$ rpki-client -vvf repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft File: 809C666CC84F942588E109E6E6C454A9CD0524EB.mft (raw, json) Hash identifier: pK9HLbzj17EJGeUQ1Tq+dMlEkKYMefwz+EAbpGfVwNk= Subject key identifier: B3:18:40:22:2F:71:E3:D8:D5:BB:D1:4C:C9:59:B1:AC:54:AC:C3:03 Authority key identifier: 80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB Certificate issuer: /CN=809C666CC84F942588E109E6E6C454A9CD0524EB Certificate serial: 1EC74D316DA1D42F41D8426E65DE83FC37FD79A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft Manifest number: 01D2 Signing time: Sat 28 Jun 2025 20:50:47 +0000 Manifest this update: Sat 28 Jun 2025 20:45:47 +0000 Manifest next update: Wed 02 Jul 2025 05:02:47 +0000 Files and hashes: 1: 809C666CC84F942588E109E6E6C454A9CD0524EB.crl (hash: 4Xg2hacXf+iQKdF7/uX037T0EG7wFlfHzuc6Rne151I=) 2: 3130332e3133312e36312e302f32342d3234203d3e20313338313236.roa (hash: AvZCtYXnhv2U+FmAw+wE/XOaPxSITmQuNQusEE4Cu6A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.crl rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 05:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:c7:4d:31:6d:a1:d4:2f:41:d8:42:6e:65:de:83:fc:37:fd:79:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=809C666CC84F942588E109E6E6C454A9CD0524EB Validity Not Before: Jun 28 20:45:47 2025 GMT Not After : Jul 2 05:02:47 2025 GMT Subject: CN=B31840222F71E3D8D5BBD14CC959B1AC54ACC303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d1:14:12:86:d8:ce:bd:6d:da:1f:f5:dd:64: 69:14:8b:22:f3:fa:6c:6a:9a:76:c4:a1:70:06:87: 40:e2:a9:f5:17:9e:69:72:23:27:bf:22:e8:ed:52: cf:17:6d:01:2d:06:29:a5:6e:e1:c1:f8:7a:28:a7: 1c:41:a4:1a:a8:ee:f5:cb:f4:a9:8b:fa:eb:e0:19: a0:84:40:1f:18:a3:c8:fc:2e:ff:85:1a:e7:8e:d3: 8a:a7:2e:30:be:0e:4e:3f:46:f5:cf:73:67:40:77: e3:1d:44:0d:72:47:59:59:3c:67:ba:3a:21:af:7d: de:d2:cd:5f:49:9a:7b:3a:4d:3b:8a:86:9c:da:fa: 09:e4:05:75:90:38:65:12:e2:c3:e4:e0:a2:8a:b7: bd:d0:fa:f6:37:fe:29:a6:e0:8b:a7:50:fa:b6:25: 7e:c6:79:26:4f:10:ab:a2:45:70:ce:4a:7c:21:bb: 96:a9:b2:7a:2f:19:17:fb:04:32:8b:b8:eb:1d:61: 03:17:e1:4b:64:bb:65:b2:64:41:f8:8c:21:d2:f7: 1c:54:84:67:ed:de:2f:da:55:64:7a:fa:36:74:d1: de:e9:b0:da:0d:29:7f:9c:34:38:c0:ad:98:bb:6a: 3b:20:d5:cd:c9:8f:0a:2f:63:7e:5f:70:d8:4a:aa: b6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:18:40:22:2F:71:E3:D8:D5:BB:D1:4C:C9:59:B1:AC:54:AC:C3:03 X509v3 Authority Key Identifier: