$ rpki-client -vvf repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft File: 81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft (raw, json) Hash identifier: 4V3yYR1AvwPUtyUB3iIOpmvs+qSEd//Mm5QZvnyx8jo= Subject key identifier: 7F:01:EC:D7:18:C8:4A:C8:00:D8:D0:7B:8A:7F:77:CC:24:7B:F3:D5 Authority key identifier: 81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A Certificate issuer: /CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A Certificate serial: 50E22F71B44F919661F570EA8F42545C983E9021 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft Manifest number: 0122 Signing time: Wed 06 Aug 2025 07:51:22 +0000 Manifest this update: Wed 06 Aug 2025 07:46:22 +0000 Manifest next update: Sat 09 Aug 2025 18:49:22 +0000 Files and hashes: 1: 3130332e39362e3134362e302f32332d3233203d3e20313430343536.roa (hash: I90vNVHR98Ns9EbFWsBOyXpypkK4ezCBsQ4Nw555WdU=) 2: 81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl (hash: BTarX7o8ht5C/6uUy5obgXTne0gW/JVU9rzw8g3+Q1o=) 3: 3130332e39362e3134372e302f32342d3234203d3e20313430343536.roa (hash: g4rcVf7ze2gY12Fw+h+9x7JFApYwzpJ9iR8UsvjWBL0=) 4: 3130332e39362e3134362e302f32342d3234203d3e20313430343536.roa (hash: lCXTJ163mYE14JSOHwn/GLmazHYII7eBmEeCYKd7cs8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 18:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:e2:2f:71:b4:4f:91:96:61:f5:70:ea:8f:42:54:5c:98:3e:90:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A Validity Not Before: Aug 6 07:46:22 2025 GMT Not After : Aug 9 18:49:22 2025 GMT Subject: CN=7F01ECD718C84AC800D8D07B8A7F77CC247BF3D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f7:e4:4c:84:48:4e:01:f1:87:33:0f:d4:1f: a3:5c:bc:19:0d:9c:a3:c0:91:4b:d2:40:b0:77:76: ae:5f:7b:35:99:18:52:b6:45:b3:15:1f:24:be:2e: 98:b9:59:30:93:4d:74:9e:fd:22:fe:8f:8f:8c:53: 8f:be:32:93:f4:e2:e1:5d:40:9d:18:76:dc:e8:a2: c3:bb:d5:a3:2c:62:d6:32:52:90:0c:ce:47:95:79: 85:0b:58:c5:81:69:45:30:b0:10:6a:c3:89:e4:2e: e3:29:5b:61:10:1e:f6:0a:4d:3b:7e:5f:2d:e5:32: 47:7e:06:f3:00:5b:01:3b:55:7c:15:41:06:c9:13: 3d:5f:69:bd:81:f1:6b:04:0c:f5:30:cf:64:63:b3: 3e:35:8b:5e:76:6e:75:79:e8:bd:1a:8c:d1:f9:a2: 56:bb:cf:93:17:e6:a5:1e:04:37:5f:4b:54:bf:18: d6:7a:ae:c4:6d:82:77:d9:08:bd:46:c1:c4:d4:40: 02:d7:c0:21:b6:18:a2:a9:89:17:3b:4b:24:e2:22: 80:68:f6:ce:6b:1d:05:b5:53:96:f1:37:20:d1:77: 06:f4:b4:93:54:7e:63:ee:71:85:9b:f3:e9:d0:07: e7:4b:b3:65:38:9b:d9:81:f3:93:6e:bc:82:55:b5: 18:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:01:EC:D7:18:C8:4A:C8:00:D8:D0:7B:8A:7F:77:CC:24:7B:F3:D5 