$ rpki-client -vvf repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft File: 208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft (raw, json) Hash identifier: Ae8FTkiXT7UJtDzQGFSl/BujDE9/CYdHY5ekYxfpPvQ= Subject key identifier: 55:5B:BD:38:78:F4:72:9C:1E:9E:93:06:80:A4:50:DB:81:C7:5E:44 Authority key identifier: 20:8A:5A:F3:73:9B:FD:79:85:D7:79:3C:C2:7C:9B:5F:B5:74:48:15 Certificate issuer: /CN=208A5AF3739BFD7985D7793CC27C9B5FB5744815 Certificate serial: 711A6A400CF4F0B4A2E1E741D895BC4D121ADF11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft Manifest number: 01B4 Signing time: Mon 02 Jun 2025 06:41:21 +0000 Manifest this update: Mon 02 Jun 2025 06:36:21 +0000 Manifest next update: Thu 05 Jun 2025 16:07:21 +0000 Files and hashes: 1: 208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl (hash: r5mv0eWXBjkCQtVjwJrjzAL6umKxEBE2+2BDaazNwjI=) 2: 3130332e3138362e3139332e302f32342d3234203d3e20313439373133.roa (hash: Ptr+JvySIfz8ycST/SMYabIssLMqgPRW1YZ6dUpcr0c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 16:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:1a:6a:40:0c:f4:f0:b4:a2:e1:e7:41:d8:95:bc:4d:12:1a:df:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208A5AF3739BFD7985D7793CC27C9B5FB5744815 Validity Not Before: Jun 2 06:36:21 2025 GMT Not After : Jun 5 16:07:21 2025 GMT Subject: CN=555BBD3878F4729C1E9E930680A450DB81C75E44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:76:c2:fa:ea:63:ed:a0:d3:55:45:4f:cd:d2: 93:77:d6:6c:1e:df:1b:b6:5e:83:90:55:bd:f7:b3: 6c:f3:bf:31:07:1a:76:d3:d2:4a:ca:ea:25:28:e2: 79:7a:d3:19:cf:4d:31:0e:42:46:29:7a:de:ed:0f: 1a:40:51:e8:a8:a7:9e:dc:af:9b:31:96:9f:f2:fd: 16:25:cd:26:8d:bd:d6:d3:3f:9d:d8:65:b5:fd:d9: e7:33:4e:d9:b2:d6:37:60:79:f1:4a:c1:7a:67:10: 1d:0d:f6:d2:fa:14:31:58:b0:94:c6:3f:4e:45:ab: f0:16:ae:92:ac:92:a5:fb:d5:1d:fc:4d:3a:95:0a: e1:76:ec:ea:c4:d2:3b:43:a4:39:a0:f8:1a:eb:bf: ec:b1:92:3e:61:fb:23:4e:1a:88:bc:25:88:3b:ce: 84:ef:f3:42:36:64:2b:2b:48:f9:3b:5c:df:52:68: da:cb:41:fc:aa:21:58:e5:56:da:8e:e4:7f:e8:c8: bf:b7:ec:ad:68:65:5f:13:5f:dc:76:7e:45:bc:79: 60:e3:cf:ae:15:00:a5:cb:5c:2a:fb:75:91:01:fc: 35:eb:25:9e:1f:e8:1d:cd:f7:b6:53:62:e2:0f:d8: f1:c9:e6:08:3e:7b:cb:05:ea:2f:4e:ff:ca:6a:9a: f7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:5B:BD:38:78:F4:72:9C:1E:9E:93:06:80:A4:50:DB:81:C7:5E:44 X509v3 Authority Key Identifier: keyid:20:8A:5A:F3:73:9B:FD:79:85:D7:79:3C:C2:7C:9B:5F:B5:74:48:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:b7:cc:25:6b:dc:89:9d:4a:f5:78:e2:e0:15:f7:23:bc:7c: 