$ rpki-client -vvf repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft File: 405E466852C38FD4CD20BA6115840947D5D24F5D.mft (raw, json) Hash identifier: ANq8sj/5oCWBsqOEKkOlJSIgAFscL07aXXfJKwn9XHQ= Subject key identifier: 47:15:2F:9B:B9:56:3F:7E:31:F6:2B:2D:DB:4E:A2:3E:63:99:C7:DD Authority key identifier: 40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D Certificate issuer: /CN=405E466852C38FD4CD20BA6115840947D5D24F5D Certificate serial: 2B54A42A9C096308138D8A6E65B279BFABECCCDC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft Manifest number: A1 Signing time: Mon 04 Aug 2025 06:11:09 +0000 Manifest this update: Mon 04 Aug 2025 06:06:09 +0000 Manifest next update: Thu 07 Aug 2025 11:50:09 +0000 Files and hashes: 1: 405E466852C38FD4CD20BA6115840947D5D24F5D.crl (hash: Q1DCoX8HVSBReEze79OA6sk9imORHTOApBM4oNdDHRM=) 2: 3136302e32352e3230332e302f32342d3234203d3e20313533313038.roa (hash: jF9/a6Jp1M+je5Rsp2up/n4DNy0dv/N5PQgKJQwfemc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 11:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:54:a4:2a:9c:09:63:08:13:8d:8a:6e:65:b2:79:bf:ab:ec:cc:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=405E466852C38FD4CD20BA6115840947D5D24F5D Validity Not Before: Aug 4 06:06:09 2025 GMT Not After : Aug 7 11:50:09 2025 GMT Subject: CN=47152F9BB9563F7E31F62B2DDB4EA23E6399C7DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ac:2c:3e:a8:24:a7:97:e8:0b:9a:3b:8e:15: e5:89:e9:6a:74:dc:94:08:70:d7:dc:a0:8e:63:4d: 93:19:c4:88:14:26:7c:ef:76:74:3f:bf:46:de:23: 9e:ca:a6:ec:b5:e8:6b:1e:f3:84:f6:b5:27:82:08: 0a:84:1b:8d:a8:b7:8d:b0:df:06:5a:6e:50:9f:dc: 54:16:21:7a:66:35:d8:ad:02:af:b4:9d:7d:bb:a3: 1d:05:10:7d:31:07:b7:b6:26:cb:ff:57:6e:8c:d9: e6:02:f2:64:3d:fc:7a:08:f4:40:5b:39:fd:2f:b1: 7f:d9:0a:e5:88:5a:4f:e0:c2:e7:0e:75:e6:0f:5c: 5a:34:bc:6d:b1:e7:e5:db:46:83:e4:7f:ff:d5:59: 62:3f:24:7d:3e:e9:7f:d4:36:16:eb:40:d2:ff:f5: 63:45:d0:88:a6:97:eb:49:2c:9a:7a:47:c3:dd:f6: 86:d4:e8:be:57:af:39:64:39:ce:b9:10:4c:ff:c2: ba:69:66:d4:37:54:22:82:80:e4:66:cb:f3:0c:f3: 28:1c:17:01:db:14:01:f6:f8:57:c9:9e:1e:0b:17: 1a:ef:73:21:bb:35:f6:06:72:f0:46:17:4b:45:04: 71:c9:e7:01:fb:2c:a1:ad:e6:e1:fe:20:d2:03:8f: 58:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:15:2F:9B:B9:56:3F:7E:31:F6:2B:2D:DB:4E:A2:3E:63:99:C7:DD X509v3 Authority Key Identifier: keyid:40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:17:36:77:3f:1d:33:98:00:fb:f2:d7:6a:09:38:02:e0:d2: 