$ rpki-client -vvf repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft File: 81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft (raw, json) Hash identifier: zcVyp3rEevwjX2MxQDimpinmbhhPgWGsIr2na+l0HcY= Subject key identifier: 7B:93:AF:F4:3B:61:34:E2:5A:CA:29:F2:6B:24:FC:9F:13:AF:77:F7 Authority key identifier: 81:18:6C:06:63:42:A0:E6:6C:D1:92:1A:ED:B5:8A:8C:DD:EE:7E:45 Certificate issuer: /CN=81186C066342A0E66CD1921AEDB58A8CDDEE7E45 Certificate serial: 32E143D6211CA4335FB4A50EAD527C97BDBC6282 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft Manifest number: 04DB Signing time: Wed 04 Jun 2025 10:21:44 +0000 Manifest this update: Wed 04 Jun 2025 10:16:44 +0000 Manifest next update: Sat 07 Jun 2025 21:11:44 +0000 Files and hashes: 1: 3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa (hash: RbGIdOLWBU5xVV9K0LoZOkwEhMFKzskG/yrpat5y7rY=) 2: 3130332e3131362e3131322e302f32322d3232203d3e203234353332.roa (hash: P4tF/toC2yTvcWCVKc3kDK6iTGruhcVaRl9T+qXARgU=) 3: 81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl (hash: E/GgEc2Ylq/97MTEAfkbM2knIdTFXlHICK2mD6fc330=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 21:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:e1:43:d6:21:1c:a4:33:5f:b4:a5:0e:ad:52:7c:97:bd:bc:62:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81186C066342A0E66CD1921AEDB58A8CDDEE7E45 Validity Not Before: Jun 4 10:16:44 2025 GMT Not After : Jun 7 21:11:44 2025 GMT Subject: CN=7B93AFF43B6134E25ACA29F26B24FC9F13AF77F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ca:ef:6d:f2:d0:fd:f8:d4:c7:6e:af:fe:00: a5:28:26:c0:b3:4e:ea:c7:d7:30:49:fb:a0:b8:13: 4a:e5:36:fa:8b:00:67:9e:2f:d7:3a:e7:16:d3:4c: 63:d2:f5:67:0b:fc:ba:9d:85:fc:4b:98:39:27:bd: 7a:6a:22:45:a1:6e:86:67:4b:5c:fa:5d:a3:bb:c6: d5:7c:79:3d:07:06:b1:17:7b:7a:51:e4:2b:af:c2: d6:9e:36:a5:1e:b8:bf:37:35:32:48:62:2f:b5:46: df:73:c7:3b:70:16:e0:ec:74:22:e7:38:76:1e:24: 68:f3:f8:7d:23:39:70:2d:f2:f7:f4:f0:76:df:d5: ba:69:30:bc:d5:a2:ff:56:95:0e:e6:08:f7:31:2f: 48:c3:be:b1:19:ce:dc:1c:9d:9d:66:aa:33:04:e0: de:bc:dd:a8:2a:11:13:fb:a0:b2:41:04:bd:14:42: f6:8e:d9:1b:f0:9c:cd:35:ad:2b:32:44:34:ba:8c: 65:df:39:a0:f6:8b:fa:9c:be:95:a3:08:2a:7f:e2: 8d:80:85:83:32:f7:a2:ef:ec:fc:81:e7:be:95:a9: e8:e9:af:bf:c4:7d:d5:a3:5e:b1:e2:1c:b7:d6:54: 4b:eb:8f:dd:f6:c9:95:32:4d:57:15:af:a4:8f:a3: ac:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:93:AF:F4:3B:61:34:E2:5A:CA:29:F2:6B:24:FC:9F:13:AF:77:F7 X509v3 Authority Key Identifier: