$ rpki-client -vvf repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft File: 81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft (raw, json) Hash identifier: 2q+V5KL9/7+J79PS8iO0S4Vm0dwaiCZH39jrIE7BRX0= Subject key identifier: 1B:9B:D9:82:D9:24:71:FE:9B:F4:B6:CB:22:00:7B:31:9D:B8:AE:C5 Authority key identifier: 81:C9:4B:E9:98:EC:BD:D2:EF:89:7B:FE:8E:8E:51:B8:74:C0:A6:52 Certificate issuer: /CN=81C94BE998ECBDD2EF897BFE8E8E51B874C0A652 Certificate serial: 1BF159CE27F009B49DBA3E938DF34609EB406BBD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft Manifest number: 02A4 Signing time: Fri 13 Jun 2025 07:02:21 +0000 Manifest this update: Fri 13 Jun 2025 06:57:21 +0000 Manifest next update: Mon 16 Jun 2025 11:11:21 +0000 Files and hashes: 1: 3130332e3136332e38302e302f32332d3233203d3e20313431363734.roa (hash: LX1akCK1RumCTw48vx3vGALGY+ae+t+bkrwj6Dc+RMk=) 2: 3130332e3136332e38302e302f32342d3234203d3e20313431363734.roa (hash: FoLDrQVuOiTB01Q4iJpDzeQUT3QZub38J9e/RpqxUr4=) 3: 3130332e3136332e38312e302f32342d3234203d3e20313431363734.roa (hash: snup9E0JcmBDDFQXO29kpKaPJBnM7JWFMr9bOF3Zc+c=) 4: 81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl (hash: 5HFY1WjBZMpLVXiQgrdfuiFAZ09IPJ20gpvBRixC3E0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 11:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:f1:59:ce:27:f0:09:b4:9d:ba:3e:93:8d:f3:46:09:eb:40:6b:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81C94BE998ECBDD2EF897BFE8E8E51B874C0A652 Validity Not Before: Jun 13 06:57:21 2025 GMT Not After : Jun 16 11:11:21 2025 GMT Subject: CN=1B9BD982D92471FE9BF4B6CB22007B319DB8AEC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2e:77:16:c7:d9:91:ad:d3:eb:10:31:da:6a: 21:2d:b6:c3:a2:39:3e:1f:ed:c4:db:18:24:2d:fa: 5b:66:e3:b7:0a:94:1a:5e:b1:a3:bf:10:a8:cd:60: bf:f5:c3:4a:61:b9:0a:7c:81:14:19:ee:08:44:2b: 30:90:d4:d5:40:d2:bb:61:b6:02:1a:11:eb:20:dd: 07:ec:66:9a:6e:56:28:1b:c7:f2:e6:2c:53:24:da: d8:97:c7:d7:bf:68:c2:70:f8:4c:d0:35:e3:03:9a: 63:58:29:a5:d2:78:d1:a9:96:71:e5:2b:6f:0e:f8: 2f:c7:06:f2:dc:d1:f3:06:c0:a1:0b:00:41:54:f9: 9d:29:ff:26:03:6d:9c:f6:59:33:b2:45:ff:24:18: be:db:92:c0:d2:f4:d7:32:3a:f6:a4:25:77:88:4f: bb:15:77:2e:a3:b9:7e:61:55:5b:6a:c4:69:62:1c: a0:b6:46:e7:55:9a:1d:b7:ea:bb:0d:58:6b:9c:9a: 6c:da:06:1a:d2:11:68:1d:2b:6e:34:34:bc:cc:df: 72:33:a0:65:1f:df:ee:34:4d:95:d6:95:5d:b2:1e: f8:aa:00:cf:99:e4:17:7e:33:c6:20:d7:a0:af:25: 97:e8:62:38:13:37:ab:34:eb:0d:cb:dc:e5:eb:19: 9c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:9B:D9:82:D9:24:71:FE:9B:F4:B6:CB:22:00:7B:31:9D:B8:AE:C5 X509v3 Authority