$ rpki-client -vvf repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft File: 81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft (raw, json) Hash identifier: XZHli6lzOShVhq3nhIQ79zcnKZf1QuaiTdhA5Lp8BvI= Subject key identifier: 09:C9:0F:34:10:FD:5C:26:2A:68:BD:44:A0:6F:2E:84:E3:7E:98:3D Authority key identifier: 81:18:6C:06:63:42:A0:E6:6C:D1:92:1A:ED:B5:8A:8C:DD:EE:7E:45 Certificate issuer: /CN=81186C066342A0E66CD1921AEDB58A8CDDEE7E45 Certificate serial: 2B7EC66AC3532A5889CF1D44F92752EADA215BF2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft Manifest number: 0504 Signing time: Fri 05 Sep 2025 06:01:46 +0000 Manifest this update: Fri 05 Sep 2025 05:56:46 +0000 Manifest next update: Mon 08 Sep 2025 16:50:46 +0000 Files and hashes: 1: 81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl (hash: 4X5uaIG+cLBLtWFdmePDP08MyyNrxp3TwstOVEKe5bA=) 2: 3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa (hash: RbGIdOLWBU5xVV9K0LoZOkwEhMFKzskG/yrpat5y7rY=) 3: 3130332e3131362e3131322e302f32322d3232203d3e203234353332.roa (hash: P4tF/toC2yTvcWCVKc3kDK6iTGruhcVaRl9T+qXARgU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 16:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:7e:c6:6a:c3:53:2a:58:89:cf:1d:44:f9:27:52:ea:da:21:5b:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81186C066342A0E66CD1921AEDB58A8CDDEE7E45 Validity Not Before: Sep 5 05:56:46 2025 GMT Not After : Sep 8 16:50:46 2025 GMT Subject: CN=09C90F3410FD5C262A68BD44A06F2E84E37E983D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d6:f7:61:33:9a:7b:89:d2:d3:8d:8d:f6:12: 2b:87:bf:05:c5:a8:c6:69:f9:44:9f:a7:ab:85:3d: 99:1f:7e:74:bc:92:72:f6:03:40:72:9e:69:38:7c: bf:f9:84:4b:aa:ee:48:b6:c7:8f:14:a6:e1:a6:40: ab:fa:26:98:14:64:53:40:06:85:be:5a:ee:29:e1: 6e:8b:f0:3e:8d:75:1c:8c:f9:9a:01:9d:d5:12:bb: b9:37:ad:51:ca:a7:71:73:b2:e6:76:02:55:89:c5: 6a:bf:e0:14:c9:f6:72:40:82:a5:30:9a:21:32:11: b9:99:de:48:12:86:48:52:7b:6e:23:09:87:c1:06: 12:ac:08:40:4f:a3:f1:d6:91:f1:67:d2:2f:00:5f: c3:1a:de:6b:a9:9d:06:27:75:d4:53:92:be:4a:81: c6:b9:5c:90:b3:29:8f:d9:71:a1:de:95:e3:2c:98: 8e:b4:40:6b:7c:50:6b:d7:74:8e:cc:47:c2:20:b5: 4e:a3:57:67:d6:9b:c8:2c:3b:f1:3d:0d:7b:83:ce: 3a:fa:28:c9:2a:5e:04:94:e8:ec:ab:43:ee:c5:d2: f1:92:64:7a:d8:9c:d6:e2:e2:c8:11:88:5b:a8:9f: 0f:4c:ef:e0:4d:fc:a0:27:34:c3:2a:12:1c:85:fa: 05:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C9:0F:34:10:FD:5C:26:2A:68:BD:44:A0:6F:2E:84:E3:7E:98:3D X509v3 Authority Key Identifier: