$ rpki-client -vvf repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft File: 809C666CC84F942588E109E6E6C454A9CD0524EB.mft (raw, json) Hash identifier: khl2UjP2p3+uJzHzfj7dKaN6p3kFljF9+JuL/qV+8P4= Subject key identifier: B7:4A:A6:4D:49:2D:5F:94:08:6A:B3:FE:9F:E0:29:3D:C8:08:E0:0B Authority key identifier: 80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB Certificate issuer: /CN=809C666CC84F942588E109E6E6C454A9CD0524EB Certificate serial: 1BE55F011612C9EBFCC9F3FDBE8C91CEDFFD1480 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft Manifest number: 01C6 Signing time: Sun 01 Jun 2025 19:10:47 +0000 Manifest this update: Sun 01 Jun 2025 19:05:47 +0000 Manifest next update: Thu 05 Jun 2025 05:42:47 +0000 Files and hashes: 1: 3130332e3133312e36312e302f32342d3234203d3e20313338313236.roa (hash: AvZCtYXnhv2U+FmAw+wE/XOaPxSITmQuNQusEE4Cu6A=) 2: 809C666CC84F942588E109E6E6C454A9CD0524EB.crl (hash: fuPAjD0GMtIYYy1grkp8QkbyqsmYPwNobnSFo57oOF4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.crl rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 05:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:e5:5f:01:16:12:c9:eb:fc:c9:f3:fd:be:8c:91:ce:df:fd:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=809C666CC84F942588E109E6E6C454A9CD0524EB Validity Not Before: Jun 1 19:05:47 2025 GMT Not After : Jun 5 05:42:47 2025 GMT Subject: CN=B74AA64D492D5F94086AB3FE9FE0293DC808E00B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c9:5f:c0:0f:d4:9b:c5:4e:5f:a1:b4:26:d7: bb:87:76:3d:d2:1a:ed:74:e6:ad:b4:65:73:db:ec: a6:18:db:17:f3:cd:b7:75:82:fd:a4:90:7f:5b:8e: fd:e0:57:80:46:72:b0:13:4f:ed:b9:90:af:d7:45: ac:c3:34:8c:3a:ee:44:23:e5:04:44:43:cc:a4:46: b3:54:18:22:4f:43:0a:a8:9a:0b:03:20:d5:de:04: ea:95:d5:c3:8d:ce:86:bf:00:a4:4e:9d:71:68:f6: a3:6f:ad:d9:b5:87:30:d8:bc:c5:02:e5:96:6f:61: 01:39:6e:31:3c:f8:99:25:9c:3f:ee:0e:5f:39:4b: 03:b0:67:2e:d1:7e:60:d1:63:46:05:6f:36:67:9e: 70:e3:d4:ff:35:aa:70:f4:bf:e1:25:80:bb:ec:33: dd:ad:20:a1:ab:ae:9d:4f:0f:2a:26:a0:09:45:f5: 39:a8:25:9a:e6:35:2b:14:9f:41:64:b9:d3:12:5e: 60:e5:1d:0b:68:b0:53:59:4d:80:d9:d6:ec:89:b3: ea:1b:ed:c9:f4:7b:25:15:46:5f:05:fa:79:ad:96: 53:21:64:33:a8:ea:c0:54:71:da:76:80:bc:9e:c8: 64:49:2b:e4:72:79:51:a0:57:a1:0c:18:b7:0e:02: cf:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4A:A6:4D:49:2D:5F:94:08:6A:B3:FE:9F:E0:29:3D:C8:08:E0:0B X509v3 Authority Key Identifier: