$ rpki-client -vvf repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft File: 81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft (raw, json) Hash identifier: bwy1QH6Pks4ePPkDGW/flbdUxzbTZLrTI/aAwsN6D2A= Subject key identifier: C6:21:C5:9C:9B:AF:F9:B9:CB:4B:DC:07:EA:14:88:FB:26:38:40:F7 Authority key identifier: 81:C9:4B:E9:98:EC:BD:D2:EF:89:7B:FE:8E:8E:51:B8:74:C0:A6:52 Certificate issuer: /CN=81C94BE998ECBDD2EF897BFE8E8E51B874C0A652 Certificate serial: 769F6669B59C11B4C10A360965F9317466FCD1DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft Manifest number: 0291 Signing time: Thu 01 May 2025 07:32:19 +0000 Manifest this update: Thu 01 May 2025 07:27:19 +0000 Manifest next update: Sun 04 May 2025 13:58:19 +0000 Files and hashes: 1: 3130332e3136332e38302e302f32332d3233203d3e20313431363734.roa (hash: LX1akCK1RumCTw48vx3vGALGY+ae+t+bkrwj6Dc+RMk=) 2: 3130332e3136332e38312e302f32342d3234203d3e20313431363734.roa (hash: snup9E0JcmBDDFQXO29kpKaPJBnM7JWFMr9bOF3Zc+c=) 3: 3130332e3136332e38302e302f32342d3234203d3e20313431363734.roa (hash: FoLDrQVuOiTB01Q4iJpDzeQUT3QZub38J9e/RpqxUr4=) 4: 81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl (hash: bx27i9xIRZLC2ZYukc5XI7ySUEQIa1iLzRXzexzD/Xk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 13:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:9f:66:69:b5:9c:11:b4:c1:0a:36:09:65:f9:31:74:66:fc:d1:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81C94BE998ECBDD2EF897BFE8E8E51B874C0A652 Validity Not Before: May 1 07:27:19 2025 GMT Not After : May 4 13:58:19 2025 GMT Subject: CN=C621C59C9BAFF9B9CB4BDC07EA1488FB263840F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:27:28:e8:3f:6d:26:1e:67:96:6e:5b:24:a3: 28:bc:23:79:92:d1:9f:48:77:c2:42:00:c0:01:77: c9:86:4b:3b:24:3a:2e:6d:73:3c:41:b9:e0:5a:34: 34:9c:8b:16:16:83:18:b8:f1:d2:3f:70:80:41:ef: 88:9a:91:aa:51:ff:de:0b:98:8b:3c:65:22:90:3c: 4d:c1:be:34:43:d8:12:41:63:2d:e8:23:51:7d:b3: c7:70:9d:f5:cc:89:f6:67:13:53:da:c8:07:42:65: b7:ad:d1:87:96:36:d1:e8:4f:93:a0:25:87:04:86: 98:4d:ff:81:ca:0d:d8:e1:41:f0:a1:ac:16:69:29: c4:b9:db:f9:7d:69:25:40:19:7c:47:b6:17:af:9a: 1c:fc:15:70:ad:72:93:78:cf:86:3e:ad:22:72:85: 3c:7f:78:04:b1:f3:19:9e:9c:02:3c:0b:4b:e6:83: fd:95:62:7f:c2:4c:92:02:97:4e:43:1d:8e:2e:74: cc:cb:f5:83:f5:65:c7:62:f0:17:e4:8d:48:0d:b6: a2:cf:4b:09:3c:91:78:92:7e:ab:db:71:0c:2c:e9: 7a:2b:52:52:c7:34:ef:28:f3:dc:5b:57:fa:7a:95: 55:09:62:c6:41:f3:24:ff:8a:31:bb:12:b5:32:0a: fd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:21:C5:9C:9B:AF:F9:B9:CB:4B:DC:07:EA:14:88:FB:26:38:40:F7 X509v3 Authority