$ rpki-client -vvf repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft File: 1811CB623E9BFFB82945CA39C74C4C274914837F.mft (raw, json) Hash identifier: muUwU+uSYkY6n3SOz6f4S4+d3b6TrkmBhoayDdLhaAk= Subject key identifier: 2B:63:A7:62:DB:B6:E3:81:31:4D:5C:B0:D3:FE:D3:10:AD:A5:AF:43 Authority key identifier: 18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F Certificate issuer: /CN=1811CB623E9BFFB82945CA39C74C4C274914837F Certificate serial: 4A1F66D391933901F77BB77EBD4DD4D16B1CED10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft Manifest number: 0299 Signing time: Fri 06 Jun 2025 04:40:48 +0000 Manifest this update: Fri 06 Jun 2025 04:35:48 +0000 Manifest next update: Mon 09 Jun 2025 09:10:48 +0000 Files and hashes: 1: 3130332e3137372e39362e302f32332d3234203d3e20313331313131.roa (hash: tXcQSjFRgRXWYm56Zc7JHT0yut/bAGiDVFBVYQq84Lg=) 2: 1811CB623E9BFFB82945CA39C74C4C274914837F.crl (hash: dTpfxyug8pibLubCYAEvsziOWHukZO7MFHfMWeSkKE8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 09:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:1f:66:d3:91:93:39:01:f7:7b:b7:7e:bd:4d:d4:d1:6b:1c:ed:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1811CB623E9BFFB82945CA39C74C4C274914837F Validity Not Before: Jun 6 04:35:48 2025 GMT Not After : Jun 9 09:10:48 2025 GMT Subject: CN=2B63A762DBB6E381314D5CB0D3FED310ADA5AF43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:84:d6:6f:f6:bb:eb:51:d1:d2:ee:ee:01:b7: ae:c5:a3:9b:c7:73:e8:ee:16:71:46:57:b5:9f:84: 6c:bc:e3:e5:cb:75:3d:24:e6:7f:f2:98:4d:10:0e: 16:b2:f5:aa:fb:fe:d6:c7:12:61:21:e8:8a:af:83: 09:e2:d9:2c:55:48:13:e7:59:28:49:23:5b:d6:ac: 7d:f4:f5:bc:9e:1c:fa:46:21:8d:66:3c:eb:35:fb: 2e:2b:33:36:c1:ba:32:9a:dc:45:61:f0:63:3b:32: 2f:b3:72:91:c5:b3:18:b6:cb:5f:22:d5:91:c8:a0: a1:1f:5a:f5:00:82:4f:50:e7:04:20:cf:54:fc:9e: f6:7b:83:7e:24:8d:e8:fc:bc:a7:ba:d0:e0:f3:cb: 6b:2e:e6:04:92:21:c3:37:6f:32:26:b0:bc:cf:d0: 38:2f:0a:29:f5:2a:00:dc:c6:20:61:5f:81:8c:c0: 43:94:3b:d0:6a:da:cf:a5:4e:f6:dd:31:55:a5:e7: c9:9d:f3:cb:65:01:27:df:56:86:86:36:6e:89:5a: 0b:21:fc:4c:c1:3b:88:a6:51:20:36:b5:41:81:c8: 1b:6e:75:d7:16:4e:b9:db:1b:d9:53:a9:86:8b:73: f1:07:95:7a:42:c3:15:d9:14:43:58:f1:4e:7b:b2: 26:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:63:A7:62:DB:B6:E3:81:31:4D:5C:B0:D3:FE:D3:10:AD:A5:AF:43 X509v3 Authority Key Identifier: keyid:18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:13:94:d1:71:d9:7f:3a:33:53:1b:0b:5c:8e:31:ec:c8:bc: 