keyid:81:18:6C:06:63:42:A0:E6:6C:D1:92:1A:ED:B5:8A:8C:DD:EE:7E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f4:2e:dd:0e:5d:75:0c:a8:5b:cd:a4:bc:87:57:7c:8d:12: 11:6e:0f:ee:12:e7:de:38:24:fd:f0:7b:a9:63:ff:f8:a8:1e: be:3d:84:9b:85:61:9f:dd:a7:8c:b0:77:e0:22:b9:70:a5:20: 39:d2:34:1b:1d:73:ce:98:c5:36:a3:4a:73:77:3c:41:9c:79: 9f:3e:9a:df:5f:ae:c2:4e:0a:dd:60:12:f5:a4:08:7f:f1:28: bb:8d:98:6a:4c:52:2c:d5:75:e8:30:08:8f:50:87:27:ab:58: 12:10:00:1b:fe:0b:70:20:f9:69:3e:20:32:27:a6:3b:f2:e9: aa:85:1a:51:fc:8a:bf:4d:0b:4b:16:c1:e1:18:8a:06:7b:e6: 42:1a:52:63:1e:ef:e7:dd:bb:fb:4b:5d:01:4a:9b:72:5a:8b: ac:f8:5e:a0:90:10:ee:0a:9c:7e:f4:c8:47:8b:2e:72:76:ea: da:52:1a:11:1e:28:30:c4:77:de:31:40:bd:45:0b:91:78:6a: bb:7d:22:74:0b:33:4c:81:8d:00:34:bd:bb:29:39:02:a2:99: 06:7c:dc:4a:9a:c0:9a:5d:9d:ee:a8:89:8c:4e:3c:18:ea:dc: e8:66:5e:29:0a:bd:35:18:88:9f:99:96:e9:23:63:aa:09:97: f9:64:51:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMuFD1iEcpDNftKUOrVJ8l728YoIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODExODZDMDY2MzQyQTBFNjZDRDE5MjFBRURCNThBOENE REVFN0U0NTAeFw0yNTA2MDQxMDE2NDRaFw0yNTA2MDcyMTExNDRaMDMxMTAvBgNV BAMTKDdCOTNBRkY0M0I2MTM0RTI1QUNBMjlGMjZCMjRGQzlGMTNBRjc3RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEyu9t8tD9+NTHbq/+AKUoJsCz TurH1zBJ+6C4E0rlNvqLAGeeL9c65xbTTGPS9WcL/LqdhfxLmDknvXpqIkWhboZn S1z6XaO7xtV8eT0HBrEXe3pR5CuvwtaeNqUeuL83NTJIYi+1Rt9zxztwFuDsdCLn OHYeJGjz+H0jOXAt8vf08Hbf1bppMLzVov9WlQ7mCPcxL0jDvrEZztwcnZ1mqjME 4N683agqERP7oLJBBL0UQvaO2RvwnM01rSsyRDS6jGXfOaD2i/qcvpWjCCp/4o2A hYMy96Lv7PyB576Vqejpr7/EfdWjXrHiHLfWVEvrj932yZUyTVcVr6SPo6zjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe5Ov9DthNOJayinyayT8nxOvd/cwHwYDVR0j BBgwFoAUgRhsBmNCoOZs0ZIa7bWKjN3ufkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjliZjc5Ny05MTNkLTQ4ZGQtODMyYy0zM2I0MDliNWY3OWIvMC84MTE4NkMwNjYz NDJBMEU2NkNEMTkyMUFFREI1OEE4Q0RERUU3RTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODExODZDMDY2MzQyQTBFNjZDRDE5MjFBRURCNThBOENEREVF N0U0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGY5YmY3OTctOTEzZC00OGRkLTgz MmMtMzNiNDA5YjVmNzliLzAvODExODZDMDY2MzQyQTBFNjZDRDE5MjFBRURCNThB OENEREVFN0U0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIv0Lt0OXXUMqFvNpLyHV3yNEhFuD+4S5944 JP3we6lj//ioHr49hJuFYZ/dp4ywd+AiuXClIDnSNBsdc86YxTajSnN3PEGceZ8+ mt9frsJOCt1gEvWkCH/xKLuNmGpMUizVdegwCI9QhyerWBIQABv+C3Ag+Wk+IDIn pjvy6aqFGlH8ir9NC0sWweEYigZ75kIaUmMe7+fdu/tLXQFKm3Jai6z4XqCQEO4K nH70yEeLLnJ26tpSGhEeKDDEd94xQL1FC5F4art9InQLM0yBjQA0vbspOQKimQZ8 3EqawJpdne6oiYxOPBjq3OhmXikKvTUYiJ+ZlukjY6oJl/lkUcc= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:29 2025 by rpki-client