$ rpki-client -vvf repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft File: 71054E3C02E22D607A90FACC4DE7369B65367EBD.mft (raw, json) Hash identifier: ysfMjPwT/KpG7BDLVRIAXP12dgOuIs8L/9WEy0M3tPw= Subject key identifier: 1F:1D:B2:D4:84:70:76:6B:41:6E:BB:75:E3:2C:2F:5B:55:03:C0:33 Authority key identifier: 71:05:4E:3C:02:E2:2D:60:7A:90:FA:CC:4D:E7:36:9B:65:36:7E:BD Certificate issuer: /CN=71054E3C02E22D607A90FACC4DE7369B65367EBD Certificate serial: 68B76EED36906E00959B7D6C1539646D60F14069 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft Manifest number: 0130 Signing time: Mon 02 Jun 2025 11:20:46 +0000 Manifest this update: Mon 02 Jun 2025 11:15:46 +0000 Manifest next update: Thu 05 Jun 2025 19:48:46 +0000 Files and hashes: 1: 3130332e32392e31302e302f32332d3234203d3e20313530323530.roa (hash: WJMrEDY6+yYCu4Iz5tUshsi6eLGdRGAnm2hsfXk5iwc=) 2: 71054E3C02E22D607A90FACC4DE7369B65367EBD.crl (hash: wh2DR8tv1tMPk0mHu9N46Jb+/vribcWS+6cpVaaEDaU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.crl rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 19:48:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:b7:6e:ed:36:90:6e:00:95:9b:7d:6c:15:39:64:6d:60:f1:40:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71054E3C02E22D607A90FACC4DE7369B65367EBD Validity Not Before: Jun 2 11:15:46 2025 GMT Not After : Jun 5 19:48:46 2025 GMT Subject: CN=1F1DB2D48470766B416EBB75E32C2F5B5503C033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b9:fd:d8:3c:78:5a:98:4d:dc:d1:41:d8:e8: 4f:bd:60:a8:ee:56:5b:3b:e3:8c:8f:df:84:c1:e8: 24:ea:a2:54:75:eb:15:c5:a7:ac:b6:2a:53:57:73: e0:ef:1f:b2:fd:b5:08:a4:cc:3c:5f:49:76:97:5d: e4:43:10:71:29:c9:3e:6c:64:5e:ef:e3:11:20:96: 90:42:7e:9d:47:17:08:65:50:e0:9a:e6:00:25:34: f6:5e:e3:14:8e:4b:01:ce:9a:9b:49:9f:41:06:a5: 91:55:50:33:be:b2:05:a4:fe:63:90:12:50:92:18: f4:a2:18:ea:2e:cb:f3:25:98:49:c0:65:96:2e:46: 33:a4:ec:69:7c:2a:4d:9e:9e:e5:c0:ad:9a:25:cb: 05:0b:42:34:18:58:bd:f6:5f:2b:30:d6:32:63:bf: 2c:dd:22:2c:6e:b6:ee:09:b7:df:da:b9:c2:9e:50: 7d:f9:61:96:72:00:72:83:99:12:3b:1f:8e:70:fc: 59:c4:05:9f:2b:ea:5a:79:67:ba:cd:f8:36:5b:6c: 80:01:cd:d1:97:a1:8e:37:b3:0f:dd:7e:df:71:df: b2:d4:18:35:e3:50:e4:9c:5e:c0:20:6d:e0:39:c5: 3f:01:6c:8a:65:22:7c:2d:ac:ed:38:f7:85:d4:4c: b1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1D:B2:D4:84:70:76:6B:41:6E:BB:75:E3:2C:2F:5B:55:03:C0:33 X509v3 Authority Key Identifier: keyid:71:05:4E:3C:02:E2:2D:60:7A:90:FA:CC:4D:E7:36:9B:65:36:7E:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:e1:db:75:31:e8:06:0d:57:24:2a:c6:39:bc:2a:08:95:e7: e5:bf:7a:3f:d5:ce:ea:e4:70:5e:59:51:de:ff:07:d1:bf:dc: 9e:18:32:0f:0a:93:d5:2e:18:70:61:d2:16:1c:08:b1:07:25: 48:43:0f:1f:1c:9e:76:0b:bf:41:3f:a2:62:77:20:2d:92:72: 30:3a:d0:51:de:db:f8:78:ac:05:22:6b:33:53:f7:8d:28:dd: 9f:d8:08:20:50:2f:63:8d:f5:20:75:02:71:e8:ee:3f:65:dc: a8:87:85:7a:a3:21:1e:a5:a7:76:4f:0d:8e:0d:c0:4b:94:06: e2:fe:78:79:93:05:13:5f:bc:a9:80:cc:a7:5a:04:68:c5:b1: 0d:d5:de:d6:75:1f:2c:4a:5f:fb:21:8d:a9:bc:c0:ab:01:f3: 9c:05:6f:47:af:60:81:1f:32:b5:d8:8f:4f:eb:03:a6:fd:a1: b7:b3:60:a8:9d:2c:dc:bd:73:90:5e:e4:3b:9e:12:ed:75:bc: 84:28:19:0e:56:30:35:aa:13:2a:da:25:2e:17:20:cd:ee:1e: 5f:42:04:9c:4b:1e:a8:97:8c:ba:31:04:ce:bf:b6:ba:01:bc: bf:b2:99:86:c3:21:ea:f9:5e:60:22:40:29:de:44:37:6b:2b: 8d:fb:1f:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaLdu7TaQbgCVm31sFTlkbWDxQGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzEwNTRFM0MwMkUyMkQ2MDdBOTBGQUNDNERFNzM2OUI2 NTM2N0VCRDAeFw0yNTA2MDIxMTE1NDZaFw0yNTA2MDUxOTQ4NDZaMDMxMTAvBgNV BAMTKDFGMURCMkQ0ODQ3MDc2NkI0MTZFQkI3NUUzMkMyRjVCNTUwM0MwMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDruf3YPHhamE3c0UHY6E+9YKju Vls744yP34TB6CTqolR16xXFp6y2KlNXc+DvH7L9tQikzDxfSXaXXeRDEHEpyT5s ZF7v4xEglpBCfp1HFwhlUOCa5gAlNPZe4xSOSwHOmptJn0EGpZFVUDO+sgWk/mOQ ElCSGPSiGOouy/MlmEnAZZYuRjOk7Gl8Kk2enuXArZolywULQjQYWL32Xysw1jJj vyzdIixutu4Jt9/aucKeUH35YZZyAHKDmRI7H45w/FnEBZ8r6lp5Z7rN+DZbbIAB zdGXoY43sw/dft9x37LUGDXjUOScXsAgbeA5xT8BbIplInwtrO0494XUTLH1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHx2y1IRwdmtBbrt14ywvW1UDwDMwHwYDVR0j BBgwFoAUcQVOPALiLWB6kPrMTec2m2U2fr0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTUzMmM2NS04MGJlLTRmZGUtODdkMC0zNmM1YmQyODhjZDgvMC83MTA1NEUzQzAy RTIyRDYwN0E5MEZBQ0M0REU3MzY5QjY1MzY3RUJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzEwNTRFM0MwMkUyMkQ2MDdBOTBGQUNDNERFNzM2OUI2NTM2 N0VCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1MzJjNjUtODBiZS00ZmRlLTg3 ZDAtMzZjNWJkMjg4Y2Q4LzAvNzEwNTRFM0MwMkUyMkQ2MDdBOTBGQUNDNERFNzM2 OUI2NTM2N0VCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL3h23Ux6AYNVyQqxjm8KgiV5+W/ej/Vzurk cF5ZUd7/B9G/3J4YMg8Kk9UuGHBh0hYcCLEHJUhDDx8cnnYLv0E/omJ3IC2ScjA6 0FHe2/h4rAUiazNT940o3Z/YCCBQL2ON9SB1AnHo7j9l3KiHhXqjIR6lp3ZPDY4N wEuUBuL+eHmTBRNfvKmAzKdaBGjFsQ3V3tZ1HyxKX/shjam8wKsB85wFb0evYIEf MrXYj0/rA6b9obezYKidLNy9c5Be5DueEu11vIQoGQ5WMDWqEyraJS4XIM3uHl9C BJxLHqiXjLoxBM6/troBvL+ymYbDIer5XmAiQCneRDdrK437H48= -----END CERTIFICATE-----Generated at Tue Jun 3 23:34:29 2025 by rpki-client