$ rpki-client -vvf repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft File: A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft (raw, json) Hash identifier: LFSJncb4aqw13INlv1SHhLk7Y4ODxocHd5cnsbHViTU= Subject key identifier: 8F:A9:F9:10:48:B9:3F:39:DB:56:2B:8C:FB:6B:6D:D5:4F:01:D0:74 Authority key identifier: A1:91:8C:15:6A:9A:CF:CD:F2:47:1D:EA:FC:61:8E:E1:62:DC:B3:40 Certificate issuer: /CN=A1918C156A9ACFCDF2471DEAFC618EE162DCB340 Certificate serial: 68FC07E2FD1C27D607AE81E552FB446FBC91BFF9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft Manifest number: 01D9 Signing time: Thu 05 Jun 2025 13:11:37 +0000 Manifest this update: Thu 05 Jun 2025 13:06:37 +0000 Manifest next update: Sun 08 Jun 2025 21:26:37 +0000 Files and hashes: 1: 3130332e3136352e3234362e302f32332d3234203d3e20313339343630.roa (hash: +Y8f9IKZhXyPRNzOP8gLDO5FItamxPZwT5YuJiQ+z+Y=) 2: A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl (hash: bSA5aaWGVbshrYRBV4a2NorA70qS6M8SvF3eZx0o6gQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 21:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:fc:07:e2:fd:1c:27:d6:07:ae:81:e5:52:fb:44:6f:bc:91:bf:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1918C156A9ACFCDF2471DEAFC618EE162DCB340 Validity Not Before: Jun 5 13:06:37 2025 GMT Not After : Jun 8 21:26:37 2025 GMT Subject: CN=8FA9F91048B93F39DB562B8CFB6B6DD54F01D074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0c:1b:40:b5:7a:7b:a5:fa:84:25:da:09:b0: 3d:d8:cb:18:aa:d0:91:29:a2:65:8b:42:66:93:96: b3:39:c8:63:95:16:b2:51:40:a0:e6:44:85:87:32: f4:05:45:8d:72:b3:c6:46:06:fe:b6:75:1f:f2:1a: 88:4e:d1:92:36:00:84:10:69:9b:89:09:20:24:a7: 24:dc:21:ef:60:3c:01:e5:be:07:71:dd:01:00:76: 8f:ed:d2:dc:80:90:03:5c:50:a3:10:f1:d7:ee:d6: 9b:06:34:27:a7:af:d5:e4:ee:4b:4b:7a:4f:f7:39: 8b:99:26:aa:ff:af:11:e0:cc:fc:71:9d:94:20:b7: 1c:3f:13:48:a7:86:7a:e5:b9:b5:99:d4:30:f5:d6: 8b:28:1e:99:5c:51:53:d6:1e:e7:10:bb:c8:6a:16: 6d:40:e9:33:87:75:42:dd:6c:28:26:b1:24:55:3d: 18:30:5a:00:b6:62:f8:22:48:f0:9e:55:09:a2:24: 74:1d:21:e7:54:f8:d6:84:a5:63:38:d6:9b:71:2b: 9f:6e:66:bf:df:6a:c2:e6:eb:dd:5e:0f:68:cb:e5: 91:2d:6e:da:43:45:92:7d:6f:f7:30:12:a2:71:b9: c1:60:17:2d:8b:e8:8b:ce:7c:51:61:9f:03:d8:8f: c3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A9:F9:10:48:B9:3F:39:DB:56:2B:8C:FB:6B:6D:D5:4F:01:D0:74 X509v3 Authority Key Identifier: keyid:A1:91:8C:15:6A:9A:CF:CD:F2:47:1D:EA:FC:61:8E:E1:62:DC:B3:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:aa:cc:01:cf:d8:e3:41:13:f5:54:08:30:42:06:19:1e:93: a5:ef:66:c5:37:c9:98:54:38:27:d8:f2:1a:1c:f1:e5:a1:9c: bf:f9:7f:85:2e:e2:54:31:59:50:3a:f5:26:38:f0:73:72:ff: 6e:77:e9:07:ea:41:d5:02:e8:5f:07:27:e5:35:68:3f:f9:5e: a9:ec:c8:f4:dc:29:3b:b4:de:38:fe:3b:9a:b9:6c:f0:69:c2: 6e:22:56:24:31:23:00:d9:95:5d:22:8d:72:af:f0:e7:a8:b0: 4a:80:3c:38:d7:96:16:e4:5d:82:8c:52:da:11:5a:48:43:5f: 3a:d0:96:e4:fd:12:88:43:5f:e1:e0:84:b0:5e:87:d9:1c:5d: 33:d1:c5:d6:1b:86:f7:cf:cd:1c:a8:31:f3:f5:ca:c0:f9:ef: f4:eb:97:eb:50:8c:56:7a:8b:dd:37:cd:66:89:b1:ed:47:7b: 4d:fa:ec:f5:15:6e:a5:55:f7:93:fc:0d:09:93:f4:cc:0f:a3: 45:15:6c:40:b3:79:b7:92:ac:2e:93:b4:d3:8a:d1:31:45:e6: 7e:3a:3c:cc:40:c5:73:0f:02:18:ff:13:26:77:17:fc:e7:f3: a3:ba:7c:7d:d4:f3:37:50:38:91:cb:50:32:62:2c:67:f2:90: 64:b4:9b:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaPwH4v0cJ9YHroHlUvtEb7yRv/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE5MThDMTU2QTlBQ0ZDREYyNDcxREVBRkM2MThFRTE2 MkRDQjM0MDAeFw0yNTA2MDUxMzA2MzdaFw0yNTA2MDgyMTI2MzdaMDMxMTAvBgNV BAMTKDhGQTlGOTEwNDhCOTNGMzlEQjU2MkI4Q0ZCNkI2REQ1NEYwMUQwNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3DBtAtXp7pfqEJdoJsD3Yyxiq 0JEpomWLQmaTlrM5yGOVFrJRQKDmRIWHMvQFRY1ys8ZGBv62dR/yGohO0ZI2AIQQ aZuJCSAkpyTcIe9gPAHlvgdx3QEAdo/t0tyAkANcUKMQ8dfu1psGNCenr9Xk7ktL ek/3OYuZJqr/rxHgzPxxnZQgtxw/E0inhnrlubWZ1DD11osoHplcUVPWHucQu8hq Fm1A6TOHdULdbCgmsSRVPRgwWgC2YvgiSPCeVQmiJHQdIedU+NaEpWM41ptxK59u Zr/fasLm691eD2jL5ZEtbtpDRZJ9b/cwEqJxucFgFy2L6IvOfFFhnwPYj8P1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj6n5EEi5PznbViuM+2tt1U8B0HQwHwYDVR0j BBgwFoAUoZGMFWqaz83yRx3q/GGO4WLcs0AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjhjN2EzNC1iYTMxLTRkMjktODM4NC0xODY3ODliMzg0ZjEvMC9BMTkxOEMxNTZB OUFDRkNERjI0NzFERUFGQzYxOEVFMTYyRENCMzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE5MThDMTU2QTlBQ0ZDREYyNDcxREVBRkM2MThFRTE2MkRD QjM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDY4YzdhMzQtYmEzMS00ZDI5LTgz ODQtMTg2Nzg5YjM4NGYxLzAvQTE5MThDMTU2QTlBQ0ZDREYyNDcxREVBRkM2MThF RTE2MkRDQjM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmqzAHP2ONBE/VUCDBCBhkek6XvZsU3yZhU OCfY8hoc8eWhnL/5f4Uu4lQxWVA69SY48HNy/2536QfqQdUC6F8HJ+U1aD/5Xqns yPTcKTu03jj+O5q5bPBpwm4iViQxIwDZlV0ijXKv8OeosEqAPDjXlhbkXYKMUtoR WkhDXzrQluT9EohDX+HghLBeh9kcXTPRxdYbhvfPzRyoMfP1ysD57/Trl+tQjFZ6 i903zWaJse1He0367PUVbqVV95P8DQmT9MwPo0UVbECzebeSrC6TtNOK0TFF5n46 PMxAxXMPAhj/EyZ3F/zn86O6fH3U8zdQOJHLUDJiLGfykGS0m5A= -----END CERTIFICATE-----Generated at Thu Jun 5 18:33:40 2025 by rpki-client