$ rpki-client -vvf repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft File: 81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft (raw, json) Hash identifier: J2j7bv+9EtqohXyv5Ce+4NN8OylFECVX1vO/oAeC2L8= Subject key identifier: 30:B4:37:60:41:55:48:9A:AC:D6:F4:51:8E:40:42:68:7E:0E:AE:FC Authority key identifier: 81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A Certificate issuer: /CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A Certificate serial: 774A056A6B494241660A506DCD8EAEB6461EA7AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft Manifest number: FA Signing time: Fri 09 May 2025 03:11:18 +0000 Manifest this update: Fri 09 May 2025 03:06:18 +0000 Manifest next update: Mon 12 May 2025 13:10:18 +0000 Files and hashes: 1: 3130332e39362e3134372e302f32342d3234203d3e20313430343536.roa (hash: g4rcVf7ze2gY12Fw+h+9x7JFApYwzpJ9iR8UsvjWBL0=) 2: 3130332e39362e3134362e302f32332d3233203d3e20313430343536.roa (hash: I90vNVHR98Ns9EbFWsBOyXpypkK4ezCBsQ4Nw555WdU=) 3: 3130332e39362e3134362e302f32342d3234203d3e20313430343536.roa (hash: lCXTJ163mYE14JSOHwn/GLmazHYII7eBmEeCYKd7cs8=) 4: 81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl (hash: tMBIopPihkNU5yU31BxDoAKvADZoX5UyWg71222vrQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 13:10:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:4a:05:6a:6b:49:42:41:66:0a:50:6d:cd:8e:ae:b6:46:1e:a7:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A Validity Not Before: May 9 03:06:18 2025 GMT Not After : May 12 13:10:18 2025 GMT Subject: CN=30B437604155489AACD6F4518E4042687E0EAEFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e1:6b:d2:3b:af:21:2b:65:fa:ea:b5:df:8a: 6e:4d:c2:4e:bc:cd:24:bd:56:70:2f:6c:92:9b:56: 0f:f2:82:57:66:90:89:1d:40:bd:23:b5:6a:70:00: 45:d7:26:46:55:f4:af:ca:b6:bd:13:27:78:88:72: fb:fe:9f:ba:d5:ca:a8:d0:09:1c:13:9b:25:f3:67: 5f:fe:f9:b9:86:92:c8:5b:d0:e8:9b:1a:48:21:e4: 95:a8:6b:e7:4e:8f:53:7b:d5:49:2c:e8:1c:af:d7: 41:d3:28:24:9d:54:54:2a:b8:68:ba:ea:95:0d:8a: 54:6d:a0:9b:d2:29:2f:26:3f:0e:1e:0c:e9:4d:1b: 78:03:db:3f:41:c7:d9:6e:c5:ff:b9:0d:d9:b9:37: 8c:1b:ad:60:ed:d3:f2:80:5b:3e:50:78:bf:91:0b: 5c:99:2d:d2:8a:8f:9b:4e:8c:61:c3:6e:7e:5d:17: f1:87:61:b5:d4:c9:46:43:92:fa:ff:5f:56:9f:de: 0e:31:58:b5:a6:00:92:9f:cf:5b:9f:8d:6a:11:51: 99:7c:cc:43:a2:74:56:2e:3f:59:31:6e:2e:c4:4e: 6e:06:37:0c:20:6e:32:76:4b:88:b3:c1:5b:4b:ec: 8f:e5:bd:38:34:95:91:23:ef:3b:a5:cf:64:74:a7: e9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B4:37:60:41:55:48:9A:AC:D6:F4:51:8E:40:42:68:7E:0E:AE:FC X509v3 