$ rpki-client -vvf repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft File: 71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft (raw, json) Hash identifier: t4CZx0xx4XamgWv2b/U7J4DfJKsgCDYg0UXHz2ekSgo= Subject key identifier: 45:9F:05:94:7A:FB:80:25:08:25:78:3A:67:C9:CA:9E:77:E1:D7:67 Authority key identifier: 71:FC:3F:7B:27:22:F6:A1:5C:55:7F:63:F8:F4:95:A9:CD:BC:A9:D7 Certificate issuer: /CN=71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7 Certificate serial: 216A02D4B0A4C6DD519E0F6C1CBAC7356A9B9F9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft Manifest number: 04EE Signing time: Sun 20 Jul 2025 23:51:27 +0000 Manifest this update: Sun 20 Jul 2025 23:46:27 +0000 Manifest next update: Thu 24 Jul 2025 05:19:27 +0000 Files and hashes: 1: 71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl (hash: sYQwD9eWrcd+9rg3eiNfTYRe6/wyMx+z0dxhW1yWEbY=) 2: 3130332e3134372e38322e302f32342d3234203d3e20313339393538.roa (hash: vC4SL0uw9D8xmCXitMGfoUsUZzvLg4me8B5U0xhWjR0=) 3: 3130332e3134372e38332e302f32342d3234203d3e20313339393538.roa (hash: +BIBQAINF/5Qw6Z/inMjF3BgXwfPJiU1L7MDXOLb6hY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 05:19:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:6a:02:d4:b0:a4:c6:dd:51:9e:0f:6c:1c:ba:c7:35:6a:9b:9f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7 Validity Not Before: Jul 20 23:46:27 2025 GMT Not After : Jul 24 05:19:27 2025 GMT Subject: CN=459F05947AFB80250825783A67C9CA9E77E1D767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1e:f6:53:8d:bc:7e:26:18:de:b2:e0:74:c9: 1d:71:27:e5:ea:d4:6f:a3:e3:2f:28:f6:1f:5b:f5: 3f:80:2b:4c:b5:98:7f:c5:6e:12:39:fd:49:30:50: 08:8a:12:5d:0b:3b:3e:69:d2:80:7f:64:8d:04:9c: 24:89:d8:77:d1:77:23:d3:a4:aa:9e:d2:22:77:c2: d8:c6:7c:8f:54:c5:13:66:24:52:81:1c:4a:29:2d: 4c:2e:1a:21:af:26:79:09:83:48:83:f7:04:37:46: 2d:f5:5c:d0:cb:87:34:a1:8f:77:7f:aa:7d:90:2d: fe:f2:05:c3:bc:1a:00:08:20:14:50:7d:ee:70:e9: 1b:1d:e2:64:9b:ca:9d:98:72:82:eb:9a:43:5a:3d: 46:a2:e2:14:c6:87:56:ed:ab:77:47:b7:b3:49:55: 07:c7:ab:66:6a:10:de:ce:ba:74:82:f3:74:f6:3d: 51:f0:a3:61:35:6b:31:33:ed:3c:45:3d:e2:83:48: 8d:c5:cc:9f:f3:d4:04:f4:65:be:f1:52:3b:a1:1a: b9:b9:bc:ce:55:9d:72:27:57:a6:7a:6c:cb:be:21: b5:55:c1:7e:e1:33:4e:1c:d6:80:88:6a:91:1c:07: 65:70:37:ee:25:c5:5b:51:47:d6:f2:cc:63:7d:7d: 98:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:9F:05:94:7A:FB:80:25:08:25:78:3A:67:C9:CA:9E:77:E1:D7:67 X509v3 Authority Key Identifier: