$ rpki-client -vvf repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft File: 81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft (raw, json) Hash identifier: 9HB7IVt9XKUzCBiEqEwTxGA4Q73txGLeFphbtr20gbg= Subject key identifier: 4A:2F:A5:51:AA:35:B0:10:4E:4E:31:12:9F:1A:EE:06:B8:77:7B:DA Authority key identifier: 81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A Certificate issuer: /CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A Certificate serial: 5D32F8BF23500D73BCB289AFEE3444174DEC21F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft Manifest number: 0129 Signing time: Fri 22 Aug 2025 05:51:20 +0000 Manifest this update: Fri 22 Aug 2025 05:46:20 +0000 Manifest next update: Mon 25 Aug 2025 11:07:20 +0000 Files and hashes: 1: 3130332e39362e3134372e302f32342d3234203d3e20313430343536.roa (hash: g4rcVf7ze2gY12Fw+h+9x7JFApYwzpJ9iR8UsvjWBL0=) 2: 81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl (hash: opmjdA8PSseFmr50l2f1JSXSQuuMAxa9qiIYKQQxe2A=) 3: 3130332e39362e3134362e302f32342d3234203d3e20313430343536.roa (hash: lCXTJ163mYE14JSOHwn/GLmazHYII7eBmEeCYKd7cs8=) 4: 3130332e39362e3134362e302f32332d3233203d3e20313430343536.roa (hash: I90vNVHR98Ns9EbFWsBOyXpypkK4ezCBsQ4Nw555WdU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:32:f8:bf:23:50:0d:73:bc:b2:89:af:ee:34:44:17:4d:ec:21:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A Validity Not Before: Aug 22 05:46:20 2025 GMT Not After : Aug 25 11:07:20 2025 GMT Subject: CN=4A2FA551AA35B0104E4E31129F1AEE06B8777BDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:05:a1:c7:c5:5e:ec:7e:ae:ac:ce:21:71:a5: 21:71:05:a1:7b:8d:16:c8:f6:34:c9:e7:64:40:d3: a0:e5:00:c7:72:56:1c:3c:9f:72:e4:60:e6:0b:af: 7b:3f:93:15:38:56:96:c6:d7:b8:da:20:d7:ad:b3: 01:6c:47:ae:d9:9d:e5:ae:e4:73:bf:1d:bf:b1:5c: 98:89:2e:ad:4d:9e:2d:34:76:1b:58:9e:f4:ac:d8: d4:9f:9c:cf:5f:16:44:b1:b9:77:6b:93:93:58:87: b3:f2:04:6c:25:9b:e2:f0:d6:f3:67:e8:d8:a2:9a: 35:9f:a4:f1:f7:05:01:c3:1f:b3:b4:db:15:26:62: cb:a3:ed:8b:ba:03:7e:28:18:56:43:be:a5:6d:6a: 02:0d:34:92:f4:98:59:dd:dd:95:cc:4c:08:2a:79: 97:0d:bf:1b:4e:9b:71:c1:1f:93:ef:82:a8:89:0e: 1b:a9:0f:46:16:f6:c9:b4:f5:3c:68:11:d7:12:bf: 89:8b:bb:a3:48:a0:db:55:37:dd:8d:e5:ec:35:be: b5:f9:5b:be:cb:df:bb:c8:54:50:af:76:28:41:80: 81:d6:76:8c:c0:8b:ee:61:d8:2d:5d:6b:18:e5:41: 85:9c:5d:9a:91:8c:8c:7c:03:84:3b:de:0a:6c:02: f6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2F:A5:51:AA:35:B0:10:4E:4E:31:12:9F:1A:EE:06:B8:77:7B:DA X509v3 Authority Key Identifier: keyid:81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:9c:6c:8d:d5:ce:2a:59:e1:e6:61:0f:dc:16:87:7f:f7:c6: d1:d8:1e:61:a6:a6:6a:51:70:43:77:d7:aa:77:66:3e:97:06: 41:8f:cc:bb:a7:72:42:cb:2b:cc:b3:29:76:cc:3c:ca:f4:8d: 81:27:e3:be:de:d2:7f:77:fa:e3:c7:a5:40:5b:2d:b9:98:32: 36:ce:e8:cc:f5:f6:14:cd:09:ae:78:60:92:7d:15:ac:10:9e: e7:7d:c4:1a:50:ff:64:e7:cf:db:33:db:2f:a2:6e:c9:8a:f8: 84:33:fe:37:e2:25:23:59:41:2c:43:79:27:1f:30:39:21:db: bb:39:d9:c2:ea:33:f4:b7:9a:47:eb:e8:df:1e:38:35:ca:e7: 1b:c5:e2:cd:7a:50:3f:d6:a9:ed:45:e5:40:e6:92:6e:81:54: 62:34:47:a8:17:03:18:73:5f:ee:5c:50:fc:41:5b:37:38:35: d5:87:30:b4:d1:70:7e:8d:80:8c:81:1a:4d:ad:f3:4f:1a:ba: f7:2c:79:d9:b5:30:c2:d2:30:73:21:f5:a4:69:50:4c:2d:b6: ef:a1:7a:e1:42:f3:d2:ba:45:b9:f0:bf:4c:40:d5:87:6e:ec: 92:37:e3:a8:c6:46:d2:00:cc:90:fc:af:ed:08:13:9a:38:fd: 80:4c:6b:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXTL4vyNQDXO8somv7jREF03sIfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0QzZG QTJEQ0QwQTAeFw0yNTA4MjIwNTQ2MjBaFw0yNTA4MjUxMTA3MjBaMDMxMTAvBgNV BAMTKDRBMkZBNTUxQUEzNUIwMTA0RTRFMzExMjlGMUFFRTA2Qjg3NzdCREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClBaHHxV7sfq6sziFxpSFxBaF7 jRbI9jTJ52RA06DlAMdyVhw8n3LkYOYLr3s/kxU4VpbG17jaINetswFsR67ZneWu 5HO/Hb+xXJiJLq1Nni00dhtYnvSs2NSfnM9fFkSxuXdrk5NYh7PyBGwlm+Lw1vNn 6NiimjWfpPH3BQHDH7O02xUmYsuj7Yu6A34oGFZDvqVtagINNJL0mFnd3ZXMTAgq eZcNvxtOm3HBH5PvgqiJDhupD0YW9sm09TxoEdcSv4mLu6NIoNtVN92N5ew1vrX5 W77L37vIVFCvdihBgIHWdozAi+5h2C1daxjlQYWcXZqRjIx8A4Q73gpsAvY5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSi+lUao1sBBOTjESnxruBrh3e9owHwYDVR0j BBgwFoAUgcIDz0WOSKj/NF+0pd2ExvotzQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YTQ3NDZiNy01ZmYyLTQ1NTYtOGEzZS01YTg2Y2JjYzg1OTgvMC84MUMyMDNDRjQ1 OEU0OEE4RkYzNDVGQjRBNUREODRDNkZBMkRDRDBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0QzZGQTJE Q0QwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGE0NzQ2YjctNWZmMi00NTU2LThh M2UtNWE4NmNiY2M4NTk4LzAvODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0 QzZGQTJEQ0QwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWcbI3VzipZ4eZhD9wWh3/3xtHYHmGmpmpR cEN316p3Zj6XBkGPzLunckLLK8yzKXbMPMr0jYEn477e0n93+uPHpUBbLbmYMjbO 6Mz19hTNCa54YJJ9FawQnud9xBpQ/2Tnz9sz2y+ibsmK+IQz/jfiJSNZQSxDeScf MDkh27s52cLqM/S3mkfr6N8eODXK5xvF4s16UD/Wqe1F5UDmkm6BVGI0R6gXAxhz X+5cUPxBWzc4NdWHMLTRcH6NgIyBGk2t808auvcsedm1MMLSMHMh9aRpUEwttu+h euFC89K6Rbnwv0xA1Ydu7JI346jGRtIAzJD8r+0IE5o4/YBMa2k= -----END CERTIFICATE-----Generated at Sat Aug 23 12:23:09 2025 by rpki-client