$ rpki-client -vvf repo-rpki.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/80481D732EEF797A2712002607F81D7DAF1F1F60.mft File: 80481D732EEF797A2712002607F81D7DAF1F1F60.mft (raw, json) Hash identifier: 7A4CIdM+Rd4oKk//KBtFYxpGMh40G1ut6qmiJvyqI/c= Subject key identifier: 61:7A:FF:4E:2C:83:AA:5C:6A:6E:72:29:9F:65:16:70:BF:A1:6F:81 Authority key identifier: 80:48:1D:73:2E:EF:79:7A:27:12:00:26:07:F8:1D:7D:AF:1F:1F:60 Certificate issuer: /CN=80481D732EEF797A2712002607F81D7DAF1F1F60 Certificate serial: 5C585818CA8FC41413453B86CE6E9C7E3AA34B2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80481D732EEF797A2712002607F81D7DAF1F1F60.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/80481D732EEF797A2712002607F81D7DAF1F1F60.mft Manifest number: 01DF Signing time: Mon 30 Jun 2025 03:52:03 +0000 Manifest this update: Mon 30 Jun 2025 03:47:03 +0000 Manifest next update: Thu 03 Jul 2025 14:06:03 +0000 Files and hashes: 1: 3130332e36362e3139362e302f32322d3234203d3e20313331313131.roa (hash: H9yypLZLv8tpa7hHED33tyal4OpWf1DZSDERyCxUu54=) 2: 80481D732EEF797A2712002607F81D7DAF1F1F60.crl (hash: t+iERFyJ63P94kf8EjPmHUeis7rcRLRKSJhjhlYVhJM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/80481D732EEF797A2712002607F81D7DAF1F1F60.crl rsync://repo-rpki.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/80481D732EEF797A2712002607F81D7DAF1F1F60.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80481D732EEF797A2712002607F81D7DAF1F1F60.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 14:06:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:58:58:18:ca:8f:c4:14:13:45:3b:86:ce:6e:9c:7e:3a:a3:4b:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80481D732EEF797A2712002607F81D7DAF1F1F60 Validity Not Before: Jun 30 03:47:03 2025 GMT Not After : Jul 3 14:06:03 2025 GMT Subject: CN=617AFF4E2C83AA5C6A6E72299F651670BFA16F81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9c:b0:08:b7:fb:42:58:cd:0b:e7:78:e5:f8: 78:0d:c1:99:51:8d:fe:80:81:7f:4c:dd:c8:87:76: 06:3d:2f:8b:6e:d9:54:87:4d:fd:e7:3f:cb:5c:7d: 8a:06:60:43:d7:5e:96:ac:f6:d4:62:cd:76:21:e2: cf:27:18:26:8c:91:9f:b8:3d:ac:11:e7:ed:28:93: fd:ea:8e:3f:27:9d:2d:7d:83:85:8e:9d:70:c5:2f: 18:4e:33:f6:28:5e:d8:c7:82:63:c2:ea:4c:73:d0: a6:81:cf:4c:37:96:34:be:25:65:3d:7a:dd:f0:c8: f2:f1:ef:aa:87:cd:7e:2f:13:d5:7b:24:e2:b5:6c: a7:bf:c9:95:fd:0f:4d:22:91:bf:a0:96:8d:7f:1e: 5b:b0:7c:1a:c7:9f:4e:1d:94:7a:98:f3:d4:99:f6: 59:72:92:88:00:a8:e7:7a:0f:61:d3:70:ad:05:cf: 43:58:84:82:84:15:83:b6:da:32:dd:b2:52:30:9e: 2e:e1:9d:6a:71:c8:8a:98:90:be:ed:08:9b:f6:9d: 45:b6:1f:01:7f:bd:32:b6:6a:2b:b8:a4:fc:12:fc: 12:50:53:46:0d:ad:80:12:ab:60:0c:06:a3:ea:24: d3:6a:6f:ab:24:01:4b:d2:ca:0b:6a:26:a8:95:ea: b8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:7A:FF:4E:2C:83:AA:5C:6A:6E:72:29:9F:65:16:70:BF:A1:6F:81 X509v3 Authority Key Identifier: keyid:80:48:1D:73:2E:EF:79:7A:27:12:00:26:07:F8:1D:7D:AF:1F:1F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/80481D732EEF797A2712002607F81D7DAF1F1F60.