keyid:71:FC:3F:7B:27:22:F6:A1:5C:55:7F:63:F8:F4:95:A9:CD:BC:A9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:67:16:15:f4:be:b0:f9:bc:f0:c3:10:b5:b6:33:37:6c:c6: ef:27:bb:de:8b:9f:7c:eb:2f:dd:8e:4c:b7:74:e5:36:b3:34: 74:f7:0e:fe:52:57:40:6d:2b:23:f9:f7:a8:59:2c:fe:70:52: 6a:db:0f:22:5b:d9:74:0f:53:df:3a:b0:fd:40:48:5f:f4:b1: f2:dc:01:11:8f:e4:a7:f7:00:81:01:91:9a:3f:8c:06:26:05: 70:7a:08:3a:bf:81:ef:ee:34:c0:6d:52:91:b5:9e:5b:21:55: 1a:22:22:d2:b4:10:33:6e:66:f7:f1:b2:29:e0:83:b7:cb:91: 93:57:a3:43:94:5d:50:1c:e6:a1:51:ef:3e:d6:17:f2:04:21: b4:d2:68:c3:fc:40:50:3b:90:08:58:25:50:66:56:95:81:69: e8:4d:b0:b2:dd:24:d0:31:e6:bf:0f:ac:f5:45:37:2b:7a:55: 3f:6c:a5:54:34:c3:71:e0:a4:e2:97:be:06:11:ef:d2:7a:c4: e9:06:f8:9e:ce:64:cd:5c:67:7b:13:41:db:7c:1b:3c:da:c7: bb:86:56:c2:08:7e:b9:33:1f:15:94:9f:33:0b:b7:62:bc:6f: 3c:1b:04:4f:1f:85:d5:c6:9a:aa:62:e8:fb:b5:56:14:b5:d0: 85:8f:09:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIWoC1LCkxt1Rng9sHLrHNWqbn54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1QTlD REJDQTlENzAeFw0yNTA3MjAyMzQ2MjdaFw0yNTA3MjQwNTE5MjdaMDMxMTAvBgNV BAMTKDQ1OUYwNTk0N0FGQjgwMjUwODI1NzgzQTY3QzlDQTlFNzdFMUQ3NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHHvZTjbx+JhjesuB0yR1xJ+Xq 1G+j4y8o9h9b9T+AK0y1mH/FbhI5/UkwUAiKEl0LOz5p0oB/ZI0EnCSJ2HfRdyPT pKqe0iJ3wtjGfI9UxRNmJFKBHEopLUwuGiGvJnkJg0iD9wQ3Ri31XNDLhzShj3d/ qn2QLf7yBcO8GgAIIBRQfe5w6Rsd4mSbyp2YcoLrmkNaPUai4hTGh1btq3dHt7NJ VQfHq2ZqEN7OunSC83T2PVHwo2E1azEz7TxFPeKDSI3FzJ/z1AT0Zb7xUjuhGrm5 vM5VnXInV6Z6bMu+IbVVwX7hM04c1oCIapEcB2VwN+4lxVtRR9byzGN9fZiTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURZ8FlHr7gCUIJXg6Z8nKnnfh12cwHwYDVR0j BBgwFoAUcfw/eyci9qFcVX9j+PSVqc28qdcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWE1YWM2NS02MDcxLTQ2ZTItYmI5ZC1kNzcwZDExN2M0YjQvMC83MUZDM0Y3QjI3 MjJGNkExNUM1NTdGNjNGOEY0OTVBOUNEQkNBOUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1QTlDREJD QTlENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFhNWFjNjUtNjA3MS00NmUyLWJi OWQtZDc3MGQxMTdjNGI0LzAvNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1 QTlDREJDQTlENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADhnFhX0vrD5vPDDELW2Mzdsxu8nu96Ln3zr L92OTLd05TazNHT3Dv5SV0BtKyP596hZLP5wUmrbDyJb2XQPU986sP1ASF/0sfLc ARGP5Kf3AIEBkZo/jAYmBXB6CDq/ge/uNMBtUpG1nlshVRoiItK0EDNuZvfxsing g7fLkZNXo0OUXVAc5qFR7z7WF/IEIbTSaMP8QFA7kAhYJVBmVpWBaehNsLLdJNAx 5r8PrPVFNyt6VT9spVQ0w3HgpOKXvgYR79J6xOkG+J7OZM1cZ3sTQdt8Gzzax7uG VsIIfrkzHxWUnzMLt2K8bzwbBE8fhdXGmqpi6Pu1VhS10IWPCW4= -----END CERTIFICATE-----Generated at Tue Jul 22 04:37:01 2025 by rpki-client