$ rpki-client -vvf repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft File: 71876CD3DD087E9543A347F614A4D24A87A40F95.mft (raw, json) Hash identifier: A4QfsZi5Vf1PtZfRN6sssH0c3oPNykpuKj0Zkqa5kuM= Subject key identifier: 3C:97:58:8D:D4:73:03:65:1C:1E:E4:C2:9F:20:89:EC:C6:2B:70:A7 Authority key identifier: 71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95 Certificate issuer: /CN=71876CD3DD087E9543A347F614A4D24A87A40F95 Certificate serial: 10F5AF3209BE7EF6D2E5A83540650B9D3AA684A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft Manifest number: 01A2 Signing time: Wed 06 Aug 2025 03:20:47 +0000 Manifest this update: Wed 06 Aug 2025 03:15:47 +0000 Manifest next update: Sat 09 Aug 2025 08:07:47 +0000 Files and hashes: 1: 3130332e3130372e3230362e302f32342d3234203d3e20313431313238.roa (hash: ci5I/MxrgoJ1rfjV0dWp5xS5P0hJgjy6xXmWTHTwpMQ=) 2: 3130332e3135382e3133302e302f32342d3234203d3e20313431313238.roa (hash: V2nbf4Xerdo+UlaGtEEFCDfKfKUg2cbilII6qfqHQqs=) 3: 71876CD3DD087E9543A347F614A4D24A87A40F95.crl (hash: svQml+rf5Vjan4+8wkFQp3eKvOm9ussSt7KYSOh1Li0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 08:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:f5:af:32:09:be:7e:f6:d2:e5:a8:35:40:65:0b:9d:3a:a6:84:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71876CD3DD087E9543A347F614A4D24A87A40F95 Validity Not Before: Aug 6 03:15:47 2025 GMT Not After : Aug 9 08:07:47 2025 GMT Subject: CN=3C97588DD47303651C1EE4C29F2089ECC62B70A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c3:9d:61:a1:16:57:ff:58:04:73:7b:b5:73: 06:e7:b2:a0:b1:a8:76:16:82:7a:6b:68:ac:59:f9: 3c:9e:78:95:b4:98:c2:ca:a6:68:61:f5:f1:fb:36: 43:69:97:45:d4:f6:8f:42:fb:fb:46:fe:e2:d8:58: 7b:23:12:82:ed:5e:c9:14:cc:60:47:f4:aa:71:2b: ee:dc:77:e6:10:ea:d3:64:c2:5e:17:33:97:51:e8: 28:87:3c:7f:c0:d2:80:74:5a:d7:10:42:a8:59:8e: 8e:5a:20:f0:09:d0:e4:ca:c8:7e:94:f3:42:b2:51: cc:a1:8b:6b:92:fa:74:8a:fe:c6:24:02:21:a3:86: 13:92:ec:de:f6:bd:ae:20:31:15:59:50:14:2e:a2: 94:0c:a3:29:ed:e3:64:32:1d:ff:eb:6f:87:37:c8: 92:ae:d9:50:7d:bd:b6:f7:b4:ff:88:b9:bd:12:dc: 9c:9b:e9:c4:a5:6a:45:0f:bb:85:2e:90:c9:b0:df: 31:17:63:2e:75:fe:e7:6c:a7:5d:5e:9f:1e:46:41: 38:0e:c5:20:d4:1f:5e:3b:b5:14:9d:bf:75:f4:b5: f2:7e:b8:e3:8c:32:51:0a:9e:75:97:cf:cd:27:b9: 74:b6:f9:0e:e6:99:1f:6d:08:3b:4f:df:64:25:6a: 9e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:97:58:8D:D4:73:03:65:1C:1E:E4:C2:9F:20:89:EC:C6:2B:70:A7 X509v3 Authority Key Identifier: keyid:71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:05:74:58:ac:12:0d:3d:ec:0d:f9:df:7f:9a:c6:80:4a:0b: d9:62:5d:c6:0a:ea:a3:fc:d3:9e:ad:88:81:75:1d:92:4b:60: 20:a4:2e:4d:2a:ba:d4:86:2f:fb:41:2a:84:06:c8:f7:d9:59: e3:32:c8:01:21:42:2c:4d:aa:23:e3:1c:55:e1:d2:f1:d8:0c: 39:4e:6e:ff:ca:0d:be:26:6d:17:45:29:c1:6f:96:4c:42:27: ef:94:2e:a7:7d:5f:22:2c:2b:9e:b2:97:89:ee:31:5f:1d:f2: 3a:44:e0:9c:12:4d:d2:ab:ee:ea:1a:6c:38:99:db:0a:f3:ce: 80:a3:6a:6b:da:bb:1f:6a:e6:f0:93:0a:8f:59:fe:07:88:45: 9c:83:43:c2:12:62:a4:1d:96:bb:24:e3:60:0d:15:62:e1:60: 50:94:ef:d4:b5:91:56:f4:4f:05:51:60:03:30:87:df:d2:4b: 5d:a7:f7:f3:32:ec:c6:87:a7:78:fd:55:5e:63:d6:b8:12:a1: 66:55:31:c4:c7:99:73:30:2f:98:c3:2e:c2:f1:2c:bb:2d:55: ce:fd:01:93:ed:8b:ef:9c:95:35:d0:0b:5a:c5:4c:ec:40:4b: 6d:8f:f5:3b:ea:05:dc:46:0b:56:90:43:b3:98:02:0e:4a:80: 01:6b:af:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEPWvMgm+fvbS5ag1QGULnTqmhKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4 N0E0MEY5NTAeFw0yNTA4MDYwMzE1NDdaFw0yNTA4MDkwODA3NDdaMDMxMTAvBgNV BAMTKDNDOTc1ODhERDQ3MzAzNjUxQzFFRTRDMjlGMjA4OUVDQzYyQjcwQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbw51hoRZX/1gEc3u1cwbnsqCx qHYWgnpraKxZ+TyeeJW0mMLKpmhh9fH7NkNpl0XU9o9C+/tG/uLYWHsjEoLtXskU zGBH9KpxK+7cd+YQ6tNkwl4XM5dR6CiHPH/A0oB0WtcQQqhZjo5aIPAJ0OTKyH6U 80KyUcyhi2uS+nSK/sYkAiGjhhOS7N72va4gMRVZUBQuopQMoynt42QyHf/rb4c3 yJKu2VB9vbb3tP+Iub0S3Jyb6cSlakUPu4UukMmw3zEXYy51/udsp11enx5GQTgO xSDUH147tRSdv3X0tfJ+uOOMMlEKnnWXz80nuXS2+Q7mmR9tCDtP32Qlap6hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPJdYjdRzA2UcHuTCnyCJ7MYrcKcwHwYDVR0j BBgwFoAUcYds090IfpVDo0f2FKTSSoekD5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWRlY2E4Mi04OWFiLTQ1ODItOGU4Mi04ZWM4YTUxZmVjNDIvMC83MTg3NkNEM0RE MDg3RTk1NDNBMzQ3RjYxNEE0RDI0QTg3QTQwRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4N0E0 MEY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTVkZWNhODItODlhYi00NTgyLThl ODItOGVjOGE1MWZlYzQyLzAvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQy NEE4N0E0MEY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJsFdFisEg097A3533+axoBKC9liXcYK6qP8 056tiIF1HZJLYCCkLk0qutSGL/tBKoQGyPfZWeMyyAEhQixNqiPjHFXh0vHYDDlO bv/KDb4mbRdFKcFvlkxCJ++ULqd9XyIsK56yl4nuMV8d8jpE4JwSTdKr7uoabDiZ 2wrzzoCjamvaux9q5vCTCo9Z/geIRZyDQ8ISYqQdlrsk42ANFWLhYFCU79S1kVb0 TwVRYAMwh9/SS12n9/My7MaHp3j9VV5j1rgSoWZVMcTHmXMwL5jDLsLxLLstVc79 AZPti++clTXQC1rFTOxAS22P9TvqBdxGC1aQQ7OYAg5KgAFrr0M= -----END CERTIFICATE-----Generated at Thu Aug 7 00:37:28 2025 by rpki-client