$ rpki-client -vvf repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft File: 581E644EEC44F9523CF189893E102BCC6008F9BE.mft (raw, json) Hash identifier: XeGcKHSJ7/t+qRaAAE0jw+gGzQozRmyYK3y8dIsnfyM= Subject key identifier: D1:49:6E:2D:7A:DB:FA:11:F9:99:EB:3C:47:BE:EB:E4:39:8B:EE:50 Authority key identifier: 58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE Certificate issuer: /CN=581E644EEC44F9523CF189893E102BCC6008F9BE Certificate serial: 1F9C1619AE7C2BC5F13F06E25E2EFA767C9BE3CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft Manifest number: 01B0 Signing time: Sun 29 Jun 2025 13:00:01 +0000 Manifest this update: Sun 29 Jun 2025 12:55:01 +0000 Manifest next update: Wed 02 Jul 2025 19:32:01 +0000 Files and hashes: 1: 581E644EEC44F9523CF189893E102BCC6008F9BE.crl (hash: Db02RGScpZXRuy3N3iDhlnQdPpWLTBSWPRvI1hiGANk=) 2: 3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa (hash: CD9wJONsaZwvJXuVX9EIASMR2Lv/jupr7Ncfz7emG/c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.crl rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 19:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:9c:16:19:ae:7c:2b:c5:f1:3f:06:e2:5e:2e:fa:76:7c:9b:e3:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=581E644EEC44F9523CF189893E102BCC6008F9BE Validity Not Before: Jun 29 12:55:01 2025 GMT Not After : Jul 2 19:32:01 2025 GMT Subject: CN=D1496E2D7ADBFA11F999EB3C47BEEBE4398BEE50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6a:4b:b3:12:28:23:54:7d:c5:a5:e2:6b:07: b9:dd:0a:37:46:6e:be:50:f7:81:77:61:49:23:1d: bd:bc:77:14:89:be:86:2c:9d:fd:a3:08:f3:2c:9a: 33:01:f7:d9:71:c5:42:c4:29:c7:e0:9b:a3:36:f1: 1d:63:72:01:f3:0b:2e:16:28:1e:db:31:2f:01:cb: 8f:f8:d0:c7:e2:b3:58:1f:4e:2b:b9:20:f9:57:ab: e8:bf:9d:61:de:cd:6a:27:08:ed:84:00:c2:54:ff: b2:d6:33:21:c1:46:66:2b:1a:c4:6b:83:52:ef:0d: a3:eb:08:4f:3b:e3:1e:cf:75:29:0a:fc:db:81:bd: 89:af:b7:85:8c:ae:10:61:a3:c1:12:a1:b3:31:43: cd:32:00:34:c2:de:82:d7:d5:71:fd:56:6d:14:fc: 92:a3:68:44:83:b1:8b:48:c0:ee:95:4d:53:6b:43: 17:51:07:fc:ef:db:7b:2b:f8:ed:3a:da:62:63:fe: b8:98:80:8b:92:73:50:9c:5f:43:8e:91:1b:1d:7c: f3:cf:70:cf:98:65:74:cb:fe:ca:4f:7c:c5:49:12: 6c:85:d2:12:bf:21:92:94:0e:f0:d2:18:01:69:c7: 9b:9c:74:23:3c:d4:64:51:16:04:05:14:36:6f:fe: a0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:49:6E:2D:7A:DB:FA:11:F9:99:EB:3C:47:BE:EB:E4:39:8B:EE:50 X509v3 Authority Key Identifier: keyid:58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:33:4d:e3:2e:3d:0f:7d:d7:b2:61:67:1c:92:2a:75:47:e3: 