$ rpki-client -vvf repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft File: 81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft (raw, json) Hash identifier: L3ZNZf3jotvRAyUw6KYnONjtuahy31QGd1W+sUNk8no= Subject key identifier: 24:FA:4B:79:17:F9:8C:99:43:4B:C2:BD:62:F8:14:70:41:63:06:F1 Authority key identifier: 81:C9:4B:E9:98:EC:BD:D2:EF:89:7B:FE:8E:8E:51:B8:74:C0:A6:52 Certificate issuer: /CN=81C94BE998ECBDD2EF897BFE8E8E51B874C0A652 Certificate serial: 2575430546FEB27FACF9989C4A059969787E3BFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft Manifest number: 0296 Signing time: Mon 12 May 2025 19:42:25 +0000 Manifest this update: Mon 12 May 2025 19:37:25 +0000 Manifest next update: Thu 15 May 2025 19:57:25 +0000 Files and hashes: 1: 81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl (hash: 9Q3G44+bOkSxv9dyacu73HasBbot90ZVzVaIf+9X1mQ=) 2: 3130332e3136332e38312e302f32342d3234203d3e20313431363734.roa (hash: snup9E0JcmBDDFQXO29kpKaPJBnM7JWFMr9bOF3Zc+c=) 3: 3130332e3136332e38302e302f32342d3234203d3e20313431363734.roa (hash: FoLDrQVuOiTB01Q4iJpDzeQUT3QZub38J9e/RpqxUr4=) 4: 3130332e3136332e38302e302f32332d3233203d3e20313431363734.roa (hash: LX1akCK1RumCTw48vx3vGALGY+ae+t+bkrwj6Dc+RMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 19:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:75:43:05:46:fe:b2:7f:ac:f9:98:9c:4a:05:99:69:78:7e:3b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81C94BE998ECBDD2EF897BFE8E8E51B874C0A652 Validity Not Before: May 12 19:37:25 2025 GMT Not After : May 15 19:57:25 2025 GMT Subject: CN=24FA4B7917F98C99434BC2BD62F81470416306F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e9:bc:7a:67:47:4a:76:10:2b:61:d2:e5:a5: e8:e8:65:cf:9c:9c:28:d1:40:79:b7:51:69:bd:3f: 68:a6:bc:2e:08:1f:bf:ea:9d:ec:db:55:9a:32:6d: 7b:e7:50:07:69:45:a0:e4:8a:97:9a:f7:4c:5c:26: c0:7c:5c:92:55:bb:57:71:39:e7:65:49:5e:b1:e3: f9:90:3f:e2:99:06:65:8e:41:35:99:81:0e:35:c7: 01:9e:c8:19:e4:c4:4d:92:6f:7b:f0:b9:2a:4f:c8: 90:17:59:88:f1:9f:69:23:c2:31:e7:03:9c:c6:13: cd:08:b9:bd:03:f6:41:dd:84:f4:3d:2a:ad:8d:f1: 18:b4:b9:52:3a:ee:28:6e:02:95:bc:d8:83:4d:34: 5c:e1:06:14:e8:8d:ae:ce:b1:7b:97:15:87:1e:ce: 33:f2:64:0c:23:6b:98:e9:4f:5e:7c:48:e3:19:81: 80:de:5c:26:b8:7f:0c:c1:25:12:e7:40:13:39:64: b9:3e:11:95:53:52:e2:f3:60:49:ae:7f:60:70:6c: 89:b3:88:28:0f:56:4f:02:bb:72:ec:75:4c:b4:28: 9d:b6:97:31:d6:1c:6c:7d:68:b2:0f:8f:5a:06:d6: 6b:62:c8:df:3c:92:ef:48:ae:1f:d8:76:5a:50:37: 30:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:FA:4B:79:17:F9:8C:99:43:4B:C2:BD:62:F8:14:70:41:63:06:F1 X509v3 Authority