$ rpki-client -vvf repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft File: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft (raw, json) Hash identifier: nufngGzOlDxLVx6OOJLBuLnfHfxH6L1IH7aWknJgwD0= Subject key identifier: 8D:B9:8D:82:A2:C2:3E:23:E0:FA:E9:BB:5B:39:AB:D8:E2:F7:D0:60 Authority key identifier: A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB Certificate issuer: /CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Certificate serial: 678977CDBDADF2491D3F94B912E1D141A3A8BAF2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft Manifest number: 89 Signing time: Sun 15 Jun 2025 12:10:54 +0000 Manifest this update: Sun 15 Jun 2025 12:05:54 +0000 Manifest next update: Wed 18 Jun 2025 13:45:54 +0000 Files and hashes: 1: 3136302e32302e33362e302f32332d3234203d3e20313532373631.roa (hash: avjOhQMHcwWGlDF7WDzZoOiS3u3B2hy6xJEOi4n8Cr0=) 2: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl (hash: ZYCi0qTDPXRvVl10xC0FnAAMOAD2Nj+JC0JcVcvrHWI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 13:45:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:89:77:cd:bd:ad:f2:49:1d:3f:94:b9:12:e1:d1:41:a3:a8:ba:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Validity Not Before: Jun 15 12:05:54 2025 GMT Not After : Jun 18 13:45:54 2025 GMT Subject: CN=8DB98D82A2C23E23E0FAE9BB5B39ABD8E2F7D060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:54:aa:9d:15:1a:d4:a2:f2:63:11:7d:bc:83: db:d2:d4:6d:e5:3a:7b:dd:2f:ef:d9:3b:c8:ac:a8: e8:6b:72:6f:38:cc:70:bb:da:e6:2e:44:a0:98:a3: 86:97:7f:83:e3:6e:12:4d:86:bc:8c:3d:03:40:ca: e0:cc:93:1c:84:28:da:57:14:8a:3a:19:82:61:82: e5:44:6e:1f:8d:09:d7:5a:ba:20:cd:a0:54:59:64: 86:7d:69:99:ef:7b:92:c7:0a:c6:33:43:77:2f:47: d7:fc:a4:60:d1:ff:d5:3f:94:13:e9:30:30:0b:75: 59:34:52:33:c8:48:20:d1:b6:8c:60:56:c3:62:98: 59:77:0b:5c:0f:aa:0f:d4:29:85:5d:fe:70:bc:85: 5e:a8:f5:0c:3e:57:06:69:23:b4:0d:c6:8e:0a:e9: 57:91:d7:b2:4e:04:fd:49:90:36:6e:65:07:7d:31: 2a:5c:c2:5d:9c:e7:a2:3a:36:2a:d8:0c:5e:62:b0: 22:16:e4:4f:c6:7a:38:71:9f:7a:9f:34:8b:1c:26: d5:5c:30:04:33:f1:ae:1e:8f:3d:19:8d:ed:d0:ed: 90:05:53:86:77:4a:0e:66:fc:a4:8d:50:b6:80:bd: 7a:76:90:34:b1:ae:b0:04:80:8d:6f:2b:f0:2a:9e: d3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B9:8D:82:A2:C2:3E:23:E0:FA:E9:BB:5B:39:AB:D8:E2:F7:D0:60 X509v3 Authority Key Identifier: keyid:A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:87:23:6c:13:e3:73:71:ae:21:75:ad:b9:0a:88:95:ad:e9: 