Key Identifier: keyid:81:C9:4B:E9:98:EC:BD:D2:EF:89:7B:FE:8E:8E:51:B8:74:C0:A6:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:67:b3:72:f2:05:bf:92:3b:37:4f:ac:1b:c8:bb:3a:99:3c: 0c:44:56:85:f0:6f:b8:ac:39:8c:79:5a:1a:bd:ee:89:32:04: ff:d4:7b:38:79:a1:56:f7:dd:22:72:5b:1d:ee:f3:d4:64:e4: 1f:63:64:c2:88:de:65:53:20:af:7e:72:3f:81:f9:90:36:d9: fa:1d:cf:19:0e:e1:d6:db:71:df:a2:1f:12:80:1e:05:25:ca: 25:70:96:3a:4c:88:26:51:82:c2:04:79:ae:b2:16:94:18:73: 67:16:53:c0:3e:2a:fb:36:4a:ee:3f:f5:f5:f4:68:cc:9d:7b: ce:83:2f:91:b3:03:2a:f2:97:96:4a:60:cc:cc:da:d0:82:13: 83:9f:bb:65:69:d1:43:db:6c:4d:66:2f:42:2f:8f:76:13:3d: 4a:81:71:32:e7:86:be:3f:c0:96:84:2a:fd:4e:fa:79:93:78: fc:cb:ce:91:59:31:35:85:91:fa:ba:ec:52:7c:3c:af:e0:71: 36:8d:a1:b4:f3:51:14:8d:29:cf:91:60:c1:81:67:e8:13:cb: 59:d8:06:09:42:ec:bc:9c:a7:49:c6:29:d1:2b:a7:69:52:42: d8:67:66:2f:be:90:2e:62:34:24:d3:b8:76:fc:5e:f8:64:82: 1f:49:e1:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdp9mabWcEbTBCjYJZfkxdGb80d8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUxQjg3 NEMwQTY1MjAeFw0yNTA1MDEwNzI3MTlaFw0yNTA1MDQxMzU4MTlaMDMxMTAvBgNV BAMTKEM2MjFDNTlDOUJBRkY5QjlDQjRCREMwN0VBMTQ4OEZCMjYzODQwRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqJyjoP20mHmeWblskoyi8I3mS 0Z9Id8JCAMABd8mGSzskOi5tczxBueBaNDScixYWgxi48dI/cIBB74iakapR/94L mIs8ZSKQPE3BvjRD2BJBYy3oI1F9s8dwnfXMifZnE1PayAdCZbet0YeWNtHoT5Og JYcEhphN/4HKDdjhQfChrBZpKcS52/l9aSVAGXxHthevmhz8FXCtcpN4z4Y+rSJy hTx/eASx8xmenAI8C0vmg/2VYn/CTJICl05DHY4udMzL9YP1Zcdi8BfkjUgNtqLP Swk8kXiSfqvbcQws6XorUlLHNO8o89xbV/p6lVUJYsZB8yT/ijG7ErUyCv0pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxiHFnJuv+bnLS9wH6hSI+yY4QPcwHwYDVR0j BBgwFoAUgclL6ZjsvdLviXv+jo5RuHTAplIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDIzNGQ1MC02N2UxLTQxOWMtODViYS02NGJhOGMxMTEyMjUvMC84MUM5NEJFOTk4 RUNCREQyRUY4OTdCRkU4RThFNTFCODc0QzBBNjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUxQjg3NEMw QTY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQyMzRkNTAtNjdlMS00MTljLTg1 YmEtNjRiYThjMTExMjI1LzAvODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUx Qjg3NEMwQTY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHpns3LyBb+SOzdPrBvIuzqZPAxEVoXwb7is OYx5Whq97okyBP/Uezh5oVb33SJyWx3u89Rk5B9jZMKI3mVTIK9+cj+B+ZA22fod zxkO4dbbcd+iHxKAHgUlyiVwljpMiCZRgsIEea6yFpQYc2cWU8A+Kvs2Su4/9fX0 aMyde86DL5GzAyryl5ZKYMzM2tCCE4Ofu2Vp0UPbbE1mL0Ivj3YTPUqBcTLnhr4/ wJaEKv1O+nmTePzLzpFZMTWFkfq67FJ8PK/gcTaNobTzURSNKc+RYMGBZ+gTy1nY BglC7Lycp0nGKdErp2lSQthnZi++kC5iNCTTuHb8Xvhkgh9J4fA= -----END CERTIFICATE-----Generated at Thu May 1 21:06:43 2025 by rpki-client