$ rpki-client -vvf repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft File: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft (raw, json) Hash identifier: cWTaTmLVc5VKf3dwBBv4jRzYWsJu/XS44XrJnqlrKsU= Subject key identifier: FF:07:C0:B8:70:BB:6D:AC:4E:86:C0:6B:85:DD:5A:FE:50:15:3C:1F Authority key identifier: A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB Certificate issuer: /CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Certificate serial: 779B4AFFE9A2F132EFB61E62239498F778956FB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft Manifest number: A0 Signing time: Tue 05 Aug 2025 08:10:57 +0000 Manifest this update: Tue 05 Aug 2025 08:05:57 +0000 Manifest next update: Fri 08 Aug 2025 19:00:57 +0000 Files and hashes: 1: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl (hash: FMVszM6Rt/W08tajFFlFa8RmorU9zHl8suecQENdcFk=) 2: 3136302e32302e33362e302f32332d3234203d3e20313532373631.roa (hash: e3Ye+8KBt0e+GgLTg5uGXR8hoI4RqWYobVVv7ZziGMY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:9b:4a:ff:e9:a2:f1:32:ef:b6:1e:62:23:94:98:f7:78:95:6f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Validity Not Before: Aug 5 08:05:57 2025 GMT Not After : Aug 8 19:00:57 2025 GMT Subject: CN=FF07C0B870BB6DAC4E86C06B85DD5AFE50153C1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3e:aa:f6:29:76:a9:1b:6e:89:48:df:d9:17: 44:39:7a:b8:34:2f:c0:06:eb:a3:1b:c8:2b:48:f7: c4:36:8e:64:3a:db:ca:58:cd:bc:78:c6:f5:01:d9: 76:9d:f3:69:81:b2:31:03:92:32:c0:6e:eb:60:6c: b8:bb:d2:b2:69:84:5d:d0:a8:c0:41:52:2c:8d:e7: 78:10:2b:67:2f:3f:dc:e4:99:82:3d:43:f9:ec:20: 13:4d:a4:42:60:ee:cb:ef:89:bd:4c:f1:98:bc:b9: b5:99:08:4a:12:4c:92:9e:37:b0:68:54:1f:eb:98: 08:b3:14:b6:30:87:ec:85:3a:00:45:04:23:9a:90: 34:c6:fc:bf:77:d5:1a:05:b9:3a:11:e1:dd:12:3e: 74:e7:21:d6:28:b6:7d:54:42:15:cd:03:bc:d3:27: dc:d5:9b:e5:0f:56:de:c5:b0:84:db:b4:99:8e:28: ab:d8:df:58:b3:d1:55:e0:8c:56:cc:0d:95:9b:d8: 7e:8b:a4:2a:ab:dd:8f:c5:aa:28:a3:bc:cc:57:8f: 2a:7c:8d:63:76:60:ce:7f:83:bb:ff:99:5c:97:b2: b7:78:f0:6a:9e:f7:85:04:b5:5d:dc:a6:a9:16:92: bc:ab:b1:aa:a3:ab:dd:76:7a:6b:75:4d:c4:e2:b2: 0c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:07:C0:B8:70:BB:6D:AC:4E:86:C0:6B:85:DD:5A:FE:50:15:3C:1F X509v3 Authority Key Identifier: keyid:A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:44:c2:73:fd:71:fb:8c:fc:70:e1:4d:6c:63:b7:94:ef:1f: cc:37:ea:2d:d5:9a:9c:ec:7e:15:41:44:c7:78:2f:0f:ae:b3: 8d:f4:72:3b:3d:09:c2:1a:e2:37:3c:d2:0f:6f:2c:6b:a5:8b: 9f:06:1c:bd:e9:d9:51:12:dd:fd:67:29:91:85:f0:6d:7f:7a: 78:75:26:8e:19:b9:a0:1c:bb:6c:25:90:7a:28:ff:27:e9:54: 72:ad:42:21:63:34:a8:f1:51:3c:5a:6d:45:cb:15:21:af:1a: 5b:37:fb:28:f3:fd:2b:7c:a0:16:ee:b9:f3:b1:38:89:ea:96: 8a:76:24:31:79:9a:18:48:c9:66:bd:0f:a3:3e:9d:f3:f3:03: b6:d1:a8:4a:05:57:ae:a7:ae:9c:60:0d:50:d0:88:e5:c6:26: e9:37:06:26:e9:fa:c1:5d:34:ba:a8:db:10:1c:80:2b:4e:fa: 40:42:2e:08:ad:e0:60:2a:3d:f1:40:33:19:01:20:f3:d4:65: f1:35:8e:9d:27:b5:71:e5:df:1b:0d:3b:8e:8c:a1:5d:4b:c2: 13:29:b1:f5:29:57:43:2a:14:5c:5a:79:01:2d:64:0d:d8:8c: 4f:b2:71:17:a2:33:b6:6a:4c:e8:72:ce:58:41:2e:a4:ec:a3: 34:e2:7f:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd5tK/+mi8TLvth5iI5SY93iVb7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1 RTUyRThFQjAeFw0yNTA4MDUwODA1NTdaFw0yNTA4MDgxOTAwNTdaMDMxMTAvBgNV BAMTKEZGMDdDMEI4NzBCQjZEQUM0RTg2QzA2Qjg1REQ1QUZFNTAxNTNDMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Pqr2KXapG26JSN/ZF0Q5erg0 L8AG66MbyCtI98Q2jmQ628pYzbx4xvUB2Xad82mBsjEDkjLAbutgbLi70rJphF3Q qMBBUiyN53gQK2cvP9zkmYI9Q/nsIBNNpEJg7svvib1M8Zi8ubWZCEoSTJKeN7Bo VB/rmAizFLYwh+yFOgBFBCOakDTG/L931RoFuToR4d0SPnTnIdYotn1UQhXNA7zT J9zVm+UPVt7FsITbtJmOKKvY31iz0VXgjFbMDZWb2H6LpCqr3Y/FqiijvMxXjyp8 jWN2YM5/g7v/mVyXsrd48Gqe94UEtV3cpqkWkryrsaqjq912emt1TcTisgyLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/wfAuHC7baxOhsBrhd1a/lAVPB8wHwYDVR0j BBgwFoAUpxuqZmI4R7e9nqfEC8vKhV5S6OswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODFlZjQ0MC01YTVmLTRhNGYtYjUwOS1iMTAzMjQ1YzVjZjEvMC9BNzFCQUE2NjYy Mzg0N0I3QkQ5RUE3QzQwQkNCQ0E4NTVFNTJFOEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1RTUy RThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgxZWY0NDAtNWE1Zi00YTRmLWI1 MDktYjEwMzI0NWM1Y2YxLzAvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNB ODU1RTUyRThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHREwnP9cfuM/HDhTWxjt5TvH8w36i3Vmpzs fhVBRMd4Lw+us430cjs9CcIa4jc80g9vLGuli58GHL3p2VES3f1nKZGF8G1/enh1 Jo4ZuaAcu2wlkHoo/yfpVHKtQiFjNKjxUTxabUXLFSGvGls3+yjz/St8oBbuufOx OInqlop2JDF5mhhIyWa9D6M+nfPzA7bRqEoFV66nrpxgDVDQiOXGJuk3Bibp+sFd NLqo2xAcgCtO+kBCLgit4GAqPfFAMxkBIPPUZfE1jp0ntXHl3xsNO46MoV1LwhMp sfUpV0MqFFxaeQEtZA3YjE+ycReiM7ZqTOhyzlhBLqTsozTif54= -----END CERTIFICATE-----Generated at Wed Aug 6 18:38:12 2025 by rpki-client