$ rpki-client -vvf repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft File: 81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft (raw, json) Hash identifier: CKQi4XvB+xS7YzAawWP0BcXm1Ff679UXKoq4ITqclus= Subject key identifier: 86:44:D2:6E:E2:27:8B:39:47:6B:2F:95:4C:99:1A:A7:C8:00:29:7B Authority key identifier: 81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A Certificate issuer: /CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A Certificate serial: 3271991630A3C09DD772A8D53EFD198110364543 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft Manifest number: 0107 Signing time: Sat 07 Jun 2025 04:51:19 +0000 Manifest this update: Sat 07 Jun 2025 04:46:19 +0000 Manifest next update: Tue 10 Jun 2025 11:08:19 +0000 Files and hashes: 1: 3130332e39362e3134362e302f32342d3234203d3e20313430343536.roa (hash: lCXTJ163mYE14JSOHwn/GLmazHYII7eBmEeCYKd7cs8=) 2: 3130332e39362e3134362e302f32332d3233203d3e20313430343536.roa (hash: I90vNVHR98Ns9EbFWsBOyXpypkK4ezCBsQ4Nw555WdU=) 3: 81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl (hash: +wYsu4Hefk6haNEzjVXzg+6BkbITl2J7+HM/0X+sdno=) 4: 3130332e39362e3134372e302f32342d3234203d3e20313430343536.roa (hash: g4rcVf7ze2gY12Fw+h+9x7JFApYwzpJ9iR8UsvjWBL0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 11:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:71:99:16:30:a3:c0:9d:d7:72:a8:d5:3e:fd:19:81:10:36:45:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A Validity Not Before: Jun 7 04:46:19 2025 GMT Not After : Jun 10 11:08:19 2025 GMT Subject: CN=8644D26EE2278B39476B2F954C991AA7C800297B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:08:fe:48:2e:39:bc:c4:0a:80:be:82:a0:7a: 58:c8:48:3f:ea:e9:f1:ff:fe:f2:8e:e0:bb:fc:32: f5:38:46:ff:a1:f0:b8:86:e2:7b:da:c8:b4:1b:ab: 8e:a5:4e:e0:00:fb:d2:b1:d6:d8:af:29:76:30:08: 9b:71:58:f4:a1:40:69:89:dc:f7:22:b8:9c:a4:d9: bd:ee:64:11:b5:8c:07:f4:63:75:a1:dd:55:38:02: 50:63:cf:d4:fa:d2:e6:fe:59:ca:29:be:45:f0:52: f1:75:f6:99:bf:53:13:ef:0b:43:d6:8b:61:ed:a6: bf:8f:13:bd:cb:06:c8:1a:35:1a:a2:58:b2:2b:da: 88:aa:5f:f6:3a:13:e5:dd:fc:96:e2:6f:b1:65:c0: 23:69:e3:27:f9:61:7e:df:6a:33:cb:8d:b3:34:3c: 37:e4:e2:bb:a9:31:ac:6e:29:4e:67:40:ba:89:7a: 80:19:bf:5c:d7:bf:a8:a2:25:6b:0d:60:ff:8c:f2: ef:ba:3a:b7:64:7c:10:60:dd:e5:b1:68:ca:5d:50: 20:88:be:8b:bf:2f:1f:dc:b0:30:0f:54:9c:1b:12: b0:0b:51:de:59:5e:86:24:91:a8:3d:0e:ce:58:b8: a9:ca:d5:06:52:c1:76:93:0c:d4:9e:61:28:78:db: 07:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:44:D2:6E:E2:27:8B:39:47:6B:2F:95:4C:99:1A:A7:C8:00:29:7B