$ rpki-client -vvf repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft File: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft (raw, json) Hash identifier: BlAEaWQEwBW3GYRLZnou4XgMXZndbMU+rTjKABMlLfg= Subject key identifier: 87:AF:96:7E:FF:AD:96:56:81:27:15:22:4F:FC:DE:06:44:C0:EC:F9 Authority key identifier: A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB Certificate issuer: /CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Certificate serial: 2860A308AB054DBDE326E5CEAE8C9ADF81AE0857 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft Manifest number: 73 Signing time: Sat 26 Apr 2025 21:20:55 +0000 Manifest this update: Sat 26 Apr 2025 21:15:55 +0000 Manifest next update: Tue 29 Apr 2025 22:52:55 +0000 Files and hashes: 1: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl (hash: 3GSWmmStxAvRSBGnH5QsNMGCjP2KMw1BXkFXTPeRdT4=) 2: 3136302e32302e33362e302f32332d3234203d3e20313532373631.roa (hash: avjOhQMHcwWGlDF7WDzZoOiS3u3B2hy6xJEOi4n8Cr0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 22:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:60:a3:08:ab:05:4d:bd:e3:26:e5:ce:ae:8c:9a:df:81:ae:08:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Validity Not Before: Apr 26 21:15:55 2025 GMT Not After : Apr 29 22:52:55 2025 GMT Subject: CN=87AF967EFFAD9656812715224FFCDE0644C0ECF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:05:68:e3:8c:93:8c:00:94:1c:7c:34:b0:ae: a2:d8:a2:35:63:c0:db:cb:62:b8:08:58:da:69:03: e6:20:f1:89:f3:9e:fb:1f:6e:50:16:28:54:f0:26: 8f:1c:13:5b:46:d2:e6:c3:28:08:15:1c:32:d5:e0: c5:ef:0b:fe:ff:94:06:19:08:62:5e:df:b7:db:ec: 44:40:59:a0:78:88:d1:b5:e7:d0:f7:5b:f8:5e:58: 93:df:ad:e1:87:86:12:eb:1a:d8:64:f2:af:5e:f2: 48:6d:27:fb:d9:08:62:a3:24:20:81:f8:46:ce:e3: 4d:c4:3f:ee:2c:d3:7a:02:f3:1e:db:b5:1b:f7:0b: a1:c1:39:db:41:b5:1f:8a:95:bb:45:f6:ec:f3:7d: a5:68:c3:47:23:0a:8d:39:bf:79:1c:70:90:85:98: 35:83:7f:65:a8:d5:d5:aa:0c:42:3e:95:f3:f3:ec: 4e:df:ae:d2:bb:06:6a:a6:b8:58:bc:f3:19:d8:6d: 27:69:0a:f1:8b:c6:d9:18:09:73:47:01:97:0a:00: ca:77:bb:2d:5d:45:0c:51:9c:ba:cb:9b:22:4b:64: a5:9c:f3:3b:46:a3:51:0e:b7:ca:07:65:ae:b5:ec: b6:4b:6b:02:ff:ab:f3:4a:71:59:7e:00:54:e2:ed: 17:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AF:96:7E:FF:AD:96:56:81:27:15:22:4F:FC:DE:06:44:C0:EC:F9 X509v3 Authority Key Identifier: keyid:A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:a1:8e:f0:29:a2:75:a8:47:a1:c5:1c:09:7d:3d:0c:ef:e8: 5f:fe:b3:e3:fd:14:cd:1a:4e:11:78:b4:80:74:eb:61:f7:41: d9:69:3b:bb:7f:35:cc:0f:a0:6f:0d:ff:98:50:17:e3:32:4b: 8a:af:31:4c:8c:82:ba:04:c0:09:a4:05:2e:3b:0b:70:47:65: fa:f9:15:24:be:6f:36:df:41:fc:d8:a5:fd:ed:61:2f:f2:d4: 64:9a:c1:45:a0:0e:fa:7c:74:a5:8c:32:65:54:fd:3a:be:3f: bb:34:29:a4:13:38:9e:cb:9c:27:b2:52:c7:fb:81:08:84:52: 2f:23:fd:78:e1:a7:2c:76:08:32:0e:52:c4:8a:fb:e0:32:58: 92:f3:c6:16:9b:c0:12:d6:fb:4b:af:c5:22:44:b8:2f:98:76: fe:1a:7e:55:60:7a:c0:ae:d8:d1:71:1a:95:a2:30:01:be:42: 55:33:9f:9b:7d:c0:f9:93:1b:fa:88:1a:2e:fd:cf:76:52:fd: a8:6e:5c:3b:9e:92:a4:9f:27:01:79:e9:42:f2:63:ba:ab:f8: 14:29:27:fd:4d:72:0c:34:8e:ac:1f:16:d1:b6:87:4e:76:16: 6c:f5:a4:46:db:67:d6:92:20:f8:27:99:0a:d6:46:f9:b5:00: d0:73:5a:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKGCjCKsFTb3jJuXOroya34GuCFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1 RTUyRThFQjAeFw0yNTA0MjYyMTE1NTVaFw0yNTA0MjkyMjUyNTVaMDMxMTAvBgNV BAMTKDg3QUY5NjdFRkZBRDk2NTY4MTI3MTUyMjRGRkNERTA2NDRDMEVDRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcBWjjjJOMAJQcfDSwrqLYojVj wNvLYrgIWNppA+Yg8YnznvsfblAWKFTwJo8cE1tG0ubDKAgVHDLV4MXvC/7/lAYZ CGJe37fb7ERAWaB4iNG159D3W/heWJPfreGHhhLrGthk8q9e8khtJ/vZCGKjJCCB +EbO403EP+4s03oC8x7btRv3C6HBOdtBtR+KlbtF9uzzfaVow0cjCo05v3kccJCF mDWDf2Wo1dWqDEI+lfPz7E7frtK7BmqmuFi88xnYbSdpCvGLxtkYCXNHAZcKAMp3 uy1dRQxRnLrLmyJLZKWc8ztGo1EOt8oHZa617LZLawL/q/NKcVl+AFTi7RdRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh6+Wfv+tllaBJxUiT/zeBkTA7PkwHwYDVR0j BBgwFoAUpxuqZmI4R7e9nqfEC8vKhV5S6OswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODFlZjQ0MC01YTVmLTRhNGYtYjUwOS1iMTAzMjQ1YzVjZjEvMC9BNzFCQUE2NjYy Mzg0N0I3QkQ5RUE3QzQwQkNCQ0E4NTVFNTJFOEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1RTUy RThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgxZWY0NDAtNWE1Zi00YTRmLWI1 MDktYjEwMzI0NWM1Y2YxLzAvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNB ODU1RTUyRThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImhjvAponWoR6HFHAl9PQzv6F/+s+P9FM0a ThF4tIB062H3QdlpO7t/NcwPoG8N/5hQF+MyS4qvMUyMgroEwAmkBS47C3BHZfr5 FSS+bzbfQfzYpf3tYS/y1GSawUWgDvp8dKWMMmVU/Tq+P7s0KaQTOJ7LnCeyUsf7 gQiEUi8j/Xjhpyx2CDIOUsSK++AyWJLzxhabwBLW+0uvxSJEuC+Ydv4aflVgesCu 2NFxGpWiMAG+QlUzn5t9wPmTG/qIGi79z3ZS/ahuXDuekqSfJwF56ULyY7qr+BQp J/1Ncgw0jqwfFtG2h052Fmz1pEbbZ9aSIPgnmQrWRvm1ANBzWiw= -----END CERTIFICATE-----Generated at Mon Apr 28 00:40:45 2025 by rpki-client