$ rpki-client -vvf repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft File: 71C1EFD5DFDE20418A49070671B01D675F9A8917.mft (raw, json) Hash identifier: 5G9iKzct7AAYtgq6DQ2VjPPt0wfJCd8/RTaZ28WHp3Q= Subject key identifier: 6A:11:36:F2:F4:78:3D:0F:0A:95:BE:CF:6E:1F:C4:3A:D0:29:3E:FF Authority key identifier: 71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17 Certificate issuer: /CN=71C1EFD5DFDE20418A49070671B01D675F9A8917 Certificate serial: 4AAAF7CEFA15437101F22A53B0076B1C16587F6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft Manifest number: 0288 Signing time: Sun 07 Sep 2025 08:01:41 +0000 Manifest this update: Sun 07 Sep 2025 07:56:41 +0000 Manifest next update: Wed 10 Sep 2025 08:01:41 +0000 Files and hashes: 1: 3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa (hash: 8ksM/q+y6Lni1XQrvYbOQyNFp8Q4IAzl4uPFuNiAyRE=) 2: 71C1EFD5DFDE20418A49070671B01D675F9A8917.crl (hash: m3zJZzw7bw61MBtTKCyh+bWJLgVJ29CsDBuqC0cXuGY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 08:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:aa:f7:ce:fa:15:43:71:01:f2:2a:53:b0:07:6b:1c:16:58:7f:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C1EFD5DFDE20418A49070671B01D675F9A8917 Validity Not Before: Sep 7 07:56:41 2025 GMT Not After : Sep 10 08:01:41 2025 GMT Subject: CN=6A1136F2F4783D0F0A95BECF6E1FC43AD0293EFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f5:88:5c:52:45:9c:2a:fc:9a:ec:f9:e6:95: 68:5b:55:c8:e1:51:24:e6:3e:f3:27:0b:d3:36:07: 67:7c:1a:89:24:61:ea:74:81:55:8b:b0:bb:51:95: 58:bc:d8:34:75:ba:a0:58:9f:53:19:26:35:e8:f2: c2:5e:64:21:65:2e:c5:9b:e3:40:44:e1:a6:f8:a1: 2c:e0:f9:a6:5c:d5:2b:8a:70:f6:2f:b9:39:dd:70: ee:99:0f:8d:74:61:3a:ad:f1:78:08:42:bf:f0:69: 40:29:3f:c7:68:7a:0f:47:e5:db:87:fa:0e:29:9a: bd:6b:ae:46:bb:10:f9:40:44:2c:d3:24:e8:c5:54: bb:a6:00:7c:0f:7b:a0:a7:fa:f9:74:03:fe:7b:12: 6b:6e:c6:ae:4d:1e:27:36:51:04:f1:1b:5e:f8:26: d8:62:12:7b:25:70:ad:6c:82:05:61:cf:6e:0e:9a: 94:74:c2:24:98:60:21:f8:56:3b:8f:b2:7d:31:f8: ba:6f:bd:98:64:29:ff:4b:17:fb:d7:07:de:bc:9e: a5:a6:71:a7:d6:91:43:a6:d4:dc:99:9e:8d:36:12: 87:7a:99:0b:ad:0a:be:fb:50:e0:ea:e6:04:d6:26: 0b:79:77:2a:12:33:e1:cd:64:9f:49:28:c1:cf:6e: 5e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:11:36:F2:F4:78:3D:0F:0A:95:BE:CF:6E:1F:C4:3A:D0:29:3E:FF X509v3 Authority Key Identifier: keyid:71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:b2:ee:18:76:19:88:45:c7:ae:5d:1e:c0:9e:5a:4f:89:99: 