMAbvI+i8LW1aPaZ8E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 23:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:cd:2f:ac:97:d0:34:e4:85:84:46:38:47:bf:e6:22:db:7f:20:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Validity Not Before: Jul 23 23:16:11 2025 GMT Not After : Jul 26 23:36:11 2025 GMT Subject: CN=FE442AC862EC744B0DEFBC4FC447346E2C756BFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f5:a1:3c:85:e3:58:33:e6:10:14:c7:48:ba: 52:e6:14:79:9a:0b:69:86:a6:b4:55:67:eb:0c:f0: 01:45:f6:07:11:e5:1d:94:1a:98:9f:f4:db:ec:58: e9:89:d5:ef:a7:ee:53:fa:4a:e4:ae:24:1c:9d:73: d0:31:3b:ee:c2:f6:68:8a:47:69:fe:be:cb:97:a0: fc:22:5e:4f:d2:38:06:11:0f:6b:9f:b8:df:48:29: 57:17:d4:db:42:97:95:a3:ef:e7:76:47:9f:11:5c: 72:8f:0a:e3:57:49:74:76:38:7e:0f:c0:e5:48:4c: 77:08:c6:a0:5a:f1:79:4c:26:33:95:77:a3:aa:a4: 64:33:87:b1:3d:fc:c6:b3:49:cd:0c:02:fd:b6:79: b7:a2:59:4b:b8:3b:e0:a2:21:1e:fb:68:c1:c0:bf: 24:51:54:40:15:7e:f6:a2:f1:dd:85:25:f0:d0:31: 96:55:ed:8a:11:d0:29:44:12:5f:f4:81:55:ec:4d: 65:86:96:ca:9a:38:06:92:0e:f2:44:e0:bd:02:d3: 65:92:f6:77:b4:fb:b8:40:07:42:ad:ac:bd:5a:5d: fa:6c:9a:20:df:96:eb:15:a3:62:6d:ab:24:2f:2d: 66:94:49:bb:7a:67:25:35:53:00:80:fe:73:83:86: cc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:44:2A:C8:62:EC:74:4B:0D:EF:BC:4F:C4:47:34:6E:2C:75:6B:FE X509v3 Authority Key Identifier: keyid:71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:b2:cf:af:32:f1:c8:f9:05:67:23:6b:e3:d5:8a:e6:ca:75: 10:50:a4:cb:f3:c8:8b:07:a3:53:16:35:ea:6b:fa:cc:ec:d2: d6:c6:da:19:7e:f9:09:da:75:24:d7:c1:ea:e8:0a:b1:13:b5: 9a:56:5c:59:cc:6d:d7:8a:b1:30:bd:87:7f:fa:31:97:43:4b: 28:b9:10:39:26:96:e7:13:f5:ee:d2:cf:08:50:e6:e8:ae:6d: e7:5e:a6:02:1c:61:3a:24:21:7e:c1:ec:7e:bb:56:5f:bd:34: 8a:7e:e1:21:bf:bb:b5:14:fc:78:0f:5d:5b:1d:0b:ca:86:02: a3:45:15:95:49:e9:a8:24:e4:87:b7:78:c0:70:29:dc:6b:59: b8:09:0b:ef:26:35:09:64:88:24:8e:db:b6:d8:14:58:29:fa: f0:7f:cd:7f:67:20:48:d7:b1:8a:a7:8e:30:4d:ec:1c:50:82: bc:38:2e:b2:ca:15:88:6e:14:f7:a4:d6:1e:4e:bc:6a:34:a7: be:a7:a0:91:d2:c5:cd:33:26:28:a0:77:0f:be:2c:2d:24:bb: e8:74:7c:65:8c:dc:af:6e:be:bb:c4:7d:0a:f1:64:a1:62:25: 09:aa:b9:56:ea:dc:7b:97:28:d9:56:76:b0:b8:59:2b:77:1c: bd:a8:5b:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXs0vrJfQNOSFhEY4R7/mItt/ID8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2 QzlCNzJFMjAeFw0yNTA3MjMyMzE2MTFaFw0yNTA3MjYyMzM2MTFaMDMxMTAvBgNV BAMTKEZFNDQyQUM4NjJFQzc0NEIwREVGQkM0RkM0NDczNDZFMkM3NTZCRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg9aE8heNYM+YQFMdIulLmFHma C2mGprRVZ+sM8AFF9gcR5R2UGpif9NvsWOmJ1e+n7lP6SuSuJBydc9AxO+7C9miK R2n+vsuXoPwiXk/SOAYRD2ufuN9IKVcX1NtCl5Wj7+d2R58RXHKPCuNXSXR2OH4P wOVITHcIxqBa8XlMJjOVd6OqpGQzh7E9/MazSc0MAv22ebeiWUu4O+CiIR77aMHA vyRRVEAVfvai8d2FJfDQMZZV7YoR0ClEEl/0gVXsTWWGlsqaOAaSDvJE4L0C02WS 9ne0+7hAB0KtrL1aXfpsmiDflusVo2JtqyQvLWaUSbt6ZyU1UwCA/nODhsw9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/kQqyGLsdEsN77xPxEc0bix1a/4wHwYDVR0j BBgwFoAUceUam2XYoSNROjUPDZn5jWybcuIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDQ4YmQwNC1mNzg3LTQxNGEtYTUwMS01MTM4YTZkNmIzZTEvMC83MUU1MUE5QjY1 RDhBMTIzNTEzQTM1MEYwRDk5Rjk4RDZDOUI3MkUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2QzlC NzJFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ0OGJkMDQtZjc4Ny00MTRhLWE1 MDEtNTEzOGE2ZDZiM2UxLzAvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5 OEQ2QzlCNzJFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJiyz68y8cj5BWcja+PViubKdRBQpMvzyIsH o1MWNepr+szs0tbG2hl++QnadSTXweroCrETtZpWXFnMbdeKsTC9h3/6MZdDSyi5 EDkmlucT9e7SzwhQ5uiubedepgIcYTokIX7B7H67Vl+9NIp+4SG/u7UU/HgPXVsd C8qGAqNFFZVJ6agk5Ie3eMBwKdxrWbgJC+8mNQlkiCSO27bYFFgp+vB/zX9nIEjX sYqnjjBN7BxQgrw4LrLKFYhuFPek1h5OvGo0p76noJHSxc0zJiigdw++LC0ku+h0 fGWM3K9uvrvEfQrxZKFiJQmquVbq3HuXKNlWdrC4WSt3HL2oWws= -----END CERTIFICATE-----Generated at Fri Jul 25 05:17:19 2025 by rpki-client