$ rpki-client -vvf repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft File: 71876CD3DD087E9543A347F614A4D24A87A40F95.mft (raw, json) Hash identifier: jisZJ3/W9SuBaKT2qNE0LMkrLXsaUKigCeGSkhTZbYw= Subject key identifier: EB:F8:66:23:38:F2:45:B7:01:90:5D:24:C4:E3:C5:9E:47:8A:BD:97 Authority key identifier: 71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95 Certificate issuer: /CN=71876CD3DD087E9543A347F614A4D24A87A40F95 Certificate serial: 406D2463AAF711F99C87326CD7A7FA93284D6EEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft Manifest number: 018B Signing time: Sat 14 Jun 2025 14:10:44 +0000 Manifest this update: Sat 14 Jun 2025 14:05:44 +0000 Manifest next update: Tue 17 Jun 2025 18:21:44 +0000 Files and hashes: 1: 3130332e3135382e3133302e302f32342d3234203d3e20313431313238.roa (hash: V2nbf4Xerdo+UlaGtEEFCDfKfKUg2cbilII6qfqHQqs=) 2: 71876CD3DD087E9543A347F614A4D24A87A40F95.crl (hash: QrgShmyCpWZGC/CwktmcyxoSxnoVuGS16ZNMBgw01Ds=) 3: 3130332e3130372e3230362e302f32342d3234203d3e20313431313238.roa (hash: ci5I/MxrgoJ1rfjV0dWp5xS5P0hJgjy6xXmWTHTwpMQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 18:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:6d:24:63:aa:f7:11:f9:9c:87:32:6c:d7:a7:fa:93:28:4d:6e:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71876CD3DD087E9543A347F614A4D24A87A40F95 Validity Not Before: Jun 14 14:05:44 2025 GMT Not After : Jun 17 18:21:44 2025 GMT Subject: CN=EBF8662338F245B701905D24C4E3C59E478ABD97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dd:82:54:de:95:9a:82:6f:90:46:7b:08:83: 86:c2:29:08:d9:3b:52:04:f4:14:ad:d8:be:40:e0: c5:5a:6c:77:e2:17:4e:11:7f:be:fb:6d:79:d0:93: db:7b:68:df:7a:b4:f0:aa:f0:9b:62:76:1e:34:e8: 25:e1:91:4d:2d:3b:4b:9b:87:9d:3b:9e:6e:b8:34: c4:76:1a:0c:61:d3:05:2e:f1:41:c7:ed:7c:7c:a8: 27:f5:32:0c:5e:8c:e9:1b:a1:9e:5e:92:48:b1:f6: 08:b8:54:19:64:1a:dc:cc:41:f7:dd:53:58:fc:a5: a3:ee:2a:45:bc:5a:40:10:22:4f:15:f0:96:da:78: fc:00:68:3c:f4:df:ef:00:0c:74:7a:37:43:85:b1: 2c:89:b9:cd:df:c1:61:64:e8:dd:1c:d3:91:f4:b2: 9f:b9:2b:a3:de:a3:e2:bd:90:07:78:19:4a:62:ac: 76:a2:09:4a:71:7e:5d:4d:37:25:2c:4e:ae:60:b7: 22:7f:3c:30:38:ec:5e:0f:2b:f5:c0:18:7d:0b:94: c3:31:2f:f9:5c:fd:f1:1a:05:65:8f:89:00:0d:67: 52:a5:aa:53:10:be:1c:c5:59:42:b2:55:51:cc:ed: 99:8e:bf:b2:57:3c:ab:c8:87:5e:57:af:67:b6:74: 64:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F8:66:23:38:F2:45:B7:01:90:5D:24:C4:E3:C5:9E:47:8A:BD:97 X509v3 Authority Key Identifier: