$ rpki-client -vvf repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft File: 81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft (raw, json) Hash identifier: y+zVlEe1NgBdTQnHMTtese71Ez/fdJJqZKU0pCR7xdY= Subject key identifier: 5C:7D:23:33:CE:37:36:4C:8F:5C:00:DC:0D:D6:64:F6:6C:C7:07:C0 Authority key identifier: 81:C9:4B:E9:98:EC:BD:D2:EF:89:7B:FE:8E:8E:51:B8:74:C0:A6:52 Certificate issuer: /CN=81C94BE998ECBDD2EF897BFE8E8E51B874C0A652 Certificate serial: 04A2AE4FDD9A11E4BB0744A254C841A58AF19C18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft Manifest number: 02AD Signing time: Thu 03 Jul 2025 17:53:16 +0000 Manifest this update: Thu 03 Jul 2025 17:48:16 +0000 Manifest next update: Mon 07 Jul 2025 01:45:16 +0000 Files and hashes: 1: 81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl (hash: m3OqV0hE3FplDtLByBWKBJZHDUe/bMwkRqx0z7RZ4h0=) 2: 3130332e3136332e38312e302f32342d3234203d3e20313431363734.roa (hash: snup9E0JcmBDDFQXO29kpKaPJBnM7JWFMr9bOF3Zc+c=) 3: 3130332e3136332e38302e302f32332d3233203d3e20313431363734.roa (hash: LX1akCK1RumCTw48vx3vGALGY+ae+t+bkrwj6Dc+RMk=) 4: 3130332e3136332e38302e302f32342d3234203d3e20313431363734.roa (hash: FoLDrQVuOiTB01Q4iJpDzeQUT3QZub38J9e/RpqxUr4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 01:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:a2:ae:4f:dd:9a:11:e4:bb:07:44:a2:54:c8:41:a5:8a:f1:9c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81C94BE998ECBDD2EF897BFE8E8E51B874C0A652 Validity Not Before: Jul 3 17:48:16 2025 GMT Not After : Jul 7 01:45:16 2025 GMT Subject: CN=5C7D2333CE37364C8F5C00DC0DD664F66CC707C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:32:e2:bb:32:8c:9f:b1:75:47:03:e1:1f:12: 92:f2:f9:8d:f2:87:c0:bf:68:00:82:15:42:5c:f4: 9d:b4:3a:dd:65:36:76:7e:71:21:23:54:a6:54:fb: 9a:b9:7d:6c:d2:5d:e5:ea:a7:15:de:16:c3:66:12: 82:b6:2b:82:e4:7e:0e:69:ab:0b:8d:b3:ab:47:43: 5b:28:a1:ed:38:da:f9:da:6d:21:58:1c:2b:ad:e2: 49:61:70:bf:b4:fb:7b:87:d8:e5:03:ef:a6:01:5f: 46:7e:da:d7:88:09:eb:95:cf:ed:5b:96:7d:ae:30: be:9a:87:6a:25:1c:c3:93:38:1e:07:d7:d6:cb:bb: e5:a4:8d:39:ca:fe:0d:6b:bf:30:80:e9:1d:da:19: 5f:61:69:c5:c8:6b:05:01:f0:cd:5d:3b:cf:84:51: f3:66:c6:5d:0d:d5:3c:35:c0:8f:1a:7f:d9:94:0b: 99:6e:8d:d4:c3:33:43:55:04:56:b3:fc:c1:96:9d: e5:e0:33:1f:b7:5b:8d:0d:bc:1d:cb:99:dc:37:75: 8b:17:28:0c:97:d0:7b:23:f1:f9:3f:bf:46:50:c0: c1:ff:9d:2c:64:d5:79:ae:87:1f:ce:f7:5e:bb:b8: 9c:4b:db:06:3c:83:96:81:95:d7:d1:18:e1:56:dc: ae:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:7D:23:33:CE:37:36:4C:8F:5C:00:DC:0D:D6:64:F6:6C:C7:07:C0 X509v3 Authority