Key Identifier: keyid:81:C9:4B:E9:98:EC:BD:D2:EF:89:7B:FE:8E:8E:51:B8:74:C0:A6:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:f7:e9:00:23:9a:11:ec:87:77:54:4d:f8:50:4c:ff:4e:9b: 77:3a:96:4f:05:ed:82:75:0f:1f:ec:6c:a3:46:59:5b:8b:fa: e6:61:be:8c:dc:3b:f3:d4:d4:bf:e4:df:cb:4f:70:97:fe:ab: b7:d6:2c:fc:ce:34:41:99:42:c2:ef:34:43:7e:35:26:23:d6: 8c:01:f1:be:cc:78:9b:fe:6e:ea:a7:a6:09:c3:9b:60:8e:82: 20:1a:59:c0:e2:aa:a1:d2:93:0d:fe:0f:76:dc:f5:ed:fc:59: af:44:81:ea:38:9f:57:a1:42:5f:b3:41:7d:cf:51:1a:8f:73: 28:95:d5:ce:9c:98:cc:65:54:5f:61:af:b0:28:77:bc:1d:99: 16:4e:db:c1:ff:4c:e6:9a:78:f9:73:ba:2f:50:fa:db:eb:2e: b5:69:01:1f:3b:7e:a9:3a:d4:70:8d:b2:e0:46:2e:08:a6:2b: e6:d9:ab:dd:9b:cc:aa:95:49:3c:cc:0e:c1:9b:8f:d6:78:d0: 6d:72:be:04:13:71:9a:da:cc:31:96:45:85:f0:61:19:d3:2c: cc:fe:42:b0:76:62:6f:88:bf:56:15:24:31:15:84:f3:90:07: 9d:95:f4:48:43:e4:6f:5d:6b:b5:34:88:94:13:73:db:68:65: 3f:cf:89:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG/FZzifwCbSduj6TjfNGCetAa70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUxQjg3 NEMwQTY1MjAeFw0yNTA2MTMwNjU3MjFaFw0yNTA2MTYxMTExMjFaMDMxMTAvBgNV BAMTKDFCOUJEOTgyRDkyNDcxRkU5QkY0QjZDQjIyMDA3QjMxOURCOEFFQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFLncWx9mRrdPrEDHaaiEttsOi OT4f7cTbGCQt+ltm47cKlBpesaO/EKjNYL/1w0phuQp8gRQZ7ghEKzCQ1NVA0rth tgIaEesg3QfsZppuVigbx/LmLFMk2tiXx9e/aMJw+EzQNeMDmmNYKaXSeNGplnHl K28O+C/HBvLc0fMGwKELAEFU+Z0p/yYDbZz2WTOyRf8kGL7bksDS9NcyOvakJXeI T7sVdy6juX5hVVtqxGliHKC2RudVmh236rsNWGucmmzaBhrSEWgdK240NLzM33Iz oGUf3+40TZXWlV2yHviqAM+Z5Bd+M8Yg16CvJZfoYjgTN6s06w3L3OXrGZzTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG5vZgtkkcf6b9LbLIgB7MZ24rsUwHwYDVR0j BBgwFoAUgclL6ZjsvdLviXv+jo5RuHTAplIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDIzNGQ1MC02N2UxLTQxOWMtODViYS02NGJhOGMxMTEyMjUvMC84MUM5NEJFOTk4 RUNCREQyRUY4OTdCRkU4RThFNTFCODc0QzBBNjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUxQjg3NEMw QTY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQyMzRkNTAtNjdlMS00MTljLTg1 YmEtNjRiYThjMTExMjI1LzAvODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUx Qjg3NEMwQTY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIP36QAjmhHsh3dUTfhQTP9Om3c6lk8F7YJ1 Dx/sbKNGWVuL+uZhvozcO/PU1L/k38tPcJf+q7fWLPzONEGZQsLvNEN+NSYj1owB 8b7MeJv+buqnpgnDm2COgiAaWcDiqqHSkw3+D3bc9e38Wa9Egeo4n1ehQl+zQX3P URqPcyiV1c6cmMxlVF9hr7Aod7wdmRZO28H/TOaaePlzui9Q+tvrLrVpAR87fqk6 1HCNsuBGLgimK+bZq92bzKqVSTzMDsGbj9Z40G1yvgQTcZrazDGWRYXwYRnTLMz+ QrB2Ym+Iv1YVJDEVhPOQB52V9EhD5G9da7U0iJQTc9toZT/PiaQ= -----END CERTIFICATE-----Generated at Fri Jun 13 23:29:36 2025 by rpki-client