$ rpki-client -vvf repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft File: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft (raw, json) Hash identifier: sRbBn9UUpEBJ9aFykN+Ob5lxBnOGic76RHrgNPg/RtQ= Subject key identifier: 3E:C8:68:26:06:58:A4:6F:E8:81:89:19:59:81:07:88:B1:B2:40:74 Authority key identifier: 80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 Certificate issuer: /CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Certificate serial: 1223F6A6738E090E23681ECCF05DFB6E9CE5B804 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft Manifest number: 81 Signing time: Sat 07 Jun 2025 17:11:08 +0000 Manifest this update: Sat 07 Jun 2025 17:06:08 +0000 Manifest next update: Tue 10 Jun 2025 23:45:08 +0000 Files and hashes: 1: 3130332e36322e3230322e302f32332d3233203d3e203633383833.roa (hash: yxxXXRwK7yFLR89I5uMrJEdDWAqzJPaOalUN3EScIQ0=) 2: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl (hash: Do87bGrPJ0Xk2p5JnMSi/ahjOSIbJbDw6Kg6GB2OrKI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 23:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:23:f6:a6:73:8e:09:0e:23:68:1e:cc:f0:5d:fb:6e:9c:e5:b8:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Validity Not Before: Jun 7 17:06:08 2025 GMT Not After : Jun 10 23:45:08 2025 GMT Subject: CN=3EC868260658A46FE881891959810788B1B24074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e8:ce:81:df:3a:ea:b6:eb:a8:b4:71:f9:ee: e3:dd:2e:db:63:91:75:84:d2:4e:9d:c7:94:7c:38: eb:d4:22:81:16:cc:c4:f9:86:b3:60:6c:84:95:ac: 25:7a:18:ff:2e:10:7f:98:42:f0:f7:49:f4:3b:30: 61:3e:7c:ec:56:08:4f:81:ed:e1:9e:a3:74:6f:6c: 30:3d:e6:91:66:84:9f:7e:0a:2c:20:e7:60:a1:d8: 82:1a:6f:85:0e:6f:8f:61:d6:45:1a:fe:fd:e8:89: c3:9a:b5:bf:e1:9c:a9:aa:29:d6:d1:d7:6f:bc:85: 0d:6d:99:eb:61:e1:b9:52:ff:2b:48:77:9e:ad:3b: c0:96:2a:cc:a0:02:68:ad:e6:e4:40:f3:de:2f:b3: 77:8d:8d:df:09:00:85:b8:01:c0:da:91:cf:48:7d: d6:59:b7:a1:e3:e4:5d:c0:c2:0d:35:30:58:1b:8e: 6f:74:01:aa:12:5d:c9:ed:9e:e6:38:3c:61:af:ae: fd:d1:ea:a2:49:1e:57:4e:ad:c0:5f:4a:8f:18:ee: f7:b9:77:df:fb:aa:64:43:76:b6:e8:7f:9c:c1:8f: 5a:be:17:37:8e:a7:ec:fd:d5:d1:ab:8c:94:ea:57: ee:0e:7d:b3:55:76:58:db:a5:fd:45:70:8f:44:9a: a1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C8:68:26:06:58:A4:6F:E8:81:89:19:59:81:07:88:B1:B2:40:74 X509v3 Authority Key Identifier: keyid:80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:49:31:88:e3:67:a7:7c:ba:08:ce:3d:96:d8:1b:ab:be:87: 0a:f8:89:89:05:5f:d1:02:18:a6:f7:29:70:99:59:b6:41:e9: 14:c7:10:b4:8e:2a:48:8c:33:76:81:2d:85:a9:19:9c:10:b2: a9:17:2e:c7:4d:b3:e4:9e:fa:88:14:e5:78:b6:2d:0e:1d:12: d6:6d:28:61:f9:bb:07:19:cf:52:b3:54:b5:fc:91:c9:73:b5: 03:48:37:33:05:73:f3:ca:78:83:7c:81:63:56:67:61:02:98: f8:c3:4c:14:f9:16:bd:89:a5:c4:c1:24:24:c3:f6:8a:49:9b: 7a:96:fb:c9:c8:69:64:07:42:c0:67:74:4d:5b:e5:2c:f5:b5: 47:e4:4c:7d:84:51:2c:a2:45:96:e2:54:78:83:45:89:02:b7: 69:1a:81:f6:0c:be:6f:10:2c:3e:e9:8c:03:d0:a4:3f:af:39: a9:52:3c:40:87:8a:6a:1b:3e:a8:10:0e:83:42:f8:ea:27:47: 6c:21:ef:85:47:ec:26:23:3c:0b:5b:22:0e:1a:8f:d5:65:cc: 28:9a:6c:8f:13:46:04:38:ea:5d:d1:f2:83:5d:a0:59:f0:5d: 50:01:09:79:e2:49:45:c1:08:29:d7:ce:c4:01:1d:c7:f3:38: 7c:59:2d:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEiP2pnOOCQ4jaB7M8F37bpzluAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVG M0EyNzJFNTAeFw0yNTA2MDcxNzA2MDhaFw0yNTA2MTAyMzQ1MDhaMDMxMTAvBgNV BAMTKDNFQzg2ODI2MDY1OEE0NkZFODgxODkxOTU5ODEwNzg4QjFCMjQwNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi6M6B3zrqtuuotHH57uPdLttj kXWE0k6dx5R8OOvUIoEWzMT5hrNgbISVrCV6GP8uEH+YQvD3SfQ7MGE+fOxWCE+B 7eGeo3RvbDA95pFmhJ9+Ciwg52Ch2IIab4UOb49h1kUa/v3oicOatb/hnKmqKdbR 12+8hQ1tmeth4blS/ytId56tO8CWKsygAmit5uRA894vs3eNjd8JAIW4AcDakc9I fdZZt6Hj5F3Awg01MFgbjm90AaoSXcntnuY4PGGvrv3R6qJJHldOrcBfSo8Y7ve5 d9/7qmRDdrbof5zBj1q+FzeOp+z91dGrjJTqV+4OfbNVdljbpf1FcI9EmqF5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPshoJgZYpG/ogYkZWYEHiLGyQHQwHwYDVR0j BBgwFoAUgJmRdHUBo81YpDiorf/NnvOicuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODFmNDRhYS04OWEzLTRiYzMtYmIyOS1kYjZjOTgyYTEzNmIvMC84MDk5OTE3NDc1 MDFBM0NENThBNDM4QThBREZGQ0Q5RUYzQTI3MkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVGM0Ey NzJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgxZjQ0YWEtODlhMy00YmMzLWJi MjktZGI2Yzk4MmExMzZiLzAvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNE OUVGM0EyNzJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxJMYjjZ6d8ugjOPZbYG6u+hwr4iYkFX9EC GKb3KXCZWbZB6RTHELSOKkiMM3aBLYWpGZwQsqkXLsdNs+Se+ogU5Xi2LQ4dEtZt KGH5uwcZz1KzVLX8kclztQNINzMFc/PKeIN8gWNWZ2ECmPjDTBT5Fr2JpcTBJCTD 9opJm3qW+8nIaWQHQsBndE1b5Sz1tUfkTH2EUSyiRZbiVHiDRYkCt2kagfYMvm8Q LD7pjAPQpD+vOalSPECHimobPqgQDoNC+OonR2wh74VH7CYjPAtbIg4aj9VlzCia bI8TRgQ46l3R8oNdoFnwXVABCXniSUXBCCnXzsQBHcfzOHxZLdo= -----END CERTIFICATE-----Generated at Sat Jun 7 20:27:40 2025 by rpki-client