keyid:80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:78:a5:af:dc:27:24:59:8a:84:91:59:62:23:f2:39:77:79: 3e:0d:9f:cb:0b:4e:e1:22:43:c4:92:ab:be:48:28:74:43:52: e9:cb:c0:6d:1a:96:d0:45:4f:b0:e1:d4:c3:8f:8b:dd:fe:44: de:e4:dc:0e:8e:91:e9:5a:68:22:56:6d:56:5a:7b:5f:28:a2: a9:35:81:56:45:29:93:27:59:c1:8f:53:ae:4f:2c:38:43:1f: 03:6d:36:fe:e4:a3:ed:3e:c2:3f:2c:8d:57:fa:b7:12:86:68: 7b:46:b1:50:60:d5:a6:dd:3c:e3:52:52:f2:56:16:ba:67:92: f7:64:aa:24:85:5f:9f:18:6d:52:fb:9c:7d:0c:7c:d1:5c:fd: b2:ad:dc:34:93:22:4c:82:42:5f:2b:2f:72:44:50:4e:aa:ce: 79:5f:f2:63:67:9c:a9:d0:cb:fc:a4:8f:58:ff:dc:12:a5:bf: af:31:37:17:d8:ae:a3:7b:b5:0f:00:9f:c8:57:5b:a8:ef:12: 71:c4:14:c8:58:bb:0e:1a:06:02:e1:4a:9e:7b:dc:54:58:9b: 48:78:19:02:9f:30:20:77:3e:8a:d1:0e:c6:a4:20:f2:cf:4f: ba:c2:36:f4:45:79:2d:9c:c2:a5:0f:38:08:8c:0a:e5:99:37: 22:4b:15:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHsdNMW2h1C9B2EJuZd6D/Df9eaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0QTlD RDA1MjRFQjAeFw0yNTA2MjgyMDQ1NDdaFw0yNTA3MDIwNTAyNDdaMDMxMTAvBgNV BAMTKEIzMTg0MDIyMkY3MUUzRDhENUJCRDE0Q0M5NTlCMUFDNTRBQ0MzMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx0RQShtjOvW3aH/XdZGkUiyLz +mxqmnbEoXAGh0DiqfUXnmlyIye/IujtUs8XbQEtBimlbuHB+HoopxxBpBqo7vXL 9KmL+uvgGaCEQB8Yo8j8Lv+FGueO04qnLjC+Dk4/RvXPc2dAd+MdRA1yR1lZPGe6 OiGvfd7SzV9Jmns6TTuKhpza+gnkBXWQOGUS4sPk4KKKt73Q+vY3/imm4IunUPq2 JX7GeSZPEKuiRXDOSnwhu5apsnovGRf7BDKLuOsdYQMX4Utku2WyZEH4jCHS9xxU hGft3i/aVWR6+jZ00d7psNoNKX+cNDjArZi7ajsg1c3JjwovY35fcNhKqrY5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsxhAIi9x49jVu9FMyVmxrFSswwMwHwYDVR0j BBgwFoAUgJxmbMhPlCWI4Qnm5sRUqc0FJOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmQ1NzIwMS03ZTJmLTQ5YmItOTQxZC05ZmNhYmU4NjIzZjUvMC84MDlDNjY2Q0M4 NEY5NDI1ODhFMTA5RTZFNkM0NTRBOUNEMDUyNEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0QTlDRDA1 MjRFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkNTcyMDEtN2UyZi00OWJiLTk0 MWQtOWZjYWJlODYyM2Y1LzAvODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0 QTlDRDA1MjRFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFV4pa/cJyRZioSRWWIj8jl3eT4Nn8sLTuEi Q8SSq75IKHRDUunLwG0altBFT7Dh1MOPi93+RN7k3A6OkelaaCJWbVZae18ooqk1 gVZFKZMnWcGPU65PLDhDHwNtNv7ko+0+wj8sjVf6txKGaHtGsVBg1abdPONSUvJW FrpnkvdkqiSFX58YbVL7nH0MfNFc/bKt3DSTIkyCQl8rL3JEUE6qznlf8mNnnKnQ y/ykj1j/3BKlv68xNxfYrqN7tQ8An8hXW6jvEnHEFMhYuw4aBgLhSp573FRYm0h4 GQKfMCB3PorRDsakIPLPT7rCNvRFeS2cwqUPOAiMCuWZNyJLFa0= -----END CERTIFICATE-----Generated at Mon Jun 30 16:32:05 2025 by rpki-client