Key Identifier: keyid:81:C9:4B:E9:98:EC:BD:D2:EF:89:7B:FE:8E:8E:51:B8:74:C0:A6:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:7d:13:e3:48:5f:e2:51:4e:01:b7:42:1f:8d:9d:07:ce:55: a1:54:6a:3c:4b:46:8f:a8:c5:59:22:7f:f9:85:cd:20:f0:f8: 6f:9c:a3:f4:8e:02:06:e3:fe:79:e5:cf:4a:45:73:c0:ea:16: e0:65:e9:5d:80:6c:c7:bf:b5:6f:2c:a8:66:b0:14:ab:b9:43: d9:62:22:ec:69:32:20:db:02:b1:5b:49:f3:ce:9f:20:08:99: a9:0c:75:bc:8d:94:cf:68:75:fc:89:55:c1:50:d2:34:f0:17: 71:b3:c2:c8:8e:96:fa:70:4a:74:2a:7f:19:f8:93:2d:9f:45: f2:4e:91:18:12:0f:a7:94:8f:b6:47:ef:d6:5c:8f:0f:fe:7d: a7:4d:97:be:75:4b:a6:c2:45:bd:4f:6f:df:b8:25:0b:3e:09: 1e:ef:84:10:d1:ca:72:91:80:53:b7:4b:9c:cb:da:37:32:5f: 5b:66:35:f3:81:ee:ef:a4:35:83:99:2e:29:7a:5a:8b:66:b9: 85:c4:60:4c:0e:cd:e7:10:41:9b:59:2a:2a:24:83:7d:6c:cf: a6:9c:cb:22:f7:cc:95:4b:ad:aa:e2:ee:6a:cf:e5:f1:e8:74: 6f:5a:e1:cc:38:61:46:29:cc:89:27:4c:6a:e4:b0:d7:07:44: ce:ff:3d:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBKKuT92aEeS7B0SiVMhBpYrxnBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUxQjg3 NEMwQTY1MjAeFw0yNTA3MDMxNzQ4MTZaFw0yNTA3MDcwMTQ1MTZaMDMxMTAvBgNV BAMTKDVDN0QyMzMzQ0UzNzM2NEM4RjVDMDBEQzBERDY2NEY2NkNDNzA3QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkMuK7MoyfsXVHA+EfEpLy+Y3y h8C/aACCFUJc9J20Ot1lNnZ+cSEjVKZU+5q5fWzSXeXqpxXeFsNmEoK2K4Lkfg5p qwuNs6tHQ1sooe042vnabSFYHCut4klhcL+0+3uH2OUD76YBX0Z+2teICeuVz+1b ln2uML6ah2olHMOTOB4H19bLu+WkjTnK/g1rvzCA6R3aGV9hacXIawUB8M1dO8+E UfNmxl0N1Tw1wI8af9mUC5lujdTDM0NVBFaz/MGWneXgMx+3W40NvB3Lmdw3dYsX KAyX0Hsj8fk/v0ZQwMH/nSxk1Xmuhx/O9167uJxL2wY8g5aBldfRGOFW3K53AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXH0jM843NkyPXADcDdZk9mzHB8AwHwYDVR0j BBgwFoAUgclL6ZjsvdLviXv+jo5RuHTAplIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDIzNGQ1MC02N2UxLTQxOWMtODViYS02NGJhOGMxMTEyMjUvMC84MUM5NEJFOTk4 RUNCREQyRUY4OTdCRkU4RThFNTFCODc0QzBBNjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUxQjg3NEMw QTY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQyMzRkNTAtNjdlMS00MTljLTg1 YmEtNjRiYThjMTExMjI1LzAvODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUx Qjg3NEMwQTY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGd9E+NIX+JRTgG3Qh+NnQfOVaFUajxLRo+o xVkif/mFzSDw+G+co/SOAgbj/nnlz0pFc8DqFuBl6V2AbMe/tW8sqGawFKu5Q9li IuxpMiDbArFbSfPOnyAImakMdbyNlM9odfyJVcFQ0jTwF3GzwsiOlvpwSnQqfxn4 ky2fRfJOkRgSD6eUj7ZH79Zcjw/+fadNl751S6bCRb1Pb9+4JQs+CR7vhBDRynKR gFO3S5zL2jcyX1tmNfOB7u+kNYOZLil6WotmuYXEYEwOzecQQZtZKiokg31sz6ac yyL3zJVLrari7mrP5fHodG9a4cw4YUYpzIknTGrksNcHRM7/Peg= -----END CERTIFICATE-----Generated at Fri Jul 4 10:40:31 2025 by rpki-client