$ rpki-client -vvf repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft File: 81498B85C0E2937290B9B2119B132DEADBB24A5C.mft (raw, json) Hash identifier: pwTt6T3EnUlb5vFwjUCOJ217I67wmVHLPNxm1bCjrog= Subject key identifier: 04:20:D4:56:74:96:1B:6A:E6:C9:EC:8C:80:07:60:54:FD:C2:7E:23 Authority key identifier: 81:49:8B:85:C0:E2:93:72:90:B9:B2:11:9B:13:2D:EA:DB:B2:4A:5C Certificate issuer: /CN=81498B85C0E2937290B9B2119B132DEADBB24A5C Certificate serial: 45AD8E7403321D6AD64370B889D1C4BBEDD14F94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft Manifest number: 01D4 Signing time: Tue 01 Jul 2025 22:50:53 +0000 Manifest this update: Tue 01 Jul 2025 22:45:53 +0000 Manifest next update: Sat 05 Jul 2025 05:12:53 +0000 Files and hashes: 1: 81498B85C0E2937290B9B2119B132DEADBB24A5C.crl (hash: L9AXJ/2Wp0n8mRXsjPlwKQlB6eUDvqgsL9QR2VsBy3A=) 2: 3130332e3135392e3232342e302f32332d3234203d3e20313431313437.roa (hash: 49uJeHF+k8HvLvLuvnXcFDfrAZMvN78Q5XdfyLfe2TU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.crl rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 05:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:ad:8e:74:03:32:1d:6a:d6:43:70:b8:89:d1:c4:bb:ed:d1:4f:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81498B85C0E2937290B9B2119B132DEADBB24A5C Validity Not Before: Jul 1 22:45:53 2025 GMT Not After : Jul 5 05:12:53 2025 GMT Subject: CN=0420D45674961B6AE6C9EC8C80076054FDC27E23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a2:1e:a0:a0:b4:bb:13:84:76:00:29:6e:52: 5e:e2:36:b9:26:80:db:7a:cc:1f:f9:9a:a5:e3:07: 26:a4:94:c6:26:e3:a1:82:08:c5:51:b7:01:83:33: d4:e9:e6:b2:ef:89:2e:06:7d:a3:50:67:ff:65:32: 70:4d:9d:17:0d:67:28:20:1e:d9:37:fd:23:9d:6c: 97:9d:fe:26:3a:83:b5:8e:8f:f9:c3:b1:1a:fc:82: 31:1e:ad:76:b6:b7:66:cb:76:7d:a3:69:fa:33:dd: 32:4f:8a:d4:43:60:f9:05:89:3e:4c:cd:e9:1a:a2: cd:96:e0:5a:13:9b:9b:20:7e:f9:f6:13:24:32:fc: 11:be:18:c1:42:7d:13:cc:e1:36:71:ff:be:33:3c: eb:1c:b4:0a:8b:b2:87:36:09:4b:37:ef:2c:91:70: b3:00:ac:ed:08:1d:29:cf:cd:20:86:96:ff:04:ef: 7d:06:9d:5a:e4:02:db:4d:a7:33:ee:d0:01:f9:16: bc:f7:e8:ed:b7:92:4c:e4:f0:4c:c6:eb:a9:5d:3a: b0:42:72:09:4a:a8:af:88:5c:d8:96:75:38:77:c7: 94:be:9d:ed:da:f4:e3:6c:d9:94:d0:28:23:69:cd: 9f:b4:37:e4:fd:f3:1a:5b:2d:ea:81:13:ff:56:32: b0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:20:D4:56:74:96:1B:6A:E6:C9:EC:8C:80:07:60:54:FD:C2:7E:23 X509v3 Authority Key Identifier: keyid:81:49:8B:85:C0:E2:93:72:90:B9:B2:11:9B:13:2D:EA:DB:B2:4A:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:2e:6d:0e:f8:54:18:e1:e8:45:f6:45:d4:3b:7a:26:e2:97: 