$ rpki-client -vvf repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft File: 81498B85C0E2937290B9B2119B132DEADBB24A5C.mft (raw, json) Hash identifier: OmcnCM9LsT8+Uw+Nmzpq6czcHskag+AHAmZ3AabcAgk= Subject key identifier: 73:AE:5C:ED:A1:1F:72:B0:34:69:4B:CB:6F:C5:9A:26:F2:31:43:9B Authority key identifier: 81:49:8B:85:C0:E2:93:72:90:B9:B2:11:9B:13:2D:EA:DB:B2:4A:5C Certificate issuer: /CN=81498B85C0E2937290B9B2119B132DEADBB24A5C Certificate serial: 19A2B50E0EEAA0D3CB70603827553E9E354C22B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft Manifest number: 01C7 Signing time: Tue 03 Jun 2025 04:21:21 +0000 Manifest this update: Tue 03 Jun 2025 04:16:21 +0000 Manifest next update: Fri 06 Jun 2025 14:08:21 +0000 Files and hashes: 1: 81498B85C0E2937290B9B2119B132DEADBB24A5C.crl (hash: cWoPhpDg+yt2EvULcMMkzZb+lz+xTIk/G3F9xB/2Oiw=) 2: 3130332e3135392e3232342e302f32332d3234203d3e20313431313437.roa (hash: 49uJeHF+k8HvLvLuvnXcFDfrAZMvN78Q5XdfyLfe2TU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.crl rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 14:08:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:a2:b5:0e:0e:ea:a0:d3:cb:70:60:38:27:55:3e:9e:35:4c:22:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81498B85C0E2937290B9B2119B132DEADBB24A5C Validity Not Before: Jun 3 04:16:21 2025 GMT Not After : Jun 6 14:08:21 2025 GMT Subject: CN=73AE5CEDA11F72B034694BCB6FC59A26F231439B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e9:92:97:77:7b:ae:94:8a:77:d0:c5:73:2a: 1f:2d:c4:c1:97:73:5b:58:93:90:17:f3:33:1f:8d: 3c:17:27:e4:4b:c2:85:40:4a:d2:46:14:6b:1c:a2: 6b:e3:cd:ab:77:d5:92:81:a7:c3:ea:b8:1f:70:45: d7:43:ab:c7:92:5c:39:a4:a8:3e:11:f9:87:d0:20: 11:c3:05:94:2a:9a:8c:c6:99:74:e7:7b:75:13:3d: 34:5d:36:80:5f:33:4d:e9:46:bb:45:af:27:25:fd: c0:22:8d:6d:ed:ca:6d:58:78:3d:11:f3:06:f6:f7: 2d:bd:d7:a0:73:1c:42:08:d1:79:e9:47:15:df:ba: 8c:fd:00:91:4f:e0:b3:2b:c8:6e:c3:fd:c5:1a:39: cb:98:56:21:0b:1c:6b:b2:02:e4:5c:37:dc:46:9f: e0:ae:93:c9:dd:7d:44:ca:0d:bd:cb:09:2e:74:23: 3d:13:13:9d:bf:1f:9b:8b:61:90:76:c4:9c:79:c1: 9d:f6:40:e2:52:14:24:b0:84:3f:9a:4b:d0:83:eb: 9a:b1:04:d9:66:38:87:59:fa:ad:81:84:21:cb:2f: 38:c5:35:97:e6:f7:10:6e:bc:cc:99:2d:61:a1:b4: 89:b3:9e:f2:cd:cd:6f:a7:21:af:6e:fc:81:40:12: 51:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:AE:5C:ED:A1:1F:72:B0:34:69:4B:CB:6F:C5:9A:26:F2:31:43:9B X509v3 Authority Key Identifier: keyid:81:49:8B:85:C0:E2:93:72:90:B9:B2:11:9B:13:2D:EA:DB:B2:4A:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ec:66:1f:99:38:fc:13:8f:9f:42:28:7a:bd:93:74:9f:df: 