43:dc:88:2d:75:b0:0f:23:3d:ff:03:78:0f:8b:71:7a:89:b3: 87:74:08:cb:de:63:20:68:cf:90:e0:fc:ca:9e:10:dd:01:2e: b7:f4:fc:bb:2c:9d:c0:b4:95:3b:f0:95:08:f0:06:ad:6b:09: 09:0c:e8:19:49:e1:c7:75:78:cb:eb:e2:f3:35:72:98:bd:06: d5:ad:10:e4:93:6f:ea:96:13:c7:56:c0:f7:e6:76:ed:ee:f9: e9:49:cb:82:97:ce:9f:f9:7e:45:1e:90:e6:20:ff:78:7d:c5: fd:73:5e:9a:9c:2c:d9:b1:6a:65:f6:a7:dd:38:f7:6a:89:5c: ec:58:0e:29:d8:b1:30:af:04:51:a1:0e:bd:7b:94:61:3b:16: f8:bf:ec:7d:d4:e2:70:4f:77:98:77:b0:51:e1:82:69:5c:55: c8:6e:22:d8:55:cf:d2:34:8b:0b:7e:63:4f:71:75:2a:25:71: ea:f5:22:56:43:3b:b2:4e:7e:22:80:62:9c:b5:c1:1e:23:b4: 17:5b:14:a0:e8:8f:ca:52:ba:9a:dd:db:c1:d1:f0:e8:5e:30: 98:14:b2:8d:b6:07:8f:51:85:b8:74:3c:7c:bd:64:df:41:a9: b6:52:59:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH5wWGa58K8XxPwbiXi76dnyb488wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTgxRTY0NEVFQzQ0Rjk1MjNDRjE4OTg5M0UxMDJCQ0M2 MDA4RjlCRTAeFw0yNTA2MjkxMjU1MDFaFw0yNTA3MDIxOTMyMDFaMDMxMTAvBgNV BAMTKEQxNDk2RTJEN0FEQkZBMTFGOTk5RUIzQzQ3QkVFQkU0Mzk4QkVFNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEakuzEigjVH3FpeJrB7ndCjdG br5Q94F3YUkjHb28dxSJvoYsnf2jCPMsmjMB99lxxULEKcfgm6M28R1jcgHzCy4W KB7bMS8By4/40Mfis1gfTiu5IPlXq+i/nWHezWonCO2EAMJU/7LWMyHBRmYrGsRr g1LvDaPrCE874x7PdSkK/NuBvYmvt4WMrhBho8ESobMxQ80yADTC3oLX1XH9Vm0U /JKjaESDsYtIwO6VTVNrQxdRB/zv23sr+O062mJj/riYgIuSc1CcX0OOkRsdfPPP cM+YZXTL/spPfMVJEmyF0hK/IZKUDvDSGAFpx5ucdCM81GRRFgQFFDZv/qCtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0UluLXrb+hH5mes8R77r5DmL7lAwHwYDVR0j BBgwFoAUWB5kTuxE+VI88YmJPhArzGAI+b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Yjc5NDdhYS1jZTY5LTQwMTMtYTI1Ni01ODc5OWE1NjU4MWMvMC81ODFFNjQ0RUVD NDRGOTUyM0NGMTg5ODkzRTEwMkJDQzYwMDhGOUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTgxRTY0NEVFQzQ0Rjk1MjNDRjE4OTg5M0UxMDJCQ0M2MDA4 RjlCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3OTQ3YWEtY2U2OS00MDEzLWEy NTYtNTg3OTlhNTY1ODFjLzAvNTgxRTY0NEVFQzQ0Rjk1MjNDRjE4OTg5M0UxMDJC Q0M2MDA4RjlCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAzTeMuPQ9917JhZxySKnVH40PciC11sA8j Pf8DeA+LcXqJs4d0CMveYyBoz5Dg/MqeEN0BLrf0/LssncC0lTvwlQjwBq1rCQkM 6BlJ4cd1eMvr4vM1cpi9BtWtEOSTb+qWE8dWwPfmdu3u+elJy4KXzp/5fkUekOYg /3h9xf1zXpqcLNmxamX2p90492qJXOxYDinYsTCvBFGhDr17lGE7Fvi/7H3U4nBP d5h3sFHhgmlcVchuIthVz9I0iwt+Y09xdSolcer1IlZDO7JOfiKAYpy1wR4jtBdb FKDoj8pSuprd28HR8OheMJgUso22B49Rhbh0PHy9ZN9BqbZSWRM= -----END CERTIFICATE-----Generated at Mon Jun 30 19:00:38 2025 by rpki-client