$ rpki-client -vvf repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft File: 81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft (raw, json) Hash identifier: u1LMLjp3MOUMr/TyEil8LPuZqZCnR6qvjBVwTMTPQgo= Subject key identifier: 77:BC:4F:A1:76:98:68:44:83:E9:F1:39:2F:08:60:FC:ED:3C:02:78 Authority key identifier: 81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A Certificate issuer: /CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A Certificate serial: 01E389C13338B287DF5A731FE7259E1C6BD68A70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft Manifest number: 0111 Signing time: Sun 29 Jun 2025 22:21:18 +0000 Manifest this update: Sun 29 Jun 2025 22:16:18 +0000 Manifest next update: Thu 03 Jul 2025 04:47:18 +0000 Files and hashes: 1: 3130332e39362e3134362e302f32342d3234203d3e20313430343536.roa (hash: lCXTJ163mYE14JSOHwn/GLmazHYII7eBmEeCYKd7cs8=) 2: 3130332e39362e3134372e302f32342d3234203d3e20313430343536.roa (hash: g4rcVf7ze2gY12Fw+h+9x7JFApYwzpJ9iR8UsvjWBL0=) 3: 81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl (hash: Pgfc0Y+mgfZZwL7FaehprdnCrLdCbVnXKuY+W+8rW78=) 4: 3130332e39362e3134362e302f32332d3233203d3e20313430343536.roa (hash: I90vNVHR98Ns9EbFWsBOyXpypkK4ezCBsQ4Nw555WdU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 04:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:e3:89:c1:33:38:b2:87:df:5a:73:1f:e7:25:9e:1c:6b:d6:8a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A Validity Not Before: Jun 29 22:16:18 2025 GMT Not After : Jul 3 04:47:18 2025 GMT Subject: CN=77BC4FA17698684483E9F1392F0860FCED3C0278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e9:8f:dc:a8:38:4f:d7:55:bd:90:0a:4c:6b: a8:50:3b:bf:ed:9b:c6:85:c1:84:66:dd:14:6a:81: 10:05:e4:78:ef:e8:c2:22:17:e8:ca:a7:ad:fb:55: ab:57:5e:57:12:32:41:ec:3a:59:42:a1:81:34:5f: e3:4f:c7:39:ea:da:11:48:6c:5a:e2:aa:b6:c3:db: 76:ab:2d:74:9f:bd:f0:7e:5f:fb:2f:4c:ba:d8:d1: 72:de:82:ef:80:48:b9:d8:34:f7:26:4e:96:40:cc: 7c:ca:69:dc:00:bd:29:8f:cf:55:4c:03:54:5c:fa: 33:9f:2a:eb:12:3a:b4:2b:61:98:28:b0:42:d4:87: 55:a2:be:e7:df:54:84:4d:86:6c:2c:aa:9f:27:48: 74:c1:06:67:6e:c6:6b:5c:8d:17:24:62:99:b9:a6: 6b:1b:e4:d2:19:f2:20:b1:c5:23:ec:39:d4:12:65: cb:78:d7:18:70:07:35:47:58:f5:a4:1c:42:be:e7: 67:5c:88:d4:f4:26:5f:46:b5:6b:ee:f5:fa:77:5d: 63:1e:ec:2a:1a:2d:a7:c9:2c:41:01:03:4e:d5:36: eb:8d:04:f0:71:a0:c4:c0:3c:93:e0:bd:57:b9:56: 1f:18:88:6d:1c:3c:82:2c:dd:aa:ee:25:4e:bc:b6: ed:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:BC:4F:A1:76:98:68:44:83:E9:F1:39:2F:08:60:FC:ED:3C:02:78 