$ rpki-client -vvf repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft File: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft (raw, json) Hash identifier: BARLrpbU009yuqPiaKaPPlqi/EwEmsCfFcJ5QSQcpl4= Subject key identifier: 82:FE:86:91:4F:AE:26:CF:DA:5D:35:EC:0F:C8:9D:BB:DB:3C:46:78 Authority key identifier: A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB Certificate issuer: /CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Certificate serial: 04A1DE72F3591FEAA46F5B25D32FC16978807A20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft Manifest number: AB Signing time: Sat 30 Aug 2025 09:00:58 +0000 Manifest this update: Sat 30 Aug 2025 08:55:58 +0000 Manifest next update: Tue 02 Sep 2025 18:24:58 +0000 Files and hashes: 1: 3136302e32302e33362e302f32332d3234203d3e20313532373631.roa (hash: e3Ye+8KBt0e+GgLTg5uGXR8hoI4RqWYobVVv7ZziGMY=) 2: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl (hash: ANK04KDKJG4jCGpO6rndVhq2ZJAKPrPgw4kr7e8vIOc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:a1:de:72:f3:59:1f:ea:a4:6f:5b:25:d3:2f:c1:69:78:80:7a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Validity Not Before: Aug 30 08:55:58 2025 GMT Not After : Sep 2 18:24:58 2025 GMT Subject: CN=82FE86914FAE26CFDA5D35EC0FC89DBBDB3C4678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4c:2f:b1:49:8a:45:15:84:74:a5:56:d5:b8: aa:c4:e1:bb:f0:ef:ef:07:df:05:a5:cd:f4:54:e9: 3c:6d:aa:ef:c6:6e:7a:e0:39:21:7e:d5:3e:5e:7b: e8:26:8a:52:b8:e5:a6:6c:39:3a:40:c6:02:a6:4e: 2b:84:cc:a8:a2:f1:5d:5a:3c:5a:06:63:33:2f:2f: f5:ae:84:11:d7:03:ce:f5:40:35:9d:58:93:da:8b: 5d:9c:23:5e:86:f7:32:88:a9:cb:fa:73:70:0f:ba: 71:90:a5:d5:e4:9e:4a:04:5b:fe:63:f9:1d:fa:15: 03:45:fe:da:29:f8:9e:1f:1e:02:45:9f:a8:d4:ac: d8:5f:09:85:77:7e:e7:a2:d3:25:de:5c:3e:13:23: e3:d7:5a:08:e5:23:3b:30:fc:e4:99:61:27:67:7d: 69:bf:c1:11:ca:cb:e3:c2:f6:f8:f7:3a:0d:f9:f9: 50:4f:31:4f:d9:47:ba:1c:1e:9c:51:b9:aa:52:b2: db:eb:07:5c:8c:23:d9:03:24:61:ed:2b:29:96:20: 31:ce:04:10:28:66:dc:5f:9a:1f:59:04:13:18:f9: 2d:e1:c8:d8:62:d7:d8:ef:22:bd:8b:82:44:f2:67: 1a:60:92:67:df:1f:58:d0:9d:8f:0e:00:a0:46:0a: 86:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FE:86:91:4F:AE:26:CF:DA:5D:35:EC:0F:C8:9D:BB:DB:3C:46:78 X509v3 Authority Key Identifier: keyid:A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:11:b4:d8:2c:ed:77:cb:75:8c:dd:e9:01:8f:15:5c:70:41: d8:49:50:08:80:a5:d7:68:b0:c8:3a:5f:11:7e:80:0c:61:f2: 7e:76:a6:33:26:53:94:ea:01:ba:fb:a7:0d:16:a5:6e:76:d6: 33:5c:f9:85:06:58:f9:6b:02:de:22:fc:1d:ad:f0:94:e4:cc: 73:b6:6a:3f:ae:49:22:b5:d0:bf:39:70:9e:47:95:ce:9f:1d: f1:97:a9:e4:da:b3:f5:07:79:79:fe:7a:d4:5f:db:7e:01:ec: 55:7d:06:a3:5b:9a:40:90:8f:a1:57:d6:ed:35:7a:ce:4c:f0: 77:d1:19:d8:6a:b0:bc:82:2b:a0:71:18:c1:76:c8:f1:ae:95: 94:92:da:8d:c7:ba:b0:9f:d4:e1:15:e4:4b:b6:f7:77:22:c6: 4e:30:c6:39:d0:d9:6c:0f:e5:eb:87:98:8b:c0:07:71:87:92: 5f:4b:ce:14:f9:4d:dc:ad:2a:1f:e8:5f:a8:28:ae:f8:1d:bc: aa:be:91:4d:59:81:60:ef:78:26:08:37:35:52:d4:25:58:92: 66:ac:aa:69:02:a6:55:3f:24:f7:21:b2:4c:e3:3a:76:8f:19: b6:96:5b:49:78:b7:0e:0c:54:5c:b9:3a:96:ec:32:a0:4a:ec: 5d:52:31:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBKHecvNZH+qkb1sl0y/BaXiAeiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1 RTUyRThFQjAeFw0yNTA4MzAwODU1NThaFw0yNTA5MDIxODI0NThaMDMxMTAvBgNV BAMTKDgyRkU4NjkxNEZBRTI2Q0ZEQTVEMzVFQzBGQzg5REJCREIzQzQ2NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3TC+xSYpFFYR0pVbVuKrE4bvw 7+8H3wWlzfRU6Txtqu/GbnrgOSF+1T5ee+gmilK45aZsOTpAxgKmTiuEzKii8V1a PFoGYzMvL/WuhBHXA871QDWdWJPai12cI16G9zKIqcv6c3APunGQpdXknkoEW/5j +R36FQNF/top+J4fHgJFn6jUrNhfCYV3fuei0yXeXD4TI+PXWgjlIzsw/OSZYSdn fWm/wRHKy+PC9vj3Og35+VBPMU/ZR7ocHpxRuapSstvrB1yMI9kDJGHtKymWIDHO BBAoZtxfmh9ZBBMY+S3hyNhi19jvIr2LgkTyZxpgkmffH1jQnY8OAKBGCoYLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgv6GkU+uJs/aXTXsD8idu9s8RngwHwYDVR0j BBgwFoAUpxuqZmI4R7e9nqfEC8vKhV5S6OswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODFlZjQ0MC01YTVmLTRhNGYtYjUwOS1iMTAzMjQ1YzVjZjEvMC9BNzFCQUE2NjYy Mzg0N0I3QkQ5RUE3QzQwQkNCQ0E4NTVFNTJFOEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1RTUy RThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgxZWY0NDAtNWE1Zi00YTRmLWI1 MDktYjEwMzI0NWM1Y2YxLzAvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNB ODU1RTUyRThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0RtNgs7XfLdYzd6QGPFVxwQdhJUAiApddo sMg6XxF+gAxh8n52pjMmU5TqAbr7pw0WpW521jNc+YUGWPlrAt4i/B2t8JTkzHO2 aj+uSSK10L85cJ5Hlc6fHfGXqeTas/UHeXn+etRf234B7FV9BqNbmkCQj6FX1u01 es5M8HfRGdhqsLyCK6BxGMF2yPGulZSS2o3HurCf1OEV5Eu293cixk4wxjnQ2WwP 5euHmIvAB3GHkl9LzhT5TdytKh/oX6gorvgdvKq+kU1ZgWDveCYINzVS1CVYkmas qmkCplU/JPchskzjOnaPGbaWW0l4tw4MVFy5OpbsMqBK7F1SMXE= -----END CERTIFICATE-----Generated at Sun Aug 31 03:48:16 2025 by rpki-client