$ rpki-client -vvf repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft File: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft (raw, json) Hash identifier: a/vgdYGdGbgB5pWd+V2kiKMcVtp1HYWpuZWChq9DP/0= Subject key identifier: 17:0C:07:71:5A:A6:97:84:F3:FD:61:B8:A0:7D:74:A4:FD:DF:FB:6B Authority key identifier: 71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 Certificate issuer: /CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Certificate serial: 014345C483B4CA54C90DC60666310A4C4E215FE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft Manifest number: 03B3 Signing time: Mon 11 Aug 2025 02:21:14 +0000 Manifest this update: Mon 11 Aug 2025 02:16:14 +0000 Manifest next update: Thu 14 Aug 2025 07:35:14 +0000 Files and hashes: 1: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl (hash: hU3mapi+RI4iEH6fHWB7JbMHGrJly1NmqIep0lMW3Do=) 2: 3130332e3130372e3138372e302f32342d3234203d3e20313337333030.roa (hash: KKxu3hPM0InDJZ99FC0Xq3EDadMAbvI+i8LW1aPaZ8E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:43:45:c4:83:b4:ca:54:c9:0d:c6:06:66:31:0a:4c:4e:21:5f:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Validity Not Before: Aug 11 02:16:14 2025 GMT Not After : Aug 14 07:35:14 2025 GMT Subject: CN=170C07715AA69784F3FD61B8A07D74A4FDDFFB6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:40:73:64:f5:3e:d7:24:f6:fd:a2:0c:cd:9b: 7b:c3:36:d8:4f:15:30:e6:d4:1e:fb:73:7a:a5:5e: 57:61:47:9a:67:3b:cc:ec:f4:5f:03:56:8c:e0:37: 5b:cb:22:30:f6:a3:40:f1:d2:fe:4e:d2:06:99:ff: 11:38:e3:81:16:20:57:be:ee:47:75:dc:0e:39:bf: 00:f1:75:32:3b:48:84:e7:73:61:c4:e5:93:b5:8f: b2:99:77:7c:28:51:02:00:d4:9a:19:39:77:eb:8a: 07:b1:e4:50:c2:4a:c5:a7:61:df:bf:18:dd:2c:f0: 75:5f:78:90:4b:00:33:2d:38:f4:49:2e:60:b4:4b: be:a4:6c:6b:80:91:4a:14:61:3a:b9:58:f4:c6:20: e7:a2:2c:3b:53:76:d6:4f:d2:02:a0:8e:44:a4:ce: 05:d9:b4:7b:39:39:73:ee:db:e6:53:8b:98:2a:a2: 81:0c:a0:c8:d1:94:8b:2b:e7:4e:f8:bd:ad:54:13: fa:30:5a:c1:f5:7d:d2:e2:9e:84:b7:38:09:ef:dd: d8:64:80:00:bb:58:ca:f7:6e:68:86:d5:f6:b9:73: 68:99:69:8a:e2:c9:a8:45:27:27:0c:40:b2:03:6a: ed:91:ee:78:2c:19:b7:71:ab:fe:f5:18:c0:6b:32: 87:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0C:07:71:5A:A6:97:84:F3:FD:61:B8:A0:7D:74:A4:FD:DF:FB:6B X509v3 Authority Key Identifier: keyid:71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c4:55:eb:ce:79:45:66:48:75:de:2c:be:e9:96:5e:6e:4c: 10:ca:e1:d9:50:64:6f:71:8d:6d:c9:ed:dc:9c:60:1c:44:1a: de:c5:ff:4e:03:f3:82:f8:cd:09:5e:a0:d2:08:ca:02:f1:4c: 04:a2:3f:a6:b0:b9:7c:fb:13:e3:d7:06:42:36:07:bf:4a:1a: 8f:d5:dc:4b:44:2d:98:f4:2c:97:93:b6:db:49:38:78:9e:4b: 84:7a:be:6c:13:15:ad:9c:63:a9:ad:4e:b3:ae:13:5d:75:b3: b5:67:89:5f:7a:c1:05:00:ca:dc:e5:7d:6b:de:16:bd:91:48: b1:c2:60:28:58:ae:24:ae:70:c9:6a:d7:f4:08:f3:25:d4:cd: 50:5a:67:a1:8b:76:63:da:c3:4a:d7:78:83:1e:6f:cc:0b:fe: 90:ef:97:00:e8:ee:fa:89:6c:be:7f:ca:d8:34:8a:f1:1f:29: 47:e1:78:05:85:b6:41:7a:f2:62:90:99:0d:f5:70:c5:cd:9b: a7:01:4b:9d:dd:19:bc:49:35:22:f0:59:f7:e7:76:3c:87:20: a9:20:16:62:ce:d6:dc:a7:f3:5e:55:f9:5b:91:c9:fe:fc:09: 0d:12:76:d1:9b:b9:2a:af:22:03:54:70:ee:d3:42:dd:9d:83: 9f:57:b7:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAUNFxIO0ylTJDcYGZjEKTE4hX+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2 QzlCNzJFMjAeFw0yNTA4MTEwMjE2MTRaFw0yNTA4MTQwNzM1MTRaMDMxMTAvBgNV BAMTKDE3MEMwNzcxNUFBNjk3ODRGM0ZENjFCOEEwN0Q3NEE0RkRERkZCNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoQHNk9T7XJPb9ogzNm3vDNthP FTDm1B77c3qlXldhR5pnO8zs9F8DVozgN1vLIjD2o0Dx0v5O0gaZ/xE444EWIFe+ 7kd13A45vwDxdTI7SITnc2HE5ZO1j7KZd3woUQIA1JoZOXfrigex5FDCSsWnYd+/ GN0s8HVfeJBLADMtOPRJLmC0S76kbGuAkUoUYTq5WPTGIOeiLDtTdtZP0gKgjkSk zgXZtHs5OXPu2+ZTi5gqooEMoMjRlIsr5074va1UE/owWsH1fdLinoS3OAnv3dhk gAC7WMr3bmiG1fa5c2iZaYriyahFJycMQLIDau2R7ngsGbdxq/71GMBrMoeNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFwwHcVqml4Tz/WG4oH10pP3f+2swHwYDVR0j BBgwFoAUceUam2XYoSNROjUPDZn5jWybcuIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDQ4YmQwNC1mNzg3LTQxNGEtYTUwMS01MTM4YTZkNmIzZTEvMC83MUU1MUE5QjY1 RDhBMTIzNTEzQTM1MEYwRDk5Rjk4RDZDOUI3MkUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2QzlC NzJFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ0OGJkMDQtZjc4Ny00MTRhLWE1 MDEtNTEzOGE2ZDZiM2UxLzAvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5 OEQ2QzlCNzJFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7EVevOeUVmSHXeLL7pll5uTBDK4dlQZG9x jW3J7dycYBxEGt7F/04D84L4zQleoNIIygLxTASiP6awuXz7E+PXBkI2B79KGo/V 3EtELZj0LJeTtttJOHieS4R6vmwTFa2cY6mtTrOuE111s7VniV96wQUAytzlfWve Fr2RSLHCYChYriSucMlq1/QI8yXUzVBaZ6GLdmPaw0rXeIMeb8wL/pDvlwDo7vqJ bL5/ytg0ivEfKUfheAWFtkF68mKQmQ31cMXNm6cBS53dGbxJNSLwWffndjyHIKkg FmLO1tyn815V+VuRyf78CQ0SdtGbuSqvIgNUcO7TQt2dg59Xtzk= -----END CERTIFICATE-----Generated at Mon Aug 11 07:47:04 2025 by rpki-client