X509v3 Authority Key Identifier: keyid:81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:ef:66:21:c5:2f:df:cb:63:30:6e:f2:91:58:2b:ec:5f:5e: 48:f7:91:a3:27:06:4b:f6:7c:e4:f3:87:40:0c:09:81:82:f3: e6:f7:99:04:07:39:13:f2:5a:0c:b7:71:dc:c5:2d:27:63:6c: 72:77:be:0e:4a:d8:2e:63:ca:c3:ac:a4:f9:4f:47:76:9f:24: c0:ec:70:04:31:85:a2:d9:9a:65:8d:cf:6b:ee:4a:1d:8d:37: 3b:8c:f6:ba:d7:8f:94:4c:a4:ea:08:1b:43:3e:b9:fd:4e:5c: c5:bf:af:32:e6:d4:ff:56:3a:13:de:6c:42:1e:2e:0d:0c:17: 98:ee:93:b1:cf:2b:dc:05:18:db:d5:97:cf:f6:1d:f4:59:4e: 27:4e:f3:27:f6:66:57:3c:06:34:4d:72:9d:4e:e8:77:50:a0: 5f:e8:eb:e4:04:51:51:67:3a:91:2d:46:00:36:4e:a2:8c:55: 88:7e:2b:d2:13:d4:a5:e6:22:05:a6:30:49:ec:3f:69:0c:1f: c7:5d:38:7c:ce:ad:8a:3b:04:95:c3:9f:31:99:31:fa:4c:12: e4:28:cd:8c:78:a6:dc:81:7e:7c:42:29:ef:16:bd:80:c6:80: 23:9d:23:d5:6c:dc:d7:6a:36:59:8f:49:7c:8c:40:13:54:ff: 40:f1:7d:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMnGZFjCjwJ3XcqjVPv0ZgRA2RUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0QzZG QTJEQ0QwQTAeFw0yNTA2MDcwNDQ2MTlaFw0yNTA2MTAxMTA4MTlaMDMxMTAvBgNV BAMTKDg2NDREMjZFRTIyNzhCMzk0NzZCMkY5NTRDOTkxQUE3QzgwMDI5N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDICP5ILjm8xAqAvoKgeljISD/q 6fH//vKO4Lv8MvU4Rv+h8LiG4nvayLQbq46lTuAA+9Kx1tivKXYwCJtxWPShQGmJ 3PciuJyk2b3uZBG1jAf0Y3Wh3VU4AlBjz9T60ub+WcopvkXwUvF19pm/UxPvC0PW i2Htpr+PE73LBsgaNRqiWLIr2oiqX/Y6E+Xd/Jbib7FlwCNp4yf5YX7fajPLjbM0 PDfk4rupMaxuKU5nQLqJeoAZv1zXv6iiJWsNYP+M8u+6OrdkfBBg3eWxaMpdUCCI vou/Lx/csDAPVJwbErALUd5ZXoYkkag9Ds5YuKnK1QZSwXaTDNSeYSh42weFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhkTSbuInizlHay+VTJkap8gAKXswHwYDVR0j BBgwFoAUgcIDz0WOSKj/NF+0pd2ExvotzQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YTQ3NDZiNy01ZmYyLTQ1NTYtOGEzZS01YTg2Y2JjYzg1OTgvMC84MUMyMDNDRjQ1 OEU0OEE4RkYzNDVGQjRBNUREODRDNkZBMkRDRDBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0QzZGQTJE Q0QwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGE0NzQ2YjctNWZmMi00NTU2LThh M2UtNWE4NmNiY2M4NTk4LzAvODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0 QzZGQTJEQ0QwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMjvZiHFL9/LYzBu8pFYK+xfXkj3kaMnBkv2 fOTzh0AMCYGC8+b3mQQHORPyWgy3cdzFLSdjbHJ3vg5K2C5jysOspPlPR3afJMDs cAQxhaLZmmWNz2vuSh2NNzuM9rrXj5RMpOoIG0M+uf1OXMW/rzLm1P9WOhPebEIe Lg0MF5juk7HPK9wFGNvVl8/2HfRZTidO8yf2Zlc8BjRNcp1O6HdQoF/o6+QEUVFn OpEtRgA2TqKMVYh+K9IT1KXmIgWmMEnsP2kMH8ddOHzOrYo7BJXDnzGZMfpMEuQo zYx4ptyBfnxCKe8WvYDGgCOdI9Vs3NdqNlmPSXyMQBNU/0DxfbY= -----END CERTIFICATE-----Generated at Sun Jun 8 06:11:39 2025 by rpki-client