$ rpki-client -vvf repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft File: 71C1EFD5DFDE20418A49070671B01D675F9A8917.mft (raw, json) Hash identifier: kuVv1zncZtiggbrWLdS3A2r6IjzCNg+AC7yQgiZDb2c= Subject key identifier: BB:B5:0F:40:5D:05:CB:72:BD:B2:9B:A5:EA:19:96:B3:D6:30:BC:B4 Authority key identifier: 71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17 Certificate issuer: /CN=71C1EFD5DFDE20418A49070671B01D675F9A8917 Certificate serial: 435850D2EF6E5F1DBB0607B13FA84BA588E4D441 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft Manifest number: 027C Signing time: Mon 11 Aug 2025 12:21:43 +0000 Manifest this update: Mon 11 Aug 2025 12:16:43 +0000 Manifest next update: Thu 14 Aug 2025 19:40:43 +0000 Files and hashes: 1: 3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa (hash: 8ksM/q+y6Lni1XQrvYbOQyNFp8Q4IAzl4uPFuNiAyRE=) 2: 71C1EFD5DFDE20418A49070671B01D675F9A8917.crl (hash: wmP2NKDU+XY3Wcxx8AGfKMPLDXgaMJDhNZUersEfyBw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 19:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:58:50:d2:ef:6e:5f:1d:bb:06:07:b1:3f:a8:4b:a5:88:e4:d4:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C1EFD5DFDE20418A49070671B01D675F9A8917 Validity Not Before: Aug 11 12:16:43 2025 GMT Not After : Aug 14 19:40:43 2025 GMT Subject: CN=BBB50F405D05CB72BDB29BA5EA1996B3D630BCB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ec:3e:e5:bc:c2:4c:b1:e7:68:b2:b6:6b:32: 22:c1:77:6f:66:b6:e0:70:b9:d7:a6:4d:26:b1:69: bb:5c:c7:06:ed:75:7d:e7:e9:5c:07:24:08:19:b6: 12:86:43:c0:cd:47:2a:02:cd:d0:a7:e7:0f:2a:5d: 33:ef:95:7a:19:51:5a:d6:fe:d5:8d:fa:d0:db:55: 0b:76:77:e9:a9:46:ee:e7:2e:43:0f:c0:10:af:81: 23:e1:1f:76:f0:82:f2:e4:ca:27:4a:23:80:20:5c: cd:bb:2f:24:de:7b:b1:3c:cf:83:4c:74:53:f8:2c: cc:fc:1a:cc:eb:16:b9:b2:8a:b6:bc:d6:63:07:13: e3:da:fe:d6:38:6b:53:d5:d2:55:af:0b:3c:15:63: 2e:21:fb:26:78:bf:18:0f:e9:ec:25:29:23:9d:b0: 1d:6e:d1:0a:d5:5c:75:fb:64:f0:5a:48:7d:69:67: c6:2c:ee:53:4a:bb:e0:47:35:93:44:a5:df:2e:6a: 9c:91:fb:c1:b4:81:4f:c1:50:63:73:bb:5c:7f:24: 7c:24:dd:a4:84:6e:0f:66:94:34:5b:f7:cb:36:75: b6:11:9c:47:bf:46:5a:52:f4:9f:b7:ed:00:1e:3e: a6:67:69:8b:5e:8c:cc:0d:fd:6f:f4:39:04:27:cf: 27:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B5:0F:40:5D:05:CB:72:BD:B2:9B:A5:EA:19:96:B3:D6:30:BC:B4 X509v3 Authority Key Identifier: keyid:71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:b6:5c:eb:d1:06:b5:e2:a3:1a:56:12:e6:94:56:bf:b8:7e: