$ rpki-client -vvf repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft File: 81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft (raw, json) Hash identifier: gXVvVCclvJYYXbVJabYQA6Jj2OV4XKdp9sS/aYde8TU= Subject key identifier: 6D:5B:D4:72:15:02:67:27:4F:A4:85:D4:3A:BB:AA:30:A0:7C:39:5B Authority key identifier: 81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A Certificate issuer: /CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A Certificate serial: 5ADF54318B7D8189914B1603FC697F195636271F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft Manifest number: 0130 Signing time: Sat 06 Sep 2025 22:21:19 +0000 Manifest this update: Sat 06 Sep 2025 22:16:19 +0000 Manifest next update: Wed 10 Sep 2025 09:05:19 +0000 Files and hashes: 1: 3130332e39362e3134372e302f32342d3234203d3e20313430343536.roa (hash: JE5sa6AJ1Mld5tF+2Ipz0AdqItfZzJvAXpbXLSMBkkY=) 2: 3130332e39362e3134362e302f32342d3234203d3e20313430343536.roa (hash: 5U1TPFLrHbgyHMQ/fhpf0UIVuTfu8KAoi8W0QJ1AERI=) 3: 3130332e39362e3134362e302f32332d3233203d3e20313430343536.roa (hash: soTFrYPYqOT0wkrn6Py3xPs0fFiW/5/f4549L3r+Igg=) 4: 81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl (hash: NtZNGp7YwugPqGVBfjGPLSd9W8EUrfrDRCTcQAzTvxM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 09:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:df:54:31:8b:7d:81:89:91:4b:16:03:fc:69:7f:19:56:36:27:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A Validity Not Before: Sep 6 22:16:19 2025 GMT Not After : Sep 10 09:05:19 2025 GMT Subject: CN=6D5BD472150267274FA485D43ABBAA30A07C395B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ae:c8:73:13:f3:fb:e0:42:02:ea:ad:c7:07: e5:bf:56:aa:ee:c5:a3:b7:81:0b:b7:2c:73:4c:b8: b3:d3:bb:78:3f:78:39:35:57:50:31:77:f6:bc:06: db:95:94:54:ac:c5:82:a4:14:ad:07:7e:03:c5:73: b8:4f:e7:54:57:19:1b:aa:03:4f:4e:e8:6e:94:5c: 5f:06:cf:40:ab:b0:2a:de:c5:dd:70:1e:d2:97:67: 06:ce:ad:a5:9c:18:03:d1:a4:82:3d:c3:63:a3:c6: d4:f1:9d:28:e0:d1:2e:32:a2:ed:c2:03:22:42:23: 6b:7b:d5:57:ce:d0:71:f1:e7:2f:9e:f3:09:de:f1: cc:74:4b:06:5c:ba:9f:f4:9c:1d:ea:34:1b:c5:0d: ab:1f:18:1a:01:14:f8:db:48:99:a2:f3:22:e4:92: 1b:96:60:d4:eb:59:4d:d4:b3:e6:ff:30:d7:ec:19: 9c:0e:ed:72:7a:94:15:8e:11:ac:86:7e:90:9d:25: 7a:fb:4a:2c:7b:5b:7d:54:d5:6c:e9:cf:83:50:42: 77:c0:32:5e:41:71:c5:1b:dc:20:d7:e5:19:14:6d: 99:86:b1:09:32:a8:cc:c9:92:bb:11:41:a0:57:bd: e1:fc:db:1d:79:38:f5:26:c0:bd:88:24:1b:89:62: cb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5B:D4:72:15:02:67:27:4F:A4:85:D4:3A:BB:AA:30:A0:7C:39:5B