$ rpki-client -vvf repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft File: 81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft (raw, json) Hash identifier: GFFxHpR2VuyYlbTuwbSU2LULvOT0wgEtUJL5XrmXu6I= Subject key identifier: 11:4E:89:99:09:35:91:F0:AE:EE:57:65:9C:6A:07:A1:41:38:FA:80 Authority key identifier: 81:18:6C:06:63:42:A0:E6:6C:D1:92:1A:ED:B5:8A:8C:DD:EE:7E:45 Certificate issuer: /CN=81186C066342A0E66CD1921AEDB58A8CDDEE7E45 Certificate serial: 073DF44E2799AF3767A4B385E4A9E52D10D8A12D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft Manifest number: 04CF Signing time: Fri 09 May 2025 05:51:43 +0000 Manifest this update: Fri 09 May 2025 05:46:43 +0000 Manifest next update: Mon 12 May 2025 07:17:43 +0000 Files and hashes: 1: 3130332e3131362e3131322e302f32322d3232203d3e203234353332.roa (hash: P4tF/toC2yTvcWCVKc3kDK6iTGruhcVaRl9T+qXARgU=) 2: 81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl (hash: d9/EXdIbs/TIvaw4MHURIivPV2RMFlu3iB/skGYeY1M=) 3: 3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa (hash: tDwbS64GJLMjSrxPmtcS9jOCO+Z5cxTCif0yhGzEoUE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 07:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:3d:f4:4e:27:99:af:37:67:a4:b3:85:e4:a9:e5:2d:10:d8:a1:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81186C066342A0E66CD1921AEDB58A8CDDEE7E45 Validity Not Before: May 9 05:46:43 2025 GMT Not After : May 12 07:17:43 2025 GMT Subject: CN=114E8999093591F0AEEE57659C6A07A14138FA80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:04:76:af:15:c5:dc:26:a9:36:13:b7:bb:1a: db:34:55:35:d8:ca:3e:fd:17:47:5c:87:01:39:26: 2b:39:67:70:62:79:5d:1d:40:14:bb:df:79:94:ba: d1:c8:fd:c3:f9:a0:94:84:9b:77:c8:02:da:1b:ef: 59:16:39:ef:f0:b3:e0:ad:57:04:b6:cc:c0:c5:ce: ca:46:24:0e:73:7b:78:84:e2:1e:3a:3a:2a:93:fe: 59:ec:c2:03:89:47:40:71:15:db:84:1f:9e:09:cd: 02:84:11:f7:62:85:ca:ac:f2:d7:5a:69:bd:45:ed: 17:3f:8f:f9:b4:2d:66:51:94:39:2e:77:32:01:8e: 46:5c:23:d8:56:c3:4d:f0:32:90:fa:3f:23:87:f4: ba:7c:3a:55:55:b9:6e:92:80:0b:84:cf:82:c6:b0: 4f:ad:94:29:5f:87:cd:d9:02:e0:cc:8f:15:27:12: fa:0a:db:94:5a:4d:89:a5:4b:d7:14:1b:23:62:fd: 7c:bb:11:29:4b:a1:c5:51:13:bc:a6:52:df:f5:33: 7f:d4:0d:c6:5d:02:af:0e:bc:c4:b8:d6:d2:1e:4f: 95:3a:e6:ad:e7:08:c9:09:0e:40:ec:eb:6d:20:6b: b1:fc:bd:21:0f:31:b2:5c:83:4c:cf:b8:5d:ca:95: 62:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4E:89:99:09:35:91:F0:AE:EE:57:65:9C:6A:07:A1:41:38:FA:80 X509v3 Authority Key Identifier: