$ rpki-client -vvf repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft File: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft (raw, json) Hash identifier: pAGqVstHmYwUCSA4TONoXI0Pek/Ez0j78bkkvH0sVlw= Subject key identifier: 7F:96:72:64:40:58:48:39:C7:49:0A:9C:59:8D:D0:59:76:C6:97:54 Authority key identifier: 40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 Certificate issuer: /CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Certificate serial: 2C7CE942CB5B7700E6D6C504AB656A329BDCB1B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft Manifest number: 0260 Signing time: Sun 15 Jun 2025 23:50:40 +0000 Manifest this update: Sun 15 Jun 2025 23:45:40 +0000 Manifest next update: Thu 19 Jun 2025 06:27:40 +0000 Files and hashes: 1: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl (hash: C8KlGchU3IRNSvDMLo+DUJXFbef6w4I05ayxdLi6IOA=) 2: 3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa (hash: FhrbA6uuINHjqQzXHar/bpnjqFBEO5FZuzZ3IIsB7qk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 06:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:7c:e9:42:cb:5b:77:00:e6:d6:c5:04:ab:65:6a:32:9b:dc:b1:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Validity Not Before: Jun 15 23:45:40 2025 GMT Not After : Jun 19 06:27:40 2025 GMT Subject: CN=7F96726440584839C7490A9C598DD05976C69754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:78:4f:e8:6f:4b:b9:e9:a7:27:eb:70:ba:82: d3:79:15:4a:8c:4e:9a:0d:43:1a:df:d3:c5:99:f8: 8e:ec:3d:0a:5c:c3:d7:38:e8:54:28:bf:38:e7:70: 20:2b:8f:cf:ad:44:3d:cf:3c:2e:67:07:ac:c8:60: 09:38:cf:f9:70:79:45:08:87:7b:69:72:1e:40:59: eb:49:45:c6:7d:01:c1:96:08:83:15:c8:65:cd:31: 57:43:d6:04:9b:68:4e:54:6b:3c:4e:63:c8:ac:9f: 21:82:8c:4f:9f:70:65:c0:b3:5f:3d:96:f0:22:c8: c6:1b:d3:d4:bf:dd:ef:3e:4c:69:cf:32:33:0f:3c: b3:62:20:fa:d5:48:c1:64:ef:7e:ae:b7:9c:52:f1: fe:2f:2f:d5:9a:5d:48:d7:14:5c:54:6a:6e:6e:55: f5:8a:97:03:23:08:f9:83:26:66:d7:1d:30:96:b0: c2:45:2c:44:1c:43:03:2b:f7:e1:81:f1:c6:ff:92: c7:00:79:7b:6f:73:a1:e4:84:a9:52:61:66:ba:d2: 55:6a:a2:c1:d3:4b:d4:78:00:4c:23:a8:94:f0:a0: 25:19:89:e5:4f:d8:24:72:43:66:78:cb:a3:8e:fa: 94:95:30:00:4d:bc:fa:30:32:bf:1d:92:c7:4d:07: 5d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:96:72:64:40:58:48:39:C7:49:0A:9C:59:8D:D0:59:76:C6:97:54 X509v3 Authority Key Identifier: keyid:40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:6a:44:5c:85:be:53:7a:b9:d5:1b:74:7d:fd:9f:7c:48:a8: 4c:41:f1:eb:a0:27:1b:2b:fc:3c:9c:ed:5d:97:2e:27:98:63: 7b:1c:ba:66:e3:25:8d:9f:59:a6:4a:ed:20:7b:b3:02:85:b8: 76:3f:fd:aa:38:ab:d1:70:91:26:aa:55:67:77:26:9c:86:30: b6:4b:e5:13:72:d9:a4:1e:13:e0:46:83:1e:e2:a5:0f:09:6b: ad:86:c2:66:fe:97:f0:13:28:bd:cd:d8:b5:30:a4:7f:39:5e: 5c:9f:e8:df:7e:2a:46:88:48:3a:95:44:17:da:89:60:67:e4: e6:1d:6e:20:e1:bd:e7:00:fe:2b:83:65:29:0c:fb:54:77:c2: 63:4b:93:54:aa:6b:09:59:91:0e:52:32:4d:f2:b6:4b:d0:11: f4:63:da:0b:07:c7:90:8c:d0:d1:c0:04:32:17:79:d2:db:55: e8:a2:f2:04:1e:e4:94:14:3a:df:05:7e:71:1e:40:40:23:d0: 63:71:2d:74:6f:dc:23:6f:4a:c7:ec:25:91:1a:ae:5c:94:67: 85:f5:4e:c3:58:66:92:22:65:c4:81:77:8b:7d:31:b0:2c:41: c1:69:40:15:a0:fa:88:94:b6:d5:18:05:30:cc:8d:28:bb:b4: 97:fd:57:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULHzpQstbdwDm1sUEq2VqMpvcsbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4 RTMyQUI0MzAeFw0yNTA2MTUyMzQ1NDBaFw0yNTA2MTkwNjI3NDBaMDMxMTAvBgNV BAMTKDdGOTY3MjY0NDA1ODQ4MzlDNzQ5MEE5QzU5OEREMDU5NzZDNjk3NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8eE/ob0u56acn63C6gtN5FUqM TpoNQxrf08WZ+I7sPQpcw9c46FQovzjncCArj8+tRD3PPC5nB6zIYAk4z/lweUUI h3tpch5AWetJRcZ9AcGWCIMVyGXNMVdD1gSbaE5UazxOY8isnyGCjE+fcGXAs189 lvAiyMYb09S/3e8+TGnPMjMPPLNiIPrVSMFk736ut5xS8f4vL9WaXUjXFFxUam5u VfWKlwMjCPmDJmbXHTCWsMJFLEQcQwMr9+GB8cb/kscAeXtvc6HkhKlSYWa60lVq osHTS9R4AEwjqJTwoCUZieVP2CRyQ2Z4y6OO+pSVMABNvPowMr8dksdNB12FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf5ZyZEBYSDnHSQqcWY3QWXbGl1QwHwYDVR0j BBgwFoAUQC2fHgWia0EWTiW3OlsHyI4yq0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjNkZjZhZi1kOWVlLTQwNzYtODFhNC0yNjQ4NzI3NDg5NzAvMC80MDJEOUYxRTA1 QTI2QjQxMTY0RTI1QjczQTVCMDdDODhFMzJBQjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4RTMy QUI0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IzZGY2YWYtZDllZS00MDc2LTgx YTQtMjY0ODcyNzQ4OTcwLzAvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3 Qzg4RTMyQUI0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlqRFyFvlN6udUbdH39n3xIqExB8eugJxsr /Dyc7V2XLieYY3scumbjJY2fWaZK7SB7swKFuHY//ao4q9FwkSaqVWd3JpyGMLZL 5RNy2aQeE+BGgx7ipQ8Ja62Gwmb+l/ATKL3N2LUwpH85Xlyf6N9+KkaISDqVRBfa iWBn5OYdbiDhvecA/iuDZSkM+1R3wmNLk1SqawlZkQ5SMk3ytkvQEfRj2gsHx5CM 0NHABDIXedLbVeii8gQe5JQUOt8FfnEeQEAj0GNxLXRv3CNvSsfsJZEarlyUZ4X1 TsNYZpIiZcSBd4t9MbAsQcFpQBWg+oiUttUYBTDMjSi7tJf9V1w= -----END CERTIFICATE-----Generated at Tue Jun 17 15:32:22 2025 by rpki-client