$ rpki-client -vvf repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft File: 81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft (raw, json) Hash identifier: h5RVjoSFUpmO7nPbLZ7IXj4vpaqpAkBEPfFn+CI7jOA= Subject key identifier: F6:B1:55:09:5D:22:4B:4F:94:4F:1B:EE:F6:B8:A3:5B:86:90:B5:A9 Authority key identifier: 81:C9:4B:E9:98:EC:BD:D2:EF:89:7B:FE:8E:8E:51:B8:74:C0:A6:52 Certificate issuer: /CN=81C94BE998ECBDD2EF897BFE8E8E51B874C0A652 Certificate serial: 7FEC900CF9E0665482F4F0FF6DA3C987D7F097B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft Manifest number: 02BE Signing time: Sun 10 Aug 2025 02:02:22 +0000 Manifest this update: Sun 10 Aug 2025 01:57:22 +0000 Manifest next update: Wed 13 Aug 2025 12:01:22 +0000 Files and hashes: 1: 3130332e3136332e38302e302f32332d3233203d3e20313431363734.roa (hash: aeR78T4SgFq62LUVaHNT0OWQnz8U1jUNL74Pz+jaUQ8=) 2: 81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl (hash: my1QkSb0gDTpLNvLmzbO4tcJ5Du2WkcRbSrb1tE/jyQ=) 3: 3130332e3136332e38312e302f32342d3234203d3e20313431363734.roa (hash: 39I2VRz2Pwheop/Q/95GW6wOO98caUDbgzZuoNjlDio=) 4: 3130332e3136332e38302e302f32342d3234203d3e20313431363734.roa (hash: yyP1s7Drm4K7i/5vyWhbMeYMvkp/vo6vSFKCXgZUuLI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 06:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ec:90:0c:f9:e0:66:54:82:f4:f0:ff:6d:a3:c9:87:d7:f0:97:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81C94BE998ECBDD2EF897BFE8E8E51B874C0A652 Validity Not Before: Aug 10 01:57:22 2025 GMT Not After : Aug 13 12:01:22 2025 GMT Subject: CN=F6B155095D224B4F944F1BEEF6B8A35B8690B5A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:de:d3:4e:ec:bf:bf:39:7c:33:da:21:46:65: 5c:70:a6:18:fd:a1:f1:97:81:c3:29:10:42:a4:8b: 28:af:b1:6c:73:17:0e:3b:0c:74:0d:76:e8:2f:10: c1:ff:82:32:50:6a:f1:c9:4c:58:2a:80:2c:a1:57: f7:b2:5a:a1:0d:c6:50:87:1d:8a:7f:f2:85:ba:97: 90:ae:e8:cb:55:da:00:30:2b:01:b1:3e:a9:8d:70: 0d:79:15:37:96:58:c5:49:42:4e:b8:3c:20:5c:0b: 5d:90:b2:44:8d:2a:00:b4:d9:6b:fd:39:58:3d:eb: 2d:5a:8a:0b:9c:b6:75:9e:63:48:d9:b2:b1:d2:cb: 41:44:6a:6c:5f:e0:ef:cd:c3:42:e3:08:56:5b:5e: 5d:5a:40:14:8a:6f:3b:33:c0:a2:ed:c4:bb:86:26: d1:c1:73:f5:2c:68:71:7b:75:3c:8d:6d:be:9e:15: 85:fa:a0:d9:a4:78:a5:35:41:f5:9b:87:6e:5d:10: 5e:a1:2b:ce:66:9a:bd:fb:d6:6b:35:92:26:8f:ad: 2e:3d:57:89:ec:ee:c8:40:87:25:85:ea:b2:ad:39: f5:24:1d:66:dd:b6:e4:b8:5b:c3:e4:f6:74:49:3c: 35:99:98:98:18:6f:c0:d2:2f:88:91:7a:83:d5:2a: e1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B1:55:09:5D:22:4B:4F:94:4F:1B:EE:F6:B8:A3:5B:86:90:B5:A9 X509v3 Authority