$ rpki-client -vvf repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft File: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft (raw, json) Hash identifier: FzV4r9Or6qWEZOEPSPq95gd8Bk+zGDaGWHcMDe1Sp+4= Subject key identifier: 48:E3:D9:6C:8C:CD:A4:EA:9A:64:31:9B:AE:67:2F:59:07:49:FE:4D Authority key identifier: 80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 Certificate issuer: /CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Certificate serial: 24EE6880E6CEEC958C7307165AC032367C64C919 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft Manifest number: 84 Signing time: Sat 14 Jun 2025 11:41:07 +0000 Manifest this update: Sat 14 Jun 2025 11:36:07 +0000 Manifest next update: Tue 17 Jun 2025 15:55:07 +0000 Files and hashes: 1: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl (hash: gDZiWpbUx2htqITA+TTy5rbNO7EMWnBMM3BCm1BXrhw=) 2: 3130332e36322e3230322e302f32332d3233203d3e203633383833.roa (hash: yxxXXRwK7yFLR89I5uMrJEdDWAqzJPaOalUN3EScIQ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 15:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ee:68:80:e6:ce:ec:95:8c:73:07:16:5a:c0:32:36:7c:64:c9:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Validity Not Before: Jun 14 11:36:07 2025 GMT Not After : Jun 17 15:55:07 2025 GMT Subject: CN=48E3D96C8CCDA4EA9A64319BAE672F590749FE4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b7:1e:4c:a7:9c:4f:d5:26:3e:b9:58:9c:48: 91:c0:f2:2a:f2:9f:bf:5e:9a:a2:73:35:05:4f:7f: ab:87:0c:4d:55:26:00:28:02:42:7f:37:7a:23:a2: 11:c6:11:fc:6d:e4:3d:22:a6:a6:98:45:5a:78:49: 67:a6:be:db:6c:31:f2:82:d0:31:c0:c5:22:16:09: a0:80:81:8f:f4:19:0d:cb:50:e8:ac:cf:20:aa:81: b3:2a:45:c7:9f:9a:c1:a8:79:d7:04:0c:06:be:3b: 74:2f:e3:77:91:2a:75:d3:77:e8:87:07:00:7a:73: 07:aa:68:bc:ed:31:a0:e9:5a:f0:12:63:27:ef:65: 7d:63:ba:8c:0e:2c:0b:d2:01:41:d9:8f:c8:d7:d2: f4:81:49:6c:d4:24:47:1d:50:a4:cd:ec:84:90:9d: 3b:e8:5f:28:e1:ff:d8:68:8d:6d:1b:42:ba:54:69: d3:f6:9f:d4:85:2f:ab:47:aa:78:bc:29:88:2a:e2: de:6e:78:0c:78:48:02:83:2e:ab:84:d4:b3:0d:f5: f2:4e:ec:06:ab:64:94:87:85:5d:ee:dc:0f:b0:b5: 6a:7d:76:14:7e:7a:e9:46:b0:d4:ba:a6:a8:d6:8d: 3e:67:0d:23:34:c7:60:95:06:9d:f3:a7:a1:b4:ed: f9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E3:D9:6C:8C:CD:A4:EA:9A:64:31:9B:AE:67:2F:59:07:49:FE:4D X509v3 Authority Key Identifier: keyid:80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:9c:d6:05:bf:53:0b:e9:64:08:d6:1c:76:c5:dd:30:f6:ce: 67:3f:e6:69:93:00:22:41:34:f5:0d:62:18:b6:7f:63:85:f9: b2:11:44:dd:4f:40:81:7a:59:6e:c2:d3:a0:0c:b7:b8:3e:67: f4:14:a6:96:5d:23:05:bb:55:42:f3:b0:c0:ce:b3:b7:a7:1a: 60:29:be:e5:31:0b:1c:0e:05:fd:86:ea:e8:ef:c3:f5:24:bf: b7:f6:44:51:6a:fd:0f:37:96:90:95:90:a7:5f:50:dc:43:e3: b6:60:60:7b:a1:0f:d6:00:5b:41:2b:7f:13:25:78:1c:99:11: e7:75:91:5e:9b:c8:e3:e4:aa:6a:20:a3:3d:fd:88:61:a1:1a: 25:2b:dd:00:1c:ef:3b:22:6a:1a:07:fd:21:3f:e7:f9:12:40: 76:15:2b:50:03:65:3f:7b:83:e2:b2:d4:ad:3e:33:4c:ab:46: cd:22:50:b4:ff:15:5c:05:ae:b2:95:d2:fb:b0:51:1e:0a:1c: 5e:a1:2c:09:41:08:54:27:f1:90:99:0c:06:6f:ee:51:7d:34: 1f:22:29:8e:1b:ec:49:04:1c:db:0c:da:0d:9a:7a:61:09:a3: ac:3d:bd:13:78:f8:eb:b5:6f:4a:5d:f8:38:c1:11:73:1f:27: 90:0f:e0:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJO5ogObO7JWMcwcWWsAyNnxkyRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVG M0EyNzJFNTAeFw0yNTA2MTQxMTM2MDdaFw0yNTA2MTcxNTU1MDdaMDMxMTAvBgNV BAMTKDQ4RTNEOTZDOENDREE0RUE5QTY0MzE5QkFFNjcyRjU5MDc0OUZFNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCitx5Mp5xP1SY+uVicSJHA8iry n79emqJzNQVPf6uHDE1VJgAoAkJ/N3ojohHGEfxt5D0ipqaYRVp4SWemvttsMfKC 0DHAxSIWCaCAgY/0GQ3LUOiszyCqgbMqRcefmsGoedcEDAa+O3Qv43eRKnXTd+iH BwB6cweqaLztMaDpWvASYyfvZX1juowOLAvSAUHZj8jX0vSBSWzUJEcdUKTN7ISQ nTvoXyjh/9hojW0bQrpUadP2n9SFL6tHqni8KYgq4t5ueAx4SAKDLquE1LMN9fJO 7AarZJSHhV3u3A+wtWp9dhR+eulGsNS6pqjWjT5nDSM0x2CVBp3zp6G07flpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSOPZbIzNpOqaZDGbrmcvWQdJ/k0wHwYDVR0j BBgwFoAUgJmRdHUBo81YpDiorf/NnvOicuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODFmNDRhYS04OWEzLTRiYzMtYmIyOS1kYjZjOTgyYTEzNmIvMC84MDk5OTE3NDc1 MDFBM0NENThBNDM4QThBREZGQ0Q5RUYzQTI3MkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVGM0Ey NzJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgxZjQ0YWEtODlhMy00YmMzLWJi MjktZGI2Yzk4MmExMzZiLzAvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNE OUVGM0EyNzJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKOc1gW/UwvpZAjWHHbF3TD2zmc/5mmTACJB NPUNYhi2f2OF+bIRRN1PQIF6WW7C06AMt7g+Z/QUppZdIwW7VULzsMDOs7enGmAp vuUxCxwOBf2G6ujvw/Ukv7f2RFFq/Q83lpCVkKdfUNxD47ZgYHuhD9YAW0ErfxMl eByZEed1kV6byOPkqmogoz39iGGhGiUr3QAc7zsiahoH/SE/5/kSQHYVK1ADZT97 g+Ky1K0+M0yrRs0iULT/FVwFrrKV0vuwUR4KHF6hLAlBCFQn8ZCZDAZv7lF9NB8i KY4b7EkEHNsM2g2aemEJo6w9vRN4+Ou1b0pd+DjBEXMfJ5AP4DM= -----END CERTIFICATE-----Generated at Mon Jun 16 10:42:04 2025 by rpki-client