Key Identifier: keyid:81:C9:4B:E9:98:EC:BD:D2:EF:89:7B:FE:8E:8E:51:B8:74:C0:A6:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:86:20:ce:36:e9:51:28:05:b5:14:df:ed:f4:aa:a7:66:c1: 57:f4:68:71:f0:a8:49:ff:d0:48:ec:8c:7a:af:98:cf:19:47: d1:d1:05:1f:44:20:e5:ab:95:ff:48:3c:fb:9f:7c:08:34:c2: f2:eb:72:d7:46:7d:5f:43:c4:12:46:cb:f6:6a:97:9e:21:fc: 80:2e:b7:12:66:af:4d:25:be:c7:d6:4a:a6:81:e8:b2:57:81: b3:d0:5f:4e:c2:f0:cc:91:90:3e:be:0f:3b:80:26:9d:18:34: 43:ad:d1:94:7f:69:68:5e:3d:01:88:ac:01:df:a5:29:70:6d: c7:27:e0:f5:e0:2f:a6:9f:6c:ae:bc:c5:61:18:09:14:6d:15: 52:e5:3f:3c:a4:a0:55:41:4d:d9:0f:34:66:54:72:fb:42:d4: 73:b3:af:64:67:22:70:d1:8a:16:dc:c6:c5:ac:36:ef:cf:3b: 4f:0f:30:0b:84:7e:8e:6f:f8:64:fb:45:25:f0:fb:d3:61:6a: 10:4b:17:f8:c0:ee:11:74:8f:ee:da:f8:70:85:0a:49:9c:1a: 3b:5b:05:e2:48:77:f7:86:18:a9:7c:16:9b:2a:f4:7c:77:db: fd:94:3e:1d:2a:db:c5:95:cc:92:7d:35:ae:03:77:e0:7a:df: 4f:aa:41:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJXVDBUb+sn+s+ZicSgWZaXh+O/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUxQjg3 NEMwQTY1MjAeFw0yNTA1MTIxOTM3MjVaFw0yNTA1MTUxOTU3MjVaMDMxMTAvBgNV BAMTKDI0RkE0Qjc5MTdGOThDOTk0MzRCQzJCRDYyRjgxNDcwNDE2MzA2RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr6bx6Z0dKdhArYdLlpejoZc+c nCjRQHm3UWm9P2imvC4IH7/qnezbVZoybXvnUAdpRaDkipea90xcJsB8XJJVu1dx OedlSV6x4/mQP+KZBmWOQTWZgQ41xwGeyBnkxE2Sb3vwuSpPyJAXWYjxn2kjwjHn A5zGE80Iub0D9kHdhPQ9Kq2N8Ri0uVI67ihuApW82INNNFzhBhToja7OsXuXFYce zjPyZAwja5jpT158SOMZgYDeXCa4fwzBJRLnQBM5ZLk+EZVTUuLzYEmuf2BwbImz iCgPVk8Cu3LsdUy0KJ22lzHWHGx9aLIPj1oG1mtiyN88ku9Irh/YdlpQNzAdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJPpLeRf5jJlDS8K9YvgUcEFjBvEwHwYDVR0j BBgwFoAUgclL6ZjsvdLviXv+jo5RuHTAplIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDIzNGQ1MC02N2UxLTQxOWMtODViYS02NGJhOGMxMTEyMjUvMC84MUM5NEJFOTk4 RUNCREQyRUY4OTdCRkU4RThFNTFCODc0QzBBNjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUxQjg3NEMw QTY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQyMzRkNTAtNjdlMS00MTljLTg1 YmEtNjRiYThjMTExMjI1LzAvODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUx Qjg3NEMwQTY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiGIM426VEoBbUU3+30qqdmwVf0aHHwqEn/ 0EjsjHqvmM8ZR9HRBR9EIOWrlf9IPPuffAg0wvLrctdGfV9DxBJGy/Zql54h/IAu txJmr00lvsfWSqaB6LJXgbPQX07C8MyRkD6+DzuAJp0YNEOt0ZR/aWhePQGIrAHf pSlwbccn4PXgL6afbK68xWEYCRRtFVLlPzykoFVBTdkPNGZUcvtC1HOzr2RnInDR ihbcxsWsNu/PO08PMAuEfo5v+GT7RSXw+9NhahBLF/jA7hF0j+7a+HCFCkmcGjtb BeJId/eGGKl8Fpsq9Hx32/2UPh0q28WVzJJ9Na4Dd+B630+qQR0= -----END CERTIFICATE-----Generated at Tue May 13 16:00:00 2025 by rpki-client