$ rpki-client -vvf repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft File: 809C666CC84F942588E109E6E6C454A9CD0524EB.mft (raw, json) Hash identifier: Ps+MoQMiE8oO7zltkN2DlDM/Wt6nRlCRux1vg17bJN4= Subject key identifier: E1:40:2B:5B:23:2A:37:57:B5:C7:81:6A:54:22:60:DE:12:3B:1C:17 Authority key identifier: 80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB Certificate issuer: /CN=809C666CC84F942588E109E6E6C454A9CD0524EB Certificate serial: 183BF019F89ABC971D495A082B3DD1A033FFC205 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft Manifest number: 01DC Signing time: Sun 20 Jul 2025 11:00:44 +0000 Manifest this update: Sun 20 Jul 2025 10:55:44 +0000 Manifest next update: Wed 23 Jul 2025 12:24:44 +0000 Files and hashes: 1: 809C666CC84F942588E109E6E6C454A9CD0524EB.crl (hash: DVlrr2/GmyPAKf8kAB8Kr5anuTwBENQbaDxnR4FPrm4=) 2: 3130332e3133312e36312e302f32342d3234203d3e20313338313236.roa (hash: AvZCtYXnhv2U+FmAw+wE/XOaPxSITmQuNQusEE4Cu6A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.crl rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 12:24:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:3b:f0:19:f8:9a:bc:97:1d:49:5a:08:2b:3d:d1:a0:33:ff:c2:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=809C666CC84F942588E109E6E6C454A9CD0524EB Validity Not Before: Jul 20 10:55:44 2025 GMT Not After : Jul 23 12:24:44 2025 GMT Subject: CN=E1402B5B232A3757B5C7816A542260DE123B1C17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a3:c2:6e:b7:03:82:80:e3:11:8d:cd:9a:9f: 6e:ec:8e:f5:c7:0f:09:02:63:d3:0b:80:db:fc:10: ad:bd:67:73:91:b9:fe:43:a4:3d:7c:11:6d:d8:fa: 7d:2f:f4:c6:af:52:80:3e:45:f6:52:d2:0b:bf:33: 55:3e:b5:29:6b:1b:39:01:fe:b1:1e:97:21:28:b4: 73:44:46:71:40:59:46:2c:82:23:61:49:4f:60:24: 75:ca:d9:d8:0f:4b:a8:5f:69:5d:aa:18:fb:96:5d: b6:ec:af:a8:4f:51:89:81:fc:e9:32:6c:95:bf:a1: f8:39:ac:7d:97:65:0f:87:b7:ec:f0:f9:a2:a5:2b: f5:a3:fd:5a:ce:9a:e7:0c:a5:2e:7e:4f:06:04:d9: 5e:36:bd:68:e7:79:bc:ff:c0:ec:99:62:3f:33:bd: e1:cb:d4:3a:7c:55:2c:c5:d2:9a:8d:b3:88:f6:0c: 5b:c9:9f:21:92:22:02:1f:81:71:d1:ec:9f:31:a2: 7d:af:8c:53:7c:ac:da:9c:a6:46:5e:1f:ee:ca:fe: a7:52:f9:10:26:d8:b5:7d:8a:d4:c3:3d:a8:72:e0: cd:45:19:0c:f6:34:f9:83:51:94:66:9b:c9:4d:42: 80:d3:6a:0a:33:49:eb:cf:bc:2e:cd:ed:f2:af:b8: 4a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:40:2B:5B:23:2A:37:57:B5:C7:81:6A:54:22:60:DE:12:3B:1C:17 X509v3 Authority Key Identifier: keyid:80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:21:c4:23:90:c6:56:60:5c:5f:cb:e9:37:82:c9:8a:48:6a: c6:ef:d5:93:6e:01:f6:7d:6d:61:34:fb:bf:d8:fd:8f:cf:7b: 29:5c:19:e4:e4:5b:0e:2c:c9:e4:1c:9e:ba:0e:39:ad:9b:79: 33:fb:f1:3f:5a:5d:b7:15:59:ae:08:f8:50:d5:05:0a:90:94: cf:ff:80:12:ad:27:b2:6f:c0:a6:c4:f8:41:40:3d:93:bb:b2: 25:ea:a5:35:36:02:65:36:61:21:21:a0:62:86:26:b5:1a:fc: 91:ff:e3:77:8c:2d:88:29:81:d0:63:39:d6:54:bc:e8:a9:94: e9:69:94:51:e4:52:43:f2:9b:5d:91:db:98:01:a9:f7:25:7d: bf:fb:cd:83:7d:07:09:69:06:22:31:e1:ae:fe:8d:98:7b:72: 04:ad:e0:9a:73:eb:ef:75:10:87:a7:a5:31:33:8b:30:96:96: 04:7d:de:02:e5:02:63:e9:62:e0:7e:61:04:c8:de:9a:7e:9d: c2:99:6a:52:00:8a:49:f7:0a:69:6d:75:55:6b:5a:b2:fa:60: 06:45:42:c4:b2:f7:d0:d3:74:11:aa:0e:8f:f7:62:9f:dc:05: 97:09:76:df:26:0c:12:5d:d3:2e:93:cb:bb:83:9f:0b:8c:0e: 66:80:92:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGDvwGfiavJcdSVoIKz3RoDP/wgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0QTlD RDA1MjRFQjAeFw0yNTA3MjAxMDU1NDRaFw0yNTA3MjMxMjI0NDRaMDMxMTAvBgNV BAMTKEUxNDAyQjVCMjMyQTM3NTdCNUM3ODE2QTU0MjI2MERFMTIzQjFDMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxo8JutwOCgOMRjc2an27sjvXH DwkCY9MLgNv8EK29Z3ORuf5DpD18EW3Y+n0v9MavUoA+RfZS0gu/M1U+tSlrGzkB /rEelyEotHNERnFAWUYsgiNhSU9gJHXK2dgPS6hfaV2qGPuWXbbsr6hPUYmB/Oky bJW/ofg5rH2XZQ+Ht+zw+aKlK/Wj/VrOmucMpS5+TwYE2V42vWjnebz/wOyZYj8z veHL1Dp8VSzF0pqNs4j2DFvJnyGSIgIfgXHR7J8xon2vjFN8rNqcpkZeH+7K/qdS +RAm2LV9itTDPahy4M1FGQz2NPmDUZRmm8lNQoDTagozSevPvC7N7fKvuErXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4UArWyMqN1e1x4FqVCJg3hI7HBcwHwYDVR0j BBgwFoAUgJxmbMhPlCWI4Qnm5sRUqc0FJOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmQ1NzIwMS03ZTJmLTQ5YmItOTQxZC05ZmNhYmU4NjIzZjUvMC84MDlDNjY2Q0M4 NEY5NDI1ODhFMTA5RTZFNkM0NTRBOUNEMDUyNEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0QTlDRDA1 MjRFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkNTcyMDEtN2UyZi00OWJiLTk0 MWQtOWZjYWJlODYyM2Y1LzAvODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0 QTlDRDA1MjRFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIIhxCOQxlZgXF/L6TeCyYpIasbv1ZNuAfZ9 bWE0+7/Y/Y/PeylcGeTkWw4syeQcnroOOa2beTP78T9aXbcVWa4I+FDVBQqQlM// gBKtJ7JvwKbE+EFAPZO7siXqpTU2AmU2YSEhoGKGJrUa/JH/43eMLYgpgdBjOdZU vOiplOlplFHkUkPym12R25gBqfclfb/7zYN9BwlpBiIx4a7+jZh7cgSt4Jpz6+91 EIenpTEzizCWlgR93gLlAmPpYuB+YQTI3pp+ncKZalIAikn3CmltdVVrWrL6YAZF QsSy99DTdBGqDo/3Yp/cBZcJdt8mDBJd0y6Ty7uDnwuMDmaAkoA= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:07 2025 by rpki-client