$ rpki-client -vvf repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft File: 81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft (raw, json) Hash identifier: 1IOUp31cts8voOm4Ya5qX0dgIrls5B5fJ5Ff31bsmQk= Subject key identifier: DA:90:85:80:51:E1:9A:CA:23:99:9D:BB:4D:1A:2C:6A:C7:0B:CA:AC Authority key identifier: 81:C9:4B:E9:98:EC:BD:D2:EF:89:7B:FE:8E:8E:51:B8:74:C0:A6:52 Certificate issuer: /CN=81C94BE998ECBDD2EF897BFE8E8E51B874C0A652 Certificate serial: 699D59E45E4430E3F9ED7401938E078EA4D023B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft Manifest number: 02A6 Signing time: Tue 17 Jun 2025 18:02:22 +0000 Manifest this update: Tue 17 Jun 2025 17:57:22 +0000 Manifest next update: Fri 20 Jun 2025 21:33:22 +0000 Files and hashes: 1: 3130332e3136332e38302e302f32342d3234203d3e20313431363734.roa (hash: FoLDrQVuOiTB01Q4iJpDzeQUT3QZub38J9e/RpqxUr4=) 2: 3130332e3136332e38312e302f32342d3234203d3e20313431363734.roa (hash: snup9E0JcmBDDFQXO29kpKaPJBnM7JWFMr9bOF3Zc+c=) 3: 81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl (hash: jznHiGvarp3iZN4Xua2E8vgSSYS1sfbL6EvSx5U/vwc=) 4: 3130332e3136332e38302e302f32332d3233203d3e20313431363734.roa (hash: LX1akCK1RumCTw48vx3vGALGY+ae+t+bkrwj6Dc+RMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 21:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:9d:59:e4:5e:44:30:e3:f9:ed:74:01:93:8e:07:8e:a4:d0:23:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81C94BE998ECBDD2EF897BFE8E8E51B874C0A652 Validity Not Before: Jun 17 17:57:22 2025 GMT Not After : Jun 20 21:33:22 2025 GMT Subject: CN=DA90858051E19ACA23999DBB4D1A2C6AC70BCAAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cd:76:f2:3b:e8:77:d6:84:07:c9:fd:06:67: a6:a3:35:4a:23:57:f3:90:e5:65:56:85:46:23:5c: d4:c9:d3:c0:1e:fd:56:1b:90:fa:1a:2d:99:59:f7: bf:61:e5:fb:aa:08:4c:fb:3b:3a:49:cb:47:24:c5: 75:f7:96:4b:e6:e5:38:24:97:97:6d:6a:fc:c2:b1: 06:ad:4e:1d:4c:8f:e2:7b:81:7a:51:fe:35:ca:80: 26:d4:24:44:90:94:b9:be:cf:51:d7:ea:5f:19:1e: 29:34:95:d6:8c:aa:86:35:81:e2:2e:3f:e0:10:bc: cf:b9:61:bb:f7:60:eb:c0:15:78:89:a1:d4:be:ca: bd:93:e4:e2:7f:10:56:b4:11:ee:c2:04:a5:a6:f8: 6a:77:c7:cc:23:7d:bb:11:a7:b3:1e:a2:12:05:6f: 4e:4c:72:ce:74:ed:e9:a9:9e:d7:2c:e5:fc:97:df: 67:3c:ea:d1:2b:e7:03:4f:25:16:93:10:44:9c:33: a5:98:fa:9a:59:e6:46:40:71:08:c6:a4:38:62:77: 34:e7:80:7f:35:75:5d:c6:1a:22:18:15:86:13:04: b4:06:85:d9:f1:69:ca:c1:31:5a:9b:4e:ed:fc:f3: b8:27:0d:61:c0:86:5d:51:4f:e6:34:93:2f:e6:17: 59:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:90:85:80:51:E1:9A:CA:23:99:9D:BB:4D:1A:2C:6A:C7:0B:CA:AC X509v3 Authority