8d:d5:bc:7c:0c:cb:68:7b:c5:03:31:4a:9a:d9:da:41:b0:c2: aa:63:83:d9:38:a8:56:04:42:dc:d5:74:96:43:0f:19:33:e1: 87:01:30:eb:0d:67:ce:ca:5f:f0:81:51:0d:ed:db:21:64:21: 53:98:c3:75:a4:a9:4a:e6:df:1a:fb:74:fc:65:a6:fa:ee:f3: 99:03:87:6a:74:ff:dc:79:9e:92:59:83:65:fb:ce:06:88:ae: 15:2d:a1:c0:65:91:c0:dd:28:3f:87:51:2a:3d:52:43:a8:2e: b9:22:46:8e:fa:ab:72:cb:fc:5c:a1:2f:f9:d0:ef:78:cc:e6: be:7c:a0:1b:89:af:82:80:45:ea:92:4c:a5:cf:9b:39:3f:64: 60:e6:2a:95:9b:6e:e1:d6:42:eb:bd:44:f6:73:fd:77:be:59: 68:ee:25:93:45:32:cf:bb:bd:2b:60:ea:e2:f1:59:92:31:dd: e5:c3:da:cc:31:10:09:79:0f:98:84:8f:dc:12:c1:5f:5a:01: 9f:25:3a:cd:ae:1a:85:ed:81:33:c0:86:89:42:38:bd:7a:12: 86:79:69:e7:57:10:5b:82:98:dc:03:5f:8f:3e:b8:56:87:a7: c7:57:c6:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURa2OdAMyHWrWQ3C4idHEu+3RT5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE0OThCODVDMEUyOTM3MjkwQjlCMjExOUIxMzJERUFE QkIyNEE1QzAeFw0yNTA3MDEyMjQ1NTNaFw0yNTA3MDUwNTEyNTNaMDMxMTAvBgNV BAMTKDA0MjBENDU2NzQ5NjFCNkFFNkM5RUM4QzgwMDc2MDU0RkRDMjdFMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDoh6goLS7E4R2ACluUl7iNrkm gNt6zB/5mqXjByaklMYm46GCCMVRtwGDM9Tp5rLviS4GfaNQZ/9lMnBNnRcNZygg Htk3/SOdbJed/iY6g7WOj/nDsRr8gjEerXa2t2bLdn2jafoz3TJPitRDYPkFiT5M zekaos2W4FoTm5sgfvn2EyQy/BG+GMFCfRPM4TZx/74zPOsctAqLsoc2CUs37yyR cLMArO0IHSnPzSCGlv8E730GnVrkAttNpzPu0AH5Frz36O23kkzk8EzG66ldOrBC cglKqK+IXNiWdTh3x5S+ne3a9ONs2ZTQKCNpzZ+0N+T98xpbLeqBE/9WMrApAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBCDUVnSWG2rmyeyMgAdgVP3CfiMwHwYDVR0j BBgwFoAUgUmLhcDik3KQubIRmxMt6tuySlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTQ4YjIyMi02ZGVkLTQyOGEtODg4Zi0xMDQ1NGIwODgwYzIvMC84MTQ5OEI4NUMw RTI5MzcyOTBCOUIyMTE5QjEzMkRFQURCQjI0QTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODE0OThCODVDMEUyOTM3MjkwQjlCMjExOUIxMzJERUFEQkIy NEE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGE0OGIyMjItNmRlZC00MjhhLTg4 OGYtMTA0NTRiMDg4MGMyLzAvODE0OThCODVDMEUyOTM3MjkwQjlCMjExOUIxMzJE RUFEQkIyNEE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYubQ74VBjh6EX2RdQ7eibil43VvHwMy2h7 xQMxSprZ2kGwwqpjg9k4qFYEQtzVdJZDDxkz4YcBMOsNZ87KX/CBUQ3t2yFkIVOY w3WkqUrm3xr7dPxlpvru85kDh2p0/9x5npJZg2X7zgaIrhUtocBlkcDdKD+HUSo9 UkOoLrkiRo76q3LL/FyhL/nQ73jM5r58oBuJr4KAReqSTKXPmzk/ZGDmKpWbbuHW Quu9RPZz/Xe+WWjuJZNFMs+7vStg6uLxWZIx3eXD2swxEAl5D5iEj9wSwV9aAZ8l Os2uGoXtgTPAholCOL16EoZ5aedXEFuCmNwDX48+uFaHp8dXxis= -----END CERTIFICATE-----Generated at Thu Jul 3 07:57:21 2025 by rpki-client