Key Identifier: keyid:81:C9:4B:E9:98:EC:BD:D2:EF:89:7B:FE:8E:8E:51:B8:74:C0:A6:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:6c:8e:3b:46:fd:3b:37:6b:cb:54:f9:fb:55:22:0d:83:98: 63:be:99:04:87:7d:72:4b:89:a9:6f:e5:30:2f:87:21:32:b6: 52:65:9a:6a:e2:18:69:05:9d:59:e3:74:58:94:fd:54:86:1d: 3e:33:4e:e6:c4:92:ae:62:f9:0c:2c:ce:3a:fa:9c:ec:8f:71: 94:2f:43:02:04:f8:fd:9b:60:b7:f3:8a:85:33:f8:3e:7e:69: fe:09:10:ee:10:26:5d:35:a3:3e:07:5b:47:d5:e8:91:e7:92: 7a:be:6e:07:ee:21:b9:db:64:70:23:93:89:66:bb:f0:04:47: 61:68:b8:a2:8f:17:20:4a:92:4d:c5:7a:5a:c1:bd:eb:e7:63: 36:96:1d:f5:d4:14:cb:c3:9e:e5:a6:5d:37:be:96:f4:10:ec: 15:f8:51:88:0d:3f:30:27:c7:84:8b:fa:8f:c4:da:3a:01:56: 5d:4e:2e:a9:e9:65:0c:67:e3:d9:91:fd:8f:ac:f7:62:17:2b: ac:51:4b:ec:7f:1a:f0:ac:0e:a8:59:4f:fc:6f:c8:c0:eb:ab: cd:12:07:c4:e1:b5:52:39:da:9c:9b:ee:17:e0:61:96:85:32: 25:ab:6f:e3:0a:dd:7f:cd:d9:de:59:b4:28:a8:f5:44:21:34: 53:71:e2:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf+yQDPngZlSC9PD/baPJh9fwl7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUxQjg3 NEMwQTY1MjAeFw0yNTA4MTAwMTU3MjJaFw0yNTA4MTMxMjAxMjJaMDMxMTAvBgNV BAMTKEY2QjE1NTA5NUQyMjRCNEY5NDRGMUJFRUY2QjhBMzVCODY5MEI1QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg3tNO7L+/OXwz2iFGZVxwphj9 ofGXgcMpEEKkiyivsWxzFw47DHQNdugvEMH/gjJQavHJTFgqgCyhV/eyWqENxlCH HYp/8oW6l5Cu6MtV2gAwKwGxPqmNcA15FTeWWMVJQk64PCBcC12QskSNKgC02Wv9 OVg96y1aiguctnWeY0jZsrHSy0FEamxf4O/Nw0LjCFZbXl1aQBSKbzszwKLtxLuG JtHBc/UsaHF7dTyNbb6eFYX6oNmkeKU1QfWbh25dEF6hK85mmr371ms1kiaPrS49 V4ns7shAhyWF6rKtOfUkHWbdtuS4W8Pk9nRJPDWZmJgYb8DSL4iReoPVKuFlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9rFVCV0iS0+UTxvu9rijW4aQtakwHwYDVR0j BBgwFoAUgclL6ZjsvdLviXv+jo5RuHTAplIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDIzNGQ1MC02N2UxLTQxOWMtODViYS02NGJhOGMxMTEyMjUvMC84MUM5NEJFOTk4 RUNCREQyRUY4OTdCRkU4RThFNTFCODc0QzBBNjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUxQjg3NEMw QTY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQyMzRkNTAtNjdlMS00MTljLTg1 YmEtNjRiYThjMTExMjI1LzAvODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUx Qjg3NEMwQTY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFsjjtG/Ts3a8tU+ftVIg2DmGO+mQSHfXJL ialv5TAvhyEytlJlmmriGGkFnVnjdFiU/VSGHT4zTubEkq5i+Qwszjr6nOyPcZQv QwIE+P2bYLfzioUz+D5+af4JEO4QJl01oz4HW0fV6JHnknq+bgfuIbnbZHAjk4lm u/AER2FouKKPFyBKkk3FelrBvevnYzaWHfXUFMvDnuWmXTe+lvQQ7BX4UYgNPzAn x4SL+o/E2joBVl1OLqnpZQxn49mR/Y+s92IXK6xRS+x/GvCsDqhZT/xvyMDrq80S B8ThtVI52pyb7hfgYZaFMiWrb+MK3X/N2d5ZtCio9UQhNFNx4hE= -----END CERTIFICATE-----Generated at Sun Aug 10 03:57:44 2025 by rpki-client