$ rpki-client -vvf repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft File: 5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft (raw, json) Hash identifier: IF+KJ+88VNJTb/rXjktClpPvmZOzgxoTtt8GNnUPilg= Subject key identifier: 41:2B:BD:38:8E:2A:95:A2:D2:65:E0:BF:FD:AD:94:F8:8C:6F:93:AB Authority key identifier: 5F:49:C4:BD:5D:3F:04:F6:32:DC:CC:6F:C8:B6:54:53:52:0D:93:AD Certificate issuer: /CN=5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD Certificate serial: 78E7D600D190F010F9CA67EC915A45F729D09411 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft Manifest number: 01B3 Signing time: Sun 15 Jun 2025 15:40:43 +0000 Manifest this update: Sun 15 Jun 2025 15:35:43 +0000 Manifest next update: Wed 18 Jun 2025 22:56:43 +0000 Files and hashes: 1: 5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl (hash: wsAYgCmxD+y1O8d62c7M3Xa1TQyDXO/fMYfMucIdCj4=) 2: 3130332e35322e362e302f32342d3234203d3e20313530323032.roa (hash: wLIVJyp4gcpafGUjtFHoc9xaXGbdlSQ2XD+q+1zEqSQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 22:56:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:e7:d6:00:d1:90:f0:10:f9:ca:67:ec:91:5a:45:f7:29:d0:94:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD Validity Not Before: Jun 15 15:35:43 2025 GMT Not After : Jun 18 22:56:43 2025 GMT Subject: CN=412BBD388E2A95A2D265E0BFFDAD94F88C6F93AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:43:0d:0c:fe:7b:d0:25:18:7f:a7:fc:22:a0: bf:62:da:8d:ee:c9:50:4f:3f:c8:90:bf:4e:61:ce: f9:7c:95:e5:88:91:4b:f3:bc:e4:05:c5:46:4f:63: 65:ae:e2:62:cd:0f:73:4f:d1:51:8f:ff:29:a2:b5: 59:8d:e0:46:31:ee:fe:26:da:dc:e4:b0:f7:66:9e: 81:98:18:d7:18:95:44:2f:78:f3:51:10:d1:4c:7d: d0:54:02:d9:68:64:6e:50:cb:8b:0d:06:7c:53:77: 19:07:28:b7:73:e9:8f:48:52:40:32:9c:ea:3f:86: 81:28:91:86:3b:df:18:cb:df:2d:f0:99:62:f5:7b: e0:a9:22:e9:c6:15:9f:65:1e:d5:d9:fa:dd:f5:57: 42:ab:f5:63:4e:03:3d:88:63:32:85:a1:53:1f:27: e8:41:3a:96:90:0c:f4:f4:89:f6:b6:03:66:ae:44: d4:4b:4d:c7:0d:ee:3f:df:86:1b:20:2d:a5:02:9d: 12:63:94:8f:29:be:48:89:00:38:f7:6c:67:e1:4a: cf:cf:d6:16:d9:ad:dd:c6:49:99:dc:19:46:92:50: bd:9d:a9:5d:04:05:40:5a:f0:f1:3c:50:43:2e:83: bf:7e:25:ec:43:58:8d:72:08:4d:24:d0:23:97:a7: 7a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2B:BD:38:8E:2A:95:A2:D2:65:E0:BF:FD:AD:94:F8:8C:6F:93:AB X509v3 Authority Key Identifier: keyid:5F:49:C4:BD:5D:3F:04:F6:32:DC:CC:6F:C8:B6:54:53:52:0D:93:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:cd:f9:f7:f8:18:67:31:d2:0c:54:05:6b:ca:e6:53:d5:a2: 