$ rpki-client -vvf repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft File: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft (raw, json) Hash identifier: 07TVTHiSa65ijmzFi97uFqiUFkiN+ncONSjEQ2aXUYk= Subject key identifier: 0E:44:92:69:13:A9:04:A1:7C:9B:20:61:26:20:74:82:D0:73:83:7C Authority key identifier: 80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 Certificate issuer: /CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Certificate serial: 09E54B149C3C8AEE0E5A235849726E6F5A23250A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft Manifest number: 8A Signing time: Sat 28 Jun 2025 05:51:07 +0000 Manifest this update: Sat 28 Jun 2025 05:46:07 +0000 Manifest next update: Tue 01 Jul 2025 06:03:07 +0000 Files and hashes: 1: 3130332e36322e3230322e302f32332d3233203d3e203633383833.roa (hash: yxxXXRwK7yFLR89I5uMrJEdDWAqzJPaOalUN3EScIQ0=) 2: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl (hash: CoERmbVBmRAUrmDfaBA2anQGsB8479vL8kIwKXnhzZM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 06:03:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:e5:4b:14:9c:3c:8a:ee:0e:5a:23:58:49:72:6e:6f:5a:23:25:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Validity Not Before: Jun 28 05:46:07 2025 GMT Not After : Jul 1 06:03:07 2025 GMT Subject: CN=0E44926913A904A17C9B206126207482D073837C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:29:ee:8c:98:70:63:f8:21:3a:66:79:aa:ff: c4:88:26:9e:48:ab:78:d0:0a:f8:c3:81:31:02:6e: 26:7e:6b:7c:aa:23:9a:a4:40:10:47:ff:7f:d4:83: d3:88:39:dc:8f:13:e9:d1:81:53:97:12:45:cc:05: 16:01:b0:7c:82:a9:72:d8:da:a2:55:75:f3:1f:b6: d6:a3:83:33:0b:11:e3:1a:89:8b:a3:5a:82:d7:e8: ee:f5:24:33:a3:04:91:d0:05:6d:83:b1:a3:ef:b0: f6:eb:2e:8d:ec:4e:f7:96:ac:7a:5b:da:84:32:47: a3:37:4a:a7:c4:81:c1:74:ee:44:2f:24:e4:11:64: 05:08:7b:54:a4:87:1f:20:91:d5:de:00:7d:ea:65: d8:38:a9:90:6e:3e:1c:ed:e9:1b:a2:f8:04:a5:bf: 19:b3:40:d9:6b:e0:d5:2a:c2:c2:77:80:ef:a1:cb: 93:60:e6:23:9b:c9:ef:ce:bb:6c:78:59:a1:5e:78: 26:5f:71:14:02:6b:c8:de:de:8f:7e:4e:06:4d:50: dd:a5:a0:a3:c1:49:ce:5a:0e:e4:7d:bf:82:c8:c6: ae:ee:fc:7a:ee:eb:e0:b1:47:b9:91:e7:d2:6f:bc: cd:dd:0b:59:42:a5:0a:a7:f8:80:77:f9:11:83:db: 51:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:44:92:69:13:A9:04:A1:7C:9B:20:61:26:20:74:82:D0:73:83:7C X509v3 Authority Key Identifier: keyid:80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:df:b2:b0:d4:e4:a0:a0:e3:36:e2:ce:ab:d9:c6:4d:eb:5e: 0d:08:c0:92:2e:db:fb:54:00:48:da:64:ff:d1:ff:65:75:76: 64:4f:ed:87:57:5c:97:0f:09:d2:10:5c:ab:fa:a0:80:20:ae: b0:7f:6d:13:f0:95:00:2e:cc:5b:ca:b5:a3:ad:64:ce:5c:c0: 42:c3:bd:01:d5:8f:1a:4f:2e:88:2c:20:22:55:ca:05:6f:0f: d9:10:16:42:b0:db:d9:fd:a0:d8:45:b0:73:ea:0b:cf:92:b3: da:4b:2f:5d:13:2b:36:ed:83:b6:c5:ed:a9:07:8f:d6:be:c3: e7:45:87:55:84:d6:21:4d:a2:16:7d:42:14:4a:3f:d4:83:05: 24:2f:10:82:18:d4:59:c7:52:a3:9d:c5:e3:6c:39:71:64:ce: 7c:ac:02:9e:96:ad:56:74:95:d4:db:c3:ae:31:df:d4:c7:3a: 6d:60:19:63:fc:75:5a:fb:7f:0b:a5:00:89:7c:f0:82:83:a0: 1f:50:99:b0:21:0a:60:26:f2:36:98:65:de:58:b6:3d:1e:96: a8:f5:75:92:24:b5:73:34:2e:f9:60:d0:8a:a5:f0:97:a7:d7: 84:45:dd:d3:9d:51:a6:41:46:e9:92:32:77:4c:38:42:34:43: e8:d3:b6:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCeVLFJw8iu4OWiNYSXJub1ojJQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVG M0EyNzJFNTAeFw0yNTA2MjgwNTQ2MDdaFw0yNTA3MDEwNjAzMDdaMDMxMTAvBgNV BAMTKDBFNDQ5MjY5MTNBOTA0QTE3QzlCMjA2MTI2MjA3NDgyRDA3MzgzN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOKe6MmHBj+CE6Znmq/8SIJp5I q3jQCvjDgTECbiZ+a3yqI5qkQBBH/3/Ug9OIOdyPE+nRgVOXEkXMBRYBsHyCqXLY 2qJVdfMfttajgzMLEeMaiYujWoLX6O71JDOjBJHQBW2DsaPvsPbrLo3sTveWrHpb 2oQyR6M3SqfEgcF07kQvJOQRZAUIe1Skhx8gkdXeAH3qZdg4qZBuPhzt6Rui+ASl vxmzQNlr4NUqwsJ3gO+hy5Ng5iObye/Ou2x4WaFeeCZfcRQCa8je3o9+TgZNUN2l oKPBSc5aDuR9v4LIxq7u/Hru6+CxR7mR59JvvM3dC1lCpQqn+IB3+RGD21EJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDkSSaROpBKF8myBhJiB0gtBzg3wwHwYDVR0j BBgwFoAUgJmRdHUBo81YpDiorf/NnvOicuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODFmNDRhYS04OWEzLTRiYzMtYmIyOS1kYjZjOTgyYTEzNmIvMC84MDk5OTE3NDc1 MDFBM0NENThBNDM4QThBREZGQ0Q5RUYzQTI3MkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVGM0Ey NzJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgxZjQ0YWEtODlhMy00YmMzLWJi MjktZGI2Yzk4MmExMzZiLzAvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNE OUVGM0EyNzJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbfsrDU5KCg4zbizqvZxk3rXg0IwJIu2/tU AEjaZP/R/2V1dmRP7YdXXJcPCdIQXKv6oIAgrrB/bRPwlQAuzFvKtaOtZM5cwELD vQHVjxpPLogsICJVygVvD9kQFkKw29n9oNhFsHPqC8+Ss9pLL10TKzbtg7bF7akH j9a+w+dFh1WE1iFNohZ9QhRKP9SDBSQvEIIY1FnHUqOdxeNsOXFkznysAp6WrVZ0 ldTbw64x39THOm1gGWP8dVr7fwulAIl88IKDoB9QmbAhCmAm8jaYZd5Ytj0elqj1 dZIktXM0Lvlg0Iql8Jen14RF3dOdUaZBRumSMndMOEI0Q+jTtpY= -----END CERTIFICATE-----Generated at Sun Jun 29 18:10:21 2025 by rpki-client