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80481D732EEF797A2712002607F81D7DAF1F1F60.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/80481D732EEF797A2712002607F81D7DAF1F1F60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:b9:8f:eb:76:e6:1b:eb:8a:42:a7:88:3d:32:09:73:90:71: 10:a0:2c:54:84:71:3b:9a:83:49:61:00:d3:fe:a8:ed:12:a5: 89:2a:b1:d9:d2:31:78:e2:be:a6:2d:25:88:93:77:f9:2d:29: 60:98:de:dd:55:71:80:0e:fd:65:3e:79:9d:51:b8:4e:60:6e: 3a:eb:b8:bb:ce:fa:b4:9f:e7:07:29:50:dd:f2:95:fa:04:d3: b9:54:17:1a:47:ed:61:5f:b0:6f:2b:bf:d8:8d:5e:31:6c:f3: 8d:48:19:a1:80:7e:04:8d:3e:38:a3:a2:00:01:b3:bf:0f:eb: 6b:49:ae:0f:47:dd:98:1e:bd:ad:0b:96:cd:87:f0:18:4a:d2: e7:3d:be:7a:3e:89:df:b2:5d:7f:be:7e:de:e2:0e:84:7f:d1: 10:df:11:65:6b:14:8a:23:53:df:50:fd:60:fd:c2:a9:7d:46: 1b:94:5c:44:02:2b:64:bf:94:a3:6c:c8:cf:47:33:1c:25:8d: cf:97:4b:54:56:07:f2:21:2b:02:87:12:80:4b:d9:7d:e4:e2: e9:c3:6b:e3:a1:6a:17:da:f0:9d:7e:57:48:45:54:76:af:bb: c9:4d:66:69:f3:6d:9d:25:f3:5e:6e:d4:a6:39:bd:e5:33:9c: 1a:2c:66:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXFhYGMqPxBQTRTuGzm6cfjqjSywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA0ODFENzMyRUVGNzk3QTI3MTIwMDI2MDdGODFEN0RB RjFGMUY2MDAeFw0yNTA2MzAwMzQ3MDNaFw0yNTA3MDMxNDA2MDNaMDMxMTAvBgNV BAMTKDYxN0FGRjRFMkM4M0FBNUM2QTZFNzIyOTlGNjUxNjcwQkZBMTZGODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3nLAIt/tCWM0L53jl+HgNwZlR jf6AgX9M3ciHdgY9L4tu2VSHTf3nP8tcfYoGYEPXXpas9tRizXYh4s8nGCaMkZ+4 PawR5+0ok/3qjj8nnS19g4WOnXDFLxhOM/YoXtjHgmPC6kxz0KaBz0w3ljS+JWU9 et3wyPLx76qHzX4vE9V7JOK1bKe/yZX9D00ikb+glo1/HluwfBrHn04dlHqY89SZ 9llykogAqOd6D2HTcK0Fz0NYhIKEFYO22jLdslIwni7hnWpxyIqYkL7tCJv2nUW2 HwF/vTK2aiu4pPwS/BJQU0YNrYASq2AMBqPqJNNqb6skAUvSygtqJqiV6ri7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYXr/TiyDqlxqbnIpn2UWcL+hb4EwHwYDVR0j BBgwFoAUgEgdcy7veXonEgAmB/gdfa8fH2AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzdhN2ZhZC01NDQyLTRiYzQtYmMyZi0wYmY4YzIyNmQ5ZGIvMC84MDQ4MUQ3MzJF RUY3OTdBMjcxMjAwMjYwN0Y4MUQ3REFGMUYxRjYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA0ODFENzMyRUVGNzk3QTI3MTIwMDI2MDdGODFEN0RBRjFG MUY2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc3YTdmYWQtNTQ0Mi00YmM0LWJj MmYtMGJmOGMyMjZkOWRiLzAvODA0ODFENzMyRUVGNzk3QTI3MTIwMDI2MDdGODFE N0RBRjFGMUY2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIG5j+t25hvrikKniD0yCXOQcRCgLFSEcTua g0lhANP+qO0SpYkqsdnSMXjivqYtJYiTd/ktKWCY3t1VcYAO/WU+eZ1RuE5gbjrr uLvO+rSf5wcpUN3ylfoE07lUFxpH7WFfsG8rv9iNXjFs841IGaGAfgSNPjijogAB s78P62tJrg9H3Zgeva0Lls2H8BhK0uc9vno+id+yXX++ft7iDoR/0RDfEWVrFIoj U99Q/WD9wql9RhuUXEQCK2S/lKNsyM9HMxwljc+XS1RWB/IhKwKHEoBL2X3k4unD a+Ohahfa8J1+V0hFVHavu8lNZmnzbZ0l815u1KY5veUznBosZlE= -----END CERTIFICATE-----Generated at Mon Jun 30 13:34:38 2025 by rpki-client