$ rpki-client -vvf repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft File: 439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft (raw, json) Hash identifier: BNL5vci9DVzRQHN6/Tuo5iDwI6zvHMVXf/plLM3pRV4= Subject key identifier: 03:AC:D9:19:36:D7:8A:9C:78:F6:5B:35:90:09:64:26:E9:06:0F:E9 Authority key identifier: 43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57 Certificate issuer: /CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057 Certificate serial: 04CAFCD346124F4C4DB01B2E6170235A84C65FBE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft Manifest number: 01E1 Signing time: Fri 06 Jun 2025 12:40:45 +0000 Manifest this update: Fri 06 Jun 2025 12:35:45 +0000 Manifest next update: Mon 09 Jun 2025 23:02:45 +0000 Files and hashes: 1: 439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl (hash: XbAkNjsCnHQxOUzTE4jEBCT/DICJFthSNiNq3RRCcw0=) 2: 3130332e3138372e39302e302f32342d3234203d3e20313439383839.roa (hash: 38VctucVjPuOnSloXC5TfoiL9rHRKzx9uk3RVJIrnlg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 23:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ca:fc:d3:46:12:4f:4c:4d:b0:1b:2e:61:70:23:5a:84:c6:5f:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057 Validity Not Before: Jun 6 12:35:45 2025 GMT Not After : Jun 9 23:02:45 2025 GMT Subject: CN=03ACD91936D78A9C78F65B3590096426E9060FE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9d:d8:a8:c1:1d:f0:ae:89:7a:f7:79:08:88: d0:36:c5:2a:2b:ff:4d:2c:06:3a:75:e9:9f:b4:f4: f3:3a:df:72:a6:83:ae:e5:b1:77:23:5f:07:84:14: 81:e3:ce:ce:a9:75:a5:a2:5d:e6:27:ec:25:fb:0a: 7e:8d:98:00:79:f8:14:b5:59:68:0a:8d:fa:fe:84: ae:8d:fa:f6:65:51:1c:78:3b:b2:18:b9:08:b8:47: 3e:fa:73:17:86:77:61:a9:9d:aa:53:3f:cc:2b:70: ec:e1:2b:88:2d:27:3f:3e:99:54:b8:3d:bf:25:7a: b1:42:e6:da:f2:25:05:40:f3:5f:23:ab:0f:80:82: e5:7d:7c:aa:d7:e2:5a:e0:52:cd:94:ba:0b:7f:fa: e8:bd:92:09:66:b9:61:c2:2c:2f:a9:10:e6:ac:ae: 14:c7:3a:32:34:34:26:3a:ad:1a:d9:26:94:5d:30: f1:87:2d:48:15:c0:50:98:90:cc:dc:18:3f:9d:21: 6f:de:25:87:81:85:4f:db:61:fc:ed:05:06:79:11: a0:b6:e9:3d:fb:94:4d:6c:bd:6b:29:0c:58:18:5e: 4b:b9:c4:63:c0:2e:9a:17:a0:e3:c3:b9:6b:1e:b4: f9:6e:6a:af:bc:21:ff:6d:fe:a3:e3:a9:22:c5:b6: ae:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:AC:D9:19:36:D7:8A:9C:78:F6:5B:35:90:09:64:26:E9:06:0F:E9 X509v3 Authority Key Identifier: keyid:43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:64:3f:a3:da:05:f1:b2:74:12:f7:c8:85:27:69:e9:03:c6: 87:ff:f4:83:f0:1b:98:ea:95:a8:f2:de:01:95:e9:0a:7f:ff: 79:8c:c4:dc:1c:fb:46:e2:79:e9:36:11:35:3f:5f:60:4f:df: 3e:d6:d0:ea:b0:60:45:43:31:47:8e:43:80:dc:29:8f:dd:06: be:e5:cd:bf:77:85:ce:06:17:84:c3:32:35:4f:9e:40:62:87: cf:d1:27:97:c6:09:1f:5f:7e:37:c9:fb:8a:f3:4e:36:8c:80: 3a:11:84:7c:24:d1:8e:ec:3e:00:f2:f7:df:92:30:13:26:2c: 15:70:e1:52:dd:1b:93:f2:e3:51:5e:37:5e:9a:f1:dc:b7:39: 37:a5:8d:f9:dc:42:2c:4b:68:63:10:04:62:42:1f:88:86:f6: ed:c7:75:a8:43:bf:ef:18:6d:93:67:ce:17:d4:f3:1f:08:4f: 79:57:af:b2:1a:ce:50:22:3a:b1:b2:6f:87:32:49:5c:29:97: 9c:e5:b1:49:e6:a3:fd:9d:38:cb:96:12:40:d4:70:d5:b2:74: d7:47:8d:81:38:7f:3e:b4:9c:5d:2f:c4:e7:f2:5a:78:48:fe: a0:63:62:32:e6:62:da:83:23:00:f7:dc:02:57:9c:30:bb:60: df:8e:4a:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBMr800YST0xNsBsuYXAjWoTGX74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJCMUIz MDEwNTA1NzAeFw0yNTA2MDYxMjM1NDVaFw0yNTA2MDkyMzAyNDVaMDMxMTAvBgNV BAMTKDAzQUNEOTE5MzZENzhBOUM3OEY2NUIzNTkwMDk2NDI2RTkwNjBGRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtndiowR3wrol693kIiNA2xSor /00sBjp16Z+09PM633Kmg67lsXcjXweEFIHjzs6pdaWiXeYn7CX7Cn6NmAB5+BS1 WWgKjfr+hK6N+vZlURx4O7IYuQi4Rz76cxeGd2GpnapTP8wrcOzhK4gtJz8+mVS4 Pb8lerFC5tryJQVA818jqw+AguV9fKrX4lrgUs2Uugt/+ui9kglmuWHCLC+pEOas rhTHOjI0NCY6rRrZJpRdMPGHLUgVwFCYkMzcGD+dIW/eJYeBhU/bYfztBQZ5EaC2 6T37lE1svWspDFgYXku5xGPALpoXoOPDuWsetPluaq+8If9t/qPjqSLFtq5/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA6zZGTbXipx49ls1kAlkJukGD+kwHwYDVR0j BBgwFoAUQ50W4D0F1c7KK38TXSu7GzAQUFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGYzYjM3ZC1mZTRkLTQzNmQtYTkzYi1lMWY2ZmNjOWZjNGQvMC80MzlEMTZFMDNE MDVENUNFQ0EyQjdGMTM1RDJCQkIxQjMwMTA1MDU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJCMUIzMDEw NTA1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThmM2IzN2QtZmU0ZC00MzZkLWE5 M2ItZTFmNmZjYzlmYzRkLzAvNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJC MUIzMDEwNTA1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5kP6PaBfGydBL3yIUnaekDxof/9IPwG5jq lajy3gGV6Qp//3mMxNwc+0bieek2ETU/X2BP3z7W0OqwYEVDMUeOQ4DcKY/dBr7l zb93hc4GF4TDMjVPnkBih8/RJ5fGCR9ffjfJ+4rzTjaMgDoRhHwk0Y7sPgDy99+S MBMmLBVw4VLdG5Py41FeN16a8dy3OTeljfncQixLaGMQBGJCH4iG9u3HdahDv+8Y bZNnzhfU8x8IT3lXr7IazlAiOrGyb4cySVwpl5zlsUnmo/2dOMuWEkDUcNWydNdH jYE4fz60nF0vxOfyWnhI/qBjYjLmYtqDIwD33AJXnDC7YN+OSm0= -----END CERTIFICATE-----Generated at Sun Jun 8 03:54:50 2025 by rpki-client