$ rpki-client -vvf repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft File: 18501FBD8586A1409C33F07377587F8C015DAFF4.mft (raw, json) Hash identifier: wt4+wU1gUgLC+WF7yrhvFoAGCBgzmB9xuXVPIMQtLIM= Subject key identifier: 44:45:47:6F:83:50:ED:2D:C4:EB:7B:11:C7:41:02:2B:16:F3:FC:CC Authority key identifier: 18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4 Certificate issuer: /CN=18501FBD8586A1409C33F07377587F8C015DAFF4 Certificate serial: 29CC8AC4C3E23508396FE12554FFBCEC1E1753CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft Manifest number: 013C Signing time: Tue 03 Jun 2025 17:44:28 +0000 Manifest this update: Tue 03 Jun 2025 17:39:28 +0000 Manifest next update: Fri 06 Jun 2025 18:10:28 +0000 Files and hashes: 1: 3130332e3132322e3231322e302f32332d3234203d3e20313530393630.roa (hash: S91vKZLLe/dNTIpbo6cZEhpzP1zxZDRgjEKwwjEVMQo=) 2: 18501FBD8586A1409C33F07377587F8C015DAFF4.crl (hash: W4dlcS8pJr6krGAlapTDudIiIjN0cC92cycZBIm1FRo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:cc:8a:c4:c3:e2:35:08:39:6f:e1:25:54:ff:bc:ec:1e:17:53:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18501FBD8586A1409C33F07377587F8C015DAFF4 Validity Not Before: Jun 3 17:39:28 2025 GMT Not After : Jun 6 18:10:28 2025 GMT Subject: CN=4445476F8350ED2DC4EB7B11C741022B16F3FCCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:51:80:23:db:1e:f5:f9:94:b4:c8:e8:6c:db: 46:0b:1f:2c:12:2e:fe:9a:c3:7f:85:d3:c9:bf:88: 53:20:97:70:d0:32:cc:88:ab:83:07:86:96:70:87: 5b:cd:66:5f:0e:d7:c5:f4:1e:c9:64:d7:1a:68:32: aa:bf:ab:b3:c6:13:be:ef:6e:e4:47:8d:4c:02:b7: 29:7b:89:5f:b6:2f:af:26:4f:ea:d6:25:1e:ff:fb: d5:90:24:9d:a9:d4:a9:49:62:79:ac:d9:54:00:63: 12:d5:29:63:af:a9:8d:76:ea:c0:a9:b9:43:20:3a: 44:cf:fb:4f:a4:f9:1a:d7:99:92:5c:b5:80:3d:e9: c8:a2:71:e6:19:70:a4:ae:21:49:b5:bb:7e:35:a2: 6a:8a:58:50:9b:2e:29:53:ba:46:95:40:99:24:20: 80:b3:34:8d:1f:29:b2:32:0e:f1:c0:da:91:e3:21: a0:60:67:4b:c3:dc:ef:2c:3a:ab:da:29:6b:86:2c: 65:d5:0a:92:c9:58:d8:90:e2:dd:c6:46:be:dd:ac: a0:4e:db:b8:4c:b5:f6:01:b3:01:ed:8f:e2:96:f0: 61:6e:5e:57:ae:10:b2:8d:04:b8:99:cf:c9:1e:f8: 6e:b5:9e:4f:fa:a2:39:93:b0:f5:b8:4a:5e:85:64: 38:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:45:47:6F:83:50:ED:2D:C4:EB:7B:11:C7:41:02:2B:16:F3:FC:CC X509v3 Authority Key Identifier: keyid:18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:c1:ea:fa:0a:ed:3f:3e:90:7c:81:a0:8b:d6:3a:4d:82:e5: f3:3c:cd:d8:d4:23:9f:4d:ee:4b:d1:09:a7:f1:98:82:f1:e8: f4:14:40:1a:f3:72:56:d5:56:1e:ea:45:95:bf:55:5c:03:c9: 1a:8d:0d:7a:91:30:b4:12:65:70:dd:a3:e2:1c:4e:67:c5:82: df:70:b3:82:c6:cd:81:09:0f:0e:04:42:c8:ae:dc:c0:79:1c: bf:be:18:40:6b:31:1a:e6:84:6b:5c:fe:17:c4:43:e6:55:2f: 56:f7:a5:9c:b7:3d:e9:bd:67:62:83:b2:82:36:33:2e:00:6d: 47:e9:31:0e:9f:8f:3d:c5:54:96:3c:3e:67:84:92:f7:25:f5: e6:94:20:d1:79:19:8b:7b:8d:49:8f:8d:12:7d:ba:4c:0b:4b: ca:12:bc:6d:ea:59:1b:4c:3f:6e:1d:05:0d:38:f4:f8:70:55: 1d:38:71:48:dd:09:d1:09:1a:ad:a6:bc:d1:89:4e:f5:c0:7e: 3f:d5:28:c8:91:3f:8f:32:74:4b:c4:96:46:d4:db:a9:fa:60: 80:6e:87:4a:84:14:8d:f9:78:34:01:5a:0d:d7:da:dd:94:a6: 39:15:84:4f:96:db:92:43:9d:91:df:04:b6:b1:fc:52:ec:2d: 77:a6:32:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKcyKxMPiNQg5b+ElVP+87B4XU8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdGOEMw MTVEQUZGNDAeFw0yNTA2MDMxNzM5MjhaFw0yNTA2MDYxODEwMjhaMDMxMTAvBgNV BAMTKDQ0NDU0NzZGODM1MEVEMkRDNEVCN0IxMUM3NDEwMjJCMTZGM0ZDQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIUYAj2x71+ZS0yOhs20YLHywS Lv6aw3+F08m/iFMgl3DQMsyIq4MHhpZwh1vNZl8O18X0Hslk1xpoMqq/q7PGE77v buRHjUwCtyl7iV+2L68mT+rWJR7/+9WQJJ2p1KlJYnms2VQAYxLVKWOvqY126sCp uUMgOkTP+0+k+RrXmZJctYA96ciiceYZcKSuIUm1u341omqKWFCbLilTukaVQJkk IICzNI0fKbIyDvHA2pHjIaBgZ0vD3O8sOqvaKWuGLGXVCpLJWNiQ4t3GRr7drKBO 27hMtfYBswHtj+KW8GFuXleuELKNBLiZz8ke+G61nk/6ojmTsPW4Sl6FZDjvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUREVHb4NQ7S3E63sRx0ECKxbz/MwwHwYDVR0j BBgwFoAUGFAfvYWGoUCcM/Bzd1h/jAFdr/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFiZGRiZi1kMTE5LTRjODAtODgyNy03YTg4OGE5M2NlMDMvMC8xODUwMUZCRDg1 ODZBMTQwOUMzM0YwNzM3NzU4N0Y4QzAxNURBRkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdGOEMwMTVE QUZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFhYmRkYmYtZDExOS00YzgwLTg4 MjctN2E4ODhhOTNjZTAzLzAvMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdG OEMwMTVEQUZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXB6voK7T8+kHyBoIvWOk2C5fM8zdjUI59N 7kvRCafxmILx6PQUQBrzclbVVh7qRZW/VVwDyRqNDXqRMLQSZXDdo+IcTmfFgt9w s4LGzYEJDw4EQsiu3MB5HL++GEBrMRrmhGtc/hfEQ+ZVL1b3pZy3Pem9Z2KDsoI2 My4AbUfpMQ6fjz3FVJY8PmeEkvcl9eaUINF5GYt7jUmPjRJ9ukwLS8oSvG3qWRtM P24dBQ049PhwVR04cUjdCdEJGq2mvNGJTvXAfj/VKMiRP48ydEvElkbU26n6YIBu h0qEFI35eDQBWg3X2t2UpjkVhE+W25JDnZHfBLax/FLsLXemMmI= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:20 2025 by rpki-client