97:9d:60:82:15:cf:a8:63:ae:ba:a5:84:f6:a5:6c:e3:11:0d: 12:72:78:94:1d:55:66:74:f6:bd:27:a2:10:7c:52:1d:21:b4: 52:03:45:39:72:ab:13:b1:8d:33:21:d5:3e:6e:ca:93:41:4d: 94:34:7b:d5:3d:49:f3:45:16:a0:46:4e:ec:31:e3:be:67:cf: 84:f1:c7:0a:72:53:68:15:55:8f:9d:65:68:77:ad:4b:85:54: a4:9b:1a:4b:c6:fb:a0:71:b1:8d:67:a7:03:68:8a:3b:76:44: 06:15:9f:d6:2a:ff:24:52:4f:37:9c:e7:2a:71:92:df:5c:b8: e6:b9:95:a3:45:16:37:19:af:7a:da:57:7d:11:64:f7:e8:52: 64:1c:a8:87:26:e0:9a:1f:09:c8:4e:ad:28:61:80:28:66:de: d0:b6:81:70:a5:f6:f0:74:67:07:06:62:96:2d:00:8e:68:0d: a0:b8:db:0d:dd:8e:a6:20:78:e8:b9:c9:7c:8b:84:6e:2d:4a: e1:30:06:e4:51:af:36:0c:e3:0f:3a:14:fe:88:05:77:df:3a: 72:56:da:ea:a3:b5:84:66:77:b0:92:82:13:d9:b9:4c:7e:b5: 3e:79:13:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcRpqQAz08LSi4edB2JW8TRIa3xEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA4QTVBRjM3MzlCRkQ3OTg1RDc3OTNDQzI3QzlCNUZC NTc0NDgxNTAeFw0yNTA2MDIwNjM2MjFaFw0yNTA2MDUxNjA3MjFaMDMxMTAvBgNV BAMTKDU1NUJCRDM4NzhGNDcyOUMxRTlFOTMwNjgwQTQ1MERCODFDNzVFNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3dsL66mPtoNNVRU/N0pN31mwe 3xu2XoOQVb33s2zzvzEHGnbT0krK6iUo4nl60xnPTTEOQkYpet7tDxpAUeiop57c r5sxlp/y/RYlzSaNvdbTP53YZbX92eczTtmy1jdgefFKwXpnEB0N9tL6FDFYsJTG P05Fq/AWrpKskqX71R38TTqVCuF27OrE0jtDpDmg+Brrv+yxkj5h+yNOGoi8JYg7 zoTv80I2ZCsrSPk7XN9SaNrLQfyqIVjlVtqO5H/oyL+37K1oZV8TX9x2fkW8eWDj z64VAKXLXCr7dZEB/DXrJZ4f6B3N97ZTYuIP2PHJ5gg+e8sF6i9O/8pqmvclAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVVu9OHj0cpwenpMGgKRQ24HHXkQwHwYDVR0j BBgwFoAUIIpa83Ob/XmF13k8wnybX7V0SBUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MWQ1MWQ0MS1iNmNjLTQyMGEtYjVhOC02N2M4YmQ2YjAyYWYvMC8yMDhBNUFGMzcz OUJGRDc5ODVENzc5M0NDMjdDOUI1RkI1NzQ0ODE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjA4QTVBRjM3MzlCRkQ3OTg1RDc3OTNDQzI3QzlCNUZCNTc0 NDgxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDFkNTFkNDEtYjZjYy00MjBhLWI1 YTgtNjdjOGJkNmIwMmFmLzAvMjA4QTVBRjM3MzlCRkQ3OTg1RDc3OTNDQzI3QzlC NUZCNTc0NDgxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHG3zCVr3ImdSvV44uAV9yO8fJedYIIVz6hj rrqlhPalbOMRDRJyeJQdVWZ09r0nohB8Uh0htFIDRTlyqxOxjTMh1T5uypNBTZQ0 e9U9SfNFFqBGTuwx475nz4TxxwpyU2gVVY+dZWh3rUuFVKSbGkvG+6BxsY1npwNo ijt2RAYVn9Yq/yRSTzec5ypxkt9cuOa5laNFFjcZr3raV30RZPfoUmQcqIcm4Jof CchOrShhgChm3tC2gXCl9vB0ZwcGYpYtAI5oDaC42w3djqYgeOi5yXyLhG4tSuEw BuRRrzYM4w86FP6IBXffOnJW2uqjtYRmd7CSghPZuUx+tT55E60= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:02 2025 by rpki-client