$ rpki-client -vvf repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft File: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft (raw, json) Hash identifier: xECwN+H2oMqr/+PAc2wGjutU7SThjPZ0v3DBwcUYS0g= Subject key identifier: B4:87:6B:13:DC:9F:EF:03:15:43:83:96:61:24:F5:F0:E4:42:C5:AB Authority key identifier: 0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD Certificate issuer: /CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Certificate serial: 1AE3370F81D9CE904783DACD2C8492E06A2740AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft Manifest number: 019C Signing time: Thu 05 Jun 2025 13:31:29 +0000 Manifest this update: Thu 05 Jun 2025 13:26:29 +0000 Manifest next update: Sun 08 Jun 2025 14:39:29 +0000 Files and hashes: 1: 3130332e3134372e3134342e302f32332d3234203d3e203137373639.roa (hash: k4bVgZQwwhwXyEq21/fgsjgZLJvFrNFPkmTEg/UKHTM=) 2: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl (hash: MYLR1ltzUk2Ayq5qavjn1/Z8KqBjGK+/dEbc4Mc+9Jc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 14:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:e3:37:0f:81:d9:ce:90:47:83:da:cd:2c:84:92:e0:6a:27:40:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Validity Not Before: Jun 5 13:26:29 2025 GMT Not After : Jun 8 14:39:29 2025 GMT Subject: CN=B4876B13DC9FEF03154383966124F5F0E442C5AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:93:f1:27:35:43:8e:5f:56:cd:05:9c:05:b6: 19:8b:f5:91:39:cd:6a:81:98:8c:fb:3f:f8:99:93: 85:e9:4a:27:f4:7b:fe:c7:53:32:ab:32:e4:37:23: 27:da:24:1a:c3:d4:6d:f6:bd:6b:17:d0:26:c2:a1: ff:93:67:bc:bf:30:0d:11:a9:b7:ef:b8:4b:dd:ce: 42:64:46:63:0e:52:72:77:6c:1c:a9:d8:e0:cd:a2: 20:61:b1:d0:17:58:63:cd:bb:6d:6e:f0:4d:41:8a: a6:6b:9b:22:f4:8f:eb:21:d7:b6:07:f0:35:2e:a3: 76:05:bf:3c:ce:4a:82:89:61:00:d4:68:07:df:19: 72:fd:2d:b1:14:84:2e:eb:69:4e:3f:ba:60:24:14: 48:3c:b3:24:af:b3:7b:9c:e6:a4:9e:15:c3:8f:50: f9:33:0f:9d:ab:fd:34:75:e4:7e:66:10:84:cc:93: de:21:6b:c9:bb:af:ca:68:bf:c2:66:5f:0b:9a:f7: 4e:7f:33:c2:59:9b:f7:31:fd:84:62:f4:d6:bf:02: 41:d5:68:04:f7:e3:7e:e7:f3:5c:f4:3e:bc:a2:55: be:8e:3a:d5:25:00:f0:4d:e2:58:4f:03:19:81:d4: d3:29:02:87:8d:cd:f6:f0:0b:dc:a3:67:8b:a5:8b: ae:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:87:6B:13:DC:9F:EF:03:15:43:83:96:61:24:F5:F0:E4:42:C5:AB X509v3 Authority Key Identifier: keyid:0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:fc:46:3a:1f:7e:f1:67:ca:03:d2:f0:c2:41:c9:02:35:45: f2:2f:9e:60:e4:79:d7:5d:e4:f1:4e:f5:16:68:86:56:dc:ce: 5d:8f:af:62:36:21:b0:d0:e7:10:e6:1a:af:b5:37:c0:e3:d0: cd:de:98:d8:98:91:0a:dd:28:c1:2e:da:8a:cf:e9:82:2e:e1: 47:bd:51:d0:32:da:b1:0d:ac:cf:2c:1d:85:de:3f:46:3b:9f: 93:3e:1e:d6:d2:21:73:5e:5e:74:23:d0:20:07:37:f6:6a:41: 99:f2:0f:6b:84:24:8d:d9:91:c8:a7:77:b9:2e:84:78:ca:fb: 6f:00:74:96:11:ae:88:5b:36:7b:1e:f9:ce:8a:16:92:cd:73: 38:21:da:e6:35:9c:9f:c2:ee:47:60:b4:1c:f4:81:a2:17:a0: fc:f2:8e:42:b1:78:3b:2b:0e:6b:82:e8:09:de:4a:10:52:87: 3d:b9:30:a1:2b:0f:65:20:95:25:60:57:cc:5c:13:27:57:73: fa:b4:cf:54:95:52:66:97:ab:e9:d6:37:c9:54:77:d0:26:c2: 18:53:de:12:1d:a9:10:e8:4a:84:10:9e:b9:b7:d3:54:3a:49: bb:b6:fa:4d:86:1d:5e:07:93:1d:0a:94:75:71:c5:89:50:a1: e7:70:0f:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGuM3D4HZzpBHg9rNLISS4GonQKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4 NUJGQURGRDAeFw0yNTA2MDUxMzI2MjlaFw0yNTA2MDgxNDM5MjlaMDMxMTAvBgNV BAMTKEI0ODc2QjEzREM5RkVGMDMxNTQzODM5NjYxMjRGNUYwRTQ0MkM1QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/k/EnNUOOX1bNBZwFthmL9ZE5 zWqBmIz7P/iZk4XpSif0e/7HUzKrMuQ3IyfaJBrD1G32vWsX0CbCof+TZ7y/MA0R qbfvuEvdzkJkRmMOUnJ3bByp2ODNoiBhsdAXWGPNu21u8E1BiqZrmyL0j+sh17YH 8DUuo3YFvzzOSoKJYQDUaAffGXL9LbEUhC7raU4/umAkFEg8sySvs3uc5qSeFcOP UPkzD52r/TR15H5mEITMk94ha8m7r8pov8JmXwua905/M8JZm/cx/YRi9Na/AkHV aAT3437n81z0PryiVb6OOtUlAPBN4lhPAxmB1NMpAoeNzfbwC9yjZ4uli66tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtIdrE9yf7wMVQ4OWYST18ORCxaswHwYDVR0j BBgwFoAUCh38tKQ4YeSnG81kV5IAVIW/rf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODVjYmQ5NS01NzRmLTQwNWItOGJkZS0wZGRiOWM5YmRkYmEvMC8wQTFERkNCNEE0 Mzg2MUU0QTcxQkNENjQ1NzkyMDA1NDg1QkZBREZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4NUJG QURGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg1Y2JkOTUtNTc0Zi00MDViLThi ZGUtMGRkYjljOWJkZGJhLzAvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAw NTQ4NUJGQURGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFD8RjoffvFnygPS8MJByQI1RfIvnmDkeddd 5PFO9RZohlbczl2Pr2I2IbDQ5xDmGq+1N8Dj0M3emNiYkQrdKMEu2orP6YIu4Ue9 UdAy2rENrM8sHYXeP0Y7n5M+HtbSIXNeXnQj0CAHN/ZqQZnyD2uEJI3Zkcind7ku hHjK+28AdJYRrohbNnse+c6KFpLNczgh2uY1nJ/C7kdgtBz0gaIXoPzyjkKxeDsr DmuC6AneShBShz25MKErD2UglSVgV8xcEydXc/q0z1SVUmaXq+nWN8lUd9AmwhhT 3hIdqRDoSoQQnrm301Q6Sbu2+k2GHV4Hkx0KlHVxxYlQoedwD3M= -----END CERTIFICATE-----Generated at Thu Jun 5 18:14:39 2025 by rpki-client