$ rpki-client -vvf repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft File: 81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft (raw, json) Hash identifier: EA73d6/tW9gbM8bQDP18gUEkG+P4LHrW3B4VHFoS6LA= Subject key identifier: B8:E0:D7:4E:C2:41:D8:6C:DB:CD:F5:43:BC:8F:4B:E7:AD:38:12:74 Authority key identifier: 81:18:6C:06:63:42:A0:E6:6C:D1:92:1A:ED:B5:8A:8C:DD:EE:7E:45 Certificate issuer: /CN=81186C066342A0E66CD1921AEDB58A8CDDEE7E45 Certificate serial: 683B07DC77CE58F908ABE6F21B9F224C26AAC53A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft Manifest number: 04E5 Signing time: Fri 27 Jun 2025 16:21:43 +0000 Manifest this update: Fri 27 Jun 2025 16:16:43 +0000 Manifest next update: Mon 30 Jun 2025 20:25:43 +0000 Files and hashes: 1: 3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa (hash: RbGIdOLWBU5xVV9K0LoZOkwEhMFKzskG/yrpat5y7rY=) 2: 81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl (hash: vhrpNrpPc0kdmgiX3lFTKr+TvI+wopKMshBZUUTQL68=) 3: 3130332e3131362e3131322e302f32322d3232203d3e203234353332.roa (hash: P4tF/toC2yTvcWCVKc3kDK6iTGruhcVaRl9T+qXARgU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 20:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:3b:07:dc:77:ce:58:f9:08:ab:e6:f2:1b:9f:22:4c:26:aa:c5:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81186C066342A0E66CD1921AEDB58A8CDDEE7E45 Validity Not Before: Jun 27 16:16:43 2025 GMT Not After : Jun 30 20:25:43 2025 GMT Subject: CN=B8E0D74EC241D86CDBCDF543BC8F4BE7AD381274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:fa:5e:07:df:7d:87:af:3f:47:18:3f:3d:38: 31:6f:94:0e:b3:ba:39:32:15:d8:f2:99:db:18:1d: f5:7a:68:e2:01:5f:45:6f:9f:0b:a7:24:c4:79:62: 33:c8:86:fb:f5:4a:40:c8:02:25:b6:c0:06:7e:96: 72:3b:29:1d:60:01:bb:c9:e9:cb:3d:1b:a1:5d:83: 6c:e9:d8:ee:94:3b:ba:b6:92:80:67:91:28:1c:35: 79:68:ac:36:86:a4:9f:9c:3d:11:0f:2e:db:d8:6e: dd:f3:2e:e3:b4:d9:57:c1:a8:44:55:a8:e6:51:4d: a3:0f:98:08:8b:73:69:6a:67:21:83:c9:68:ae:31: a7:1f:54:ae:c3:64:57:92:56:79:64:bd:d5:ea:ba: 73:d2:fa:1b:b1:62:96:a1:64:69:12:fc:63:53:e6: 23:e9:54:80:95:60:53:2d:68:2d:cd:0b:c9:5d:bc: 7e:76:09:54:c4:8f:e3:fc:4e:50:51:36:4b:20:58: 35:83:c8:16:3d:97:1f:e6:3b:d5:6c:4a:1c:d0:3c: 2c:59:8d:1a:02:69:16:65:b3:c1:59:11:ce:4e:94: bc:95:66:48:82:b4:39:df:e4:05:5c:d3:c8:bf:11: b9:b9:3b:bb:3e:3f:34:00:f0:4d:5b:d1:f4:00:b7: 7f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E0:D7:4E:C2:41:D8:6C:DB:CD:F5:43:BC:8F:4B:E7:AD:38:12:74 X509v3 Authority Key Identifier: keyid:81:18:6C:06:63:42:A0:E6:6C:D1:92:1A:ED:B5:8A:8C:DD:EE:7E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:cb:8a:54:3d:00:89:fe:27:c6:a8:b7:99:0d:c5:b1:f1:02: 92:ab:0a:ea:89:a7:60:66:f1:bf:5a:3f:44:6a:36:25:11:35: 89:f9:b4:06:9d:fc:31:31:ee:fe:8b:f8:1f:55:88:b6:4c:7d: 97:02:60:bb:cc:a0:aa:b3:0f:27:3c:b8:96:9a:e6:62:82:ef: 53:b2:ca:b6:f2:03:2b:e9:56:e3:04:77:40:f1:56:fe:e3:84: 90:76:dd:7f:1d:d3:46:f5:e3:ff:6a:05:56:b6:c1:24:7c:bc: 78:65:36:c2:0f:bd:4c:23:04:41:6a:07:75:cc:1b:be:d1:1c: d2:81:44:75:d0:41:a2:f3:b7:3f:73:18:a0:5a:1f:5e:3c:ef: cb:ce:1e:29:9f:a0:65:e8:d0:07:12:cd:51:41:5d:eb:e5:98: d9:c9:d8:56:6d:65:67:c8:d0:4f:77:1a:f7:8d:80:13:7a:c9: ac:c7:b1:63:81:c9:4d:39:47:9a:ed:db:ab:60:01:0d:87:cf: 9b:f6:fc:b7:7a:02:e5:01:e9:60:fa:24:9e:65:59:8a:ee:84: c4:e1:2f:11:39:8e:b4:9f:46:45:df:9e:17:40:78:6b:d9:1c: 8a:a3:da:b2:d8:41:da:e5:48:8a:c7:bb:e2:10:a6:c6:35:08: f0:aa:73:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaDsH3HfOWPkIq+byG58iTCaqxTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODExODZDMDY2MzQyQTBFNjZDRDE5MjFBRURCNThBOENE REVFN0U0NTAeFw0yNTA2MjcxNjE2NDNaFw0yNTA2MzAyMDI1NDNaMDMxMTAvBgNV BAMTKEI4RTBENzRFQzI0MUQ4NkNEQkNERjU0M0JDOEY0QkU3QUQzODEyNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq+l4H332Hrz9HGD89ODFvlA6z ujkyFdjymdsYHfV6aOIBX0VvnwunJMR5YjPIhvv1SkDIAiW2wAZ+lnI7KR1gAbvJ 6cs9G6Fdg2zp2O6UO7q2koBnkSgcNXlorDaGpJ+cPREPLtvYbt3zLuO02VfBqERV qOZRTaMPmAiLc2lqZyGDyWiuMacfVK7DZFeSVnlkvdXqunPS+huxYpahZGkS/GNT 5iPpVICVYFMtaC3NC8ldvH52CVTEj+P8TlBRNksgWDWDyBY9lx/mO9VsShzQPCxZ jRoCaRZls8FZEc5OlLyVZkiCtDnf5AVc08i/Ebm5O7s+PzQA8E1b0fQAt38JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuODXTsJB2GzbzfVDvI9L5604EnQwHwYDVR0j BBgwFoAUgRhsBmNCoOZs0ZIa7bWKjN3ufkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjliZjc5Ny05MTNkLTQ4ZGQtODMyYy0zM2I0MDliNWY3OWIvMC84MTE4NkMwNjYz NDJBMEU2NkNEMTkyMUFFREI1OEE4Q0RERUU3RTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODExODZDMDY2MzQyQTBFNjZDRDE5MjFBRURCNThBOENEREVF N0U0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGY5YmY3OTctOTEzZC00OGRkLTgz MmMtMzNiNDA5YjVmNzliLzAvODExODZDMDY2MzQyQTBFNjZDRDE5MjFBRURCNThB OENEREVFN0U0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjLilQ9AIn+J8aot5kNxbHxApKrCuqJp2Bm 8b9aP0RqNiURNYn5tAad/DEx7v6L+B9ViLZMfZcCYLvMoKqzDyc8uJaa5mKC71Oy yrbyAyvpVuMEd0DxVv7jhJB23X8d00b14/9qBVa2wSR8vHhlNsIPvUwjBEFqB3XM G77RHNKBRHXQQaLztz9zGKBaH14878vOHimfoGXo0AcSzVFBXevlmNnJ2FZtZWfI 0E93GveNgBN6yazHsWOByU05R5rt26tgAQ2Hz5v2/Ld6AuUB6WD6JJ5lWYruhMTh LxE5jrSfRkXfnhdAeGvZHIqj2rLYQdrlSIrHu+IQpsY1CPCqc34= -----END CERTIFICATE-----Generated at Sun Jun 29 18:09:09 2025 by rpki-client