0d:d3:3b:7b:c4:2a:f5:de:2d:2a:1e:ba:05:41:46:1f:b6:2c: b9:d8:2f:91:ba:e9:ae:1e:c8:f0:54:93:11:b4:dc:21:9a:0a: ef:99:81:12:42:45:7c:fa:8c:55:99:94:ff:13:5e:a5:a5:28: 4e:90:55:fe:75:d4:07:28:31:a5:e9:38:ee:c9:0d:d5:f6:25: a9:ad:ef:2c:f1:63:5a:60:a9:a3:84:8b:7d:c9:b7:4c:91:3f: 3d:a1:af:9c:89:de:f3:34:19:17:b1:4c:0f:2f:30:e0:97:29: f3:a2:fa:73:09:84:32:16:b6:b9:cb:02:af:59:04:57:7f:93: e1:72:d1:e9:67:b8:a6:4d:4d:82:89:6a:a0:56:a3:ce:64:4d: a6:f1:8c:31:aa:85:f0:14:a1:38:f4:ea:70:6a:4d:39:0f:34: c2:4f:7e:2f:f0:f2:8b:0f:fd:55:8b:3d:5f:88:97:07:18:e9: bd:54:31:63:d0:2d:30:74:0b:9e:ba:88:2b:bd:dd:68:b6:0d: 08:20:0a:5e:dd:5b:7f:b6:c3:74:9d:32:d1:6d:c4:7c:06:a9: b8:25:f1:ad:9e:6d:0a:41:d9:2f:4a:3f:32:5a:29:b1:c4:8a: 42:c0:33:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGaK1Dg7qoNPLcGA4J1U+njVMIrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE0OThCODVDMEUyOTM3MjkwQjlCMjExOUIxMzJERUFE QkIyNEE1QzAeFw0yNTA2MDMwNDE2MjFaFw0yNTA2MDYxNDA4MjFaMDMxMTAvBgNV BAMTKDczQUU1Q0VEQTExRjcyQjAzNDY5NEJDQjZGQzU5QTI2RjIzMTQzOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO6ZKXd3uulIp30MVzKh8txMGX c1tYk5AX8zMfjTwXJ+RLwoVAStJGFGscomvjzat31ZKBp8PquB9wRddDq8eSXDmk qD4R+YfQIBHDBZQqmozGmXTne3UTPTRdNoBfM03pRrtFrycl/cAijW3tym1YeD0R 8wb29y2916BzHEII0XnpRxXfuoz9AJFP4LMryG7D/cUaOcuYViELHGuyAuRcN9xG n+Cuk8ndfUTKDb3LCS50Iz0TE52/H5uLYZB2xJx5wZ32QOJSFCSwhD+aS9CD65qx BNlmOIdZ+q2BhCHLLzjFNZfm9xBuvMyZLWGhtImznvLNzW+nIa9u/IFAElHfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc65c7aEfcrA0aUvLb8WaJvIxQ5swHwYDVR0j BBgwFoAUgUmLhcDik3KQubIRmxMt6tuySlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTQ4YjIyMi02ZGVkLTQyOGEtODg4Zi0xMDQ1NGIwODgwYzIvMC84MTQ5OEI4NUMw RTI5MzcyOTBCOUIyMTE5QjEzMkRFQURCQjI0QTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODE0OThCODVDMEUyOTM3MjkwQjlCMjExOUIxMzJERUFEQkIy NEE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGE0OGIyMjItNmRlZC00MjhhLTg4 OGYtMTA0NTRiMDg4MGMyLzAvODE0OThCODVDMEUyOTM3MjkwQjlCMjExOUIxMzJE RUFEQkIyNEE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvsZh+ZOPwTj59CKHq9k3Sf3w3TO3vEKvXe LSoeugVBRh+2LLnYL5G66a4eyPBUkxG03CGaCu+ZgRJCRXz6jFWZlP8TXqWlKE6Q Vf511AcoMaXpOO7JDdX2Jamt7yzxY1pgqaOEi33Jt0yRPz2hr5yJ3vM0GRexTA8v MOCXKfOi+nMJhDIWtrnLAq9ZBFd/k+Fy0elnuKZNTYKJaqBWo85kTabxjDGqhfAU oTj06nBqTTkPNMJPfi/w8osP/VWLPV+IlwcY6b1UMWPQLTB0C566iCu93Wi2DQgg Cl7dW3+2w3SdMtFtxHwGqbgl8a2ebQpB2S9KPzJaKbHEikLAM50= -----END CERTIFICATE-----Generated at Wed Jun 4 00:01:40 2025 by rpki-client