keyid:81:18:6C:06:63:42:A0:E6:6C:D1:92:1A:ED:B5:8A:8C:DD:EE:7E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:6d:75:e7:66:c5:9e:34:fd:c1:03:1e:76:2e:5f:46:d4:50: 9f:ae:83:7f:02:6d:f9:75:f9:68:40:e6:ee:64:90:9e:5a:77: 06:d9:37:d3:ff:82:69:1c:5e:d2:f7:f3:e1:0e:f7:3e:99:32: ec:2a:48:10:ef:70:89:27:e4:9b:fa:34:e4:20:97:51:72:3a: 83:7b:a9:d5:2e:39:04:13:99:27:f8:b1:40:63:fb:b8:3a:98: 95:7e:35:d0:89:b9:75:8b:a5:83:8a:5c:65:d7:fc:cc:52:7a: 19:74:0c:58:36:ac:e4:2c:72:03:8c:85:b8:73:82:60:be:f2: 16:93:2a:41:ad:39:7e:bc:7b:eb:02:72:56:8f:ad:6a:83:11: 75:a3:22:e0:89:7b:e6:b6:54:31:c3:f1:30:f0:fa:48:4a:8d: 3e:22:86:af:e6:b3:5f:5b:d8:0d:f5:4f:7e:60:8d:b5:2b:1e: 11:57:5b:75:e6:44:1c:b9:c4:8b:cd:0d:fd:5e:4a:94:f3:4a: 05:61:d3:40:b4:ab:31:07:f8:79:c7:6e:b0:35:7f:a2:4f:b7: c5:ef:49:25:9d:ab:74:34:84:57:03:46:27:27:ba:c1:8b:f7: c7:a0:80:35:aa:30:89:f4:f6:ab:3a:c6:e5:ac:8d:08:2a:40: 73:11:5c:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBz30TieZrzdnpLOF5KnlLRDYoS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODExODZDMDY2MzQyQTBFNjZDRDE5MjFBRURCNThBOENE REVFN0U0NTAeFw0yNTA1MDkwNTQ2NDNaFw0yNTA1MTIwNzE3NDNaMDMxMTAvBgNV BAMTKDExNEU4OTk5MDkzNTkxRjBBRUVFNTc2NTlDNkEwN0ExNDEzOEZBODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoBHavFcXcJqk2E7e7Gts0VTXY yj79F0dchwE5Jis5Z3BieV0dQBS733mUutHI/cP5oJSEm3fIAtob71kWOe/ws+Ct VwS2zMDFzspGJA5ze3iE4h46OiqT/lnswgOJR0BxFduEH54JzQKEEfdihcqs8tda ab1F7Rc/j/m0LWZRlDkudzIBjkZcI9hWw03wMpD6PyOH9Lp8OlVVuW6SgAuEz4LG sE+tlClfh83ZAuDMjxUnEvoK25RaTYmlS9cUGyNi/Xy7ESlLocVRE7ymUt/1M3/U DcZdAq8OvMS41tIeT5U65q3nCMkJDkDs620ga7H8vSEPMbJcg0zPuF3KlWLRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEU6JmQk1kfCu7ldlnGoHoUE4+oAwHwYDVR0j BBgwFoAUgRhsBmNCoOZs0ZIa7bWKjN3ufkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjliZjc5Ny05MTNkLTQ4ZGQtODMyYy0zM2I0MDliNWY3OWIvMC84MTE4NkMwNjYz NDJBMEU2NkNEMTkyMUFFREI1OEE4Q0RERUU3RTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODExODZDMDY2MzQyQTBFNjZDRDE5MjFBRURCNThBOENEREVF N0U0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGY5YmY3OTctOTEzZC00OGRkLTgz MmMtMzNiNDA5YjVmNzliLzAvODExODZDMDY2MzQyQTBFNjZDRDE5MjFBRURCNThB OENEREVFN0U0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGttdedmxZ40/cEDHnYuX0bUUJ+ug38Cbfl1 +WhA5u5kkJ5adwbZN9P/gmkcXtL38+EO9z6ZMuwqSBDvcIkn5Jv6NOQgl1FyOoN7 qdUuOQQTmSf4sUBj+7g6mJV+NdCJuXWLpYOKXGXX/MxSehl0DFg2rOQscgOMhbhz gmC+8haTKkGtOX68e+sCclaPrWqDEXWjIuCJe+a2VDHD8TDw+khKjT4ihq/ms19b 2A31T35gjbUrHhFXW3XmRBy5xIvNDf1eSpTzSgVh00C0qzEH+HnHbrA1f6JPt8Xv SSWdq3Q0hFcDRicnusGL98eggDWqMIn09qs6xuWsjQgqQHMRXAI= -----END CERTIFICATE-----Generated at Sat May 10 16:53:54 2025 by rpki-client