$ rpki-client -vvf repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft File: 71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft (raw, json) Hash identifier: mQ3Wc63FJ9gYQG6YU6pKU9TRJLBYEt1n8m/TGcT+w6c= Subject key identifier: 0E:94:97:29:9B:91:E9:14:85:BB:F9:A9:8C:A0:09:97:7E:CE:B9:A2 Authority key identifier: 71:FC:3F:7B:27:22:F6:A1:5C:55:7F:63:F8:F4:95:A9:CD:BC:A9:D7 Certificate issuer: /CN=71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7 Certificate serial: 6400990AA06165452C1176D2ADF833092A58D179 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft Manifest number: 04BE Signing time: Fri 04 Apr 2025 04:22:23 +0000 Manifest this update: Fri 04 Apr 2025 04:17:23 +0000 Manifest next update: Mon 07 Apr 2025 15:22:23 +0000 Files and hashes: 1: 71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl (hash: 5ngYkqhw2YbOt40UpRXPo45kzcscseNVNz66EdXIQro=) 2: 3130332e3134372e38322e302f32342d3234203d3e20313339393538.roa (hash: Haq+urxoHujdJEKNTlbGe3YJuf+c1/Gnlks9VtxgPhk=) 3: 3130332e3134372e38332e302f32342d3234203d3e20313339393538.roa (hash: /QgT9jMiJ3A/Cz4UQ/df6jb4M7TsfUBIxaTBzKsjfh8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:00:99:0a:a0:61:65:45:2c:11:76:d2:ad:f8:33:09:2a:58:d1:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7 Validity Not Before: Apr 4 04:17:23 2025 GMT Not After : Apr 7 15:22:23 2025 GMT Subject: CN=0E9497299B91E91485BBF9A98CA009977ECEB9A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:82:eb:a8:61:73:c0:24:ca:57:ba:b1:39:0f: e0:64:e9:32:df:cd:82:08:9e:6f:24:91:b1:60:98: 58:17:35:32:51:50:74:5b:be:01:3b:64:e4:df:f7: 67:3e:6a:1a:cc:3d:1d:86:a0:49:c4:26:fe:45:62: 4f:01:24:56:64:33:01:d7:d1:68:28:15:bf:2c:b4: 4e:d6:4e:ec:02:88:59:1e:ee:93:c6:09:f1:45:7e: 03:ca:f0:0c:45:e1:d5:05:33:97:44:fe:ea:45:4e: 11:ab:13:2b:30:c7:53:ff:b8:38:ed:6a:a3:1b:ef: 1e:c8:b4:13:5d:a5:ab:4f:cb:b3:d5:01:0a:c2:90: 83:7c:2b:12:4a:0a:da:7d:38:59:59:86:34:0f:07: 99:ce:16:48:e4:16:08:84:0f:7e:8c:9f:90:8a:c8: 22:d8:c4:29:53:82:04:7b:7a:7f:10:c3:0c:41:2e: e3:63:7f:92:43:73:17:2e:b5:1f:96:01:d2:dc:e4: 29:d0:ca:05:0c:88:dd:d8:fa:87:ae:51:4e:ef:26: 41:d3:0f:81:27:af:a2:b2:19:a3:f9:7d:2c:ce:7a: 87:00:5b:23:12:92:93:54:e3:dd:62:9e:25:62:da: 22:a3:6b:42:65:bd:87:e4:59:a7:15:79:3d:59:7d: 29:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:94:97:29:9B:91:E9:14:85:BB:F9:A9:8C:A0:09:97:7E:CE:B9:A2 X509v3 Authority Key Identifier: keyid:71:FC:3F:7B:27:22:F6:A1:5C:55:7F:63:F8:F4:95:A9:CD:BC:A9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:de:bb:91:80:18:ed:7c:09:b6:49:30:b2:89:62:b0:ff:ee: fa:61:cf:58:b1:fc:a7:35:a1:8e:d8:27:6a:26:66:3a:31:42: 55:95:ce:43:3c:b9:73:a7:8d:3b:90:cd:41:5b:f5:ad:bb:e6: 2b:cf:e8:de:2c:3d:1d:22:e1:b0:c1:1d:53:f2:d5:d3:f8:a8: 53:42:a0:c0:fc:f4:ee:05:69:6e:19:ee:ed:2c:7d:9c:46:5d: 38:28:78:90:47:29:c7:f1:10:f8:f5:39:d8:72:c3:15:bc:7e: 5f:bb:00:60:64:f9:9f:05:9d:ce:01:46:b5:c8:b1:3c:21:dc: 95:e0:44:e2:3c:28:8f:af:b7:69:4e:35:f4:7a:d1:ea:f6:84: a5:e6:90:1b:d2:3f:03:84:e3:f5:32:7b:e5:f4:b8:88:6f:cb: 9a:0e:e3:86:6a:3f:cb:a5:a2:89:d9:2c:80:a8:98:d8:f6:ca: 54:76:ae:8c:82:cd:0e:c3:d9:56:77:91:03:4f:33:90:07:e1: 25:27:e8:c5:9e:5c:04:4a:d0:04:6e:ba:fd:d9:38:ae:88:6e: 8f:37:84:0f:2e:ac:3a:c1:d1:06:3e:77:ee:c8:64:2d:51:14: 50:6c:26:3f:d6:42:f9:90:9e:1c:44:eb:cd:d0:cc:34:0e:aa: 5f:4e:e3:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZACZCqBhZUUsEXbSrfgzCSpY0XkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1QTlD REJDQTlENzAeFw0yNTA0MDQwNDE3MjNaFw0yNTA0MDcxNTIyMjNaMDMxMTAvBgNV BAMTKDBFOTQ5NzI5OUI5MUU5MTQ4NUJCRjlBOThDQTAwOTk3N0VDRUI5QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyguuoYXPAJMpXurE5D+Bk6TLf zYIInm8kkbFgmFgXNTJRUHRbvgE7ZOTf92c+ahrMPR2GoEnEJv5FYk8BJFZkMwHX 0WgoFb8stE7WTuwCiFke7pPGCfFFfgPK8AxF4dUFM5dE/upFThGrEyswx1P/uDjt aqMb7x7ItBNdpatPy7PVAQrCkIN8KxJKCtp9OFlZhjQPB5nOFkjkFgiED36Mn5CK yCLYxClTggR7en8QwwxBLuNjf5JDcxcutR+WAdLc5CnQygUMiN3Y+oeuUU7vJkHT D4Enr6KyGaP5fSzOeocAWyMSkpNU491iniVi2iKja0JlvYfkWacVeT1ZfSmVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDpSXKZuR6RSFu/mpjKAJl37OuaIwHwYDVR0j BBgwFoAUcfw/eyci9qFcVX9j+PSVqc28qdcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWE1YWM2NS02MDcxLTQ2ZTItYmI5ZC1kNzcwZDExN2M0YjQvMC83MUZDM0Y3QjI3 MjJGNkExNUM1NTdGNjNGOEY0OTVBOUNEQkNBOUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1QTlDREJD QTlENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFhNWFjNjUtNjA3MS00NmUyLWJi OWQtZDc3MGQxMTdjNGI0LzAvNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1 QTlDREJDQTlENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbeu5GAGO18CbZJMLKJYrD/7vphz1ix/Kc1 oY7YJ2omZjoxQlWVzkM8uXOnjTuQzUFb9a275ivP6N4sPR0i4bDBHVPy1dP4qFNC oMD89O4FaW4Z7u0sfZxGXTgoeJBHKcfxEPj1OdhywxW8fl+7AGBk+Z8Fnc4BRrXI sTwh3JXgROI8KI+vt2lONfR60er2hKXmkBvSPwOE4/Uye+X0uIhvy5oO44ZqP8ul oonZLIComNj2ylR2royCzQ7D2VZ3kQNPM5AH4SUn6MWeXARK0ARuuv3ZOK6Ibo83 hA8urDrB0QY+d+7IZC1RFFBsJj/WQvmQnhxE683QzDQOql9O42Q= -----END CERTIFICATE-----Generated at Sun Apr 6 03:47:24 2025 by rpki-client