c3:3f:28:e8:ac:15:f2:2d:96:14:1d:35:9c:38:f1:cf:35:e5: c4:e0:f5:11:c0:ef:17:0a:22:a5:c9:e7:2a:02:3a:76:53:bc: 17:00:5a:18:16:13:a1:45:1d:4e:e3:fe:12:c7:c6:86:69:20: 87:38:77:b0:09:5e:26:fa:b9:da:63:da:48:5f:f4:94:61:30: d3:19:c9:bc:e7:9d:74:44:da:d3:57:15:ce:55:72:0e:94:41: a0:79:ae:2e:79:c1:0b:6a:22:d1:b2:be:5a:4c:4b:b3:3a:d2: 9e:c7:b5:32:20:19:66:62:fa:50:19:30:fa:3b:51:34:3b:0f: 04:4c:7c:cb:99:9f:60:7e:11:7c:05:ae:20:5e:ee:8e:e8:26: 85:07:8e:e3:cb:0d:59:f5:34:3c:2c:50:df:f0:0b:f3:75:18: 4e:4f:ad:81:42:b6:9b:d2:5c:09:bc:64:a2:a5:6c:2d:b7:d2: 07:02:52:c0:f4:ef:3b:64:50:1c:8e:2a:a2:2d:45:91:38:7d: 07:6c:30:05:8d:38:0d:5d:8d:b0:82:47:11:d5:a7:51:a5:e5: 7a:ef:42:ed:00:f7:6d:b0:28:83:19:59:f5:7e:9a:0c:d8:d9: 6d:4d:05:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ1hQ0u9uXx27BgexP6hLpYjk1EEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFENjc1 RjlBODkxNzAeFw0yNTA4MTExMjE2NDNaFw0yNTA4MTQxOTQwNDNaMDMxMTAvBgNV BAMTKEJCQjUwRjQwNUQwNUNCNzJCREIyOUJBNUVBMTk5NkIzRDYzMEJDQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF7D7lvMJMsedosrZrMiLBd29m tuBwudemTSaxabtcxwbtdX3n6VwHJAgZthKGQ8DNRyoCzdCn5w8qXTPvlXoZUVrW /tWN+tDbVQt2d+mpRu7nLkMPwBCvgSPhH3bwgvLkyidKI4AgXM27LyTee7E8z4NM dFP4LMz8GszrFrmyira81mMHE+Pa/tY4a1PV0lWvCzwVYy4h+yZ4vxgP6ewlKSOd sB1u0QrVXHX7ZPBaSH1pZ8Ys7lNKu+BHNZNEpd8uapyR+8G0gU/BUGNzu1x/JHwk 3aSEbg9mlDRb98s2dbYRnEe/RlpS9J+37QAePqZnaYtejMwN/W/0OQQnzycXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu7UPQF0Fy3K9spul6hmWs9YwvLQwHwYDVR0j BBgwFoAUccHv1d/eIEGKSQcGcbAdZ1+aiRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWVhYjQ0Mi03NDgwLTQ1ODEtODFkZC0yM2EyMDA2MTQzODIvMC83MUMxRUZENURG REUyMDQxOEE0OTA3MDY3MUIwMUQ2NzVGOUE4OTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFENjc1RjlB ODkxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVlYWI0NDItNzQ4MC00NTgxLTgx ZGQtMjNhMjAwNjE0MzgyLzAvNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFE Njc1RjlBODkxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABK2XOvRBrXioxpWEuaUVr+4fsM/KOisFfIt lhQdNZw48c815cTg9RHA7xcKIqXJ5yoCOnZTvBcAWhgWE6FFHU7j/hLHxoZpIIc4 d7AJXib6udpj2khf9JRhMNMZybznnXRE2tNXFc5Vcg6UQaB5ri55wQtqItGyvlpM S7M60p7HtTIgGWZi+lAZMPo7UTQ7DwRMfMuZn2B+EXwFriBe7o7oJoUHjuPLDVn1 NDwsUN/wC/N1GE5PrYFCtpvSXAm8ZKKlbC230gcCUsD07ztkUByOKqItRZE4fQds MAWNOA1djbCCRxHVp1Gl5XrvQu0A922wKIMZWfV+mgzY2W1NBTk= -----END CERTIFICATE-----Generated at Tue Aug 12 19:11:24 2025 by rpki-client