X509v3 Authority Key Identifier: keyid:81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:1a:5d:d5:40:63:9e:83:35:16:94:3c:9b:4c:ee:e3:5f:11: 21:06:4c:33:d6:9b:e5:cc:9c:5d:bc:70:7a:f3:bb:fd:ca:58: 03:b7:f6:7a:ec:a2:9d:f1:8c:96:f2:c9:50:a1:13:93:ba:ca: 8b:bf:bd:08:3f:62:e3:e6:ad:fc:d5:3d:9e:ef:d9:3c:9f:9e: 67:bd:54:03:9a:7d:fc:4c:09:16:16:f4:6c:b6:1f:d0:ee:ed: 86:2d:83:0d:ef:2a:c7:b5:f0:37:da:85:88:12:04:4c:82:b3: 1b:38:48:df:ba:8f:4d:08:e9:ce:9c:a9:0e:9a:c6:75:f0:31: 20:15:eb:82:13:9c:bd:70:4e:2b:60:cc:dd:1e:74:f4:20:6e: 86:8c:be:e5:64:52:04:b3:cd:42:60:af:c3:d6:ac:6a:7b:9f: 42:b8:7a:fc:a0:f2:1a:d7:bc:1a:f9:0e:c8:74:56:06:5a:d2: 88:10:c8:cc:dc:92:21:ad:03:93:3d:fd:be:59:96:da:00:28: c8:87:c7:c7:4f:6e:1c:d7:16:4a:04:10:f5:20:74:b4:47:f0: 55:3e:58:83:b6:3c:5a:8f:29:2d:8b:44:b4:40:34:b5:20:ea: 30:f6:52:f7:b2:28:21:82:e9:ae:fc:f5:f4:de:03:5b:7e:f4: ed:54:a1:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAeOJwTM4soffWnMf5yWeHGvWinAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0QzZG QTJEQ0QwQTAeFw0yNTA2MjkyMjE2MThaFw0yNTA3MDMwNDQ3MThaMDMxMTAvBgNV BAMTKDc3QkM0RkExNzY5ODY4NDQ4M0U5RjEzOTJGMDg2MEZDRUQzQzAyNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR6Y/cqDhP11W9kApMa6hQO7/t m8aFwYRm3RRqgRAF5Hjv6MIiF+jKp637VatXXlcSMkHsOllCoYE0X+NPxznq2hFI bFriqrbD23arLXSfvfB+X/svTLrY0XLegu+ASLnYNPcmTpZAzHzKadwAvSmPz1VM A1Rc+jOfKusSOrQrYZgosELUh1WivuffVIRNhmwsqp8nSHTBBmduxmtcjRckYpm5 pmsb5NIZ8iCxxSPsOdQSZct41xhwBzVHWPWkHEK+52dciNT0Jl9GtWvu9fp3XWMe 7CoaLafJLEEBA07VNuuNBPBxoMTAPJPgvVe5Vh8YiG0cPIIs3aruJU68tu2ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd7xPoXaYaESD6fE5Lwhg/O08AngwHwYDVR0j BBgwFoAUgcIDz0WOSKj/NF+0pd2ExvotzQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YTQ3NDZiNy01ZmYyLTQ1NTYtOGEzZS01YTg2Y2JjYzg1OTgvMC84MUMyMDNDRjQ1 OEU0OEE4RkYzNDVGQjRBNUREODRDNkZBMkRDRDBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0QzZGQTJE Q0QwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGE0NzQ2YjctNWZmMi00NTU2LThh M2UtNWE4NmNiY2M4NTk4LzAvODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0 QzZGQTJEQ0QwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8aXdVAY56DNRaUPJtM7uNfESEGTDPWm+XM nF28cHrzu/3KWAO39nrsop3xjJbyyVChE5O6you/vQg/YuPmrfzVPZ7v2Tyfnme9 VAOaffxMCRYW9Gy2H9Du7YYtgw3vKse18DfahYgSBEyCsxs4SN+6j00I6c6cqQ6a xnXwMSAV64ITnL1wTitgzN0edPQgboaMvuVkUgSzzUJgr8PWrGp7n0K4evyg8hrX vBr5Dsh0VgZa0ogQyMzckiGtA5M9/b5ZltoAKMiHx8dPbhzXFkoEEPUgdLRH8FU+ WIO2PFqPKS2LRLRANLUg6jD2UveyKCGC6a789fTeA1t+9O1UoeU= -----END CERTIFICATE-----Generated at Mon Jun 30 09:37:04 2025 by rpki-client