44:47:5c:08:a1:fd:9c:af:9c:d2:ca:10:7a:19:31:c3:33:fb: af:d5:5d:54:43:8c:5b:66:f5:57:9e:84:dc:91:b9:6c:a7:57: 91:c3:a5:5a:98:5f:72:f0:df:f7:5f:a9:cb:96:f9:63:c5:2f: 95:5c:51:85:ce:42:88:c0:7c:0c:f4:e4:dd:3b:58:26:21:1a: cc:35:a5:8d:9b:b5:97:a4:cf:55:67:d2:62:9d:3e:a7:e9:7f: 4f:5d:7f:00:75:87:5d:4d:e0:3a:49:68:46:22:01:a7:f1:83: 67:7e:9f:01:52:6e:2f:e3:9b:30:99:d9:a1:36:ad:f3:8c:aa: f5:dc:ba:6b:80:48:e2:a0:c6:09:fd:a9:c1:95:49:64:ca:44: 16:8c:fd:a3:30:de:d7:e4:eb:d2:6a:72:4b:bd:b5:ab:39:26: 67:ef:e7:54:74:c0:0a:6c:1e:88:9e:be:ce:e8:3c:25:8a:42: 06:b6:e2:79:34:1a:a5:fb:3c:6a:c5:b9:c0:c7:1c:8d:68:a1: 6b:da:5e:75:64:50:36:3f:e9:f6:29:00:ca:3c:6e:93:7a:90: 12:2c:a5:80:e0:c2:ee:a3:c9:0d:0e:5c:3c:22:5f:98:e0:2e: d8:6d:5b:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK1SkKpwJYwgTjYpuZbJ5v6vszNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5NDdE NUQyNEY1RDAeFw0yNTA4MDQwNjA2MDlaFw0yNTA4MDcxMTUwMDlaMDMxMTAvBgNV BAMTKDQ3MTUyRjlCQjk1NjNGN0UzMUY2MkIyRERCNEVBMjNFNjM5OUM3REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0rCw+qCSnl+gLmjuOFeWJ6Wp0 3JQIcNfcoI5jTZMZxIgUJnzvdnQ/v0beI57Kpuy16Gse84T2tSeCCAqEG42ot42w 3wZablCf3FQWIXpmNditAq+0nX27ox0FEH0xB7e2Jsv/V26M2eYC8mQ9/HoI9EBb Of0vsX/ZCuWIWk/gwucOdeYPXFo0vG2x5+XbRoPkf//VWWI/JH0+6X/UNhbrQNL/ 9WNF0Iiml+tJLJp6R8Pd9obU6L5XrzlkOc65EEz/wrppZtQ3VCKCgORmy/MM8ygc FwHbFAH2+FfJnh4LFxrvcyG7NfYGcvBGF0tFBHHJ5wH7LKGt5uH+INIDj1h9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURxUvm7lWP34x9ist206iPmOZx90wHwYDVR0j BBgwFoAUQF5GaFLDj9TNILphFYQJR9XST10wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWM2MTU1ZS0yZDJmLTRmOWUtYjIxOC1lYjUyNWIzYTExMTkvMC80MDVFNDY2ODUy QzM4RkQ0Q0QyMEJBNjExNTg0MDk0N0Q1RDI0RjVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5NDdENUQy NEY1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFjNjE1NWUtMmQyZi00ZjllLWIy MTgtZWI1MjViM2ExMTE5LzAvNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5 NDdENUQyNEY1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8XNnc/HTOYAPvy12oJOALg0kRHXAih/Zyv nNLKEHoZMcMz+6/VXVRDjFtm9VeehNyRuWynV5HDpVqYX3Lw3/dfqcuW+WPFL5Vc UYXOQojAfAz05N07WCYhGsw1pY2btZekz1Vn0mKdPqfpf09dfwB1h11N4DpJaEYi Aafxg2d+nwFSbi/jmzCZ2aE2rfOMqvXcumuASOKgxgn9qcGVSWTKRBaM/aMw3tfk 69Jqcku9tas5Jmfv51R0wApsHoievs7oPCWKQga24nk0GqX7PGrFucDHHI1ooWva XnVkUDY/6fYpAMo8bpN6kBIspYDgwu6jyQ0OXDwiX5jgLthtW+g= -----END CERTIFICATE-----Generated at Wed Aug 6 09:23:45 2025 by rpki-client