36:19:dc:22:d0:1c:ad:b6:7c:ea:ab:0a:a3:34:e5:eb:55:91: 12:d2:07:8c:68:36:32:b1:cc:07:4e:0b:b6:32:f5:51:76:24: 43:7a:31:ce:4a:cc:82:c8:9f:85:9a:3c:6d:94:28:73:24:a2: b3:bf:fd:46:82:c3:ab:d7:2d:ef:27:a1:85:40:55:9c:b3:88: 8d:0c:87:21:ae:31:b3:bf:6f:b0:20:6c:aa:c4:e6:6c:a0:0f: a7:7c:f2:bb:9b:5c:e4:ba:5b:aa:a2:1a:b5:bd:15:36:9c:40: 96:e5:43:41:18:0c:7e:b0:de:63:4c:94:d1:f8:4d:fa:b3:5f: ea:df:4e:02:ff:d7:e0:bf:28:3e:5b:fa:d8:9e:97:c8:13:25: 5e:45:4e:5c:ec:33:c6:9a:d8:d6:9d:1b:c7:4a:66:5c:e2:35: 31:20:bb:ed:4d:ad:95:8a:88:10:ee:0b:91:2a:7d:97:7b:6c: 7b:32:29:eb:47:de:a1:b2:28:e6:72:f3:59:12:7f:af:b8:66: 3f:13:44:c2:06:5c:bb:46:9c:84:cc:25:6a:c4:d0:8c:80:93: 0c:cd:f7:c7:ce:37:29:2b:61:fa:4d:ec:c6:cf:6f:d4:5c:69: 20:4a:25:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSqr3zvoVQ3EB8ipTsAdrHBZYf28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFENjc1 RjlBODkxNzAeFw0yNTA5MDcwNzU2NDFaFw0yNTA5MTAwODAxNDFaMDMxMTAvBgNV BAMTKDZBMTEzNkYyRjQ3ODNEMEYwQTk1QkVDRjZFMUZDNDNBRDAyOTNFRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb9YhcUkWcKvya7PnmlWhbVcjh USTmPvMnC9M2B2d8GokkYep0gVWLsLtRlVi82DR1uqBYn1MZJjXo8sJeZCFlLsWb 40BE4ab4oSzg+aZc1SuKcPYvuTndcO6ZD410YTqt8XgIQr/waUApP8doeg9H5duH +g4pmr1rrka7EPlARCzTJOjFVLumAHwPe6Cn+vl0A/57Emtuxq5NHic2UQTxG174 JthiEnslcK1sggVhz24OmpR0wiSYYCH4VjuPsn0x+LpvvZhkKf9LF/vXB968nqWm cafWkUOm1NyZno02Eod6mQutCr77UODq5gTWJgt5dyoSM+HNZJ9JKMHPbl75AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUahE28vR4PQ8Klb7Pbh/EOtApPv8wHwYDVR0j BBgwFoAUccHv1d/eIEGKSQcGcbAdZ1+aiRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWVhYjQ0Mi03NDgwLTQ1ODEtODFkZC0yM2EyMDA2MTQzODIvMC83MUMxRUZENURG REUyMDQxOEE0OTA3MDY3MUIwMUQ2NzVGOUE4OTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFENjc1RjlB ODkxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVlYWI0NDItNzQ4MC00NTgxLTgx ZGQtMjNhMjAwNjE0MzgyLzAvNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFE Njc1RjlBODkxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIOy7hh2GYhFx65dHsCeWk+JmTYZ3CLQHK22 fOqrCqM05etVkRLSB4xoNjKxzAdOC7Yy9VF2JEN6Mc5KzILIn4WaPG2UKHMkorO/ /UaCw6vXLe8noYVAVZyziI0MhyGuMbO/b7AgbKrE5mygD6d88rubXOS6W6qiGrW9 FTacQJblQ0EYDH6w3mNMlNH4TfqzX+rfTgL/1+C/KD5b+tiel8gTJV5FTlzsM8aa 2NadG8dKZlziNTEgu+1NrZWKiBDuC5EqfZd7bHsyKetH3qGyKOZy81kSf6+4Zj8T RMIGXLtGnITMJWrE0IyAkwzN98fONykrYfpN7MbPb9RcaSBKJZY= -----END CERTIFICATE-----Generated at Tue Sep 9 08:16:59 2025 by rpki-client