keyid:80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:8f:12:69:cf:ca:c7:20:ff:ed:52:67:ee:31:5b:66:c8:c8: d2:66:c2:e8:a6:76:ce:52:5c:35:25:6f:56:1a:a4:1c:21:ea: 94:f5:01:be:68:d2:33:25:e5:33:b7:af:32:cc:e9:17:0e:71: 2d:a5:55:85:dc:ac:7d:a5:85:32:a8:92:e2:76:a9:ae:e3:7a: 5c:a0:7c:4b:7d:a3:c9:02:03:ca:1f:01:8f:b0:f8:60:3c:80: 9d:41:06:0b:dd:fb:23:88:38:55:a8:d4:11:a8:3f:f6:ac:a3: ed:f3:da:df:ef:27:44:b7:14:9a:95:bb:57:e0:ed:63:7c:9b: 3b:d1:97:0d:26:be:45:eb:79:6e:a5:1a:fb:0a:0f:95:82:41: 0d:50:76:87:3e:02:93:75:e2:d6:55:4a:ff:77:81:fb:c6:f5: 20:82:35:67:35:9a:b5:80:d3:6d:02:e9:a7:2a:a9:fc:15:75: 08:48:e7:60:da:dc:b3:b6:17:7b:2b:1f:65:d1:be:21:2f:f2: 64:4a:8d:a1:97:a0:e7:69:96:bb:90:2b:f4:47:e2:9e:d5:50: 9b:3d:ea:41:d0:fe:c8:d8:10:ab:05:94:ec:d9:e0:31:17:27: d2:17:d2:ab:0d:8a:a5:82:bb:99:62:66:2f:e9:09:48:99:68: 3b:5d:43:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG+VfARYSyev8yfP9voyRzt/9FIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0QTlD RDA1MjRFQjAeFw0yNTA2MDExOTA1NDdaFw0yNTA2MDUwNTQyNDdaMDMxMTAvBgNV BAMTKEI3NEFBNjRENDkyRDVGOTQwODZBQjNGRTlGRTAyOTNEQzgwOEUwMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcyV/AD9SbxU5fobQm17uHdj3S Gu105q20ZXPb7KYY2xfzzbd1gv2kkH9bjv3gV4BGcrATT+25kK/XRazDNIw67kQj 5QREQ8ykRrNUGCJPQwqomgsDINXeBOqV1cONzoa/AKROnXFo9qNvrdm1hzDYvMUC 5ZZvYQE5bjE8+JklnD/uDl85SwOwZy7RfmDRY0YFbzZnnnDj1P81qnD0v+ElgLvs M92tIKGrrp1PDyomoAlF9TmoJZrmNSsUn0FkudMSXmDlHQtosFNZTYDZ1uyJs+ob 7cn0eyUVRl8F+nmtllMhZDOo6sBUcdp2gLyeyGRJK+RyeVGgV6EMGLcOAs+fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt0qmTUktX5QIarP+n+ApPcgI4AswHwYDVR0j BBgwFoAUgJxmbMhPlCWI4Qnm5sRUqc0FJOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmQ1NzIwMS03ZTJmLTQ5YmItOTQxZC05ZmNhYmU4NjIzZjUvMC84MDlDNjY2Q0M4 NEY5NDI1ODhFMTA5RTZFNkM0NTRBOUNEMDUyNEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0QTlDRDA1 MjRFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkNTcyMDEtN2UyZi00OWJiLTk0 MWQtOWZjYWJlODYyM2Y1LzAvODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0 QTlDRDA1MjRFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImPEmnPyscg/+1SZ+4xW2bIyNJmwuimds5S XDUlb1YapBwh6pT1Ab5o0jMl5TO3rzLM6RcOcS2lVYXcrH2lhTKokuJ2qa7jelyg fEt9o8kCA8ofAY+w+GA8gJ1BBgvd+yOIOFWo1BGoP/aso+3z2t/vJ0S3FJqVu1fg 7WN8mzvRlw0mvkXreW6lGvsKD5WCQQ1Qdoc+ApN14tZVSv93gfvG9SCCNWc1mrWA 020C6acqqfwVdQhI52Da3LO2F3srH2XRviEv8mRKjaGXoOdplruQK/RH4p7VUJs9 6kHQ/sjYEKsFlOzZ4DEXJ9IX0qsNiqWCu5liZi/pCUiZaDtdQ18= -----END CERTIFICATE-----Generated at Tue Jun 3 23:26:40 2025 by rpki-client