1a:07:8e:3c:7e:0d:b8:ff:b1:1b:62:f0:3c:69:5e:cd:11:c2: f7:d7:72:2b:9d:57:7e:02:70:04:ed:3c:12:8f:9a:cf:5f:ec: 9c:ef:7a:df:40:d8:d2:69:ea:45:a2:9b:d1:39:f7:0d:02:94: 47:9d:4f:ad:df:59:c8:d2:59:42:a9:bd:7f:51:5c:c3:bc:71: b4:2a:14:f7:4c:8a:aa:3a:d9:37:24:ff:ca:8d:b0:4a:e1:9e: e1:06:ab:69:59:53:b8:1c:d1:6a:69:c5:67:71:7e:d0:97:3f: ff:e9:2d:2e:5b:d4:77:ee:a1:83:95:a6:ac:8a:73:09:1e:48: 22:27:96:32:38:9d:fc:e2:ef:d9:cb:27:3e:62:3e:0a:86:fc: 48:20:f3:e0:ac:d9:07:ec:d4:1d:9c:a1:6c:e2:44:3c:89:7f: ab:dc:a4:a8:29:f6:9a:f0:ca:50:48:68:01:ca:ba:4e:88:54: c8:8f:d7:81:39:95:78:c9:1b:e8:35:c1:73:f0:95:c0:3b:9b: 7f:f8:de:01:3f:5d:db:ff:84:62:b5:7d:01:48:dd:71:62:17: 10:95:e0:c1:4a:d7:68:4a:f2:48:6b:75:42:05:3f:34:f6:6c: c1:a2:98:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeOfWANGQ8BD5ymfskVpF9ynQlBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0NTM1 MjBEOTNBRDAeFw0yNTA2MTUxNTM1NDNaFw0yNTA2MTgyMjU2NDNaMDMxMTAvBgNV BAMTKDQxMkJCRDM4OEUyQTk1QTJEMjY1RTBCRkZEQUQ5NEY4OEM2RjkzQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Qw0M/nvQJRh/p/wioL9i2o3u yVBPP8iQv05hzvl8leWIkUvzvOQFxUZPY2Wu4mLND3NP0VGP/ymitVmN4EYx7v4m 2tzksPdmnoGYGNcYlUQvePNRENFMfdBUAtloZG5Qy4sNBnxTdxkHKLdz6Y9IUkAy nOo/hoEokYY73xjL3y3wmWL1e+CpIunGFZ9lHtXZ+t31V0Kr9WNOAz2IYzKFoVMf J+hBOpaQDPT0ifa2A2auRNRLTccN7j/fhhsgLaUCnRJjlI8pvkiJADj3bGfhSs/P 1hbZrd3GSZncGUaSUL2dqV0EBUBa8PE8UEMug79+JexDWI1yCE0k0COXp3rVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQSu9OI4qlaLSZeC//a2U+Ixvk6swHwYDVR0j BBgwFoAUX0nEvV0/BPYy3MxvyLZUU1INk60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OTU1OTFiNC0yMTk4LTRiNDAtYWRmMi0xMmNlZjNiZjQzYTIvMC81RjQ5QzRCRDVE M0YwNEY2MzJEQ0NDNkZDOEI2NTQ1MzUyMEQ5M0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0NTM1MjBE OTNBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDk1NTkxYjQtMjE5OC00YjQwLWFk ZjItMTJjZWYzYmY0M2EyLzAvNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0 NTM1MjBEOTNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMXN+ff4GGcx0gxUBWvK5lPVohoHjjx+Dbj/ sRti8DxpXs0RwvfXciudV34CcATtPBKPms9f7Jzvet9A2NJp6kWim9E59w0ClEed T63fWcjSWUKpvX9RXMO8cbQqFPdMiqo62Tck/8qNsErhnuEGq2lZU7gc0WppxWdx ftCXP//pLS5b1HfuoYOVpqyKcwkeSCInljI4nfzi79nLJz5iPgqG/Egg8+Cs2Qfs 1B2coWziRDyJf6vcpKgp9prwylBIaAHKuk6IVMiP14E5lXjJG+g1wXPwlcA7m3/4 3gE/Xdv/hGK1fQFI3XFiFxCV4MFK12hK8khrdUIFPzT2bMGimCs= -----END CERTIFICATE-----Generated at Tue Jun 17 21:18:18 2025 by rpki-client