$ rpki-client -vvf repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft File: 71C1EFD5DFDE20418A49070671B01D675F9A8917.mft (raw, json) Hash identifier: SQnOVDbAqPVTo/T0tNNZBu4yB2EcIQnFTnKKq0HU/dM= Subject key identifier: 74:B7:CF:7A:E4:87:FD:60:9C:5C:AB:3A:A6:4D:02:BD:C2:25:3D:B9 Authority key identifier: 71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17 Certificate issuer: /CN=71C1EFD5DFDE20418A49070671B01D675F9A8917 Certificate serial: 0D4F3B951381BA5FF2629CF6C7E2F742E85AED44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft Manifest number: 025D Signing time: Mon 02 Jun 2025 14:21:42 +0000 Manifest this update: Mon 02 Jun 2025 14:16:42 +0000 Manifest next update: Fri 06 Jun 2025 02:11:42 +0000 Files and hashes: 1: 71C1EFD5DFDE20418A49070671B01D675F9A8917.crl (hash: 99+VAtbSyDt/KQ6XNxPo92YY8e+QDJlvp5J5aGwgqJo=) 2: 3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa (hash: 8ksM/q+y6Lni1XQrvYbOQyNFp8Q4IAzl4uPFuNiAyRE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 02:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:4f:3b:95:13:81:ba:5f:f2:62:9c:f6:c7:e2:f7:42:e8:5a:ed:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C1EFD5DFDE20418A49070671B01D675F9A8917 Validity Not Before: Jun 2 14:16:42 2025 GMT Not After : Jun 6 02:11:42 2025 GMT Subject: CN=74B7CF7AE487FD609C5CAB3AA64D02BDC2253DB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f6:56:b6:c1:51:ec:18:3d:33:09:85:c2:12: 62:bf:f1:9f:1c:a3:06:bf:e3:3e:5f:6e:bc:8e:28: 41:ed:50:6f:15:33:e6:2e:ca:56:35:1e:a2:c6:92: 9a:13:de:ca:41:28:8d:5f:2c:09:a6:9c:15:6f:d6: 77:e2:6a:ac:75:74:fa:76:d4:25:14:fc:fd:44:d5: 3a:0e:bb:ce:ff:df:99:41:9a:59:e9:9a:a6:65:f6: 63:94:1a:04:9b:d2:c7:ba:9c:99:a1:19:15:f2:d5: 36:95:61:08:4f:ed:8c:ba:e4:a7:7d:12:28:0b:94: f9:2a:b6:9e:aa:3b:e8:54:30:10:09:fd:eb:d1:b9: 20:16:e6:35:c9:a1:d7:00:63:e4:a3:4e:7a:be:de: ac:4d:09:61:d1:53:1e:ff:d6:3f:85:b4:c2:9c:69: 05:35:cf:8a:92:c4:57:4f:1d:55:dd:b1:bb:c4:cf: 0b:3f:c0:8e:32:69:5b:a2:fe:ac:7d:e0:73:4a:a2: 7e:fa:58:75:cb:84:ad:22:49:4c:68:43:97:fc:e7: 53:8b:e9:04:10:71:47:c8:1d:6c:45:3e:50:b6:32: 81:08:54:43:d6:27:4a:f1:b4:22:ab:5a:81:42:fa: 43:4c:9d:0a:29:51:0b:f7:b9:d9:11:85:19:41:cf: 2e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B7:CF:7A:E4:87:FD:60:9C:5C:AB:3A:A6:4D:02:BD:C2:25:3D:B9 X509v3 Authority Key Identifier: keyid:71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:2e:49:d9:53:00:9b:3d:8c:8e:a9:72:a3:81:b5:b5:0e:80: de:26:2e:d2:c3:9b:71:19:50:9c:42:93:3e:13:29:a7:bd:80: 62:d1:94:14:ee:53:f2:d2:0b:92:d2:08:2e:a0:60:1e:c6:ce: ba:a4:83:2e:cc:c9:3a:02:c4:a9:23:85:19:f3:9f:21:e5:87: 18:c4:07:12:98:fd:60:20:0d:74:57:ae:ed:db:36:27:0a:d7: d4:b2:8d:95:01:d8:88:f0:4b:c8:5e:84:88:fb:f7:28:73:f0: d6:02:30:04:9b:dc:40:99:9e:f7:7c:e4:f4:f6:cf:a5:1c:46: f4:a5:de:a6:90:38:6b:e0:e9:b9:e0:28:b5:b1:43:b6:fa:83: 86:e7:3c:4a:28:26:d2:eb:be:aa:6d:22:ec:4d:c8:ae:3d:4a: d2:3f:81:99:8c:90:a0:30:ab:6e:51:52:32:3d:14:ac:2e:d1: 6c:84:22:99:26:10:87:dd:b4:ef:5e:c2:40:90:b1:38:bc:88: f2:06:2d:4c:18:5c:2a:31:e2:ad:c1:6d:53:e2:f3:c6:e3:61: 05:28:3b:7a:f3:0a:69:86:62:e6:f6:6b:25:d2:3c:33:80:19: 6e:0f:b1:c6:91:8a:49:15:0e:2d:a2:b5:19:a8:1b:c9:b8:21: 24:8c:51:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDU87lROBul/yYpz2x+L3Quha7UQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFENjc1 RjlBODkxNzAeFw0yNTA2MDIxNDE2NDJaFw0yNTA2MDYwMjExNDJaMDMxMTAvBgNV BAMTKDc0QjdDRjdBRTQ4N0ZENjA5QzVDQUIzQUE2NEQwMkJEQzIyNTNEQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ9la2wVHsGD0zCYXCEmK/8Z8c owa/4z5fbryOKEHtUG8VM+YuylY1HqLGkpoT3spBKI1fLAmmnBVv1nfiaqx1dPp2 1CUU/P1E1ToOu87/35lBmlnpmqZl9mOUGgSb0se6nJmhGRXy1TaVYQhP7Yy65Kd9 EigLlPkqtp6qO+hUMBAJ/evRuSAW5jXJodcAY+SjTnq+3qxNCWHRUx7/1j+FtMKc aQU1z4qSxFdPHVXdsbvEzws/wI4yaVui/qx94HNKon76WHXLhK0iSUxoQ5f851OL 6QQQcUfIHWxFPlC2MoEIVEPWJ0rxtCKrWoFC+kNMnQopUQv3udkRhRlBzy7tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdLfPeuSH/WCcXKs6pk0CvcIlPbkwHwYDVR0j BBgwFoAUccHv1d/eIEGKSQcGcbAdZ1+aiRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWVhYjQ0Mi03NDgwLTQ1ODEtODFkZC0yM2EyMDA2MTQzODIvMC83MUMxRUZENURG REUyMDQxOEE0OTA3MDY3MUIwMUQ2NzVGOUE4OTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFENjc1RjlB ODkxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVlYWI0NDItNzQ4MC00NTgxLTgx ZGQtMjNhMjAwNjE0MzgyLzAvNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFE Njc1RjlBODkxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMuSdlTAJs9jI6pcqOBtbUOgN4mLtLDm3EZ UJxCkz4TKae9gGLRlBTuU/LSC5LSCC6gYB7Gzrqkgy7MyToCxKkjhRnznyHlhxjE BxKY/WAgDXRXru3bNicK19SyjZUB2IjwS8hehIj79yhz8NYCMASb3ECZnvd85PT2 z6UcRvSl3qaQOGvg6bngKLWxQ7b6g4bnPEooJtLrvqptIuxNyK49StI/gZmMkKAw q25RUjI9FKwu0WyEIpkmEIfdtO9ewkCQsTi8iPIGLUwYXCox4q3BbVPi88bjYQUo O3rzCmmGYub2ayXSPDOAGW4PscaRikkVDi2itRmoG8m4ISSMUcY= -----END CERTIFICATE-----Generated at Wed Jun 4 00:41:09 2025 by rpki-client