Authority Key Identifier: keyid:81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:9a:1f:c3:de:fe:d9:8a:c7:22:a6:dc:44:44:07:01:52:c8: 3f:bd:94:5f:91:66:cb:58:d8:db:1d:fb:02:40:d5:2b:67:6d: 40:54:46:dd:7e:4b:40:1a:83:15:99:46:68:eb:06:ec:68:7f: 14:06:21:f3:60:e7:d5:50:bb:ac:69:04:1b:71:06:11:5e:bd: c0:60:93:7b:79:d1:90:e1:27:60:52:f4:a7:e9:82:4f:e6:ec: 82:f2:e5:c0:4b:c2:ea:82:c4:39:6d:71:10:0f:92:a4:88:db: c3:ad:af:ee:77:87:40:c9:48:5b:bb:d5:02:21:c0:71:8a:00: 79:6b:c3:c6:71:f1:05:f8:51:9e:d3:89:7e:39:c2:47:ae:8a: 8d:bc:11:26:dd:30:52:2e:02:fd:d3:1f:32:93:30:de:ef:35: 2a:2e:0b:04:88:3a:40:aa:07:97:6c:12:46:83:03:2b:e7:19: 5a:37:50:dc:c4:42:2a:b6:fa:d5:34:b7:a4:a8:fe:40:56:81: be:b9:70:d9:dd:99:0d:1a:a4:a0:5d:e8:66:ed:24:fc:c2:ba: 1b:26:09:46:2e:b1:54:b6:6c:ea:4f:14:79:1d:59:7a:df:67: f4:9c:b1:b9:0c:4a:bd:12:5b:29:a0:58:30:be:5a:72:40:ad: 25:2c:04:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd0oFamtJQkFmClBtzY6utkYep68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0QzZG QTJEQ0QwQTAeFw0yNTA1MDkwMzA2MThaFw0yNTA1MTIxMzEwMThaMDMxMTAvBgNV BAMTKDMwQjQzNzYwNDE1NTQ4OUFBQ0Q2RjQ1MThFNDA0MjY4N0UwRUFFRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn4WvSO68hK2X66rXfim5Nwk68 zSS9VnAvbJKbVg/ygldmkIkdQL0jtWpwAEXXJkZV9K/Ktr0TJ3iIcvv+n7rVyqjQ CRwTmyXzZ1/++bmGkshb0OibGkgh5JWoa+dOj1N71Uks6Byv10HTKCSdVFQquGi6 6pUNilRtoJvSKS8mPw4eDOlNG3gD2z9Bx9luxf+5Ddm5N4wbrWDt0/KAWz5QeL+R C1yZLdKKj5tOjGHDbn5dF/GHYbXUyUZDkvr/X1af3g4xWLWmAJKfz1ufjWoRUZl8 zEOidFYuP1kxbi7ETm4GNwwgbjJ2S4izwVtL7I/lvTg0lZEj7zulz2R0p+k7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMLQ3YEFVSJqs1vRRjkBCaH4OrvwwHwYDVR0j BBgwFoAUgcIDz0WOSKj/NF+0pd2ExvotzQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YTQ3NDZiNy01ZmYyLTQ1NTYtOGEzZS01YTg2Y2JjYzg1OTgvMC84MUMyMDNDRjQ1 OEU0OEE4RkYzNDVGQjRBNUREODRDNkZBMkRDRDBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0QzZGQTJE Q0QwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGE0NzQ2YjctNWZmMi00NTU2LThh M2UtNWE4NmNiY2M4NTk4LzAvODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0 QzZGQTJEQ0QwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMCaH8Pe/tmKxyKm3EREBwFSyD+9lF+RZstY 2Nsd+wJA1StnbUBURt1+S0AagxWZRmjrBuxofxQGIfNg59VQu6xpBBtxBhFevcBg k3t50ZDhJ2BS9Kfpgk/m7ILy5cBLwuqCxDltcRAPkqSI28Otr+53h0DJSFu71QIh wHGKAHlrw8Zx8QX4UZ7TiX45wkeuio28ESbdMFIuAv3THzKTMN7vNSouCwSIOkCq B5dsEkaDAyvnGVo3UNzEQiq2+tU0t6So/kBWgb65cNndmQ0apKBd6GbtJPzCuhsm CUYusVS2bOpPFHkdWXrfZ/ScsbkMSr0SWymgWDC+WnJArSUsBB4= -----END CERTIFICATE-----Generated at Fri May 9 23:48:48 2025 by rpki-client