$ rpki-client -vvf repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft File: 71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft (raw, json) Hash identifier: 7rNWphJTLTDaGVQbUl0QobH7+PWV/I8kOsZeqCUjYd0= Subject key identifier: 3E:3F:D8:E4:85:17:6F:C0:FF:A1:56:B8:54:EA:0A:09:CC:3D:08:D3 Authority key identifier: 71:FC:3F:7B:27:22:F6:A1:5C:55:7F:63:F8:F4:95:A9:CD:BC:A9:D7 Certificate issuer: /CN=71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7 Certificate serial: 493CEF229547FEC289426D1849DF96A5C4FAD323 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft Manifest number: 04DE Signing time: Sun 15 Jun 2025 01:41:26 +0000 Manifest this update: Sun 15 Jun 2025 01:36:26 +0000 Manifest next update: Wed 18 Jun 2025 07:25:26 +0000 Files and hashes: 1: 3130332e3134372e38322e302f32342d3234203d3e20313339393538.roa (hash: vC4SL0uw9D8xmCXitMGfoUsUZzvLg4me8B5U0xhWjR0=) 2: 71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl (hash: qNSn8ytbuGiMXuGFj3JTD34uW5o49RA/f1eH/7dOLOU=) 3: 3130332e3134372e38332e302f32342d3234203d3e20313339393538.roa (hash: +BIBQAINF/5Qw6Z/inMjF3BgXwfPJiU1L7MDXOLb6hY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 07:25:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:3c:ef:22:95:47:fe:c2:89:42:6d:18:49:df:96:a5:c4:fa:d3:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7 Validity Not Before: Jun 15 01:36:26 2025 GMT Not After : Jun 18 07:25:26 2025 GMT Subject: CN=3E3FD8E485176FC0FFA156B854EA0A09CC3D08D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:de:08:33:c7:1a:3e:17:ee:e3:5c:9b:da:3f: 79:53:bd:cc:31:7b:47:c4:4c:c6:60:1c:a2:61:92: 61:05:58:4e:51:8d:71:37:75:bf:42:61:13:70:a3: e2:58:ee:03:c5:16:c1:8e:83:11:ec:57:6b:4f:ba: 6c:e2:8d:8d:0e:74:6e:10:03:b0:e7:93:98:e3:c2: ac:f1:a2:6d:f8:d8:62:02:99:07:93:11:f3:5d:f2: c6:49:e6:de:77:6e:41:86:db:3d:1a:81:ad:90:b2: db:90:5d:34:fe:10:a8:5b:cd:a1:2d:b4:7e:c5:21: 56:04:6d:e2:1e:b6:34:c3:f7:d9:3d:12:d7:05:ab: 39:ad:45:00:2b:15:9f:89:9c:3f:32:3e:37:d8:3c: 05:2d:20:46:10:a7:b9:27:77:61:8b:da:3f:92:0b: 42:52:e4:c8:e7:22:94:66:41:05:6b:5b:6e:7d:3f: 9a:a5:60:d8:29:b0:dd:59:94:6a:91:05:5a:e6:20: 98:ce:05:3a:c7:66:d9:5e:c4:e4:85:3b:5c:96:a4: ed:c9:14:93:28:32:3c:b9:42:c6:00:81:71:8b:74: 6a:7d:60:b6:72:46:5e:c3:2e:de:ee:d9:51:fd:31: da:0e:0f:fa:0b:88:51:81:59:e9:7d:00:c0:3d:36: b3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3F:D8:E4:85:17:6F:C0:FF:A1:56:B8:54:EA:0A:09:CC:3D:08:D3 X509v3 Authority Key Identifier: keyid:71:FC:3F:7B:27:22:F6:A1:5C:55:7F:63:F8:F4:95:A9:CD:BC:A9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:44:5f:86:1b:fd:ca:16:9e:f2:22:26:34:ce:9f:94:b2:49: b6:8a:f4:fd:36:82:39:fe:fd:f2:a3:96:4c:46:9c:aa:d8:ab: 8d:95:08:45:26:42:60:e4:d9:80:ed:3b:f7:84:4c:85:09:7f: a0:ca:36:48:92:52:82:fe:81:f6:a4:73:88:17:2e:4c:81:63: 3a:9a:71:08:15:2c:20:0b:1f:64:62:20:f0:79:03:b7:79:fe: ef:57:d4:e7:f2:26:f1:c0:7d:1b:4d:c2:ee:59:ec:ef:33:32: b8:e5:86:22:e9:0e:e2:fa:96:71:e5:26:c4:85:ca:91:ba:c3: 42:04:81:0b:e6:75:09:ea:b4:d7:cc:c2:0a:92:f7:e2:6c:35: f8:aa:7a:a5:70:a7:50:40:8b:64:26:09:fb:a6:7a:43:8b:94: 8f:27:08:5b:c7:4e:2d:c5:2e:50:5c:c5:53:fe:d4:09:71:9b: f7:82:2c:c9:bc:2a:23:c0:c1:e2:1a:a2:da:74:6b:d2:33:af: 1b:74:4d:58:d9:f4:de:0f:dc:b1:4e:1a:3e:ab:98:f8:1b:54: db:54:b5:d4:42:f7:36:a7:ca:33:72:20:b9:68:24:7c:53:aa: 12:5b:5b:9a:a1:73:42:68:85:48:64:1d:f5:fb:c3:14:fb:a3: e8:c0:2c:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSTzvIpVH/sKJQm0YSd+WpcT60yMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1QTlD REJDQTlENzAeFw0yNTA2MTUwMTM2MjZaFw0yNTA2MTgwNzI1MjZaMDMxMTAvBgNV BAMTKDNFM0ZEOEU0ODUxNzZGQzBGRkExNTZCODU0RUEwQTA5Q0MzRDA4RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC3ggzxxo+F+7jXJvaP3lTvcwx e0fETMZgHKJhkmEFWE5RjXE3db9CYRNwo+JY7gPFFsGOgxHsV2tPumzijY0OdG4Q A7Dnk5jjwqzxom342GICmQeTEfNd8sZJ5t53bkGG2z0aga2QstuQXTT+EKhbzaEt tH7FIVYEbeIetjTD99k9EtcFqzmtRQArFZ+JnD8yPjfYPAUtIEYQp7knd2GL2j+S C0JS5MjnIpRmQQVrW259P5qlYNgpsN1ZlGqRBVrmIJjOBTrHZtlexOSFO1yWpO3J FJMoMjy5QsYAgXGLdGp9YLZyRl7DLt7u2VH9MdoOD/oLiFGBWel9AMA9NrPvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPj/Y5IUXb8D/oVa4VOoKCcw9CNMwHwYDVR0j BBgwFoAUcfw/eyci9qFcVX9j+PSVqc28qdcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWE1YWM2NS02MDcxLTQ2ZTItYmI5ZC1kNzcwZDExN2M0YjQvMC83MUZDM0Y3QjI3 MjJGNkExNUM1NTdGNjNGOEY0OTVBOUNEQkNBOUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1QTlDREJD QTlENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFhNWFjNjUtNjA3MS00NmUyLWJi OWQtZDc3MGQxMTdjNGI0LzAvNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1 QTlDREJDQTlENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFEX4Yb/coWnvIiJjTOn5SySbaK9P02gjn+ /fKjlkxGnKrYq42VCEUmQmDk2YDtO/eETIUJf6DKNkiSUoL+gfakc4gXLkyBYzqa cQgVLCALH2RiIPB5A7d5/u9X1OfyJvHAfRtNwu5Z7O8zMrjlhiLpDuL6lnHlJsSF ypG6w0IEgQvmdQnqtNfMwgqS9+JsNfiqeqVwp1BAi2QmCfumekOLlI8nCFvHTi3F LlBcxVP+1Alxm/eCLMm8KiPAweIaotp0a9Izrxt0TVjZ9N4P3LFOGj6rmPgbVNtU tdRC9zanyjNyILloJHxTqhJbW5qhc0JohUhkHfX7wxT7o+jALDU= -----END CERTIFICATE-----Generated at Mon Jun 16 14:44:48 2025 by rpki-client