X509v3 Authority Key Identifier: keyid:81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:6f:ae:82:2b:c1:a9:08:9a:a3:07:58:38:9c:66:2a:8a:77: c8:9d:2c:73:fc:c9:1d:77:c8:fb:3a:f0:63:2e:6c:f8:92:5d: 85:0a:14:61:87:d0:8c:dc:3a:ed:c4:75:54:fb:e4:f5:0f:de: b1:52:14:48:8d:82:0d:42:33:27:59:ce:f4:fc:ab:2b:7e:c9: 05:c1:5c:db:f5:5a:d2:71:af:e2:da:53:73:3b:08:2b:94:f1: 63:5a:ca:64:37:75:6f:74:b9:67:27:4b:07:e2:83:d2:1c:3f: 19:17:b1:74:84:ae:27:ec:e8:99:0a:65:a8:fb:94:a5:7e:ef: 7c:cc:a0:d8:03:85:5d:37:0e:ec:e2:0f:0c:c3:fd:e8:2d:6f: fa:45:c9:f9:27:35:db:a0:e7:6c:c0:37:db:2a:ca:81:c0:fa: 9d:2c:90:5f:e3:e9:2d:6d:ef:ed:ca:d5:64:40:f4:4a:54:cb: 74:02:92:84:e2:a4:5d:dd:57:6e:a4:74:17:0d:b0:a8:72:2d: b4:3b:57:35:e2:d4:74:ec:5a:56:db:83:8d:42:0b:d0:2a:de: 51:d1:24:f0:ba:70:44:96:56:b0:ce:b4:1d:6a:95:3f:ce:ce: 30:a7:73:7b:63:9a:b1:c3:79:1c:c4:bb:63:bb:25:6b:4c:c9: 5f:d8:8e:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUOIvcbRPkZZh9XDqj0JUXJg+kCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0QzZG QTJEQ0QwQTAeFw0yNTA4MDYwNzQ2MjJaFw0yNTA4MDkxODQ5MjJaMDMxMTAvBgNV BAMTKDdGMDFFQ0Q3MThDODRBQzgwMEQ4RDA3QjhBN0Y3N0NDMjQ3QkYzRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC29+RMhEhOAfGHMw/UH6NcvBkN nKPAkUvSQLB3dq5fezWZGFK2RbMVHyS+Lpi5WTCTTXSe/SL+j4+MU4++MpP04uFd QJ0YdtzoosO71aMsYtYyUpAMzkeVeYULWMWBaUUwsBBqw4nkLuMpW2EQHvYKTTt+ Xy3lMkd+BvMAWwE7VXwVQQbJEz1fab2B8WsEDPUwz2Rjsz41i152bnV56L0ajNH5 ola7z5MX5qUeBDdfS1S/GNZ6rsRtgnfZCL1GwcTUQALXwCG2GKKpiRc7SyTiIoBo 9s5rHQW1U5bxNyDRdwb0tJNUfmPucYWb8+nQB+dLs2U4m9mB85NuvIJVtRjvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfwHs1xjISsgA2NB7in93zCR789UwHwYDVR0j BBgwFoAUgcIDz0WOSKj/NF+0pd2ExvotzQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YTQ3NDZiNy01ZmYyLTQ1NTYtOGEzZS01YTg2Y2JjYzg1OTgvMC84MUMyMDNDRjQ1 OEU0OEE4RkYzNDVGQjRBNUREODRDNkZBMkRDRDBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0QzZGQTJE Q0QwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGE0NzQ2YjctNWZmMi00NTU2LThh M2UtNWE4NmNiY2M4NTk4LzAvODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0 QzZGQTJEQ0QwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9vroIrwakImqMHWDicZiqKd8idLHP8yR13 yPs68GMubPiSXYUKFGGH0IzcOu3EdVT75PUP3rFSFEiNgg1CMydZzvT8qyt+yQXB XNv1WtJxr+LaU3M7CCuU8WNaymQ3dW90uWcnSwfig9IcPxkXsXSErifs6JkKZaj7 lKV+73zMoNgDhV03DuziDwzD/egtb/pFyfknNdug52zAN9sqyoHA+p0skF/j6S1t 7+3K1WRA9EpUy3QCkoTipF3dV26kdBcNsKhyLbQ7VzXi1HTsWlbbg41CC9Aq3lHR JPC6cESWVrDOtB1qlT/OzjCnc3tjmrHDeRzEu2O7JWtMyV/Yjjw= -----END CERTIFICATE-----Generated at Thu Aug 7 03:25:31 2025 by rpki-client