$ rpki-client -vvf repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft File: 71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft (raw, json) Hash identifier: hCuqr7qcjZCcuXn4gHsNpew/8VsE//c2JClc/WfSJWE= Subject key identifier: 50:34:E6:3C:EC:E3:2C:77:24:5F:37:B4:BE:5C:28:41:3C:D2:24:F3 Authority key identifier: 71:FC:3F:7B:27:22:F6:A1:5C:55:7F:63:F8:F4:95:A9:CD:BC:A9:D7 Certificate issuer: /CN=71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7 Certificate serial: 2BC262DBAAAB6628B48B0D167EB5876525062945 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft Manifest number: 0502 Signing time: Thu 04 Sep 2025 14:31:28 +0000 Manifest this update: Thu 04 Sep 2025 14:26:28 +0000 Manifest next update: Sun 07 Sep 2025 21:53:28 +0000 Files and hashes: 1: 71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl (hash: IPdW1YXEGfXH+u3aGTe5fUAyeGW9viI4qNIIg/S70BQ=) 2: 3130332e3134372e38332e302f32342d3234203d3e20313339393538.roa (hash: +BIBQAINF/5Qw6Z/inMjF3BgXwfPJiU1L7MDXOLb6hY=) 3: 3130332e3134372e38322e302f32342d3234203d3e20313339393538.roa (hash: vC4SL0uw9D8xmCXitMGfoUsUZzvLg4me8B5U0xhWjR0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 21:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:c2:62:db:aa:ab:66:28:b4:8b:0d:16:7e:b5:87:65:25:06:29:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7 Validity Not Before: Sep 4 14:26:28 2025 GMT Not After : Sep 7 21:53:28 2025 GMT Subject: CN=5034E63CECE32C77245F37B4BE5C28413CD224F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ff:a3:61:69:69:b3:ee:14:a5:4f:8c:e7:ae: 3e:65:a7:11:75:3e:19:ac:56:61:ee:45:e1:f0:e0: 72:80:53:be:ab:9d:f1:51:e4:40:ee:da:c6:c3:64: d7:df:f5:98:0b:7b:69:0d:40:8d:ef:76:bc:75:f8: 27:45:32:9f:3b:e2:a6:92:21:08:c1:2e:18:57:8b: 60:a7:32:bf:a7:d0:52:01:59:fa:19:0c:20:26:de: 96:05:7f:64:cf:6a:1d:ea:a2:61:29:65:6a:9e:50: 7e:7d:38:9d:82:1a:f7:05:a5:fc:c1:39:6a:01:fa: b2:95:a5:54:9f:fc:93:ab:ba:03:12:5d:1b:a4:d5: fa:93:8d:58:c1:75:16:5f:7c:d0:b8:cf:6f:bc:7d: 7d:34:2b:7a:a9:95:7d:82:86:b5:4d:31:ff:2a:39: 00:5e:f2:34:65:51:50:d9:05:ca:ce:e9:9d:83:44: 6b:da:51:74:6a:2c:5c:69:68:93:cd:26:13:fb:73: 54:ac:bd:86:7e:0f:4c:23:9b:32:18:8d:f6:7a:6c: a8:4d:56:42:89:41:86:05:fd:ce:06:27:cb:d7:50: a3:37:c9:9a:c7:69:2e:d7:f6:0b:a7:47:13:21:05: b9:88:20:99:7d:99:b4:d5:6b:aa:94:1d:15:75:d3: 28:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:34:E6:3C:EC:E3:2C:77:24:5F:37:B4:BE:5C:28:41:3C:D2:24:F3 X509v3 Authority Key Identifier: keyid:71:FC:3F:7B:27:22:F6:A1:5C:55:7F:63:F8:F4:95:A9:CD:BC:A9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:29:88:17:a2:d1:2f:99:25:9a:b7:c7:fa:60:c5:f3:52:3a: 69:73:39:20:8c:a8:0a:bc:dc:31:02:78:0c:af:a7:3f:d4:ed: 66:72:29:5d:fd:b8:e6:96:41:17:66:69:e1:aa:4e:b0:75:47: ae:97:1c:b9:6b:28:75:39:3a:51:51:f9:83:5c:93:9e:30:50: 41:15:bd:5a:aa:2c:8e:29:f8:89:cb:6e:1d:3b:aa:06:bb:20: 0c:9b:cc:1b:91:1f:c8:2a:77:9a:39:1e:57:be:1b:e1:32:e9: cb:3a:59:71:0d:63:01:c7:38:e9:ab:c8:92:93:f5:26:3d:b9: 4d:03:a1:9a:5d:43:94:70:c4:ac:c0:ad:79:0e:57:d1:2c:77: 07:38:f6:ed:ad:74:f8:d6:38:ce:3b:33:43:30:fe:5f:24:e4: 67:8d:92:18:74:a8:68:de:11:e1:42:83:37:3e:16:07:70:6d: 5b:9e:30:0b:54:7b:f3:d8:3e:c1:64:64:63:66:ae:00:2e:03: 65:b4:1a:df:18:ad:cc:25:82:0d:26:69:be:84:8b:39:5f:cf: 30:bb:05:a9:93:83:83:ec:8c:89:8b:fa:58:7a:b5:a6:12:17: fe:16:6f:67:c9:cf:4b:fb:04:e5:e6:d8:ee:25:97:f0:51:2e: dd:b3:c5:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK8Ji26qrZii0iw0WfrWHZSUGKUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1QTlD REJDQTlENzAeFw0yNTA5MDQxNDI2MjhaFw0yNTA5MDcyMTUzMjhaMDMxMTAvBgNV BAMTKDUwMzRFNjNDRUNFMzJDNzcyNDVGMzdCNEJFNUMyODQxM0NEMjI0RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC//6NhaWmz7hSlT4znrj5lpxF1 PhmsVmHuReHw4HKAU76rnfFR5EDu2sbDZNff9ZgLe2kNQI3vdrx1+CdFMp874qaS IQjBLhhXi2CnMr+n0FIBWfoZDCAm3pYFf2TPah3qomEpZWqeUH59OJ2CGvcFpfzB OWoB+rKVpVSf/JOrugMSXRuk1fqTjVjBdRZffNC4z2+8fX00K3qplX2ChrVNMf8q OQBe8jRlUVDZBcrO6Z2DRGvaUXRqLFxpaJPNJhP7c1SsvYZ+D0wjmzIYjfZ6bKhN VkKJQYYF/c4GJ8vXUKM3yZrHaS7X9gunRxMhBbmIIJl9mbTVa6qUHRV10yhlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUDTmPOzjLHckXze0vlwoQTzSJPMwHwYDVR0j BBgwFoAUcfw/eyci9qFcVX9j+PSVqc28qdcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWE1YWM2NS02MDcxLTQ2ZTItYmI5ZC1kNzcwZDExN2M0YjQvMC83MUZDM0Y3QjI3 MjJGNkExNUM1NTdGNjNGOEY0OTVBOUNEQkNBOUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1QTlDREJD QTlENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFhNWFjNjUtNjA3MS00NmUyLWJi OWQtZDc3MGQxMTdjNGI0LzAvNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1 QTlDREJDQTlENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABApiBei0S+ZJZq3x/pgxfNSOmlzOSCMqAq8 3DECeAyvpz/U7WZyKV39uOaWQRdmaeGqTrB1R66XHLlrKHU5OlFR+YNck54wUEEV vVqqLI4p+InLbh07qga7IAybzBuRH8gqd5o5Hle+G+Ey6cs6WXENYwHHOOmryJKT 9SY9uU0DoZpdQ5RwxKzArXkOV9Esdwc49u2tdPjWOM47M0Mw/l8k5GeNkhh0qGje EeFCgzc+FgdwbVueMAtUe/PYPsFkZGNmrgAuA2W0Gt8Yrcwlgg0mab6EizlfzzC7 BamTg4PsjImL+lh6taYSF/4Wb2fJz0v7BOXm2O4ll/BRLt2zxY8= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:56 2025 by rpki-client