$ rpki-client -vvf repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft File: 71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft (raw, json) Hash identifier: rEVwoieNdotRA2SICmaiMBrk7wh5z1imdo684wopWHQ= Subject key identifier: 90:4A:74:46:9F:A8:36:54:7C:A4:37:E8:A3:CC:E5:F1:84:76:87:2E Authority key identifier: 71:FC:3F:7B:27:22:F6:A1:5C:55:7F:63:F8:F4:95:A9:CD:BC:A9:D7 Certificate issuer: /CN=71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7 Certificate serial: 1486FD021098F28814693A6E8B7AFE5CF0D88245 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft Manifest number: 04D8 Signing time: Mon 02 Jun 2025 02:04:54 +0000 Manifest this update: Mon 02 Jun 2025 01:59:54 +0000 Manifest next update: Thu 05 Jun 2025 05:36:54 +0000 Files and hashes: 1: 3130332e3134372e38322e302f32342d3234203d3e20313339393538.roa (hash: vC4SL0uw9D8xmCXitMGfoUsUZzvLg4me8B5U0xhWjR0=) 2: 3130332e3134372e38332e302f32342d3234203d3e20313339393538.roa (hash: +BIBQAINF/5Qw6Z/inMjF3BgXwfPJiU1L7MDXOLb6hY=) 3: 71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl (hash: noCTxYkPNvacptT5jxxVRlKBxJ6GDo8viYZCP8QuRtQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 05:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:86:fd:02:10:98:f2:88:14:69:3a:6e:8b:7a:fe:5c:f0:d8:82:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7 Validity Not Before: Jun 2 01:59:54 2025 GMT Not After : Jun 5 05:36:54 2025 GMT Subject: CN=904A74469FA836547CA437E8A3CCE5F18476872E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c8:37:8f:62:1d:9f:5f:21:f2:d4:1a:18:48: 9e:c6:f9:ec:4b:3a:b4:54:21:8f:fe:38:c6:23:55: f6:32:36:5d:ad:58:e7:45:a7:c3:2a:91:8d:40:ce: 1c:47:82:40:33:6a:e2:8d:f2:61:6b:0b:45:2a:8c: 2a:87:58:f8:97:1e:ba:84:b8:e1:c8:31:c2:eb:e3: 91:f3:7e:24:7a:1a:31:2e:c5:e3:f4:78:8f:99:2f: 3b:ec:3f:5c:9e:85:a3:bb:ff:a0:63:ca:72:3a:7b: 1f:d1:da:08:9c:12:f9:e7:2f:bd:f2:f1:27:93:9f: 06:eb:61:7d:b1:6d:1f:29:25:bf:89:34:b5:a2:93: e8:4c:3b:24:4f:36:02:a5:99:ab:8c:34:3a:70:6d: 98:66:b8:f2:18:63:72:9c:45:22:61:c0:11:ff:56: 1c:30:c0:10:5b:32:49:fc:6c:a1:95:5f:5d:10:1f: b7:52:11:20:df:2e:06:e8:de:00:ad:54:4c:28:09: 5b:90:b7:89:42:84:2e:fc:ad:de:9b:1a:c1:ed:c5: 86:1b:98:d3:e7:b2:49:62:5c:88:bf:50:d9:48:79: 83:86:0f:af:6f:68:73:f4:cb:ce:37:e2:86:05:7d: 94:3b:57:39:b4:78:b9:4b:44:6a:fb:52:1c:ef:6b: 6c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4A:74:46:9F:A8:36:54:7C:A4:37:E8:A3:CC:E5:F1:84:76:87:2E X509v3 Authority Key Identifier: keyid:71:FC:3F:7B:27:22:F6:A1:5C:55:7F:63:F8:F4:95:A9:CD:BC:A9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:98:4d:fc:5b:e2:96:3a:22:83:16:5d:31:4a:63:ff:52:b1: 02:b9:2c:1f:61:d4:c3:10:97:bb:e2:4f:f1:98:46:f5:a0:bb: 99:15:aa:a1:55:99:b2:32:03:1c:d5:f3:e1:ec:12:15:c7:51: cd:31:d1:6d:91:d9:7a:be:0b:8b:c8:7f:47:5b:ca:21:c3:7a: f0:23:03:c0:85:57:69:f0:dd:2e:0d:dc:33:6c:7a:98:2e:2d: a9:da:4e:90:b0:87:f9:bb:6e:97:df:4c:c7:3b:1b:e2:97:de: 0f:a9:bb:0f:af:6f:08:d3:c2:76:c4:ed:fb:ac:66:a7:14:11: 35:70:8d:c3:62:f8:d8:1e:8b:1f:36:e6:8d:12:2d:fd:19:d3: ac:46:31:d0:ac:df:e0:08:5c:bb:4f:91:8e:1e:3d:7c:1b:8b: 3c:33:9a:50:82:35:49:81:b8:7b:21:d1:e6:f4:b5:93:61:87: f0:96:89:b7:76:ae:55:d0:9f:87:1c:32:3b:ab:3a:84:be:c8: 5a:77:f3:ab:c9:a3:c8:d1:6c:3f:e8:e1:e2:09:39:3b:54:f7: fe:20:0f:c0:08:12:e4:f3:56:5f:e8:bd:f0:db:0d:17:13:0a: d7:93:96:cc:53:5e:21:3f:93:19:46:11:96:83:96:9d:56:c7: bd:5f:eb:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFIb9AhCY8ogUaTpui3r+XPDYgkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1QTlD REJDQTlENzAeFw0yNTA2MDIwMTU5NTRaFw0yNTA2MDUwNTM2NTRaMDMxMTAvBgNV BAMTKDkwNEE3NDQ2OUZBODM2NTQ3Q0E0MzdFOEEzQ0NFNUYxODQ3Njg3MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmyDePYh2fXyHy1BoYSJ7G+exL OrRUIY/+OMYjVfYyNl2tWOdFp8MqkY1AzhxHgkAzauKN8mFrC0UqjCqHWPiXHrqE uOHIMcLr45HzfiR6GjEuxeP0eI+ZLzvsP1yehaO7/6BjynI6ex/R2gicEvnnL73y 8SeTnwbrYX2xbR8pJb+JNLWik+hMOyRPNgKlmauMNDpwbZhmuPIYY3KcRSJhwBH/ VhwwwBBbMkn8bKGVX10QH7dSESDfLgbo3gCtVEwoCVuQt4lChC78rd6bGsHtxYYb mNPnskliXIi/UNlIeYOGD69vaHP0y8434oYFfZQ7Vzm0eLlLRGr7Uhzva2zVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkEp0Rp+oNlR8pDfoo8zl8YR2hy4wHwYDVR0j BBgwFoAUcfw/eyci9qFcVX9j+PSVqc28qdcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWE1YWM2NS02MDcxLTQ2ZTItYmI5ZC1kNzcwZDExN2M0YjQvMC83MUZDM0Y3QjI3 MjJGNkExNUM1NTdGNjNGOEY0OTVBOUNEQkNBOUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1QTlDREJD QTlENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFhNWFjNjUtNjA3MS00NmUyLWJi OWQtZDc3MGQxMTdjNGI0LzAvNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1 QTlDREJDQTlENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiYTfxb4pY6IoMWXTFKY/9SsQK5LB9h1MMQ l7viT/GYRvWgu5kVqqFVmbIyAxzV8+HsEhXHUc0x0W2R2Xq+C4vIf0dbyiHDevAj A8CFV2nw3S4N3DNsepguLanaTpCwh/m7bpffTMc7G+KX3g+puw+vbwjTwnbE7fus ZqcUETVwjcNi+Ngeix825o0SLf0Z06xGMdCs3+AIXLtPkY4ePXwbizwzmlCCNUmB uHsh0eb0tZNhh/CWibd2rlXQn4ccMjurOoS+yFp386vJo8jRbD/o4eIJOTtU9/4g D8AIEuTzVl/ovfDbDRcTCteTlsxTXiE/kxlGEZaDlp1Wx71f60o= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:55 2025 by rpki-client