Key Identifier: keyid:81:C9:4B:E9:98:EC:BD:D2:EF:89:7B:FE:8E:8E:51:B8:74:C0:A6:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:21:25:1b:34:e1:69:32:4c:81:3d:35:53:01:fd:13:d5:0e: 1a:a7:e5:91:ac:0a:ad:bf:a1:cc:f8:fd:9f:17:96:58:a0:8e: 3a:11:ef:52:30:84:2a:38:23:5b:93:f3:0a:25:d9:50:e1:d6: f7:f8:93:cd:a5:d7:46:e6:1c:ae:6d:bc:80:bf:08:a6:42:70: d7:a1:14:49:cb:da:d1:e1:c1:b4:54:47:17:67:69:f7:bf:53: f5:6a:36:ef:ae:ee:22:e8:0b:74:b2:0f:e7:a7:2e:91:86:aa: 60:bc:8d:f6:23:b0:a7:8f:83:49:85:7f:dc:ca:5b:7e:cb:82: ff:3b:6d:20:d6:2f:0c:87:4f:17:e6:43:54:0a:bd:b1:0f:be: 89:bf:71:db:2c:4a:15:07:0d:0e:06:47:dd:e3:9e:b8:7d:16: fc:72:fc:ae:a8:e5:c4:9e:b2:3f:27:26:b9:ce:ac:09:e1:0e: 91:19:ef:5c:a1:8c:55:f5:34:21:38:68:31:23:25:52:53:4c: e5:e2:58:9d:4a:61:a7:d2:1e:cf:2a:41:7e:4f:f4:ff:2b:86: 29:49:e4:b2:40:85:ff:eb:a9:25:ba:4b:15:96:60:a5:a6:16: e0:e2:90:fc:d0:5f:55:62:cf:95:28:e5:6f:45:c1:0c:71:15: 17:eb:23:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaZ1Z5F5EMOP57XQBk44HjqTQI7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUxQjg3 NEMwQTY1MjAeFw0yNTA2MTcxNzU3MjJaFw0yNTA2MjAyMTMzMjJaMDMxMTAvBgNV BAMTKERBOTA4NTgwNTFFMTlBQ0EyMzk5OURCQjREMUEyQzZBQzcwQkNBQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRzXbyO+h31oQHyf0GZ6ajNUoj V/OQ5WVWhUYjXNTJ08Ae/VYbkPoaLZlZ979h5fuqCEz7OzpJy0ckxXX3lkvm5Tgk l5dtavzCsQatTh1Mj+J7gXpR/jXKgCbUJESQlLm+z1HX6l8ZHik0ldaMqoY1geIu P+AQvM+5Ybv3YOvAFXiJodS+yr2T5OJ/EFa0Ee7CBKWm+Gp3x8wjfbsRp7MeohIF b05Mcs507empntcs5fyX32c86tEr5wNPJRaTEEScM6WY+ppZ5kZAcQjGpDhidzTn gH81dV3GGiIYFYYTBLQGhdnxacrBMVqbTu3887gnDWHAhl1RT+Y0ky/mF1njAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2pCFgFHhmsojmZ27TRosascLyqwwHwYDVR0j BBgwFoAUgclL6ZjsvdLviXv+jo5RuHTAplIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDIzNGQ1MC02N2UxLTQxOWMtODViYS02NGJhOGMxMTEyMjUvMC84MUM5NEJFOTk4 RUNCREQyRUY4OTdCRkU4RThFNTFCODc0QzBBNjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUxQjg3NEMw QTY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQyMzRkNTAtNjdlMS00MTljLTg1 YmEtNjRiYThjMTExMjI1LzAvODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUx Qjg3NEMwQTY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGIhJRs04WkyTIE9NVMB/RPVDhqn5ZGsCq2/ ocz4/Z8XlligjjoR71IwhCo4I1uT8wol2VDh1vf4k82l10bmHK5tvIC/CKZCcNeh FEnL2tHhwbRURxdnafe/U/VqNu+u7iLoC3SyD+enLpGGqmC8jfYjsKePg0mFf9zK W37Lgv87bSDWLwyHTxfmQ1QKvbEPvom/cdssShUHDQ4GR93jnrh9Fvxy/K6o5cSe sj8nJrnOrAnhDpEZ71yhjFX1NCE4aDEjJVJTTOXiWJ1KYafSHs8qQX5P9P8rhilJ 5LJAhf/rqSW6SxWWYKWmFuDikPzQX1Viz5Uo5W9FwQxxFRfrI28= -----END CERTIFICATE-----Generated at Thu Jun 19 06:57:56 2025 by rpki-client