X509v3 Authority Key Identifier: keyid:81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:96:59:6a:68:62:19:04:57:39:13:06:28:ff:91:5f:ab:ed: 21:ef:c0:2e:3b:82:4b:33:fd:3c:60:bb:c1:7d:7e:4f:b1:da: 3a:8a:b1:fd:9c:bc:2c:d3:33:df:34:ac:f7:04:86:45:51:08: ac:3b:ec:76:9b:b7:1a:5d:e9:74:46:2f:3a:01:c2:1a:8e:24: 5e:c1:f9:52:1f:03:2c:29:ec:eb:66:01:3f:c6:4b:58:1e:44: 81:ab:a8:93:fd:3f:90:71:5c:0e:4e:8d:fa:97:a6:61:e1:83: 41:33:22:f1:9d:85:d8:10:5f:1f:81:57:c6:74:5d:2e:3a:74: 82:5b:9a:b7:bd:98:d3:f0:a2:ff:ea:ea:c4:7f:7b:d6:4d:61: bd:3c:87:f9:57:ca:9c:78:fb:47:b2:bd:56:0f:b1:10:5d:79: 1d:d2:f7:81:6d:d0:b1:9e:88:6b:ff:83:5c:ca:10:76:c8:21: ca:56:9c:91:23:ed:eb:e8:a3:05:2e:43:7d:1b:26:5a:61:97: 52:c1:24:d7:3f:39:84:45:19:ac:0d:4f:cf:53:e2:87:55:22: 8b:3e:0d:3c:91:3e:5c:85:c1:4a:ac:79:dc:64:02:40:4d:19: 59:47:53:3e:8d:a2:1b:07:67:96:3e:12:93:a4:00:6f:07:ad: 7e:ec:aa:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWt9UMYt9gYmRSxYD/Gl/GVY2Jx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0QzZG QTJEQ0QwQTAeFw0yNTA5MDYyMjE2MTlaFw0yNTA5MTAwOTA1MTlaMDMxMTAvBgNV BAMTKDZENUJENDcyMTUwMjY3Mjc0RkE0ODVENDNBQkJBQTMwQTA3QzM5NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcrshzE/P74EIC6q3HB+W/Vqru xaO3gQu3LHNMuLPTu3g/eDk1V1Axd/a8BtuVlFSsxYKkFK0HfgPFc7hP51RXGRuq A09O6G6UXF8Gz0CrsCrexd1wHtKXZwbOraWcGAPRpII9w2OjxtTxnSjg0S4you3C AyJCI2t71VfO0HHx5y+e8wne8cx0SwZcup/0nB3qNBvFDasfGBoBFPjbSJmi8yLk khuWYNTrWU3Us+b/MNfsGZwO7XJ6lBWOEayGfpCdJXr7Six7W31U1Wzpz4NQQnfA Ml5BccUb3CDX5RkUbZmGsQkyqMzJkrsRQaBXveH82x15OPUmwL2IJBuJYst1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbVvUchUCZydPpIXUOruqMKB8OVswHwYDVR0j BBgwFoAUgcIDz0WOSKj/NF+0pd2ExvotzQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YTQ3NDZiNy01ZmYyLTQ1NTYtOGEzZS01YTg2Y2JjYzg1OTgvMC84MUMyMDNDRjQ1 OEU0OEE4RkYzNDVGQjRBNUREODRDNkZBMkRDRDBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0QzZGQTJE Q0QwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGE0NzQ2YjctNWZmMi00NTU2LThh M2UtNWE4NmNiY2M4NTk4LzAvODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0 QzZGQTJEQ0QwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHiWWWpoYhkEVzkTBij/kV+r7SHvwC47gksz /Txgu8F9fk+x2jqKsf2cvCzTM980rPcEhkVRCKw77Habtxpd6XRGLzoBwhqOJF7B +VIfAywp7OtmAT/GS1geRIGrqJP9P5BxXA5OjfqXpmHhg0EzIvGdhdgQXx+BV8Z0 XS46dIJbmre9mNPwov/q6sR/e9ZNYb08h/lXypx4+0eyvVYPsRBdeR3S94Ft0LGe iGv/g1zKEHbIIcpWnJEj7evoowUuQ30bJlphl1LBJNc/OYRFGawNT89T4odVIos+ DTyRPlyFwUqsedxkAkBNGVlHUz6NohsHZ5Y+EpOkAG8HrX7sqtE= -----END CERTIFICATE-----Generated at Sun Sep 7 15:31:07 2025 by rpki-client