11:50:c8:a5:99:cf:8c:ec:ad:78:e1:be:02:a8:56:98:78:8a: 98:a4:15:a5:de:70:85:b5:47:c6:cc:e6:f6:b3:6b:f3:1e:f4: fe:24:77:03:f1:21:c6:81:e9:66:ff:d0:bd:78:c6:1a:3e:f3: cf:e0:76:16:ea:a4:b4:67:f2:06:09:46:b1:db:f8:c9:55:e6: 4d:a1:17:53:3a:7d:78:db:50:00:ae:78:8e:44:74:f7:67:05: e4:eb:04:f0:31:ad:ae:fe:e7:5a:d0:46:d6:83:6e:2e:c7:2d: 0e:7d:c3:3b:30:85:63:65:c6:e9:c7:f3:92:94:cf:f8:3a:5d: 34:cd:9e:67:cd:b2:f5:62:e2:0e:8d:09:42:bf:90:b8:9d:86: e1:7b:b4:8f:87:68:57:00:f8:60:36:00:f3:52:3f:1b:ac:db: 55:bb:b8:73:b0:b1:9f:55:df:37:be:b0:0d:f0:7c:76:00:a7: e8:bd:07:67:6f:9a:1e:57:18:96:02:82:92:29:d5:1f:77:6e: 6c:d1:5e:20:c2:00:9d:7d:48:7a:ee:3b:0d:b2:cb:49:ba:e4: de:9d:51:4b:af:ad:f4:36:6b:ff:b2:cf:ca:ff:d5:f3:5b:98: 62:5a:b2:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ4l3zb2t8kkdP5S5EuHRQaOouvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1 RTUyRThFQjAeFw0yNTA2MTUxMjA1NTRaFw0yNTA2MTgxMzQ1NTRaMDMxMTAvBgNV BAMTKDhEQjk4RDgyQTJDMjNFMjNFMEZBRTlCQjVCMzlBQkQ4RTJGN0QwNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3VKqdFRrUovJjEX28g9vS1G3l OnvdL+/ZO8isqOhrcm84zHC72uYuRKCYo4aXf4PjbhJNhryMPQNAyuDMkxyEKNpX FIo6GYJhguVEbh+NCddauiDNoFRZZIZ9aZnve5LHCsYzQ3cvR9f8pGDR/9U/lBPp MDALdVk0UjPISCDRtoxgVsNimFl3C1wPqg/UKYVd/nC8hV6o9Qw+VwZpI7QNxo4K 6VeR17JOBP1JkDZuZQd9MSpcwl2c56I6NirYDF5isCIW5E/Gejhxn3qfNIscJtVc MAQz8a4ejz0Zje3Q7ZAFU4Z3Sg5m/KSNULaAvXp2kDSxrrAEgI1vK/AqntMvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjbmNgqLCPiPg+um7Wzmr2OL30GAwHwYDVR0j BBgwFoAUpxuqZmI4R7e9nqfEC8vKhV5S6OswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODFlZjQ0MC01YTVmLTRhNGYtYjUwOS1iMTAzMjQ1YzVjZjEvMC9BNzFCQUE2NjYy Mzg0N0I3QkQ5RUE3QzQwQkNCQ0E4NTVFNTJFOEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1RTUy RThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgxZWY0NDAtNWE1Zi00YTRmLWI1 MDktYjEwMzI0NWM1Y2YxLzAvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNB ODU1RTUyRThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJeHI2wT43NxriF1rbkKiJWt6RFQyKWZz4zs rXjhvgKoVph4ipikFaXecIW1R8bM5vaza/Me9P4kdwPxIcaB6Wb/0L14xho+88/g dhbqpLRn8gYJRrHb+MlV5k2hF1M6fXjbUACueI5EdPdnBeTrBPAxra7+51rQRtaD bi7HLQ59wzswhWNlxunH85KUz/g6XTTNnmfNsvVi4g6NCUK/kLidhuF7tI+HaFcA +GA2APNSPxus21W7uHOwsZ9V3ze+sA3wfHYAp+i9B2dvmh5XGJYCgpIp1R93bmzR XiDCAJ19SHruOw2yy0m65N6dUUuvrfQ2a/+yz8r/1fNbmGJaslQ= -----END CERTIFICATE-----Generated at Mon Jun 16 02:37:45 2025 by rpki-client