12:fd:1e:d4:7a:02:69:c7:0e:07:fc:88:74:ec:7e:c7:b6:3f: f7:1b:2c:14:1a:80:f0:ca:c8:8a:1b:97:9e:c0:1a:7a:f6:f2: e7:58:76:90:71:0a:bc:92:c9:d9:85:8c:8b:03:14:f7:d9:c5: d3:5d:b4:7b:94:7e:b1:ae:cc:90:00:0b:c3:55:3a:76:45:6d: 42:6a:d3:31:ee:c5:b2:24:c7:4d:19:d1:4c:2e:e7:50:81:b1: 6b:59:a8:d2:bf:31:b1:3a:c1:d9:01:8b:fe:17:21:af:02:d0: 67:5e:7c:2b:32:24:61:fa:c3:eb:cb:d7:e6:56:fc:4a:86:81: 66:5d:53:d7:eb:92:cb:3d:28:cc:fe:ef:db:a1:40:a4:d1:b8: 64:70:ad:50:e1:c5:2b:a6:ea:f7:26:15:f7:a1:0b:f4:8a:61: a8:b1:1f:3d:cd:6d:48:9e:f8:5c:cf:bd:8d:4b:6d:36:e4:cd: 62:34:27:e3:84:e2:82:65:4a:63:11:58:6d:fe:49:c8:53:77: 9a:50:42:fb:91:96:b0:c1:9d:ae:07:b5:a0:1f:38:b2:3d:fe: 0c:60:c6:45:a8:19:40:f8:30:1c:75:ba:fd:f9:4c:23:d3:4e: 9f:7c:07:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSh9m05GTOQH3e7d+vU3U0Wsc7RAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0 OTE0ODM3RjAeFw0yNTA2MDYwNDM1NDhaFw0yNTA2MDkwOTEwNDhaMDMxMTAvBgNV BAMTKDJCNjNBNzYyREJCNkUzODEzMTRENUNCMEQzRkVEMzEwQURBNUFGNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMhNZv9rvrUdHS7u4Bt67Fo5vH c+juFnFGV7WfhGy84+XLdT0k5n/ymE0QDhay9ar7/tbHEmEh6Iqvgwni2SxVSBPn WShJI1vWrH309byeHPpGIY1mPOs1+y4rMzbBujKa3EVh8GM7Mi+zcpHFsxi2y18i 1ZHIoKEfWvUAgk9Q5wQgz1T8nvZ7g34kjej8vKe60ODzy2su5gSSIcM3bzImsLzP 0DgvCin1KgDcxiBhX4GMwEOUO9Bq2s+lTvbdMVWl58md88tlASffVoaGNm6JWgsh /EzBO4imUSA2tUGByBtuddcWTrnbG9lTqYaLc/EHlXpCwxXZFENY8U57siapAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK2OnYtu244ExTVyw0/7TEK2lr0MwHwYDVR0j BBgwFoAUGBHLYj6b/7gpRco5x0xMJ0kUg38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg3ZjFkMS0wNmZiLTQzNmItOWNlNi05MmRhYTI5ZjFmOWIvMC8xODExQ0I2MjNF OUJGRkI4Mjk0NUNBMzlDNzRDNEMyNzQ5MTQ4MzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0OTE0 ODM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4N2YxZDEtMDZmYi00MzZiLTlj ZTYtOTJkYWEyOWYxZjliLzAvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRD Mjc0OTE0ODM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUTlNFx2X86M1MbC1yOMezIvBL9HtR6AmnH Dgf8iHTsfse2P/cbLBQagPDKyIobl57AGnr28udYdpBxCrySydmFjIsDFPfZxdNd tHuUfrGuzJAAC8NVOnZFbUJq0zHuxbIkx00Z0Uwu51CBsWtZqNK/MbE6wdkBi/4X Ia8C0GdefCsyJGH6w+vL1+ZW/EqGgWZdU9frkss9KMz+79uhQKTRuGRwrVDhxSum 6vcmFfehC/SKYaixHz3NbUie+FzPvY1LbTbkzWI0J+OE4oJlSmMRWG3+SchTd5pQ QvuRlrDBna4HtaAfOLI9/gxgxkWoGUD4MBx1uv35TCPTTp98B14= -----END CERTIFICATE-----Generated at Sat Jun 7 05:53:19 2025 by rpki-client