keyid:81:18:6C:06:63:42:A0:E6:6C:D1:92:1A:ED:B5:8A:8C:DD:EE:7E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:5a:28:9d:61:96:43:b3:03:9e:a1:a8:81:b5:73:fb:d2:52: 3a:bd:33:59:fe:27:c6:4b:42:f9:cb:9e:f8:5e:3b:c1:c0:ac: 60:c4:f7:af:35:17:03:c9:ba:1a:8e:1e:d9:bd:67:f3:65:71: 06:04:14:81:88:6c:0a:36:90:2b:10:42:c3:95:40:1a:37:18: f2:39:be:8e:d8:c9:1d:aa:c1:97:32:d3:1b:01:e1:01:61:97: 26:3f:8a:07:e9:1f:43:c6:ec:20:9e:dd:76:a9:43:2e:c9:e5: 26:75:fc:c0:de:cc:09:cd:3f:0c:e1:d1:f7:c7:f8:89:3f:4f: 2e:65:5e:c4:f1:54:2f:0b:35:98:11:25:5a:1c:32:94:d1:b7: 46:fd:22:ee:a6:e2:77:4a:81:f6:70:33:ac:b9:0b:42:78:d7: 30:10:7e:6e:8e:aa:71:42:23:45:1b:14:95:c9:01:ef:34:bc: a4:bb:c5:d9:8b:67:98:e4:67:a3:2d:51:85:53:bf:b3:de:45: a2:df:8e:99:0a:cd:f1:8a:52:bc:61:8c:58:ed:bb:3e:1e:61: be:9c:9e:24:b3:e8:8b:34:95:a2:94:29:06:50:cb:2b:fc:41: 81:14:06:8a:c4:bb:4f:1c:01:3b:84:55:ff:ca:aa:ba:70:ce: 0e:59:87:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK37GasNTKliJzx1E+SdS6tohW/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODExODZDMDY2MzQyQTBFNjZDRDE5MjFBRURCNThBOENE REVFN0U0NTAeFw0yNTA5MDUwNTU2NDZaFw0yNTA5MDgxNjUwNDZaMDMxMTAvBgNV BAMTKDA5QzkwRjM0MTBGRDVDMjYyQTY4QkQ0NEEwNkYyRTg0RTM3RTk4M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW1vdhM5p7idLTjY32EiuHvwXF qMZp+USfp6uFPZkffnS8knL2A0Bynmk4fL/5hEuq7ki2x48UpuGmQKv6JpgUZFNA BoW+Wu4p4W6L8D6NdRyM+ZoBndUSu7k3rVHKp3FzsuZ2AlWJxWq/4BTJ9nJAgqUw miEyEbmZ3kgShkhSe24jCYfBBhKsCEBPo/HWkfFn0i8AX8Ma3mupnQYnddRTkr5K gca5XJCzKY/ZcaHeleMsmI60QGt8UGvXdI7MR8IgtU6jV2fWm8gsO/E9DXuDzjr6 KMkqXgSU6OyrQ+7F0vGSZHrYnNbi4sgRiFuonw9M7+BN/KAnNMMqEhyF+gXnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCckPNBD9XCYqaL1EoG8uhON+mD0wHwYDVR0j BBgwFoAUgRhsBmNCoOZs0ZIa7bWKjN3ufkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjliZjc5Ny05MTNkLTQ4ZGQtODMyYy0zM2I0MDliNWY3OWIvMC84MTE4NkMwNjYz NDJBMEU2NkNEMTkyMUFFREI1OEE4Q0RERUU3RTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODExODZDMDY2MzQyQTBFNjZDRDE5MjFBRURCNThBOENEREVF N0U0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGY5YmY3OTctOTEzZC00OGRkLTgz MmMtMzNiNDA5YjVmNzliLzAvODExODZDMDY2MzQyQTBFNjZDRDE5MjFBRURCNThB OENEREVFN0U0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9aKJ1hlkOzA56hqIG1c/vSUjq9M1n+J8ZL QvnLnvheO8HArGDE9681FwPJuhqOHtm9Z/NlcQYEFIGIbAo2kCsQQsOVQBo3GPI5 vo7YyR2qwZcy0xsB4QFhlyY/igfpH0PG7CCe3XapQy7J5SZ1/MDezAnNPwzh0ffH +Ik/Ty5lXsTxVC8LNZgRJVocMpTRt0b9Iu6m4ndKgfZwM6y5C0J41zAQfm6OqnFC I0UbFJXJAe80vKS7xdmLZ5jkZ6MtUYVTv7PeRaLfjpkKzfGKUrxhjFjtuz4eYb6c niSz6Is0laKUKQZQyyv8QYEUBorEu08cATuEVf/Kqrpwzg5Zh9c= -----END CERTIFICATE-----Generated at Sun Sep 7 14:03:58 2025 by rpki-client