keyid:71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:96:67:69:9f:d8:d6:75:f1:12:81:07:d8:f1:67:b9:d4:9c: 13:ba:d2:75:90:f7:e9:d9:44:ff:d8:57:69:f9:1d:84:e3:7d: a7:e7:cb:3f:e9:0b:ac:c8:73:ad:90:83:8c:57:fa:05:cb:f6: c7:51:f6:67:92:67:d5:5d:e1:bb:45:0c:ce:8a:a8:b9:f6:ef: 51:9f:59:24:6a:a6:da:1a:33:08:e6:da:54:51:41:8a:19:9d: 48:80:9b:6c:d7:b6:74:60:75:51:24:6f:28:8a:19:b5:31:b3: 0c:4c:ee:87:96:17:58:4a:3b:6c:92:b9:76:5f:f9:59:f1:d3: 4c:24:95:3c:e4:e9:c1:6a:fc:6f:a9:06:40:55:0a:98:3e:a3: d3:f9:85:2b:18:cb:59:3e:b2:56:4a:57:50:b3:f8:0e:b4:50: 96:36:8f:f4:c7:30:01:35:05:f7:4b:4c:3e:77:70:f0:bb:3f: 0d:da:12:1b:b3:c9:44:db:1f:13:bb:cd:bb:a1:91:b7:60:5e: bf:f6:43:52:1e:28:50:a5:d6:78:af:06:34:56:fd:85:cd:6d: 5c:2b:18:c9:7e:8d:9b:91:d4:e4:be:e2:07:f7:bf:f8:26:e4: 23:22:76:7f:4b:d6:a8:75:47:f5:c7:6b:c7:ec:ca:af:ba:a6: c7:88:ba:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQG0kY6r3EfmchzJs16f6kyhNbuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4 N0E0MEY5NTAeFw0yNTA2MTQxNDA1NDRaFw0yNTA2MTcxODIxNDRaMDMxMTAvBgNV BAMTKEVCRjg2NjIzMzhGMjQ1QjcwMTkwNUQyNEM0RTNDNTlFNDc4QUJEOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3YJU3pWagm+QRnsIg4bCKQjZ O1IE9BSt2L5A4MVabHfiF04Rf777bXnQk9t7aN96tPCq8Jtidh406CXhkU0tO0ub h507nm64NMR2Ggxh0wUu8UHH7Xx8qCf1MgxejOkboZ5ekkix9gi4VBlkGtzMQffd U1j8paPuKkW8WkAQIk8V8JbaePwAaDz03+8ADHR6N0OFsSyJuc3fwWFk6N0c05H0 sp+5K6Peo+K9kAd4GUpirHaiCUpxfl1NNyUsTq5gtyJ/PDA47F4PK/XAGH0LlMMx L/lc/fEaBWWPiQANZ1KlqlMQvhzFWUKyVVHM7ZmOv7JXPKvIh15Xr2e2dGSHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6/hmIzjyRbcBkF0kxOPFnkeKvZcwHwYDVR0j BBgwFoAUcYds090IfpVDo0f2FKTSSoekD5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWRlY2E4Mi04OWFiLTQ1ODItOGU4Mi04ZWM4YTUxZmVjNDIvMC83MTg3NkNEM0RE MDg3RTk1NDNBMzQ3RjYxNEE0RDI0QTg3QTQwRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4N0E0 MEY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTVkZWNhODItODlhYi00NTgyLThl ODItOGVjOGE1MWZlYzQyLzAvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQy NEE4N0E0MEY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACyWZ2mf2NZ18RKBB9jxZ7nUnBO60nWQ9+nZ RP/YV2n5HYTjfafnyz/pC6zIc62Qg4xX+gXL9sdR9meSZ9Vd4btFDM6KqLn271Gf WSRqptoaMwjm2lRRQYoZnUiAm2zXtnRgdVEkbyiKGbUxswxM7oeWF1hKO2ySuXZf +Vnx00wklTzk6cFq/G+pBkBVCpg+o9P5hSsYy1k+slZKV1Cz+A60UJY2j/THMAE1 BfdLTD53cPC7Pw3aEhuzyUTbHxO7zbuhkbdgXr/2Q1IeKFCl1nivBjRW/YXNbVwr GMl+jZuR1OS+4gf3v/gm5CMidn9L1qh1R/XHa8fsyq+6pseIuug= -----END CERTIFICATE-----Generated at Mon Jun 16 02:16:40 2025 by rpki-client