$ rpki-client -vvf repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft File: 1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft (raw, json) Hash identifier: PDcmhi5LC6NHI6e19p7rPS/nxs2ZDFEoO9l7g96woZ0= Subject key identifier: 8C:D6:08:76:E1:56:03:38:BD:74:BC:D9:4F:FC:33:54:48:D2:BA:C2 Authority key identifier: 19:11:AE:41:84:5D:EE:2E:B8:84:90:C5:76:7E:3C:1A:6E:30:E8:08 Certificate issuer: /CN=1911AE41845DEE2EB88490C5767E3C1A6E30E808 Certificate serial: 2FEC31E7161FF081D9CAB440628DD9DF33FDAE3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft Manifest number: CE Signing time: Tue 17 Jun 2025 00:30:01 +0000 Manifest this update: Tue 17 Jun 2025 00:25:01 +0000 Manifest next update: Fri 20 Jun 2025 12:25:01 +0000 Files and hashes: 1: 3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa (hash: Jwv0gA8fk3yoBN8wNHBZ8Dx27fR4hWBf2um8D+vcr6o=) 2: 1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl (hash: OGcIAt3xQGlPoHkIw6GZbogn7ZNx3c6kLYFk3GSRz7Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 12:25:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:ec:31:e7:16:1f:f0:81:d9:ca:b4:40:62:8d:d9:df:33:fd:ae:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1911AE41845DEE2EB88490C5767E3C1A6E30E808 Validity Not Before: Jun 17 00:25:01 2025 GMT Not After : Jun 20 12:25:01 2025 GMT Subject: CN=8CD60876E1560338BD74BCD94FFC335448D2BAC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a8:55:98:bc:fc:65:a0:2d:c5:70:8d:be:dc: 05:9c:1a:09:5d:e3:18:e6:8d:94:75:c0:6c:07:f2: a0:60:00:54:85:c0:c6:26:72:c8:5a:16:1a:bb:aa: 32:e1:0d:b8:c8:65:28:cc:15:19:12:d1:ea:e1:fc: ec:92:da:cd:88:38:82:64:83:0d:36:69:c8:bc:cb: ac:46:58:9b:4e:45:e9:e7:9c:6b:fa:29:d2:3d:5e: 58:cd:03:bf:1c:b7:c6:04:10:7f:02:b6:55:55:c9: f7:29:95:8e:dd:f6:41:bd:67:b9:e9:16:4f:ef:ce: 42:31:ae:e7:fd:86:67:24:e7:d2:d9:de:1a:1d:ae: df:74:53:62:42:57:55:f0:21:aa:84:c0:eb:0f:14: 82:57:6c:8c:c9:03:e7:4a:8f:63:62:b9:24:ac:40: 61:cd:78:08:cc:a2:8c:41:11:88:d6:7c:98:ae:0d: 80:2f:03:a8:b9:74:7e:6d:b3:bb:bd:25:40:1a:f1: 24:de:a6:e0:c6:f6:e3:00:0d:98:d3:73:61:23:dc: 54:0b:39:ef:56:cb:a2:b6:3b:b4:53:98:d6:f4:a3: 54:7e:bf:4e:3e:de:98:69:17:5e:ec:1e:c8:de:c5: 4f:88:be:23:b6:e3:ac:3a:09:48:00:91:7e:07:49: 0a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D6:08:76:E1:56:03:38:BD:74:BC:D9:4F:FC:33:54:48:D2:BA:C2 X509v3 Authority Key Identifier: keyid:19:11:AE:41:84:5D:EE:2E:B8:84:90:C5:76:7E:3C:1A:6E:30:E8:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:ff:4f:82:9c:0b:cc:39:56:27:d3:a7:c4:86:27:6d:7f:da: 50:90:5f:c6:24:fe:72:1a:97:54:d0:88:73:c5:c0:16:fb:9b: a9:e5:ce:10:ff:d3:e1:cb:df:e3:ac:26:1e:13:42:64:97:38: f7:d3:98:ab:27:ee:bd:6c:d5:95:0f:dd:16:b6:dc:71:e2:42: 3b:d7:59:51:06:b1:2b:30:93:cc:a9:32:1b:51:f0:8a:38:97: 6a:a3:cf:76:4d:43:c4:b8:e8:56:11:2d:04:e3:1f:58:9c:e9: 06:5b:03:56:4f:66:38:42:56:58:c8:63:0a:df:90:d4:ec:4d: 4b:a8:39:cf:d2:ba:ff:ed:09:ef:d0:6c:d8:68:0c:97:32:93: 8c:57:5e:e9:52:8e:c1:d4:52:c4:ce:5c:02:20:69:5b:c1:b2: 86:8e:09:67:94:8a:9d:52:57:58:0b:32:ff:30:b7:e3:55:b4: 41:d8:53:1c:d5:a1:7f:1c:06:b5:9e:0d:85:02:01:0c:c4:c9: 80:94:f6:83:11:7f:08:0d:31:b4:7c:84:78:58:2b:72:d9:f5: 8a:48:df:91:cf:44:7a:f7:ff:41:44:a7:9a:a4:da:54:55:06: fb:80:cb:ba:e5:2b:c6:06:c3:34:df:b0:fb:1d:1d:1b:77:32: 79:c6:9b:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL+wx5xYf8IHZyrRAYo3Z3zP9rjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTNDMUE2 RTMwRTgwODAeFw0yNTA2MTcwMDI1MDFaFw0yNTA2MjAxMjI1MDFaMDMxMTAvBgNV BAMTKDhDRDYwODc2RTE1NjAzMzhCRDc0QkNEOTRGRkMzMzU0NDhEMkJBQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXqFWYvPxloC3FcI2+3AWcGgld 4xjmjZR1wGwH8qBgAFSFwMYmcshaFhq7qjLhDbjIZSjMFRkS0erh/OyS2s2IOIJk gw02aci8y6xGWJtORennnGv6KdI9XljNA78ct8YEEH8CtlVVyfcplY7d9kG9Z7np Fk/vzkIxruf9hmck59LZ3hodrt90U2JCV1XwIaqEwOsPFIJXbIzJA+dKj2NiuSSs QGHNeAjMooxBEYjWfJiuDYAvA6i5dH5ts7u9JUAa8STepuDG9uMADZjTc2Ej3FQL Oe9Wy6K2O7RTmNb0o1R+v04+3phpF17sHsjexU+IviO246w6CUgAkX4HSQqxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjNYIduFWAzi9dLzZT/wzVEjSusIwHwYDVR0j BBgwFoAUGRGuQYRd7i64hJDFdn48Gm4w6AgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTU3ZmE1ZC1mYTY3LTRlNmItODkyMC1jNDc0N2FkYjMwYmIvMC8xOTExQUU0MTg0 NURFRTJFQjg4NDkwQzU3NjdFM0MxQTZFMzBFODA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTNDMUE2RTMw RTgwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjk1N2ZhNWQtZmE2Ny00ZTZiLTg5 MjAtYzQ3NDdhZGIzMGJiLzAvMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTND MUE2RTMwRTgwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABf/T4KcC8w5VifTp8SGJ21/2lCQX8Yk/nIa l1TQiHPFwBb7m6nlzhD/0+HL3+OsJh4TQmSXOPfTmKsn7r1s1ZUP3Ra23HHiQjvX WVEGsSswk8ypMhtR8Io4l2qjz3ZNQ8S46FYRLQTjH1ic6QZbA1ZPZjhCVljIYwrf kNTsTUuoOc/Suv/tCe/QbNhoDJcyk4xXXulSjsHUUsTOXAIgaVvBsoaOCWeUip1S V1gLMv8wt+NVtEHYUxzVoX8cBrWeDYUCAQzEyYCU9oMRfwgNMbR8hHhYK3LZ9YpI 35HPRHr3/0FEp5qk2lRVBvuAy7rlK8YGwzTfsPsdHRt3MnnGm6s= -----END CERTIFICATE-----Generated at Wed Jun 18 00:09:33 2025 by rpki-client