$ rpki-client -vvf repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft File: 41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft (raw, json) Hash identifier: AZ3L/pvMAfW3aQqSUwtWSkcAWza/3jcKiMtQQRdJfPw= Subject key identifier: A1:D8:05:1D:08:84:61:63:C0:02:E8:92:CD:FE:A1:A3:04:81:EE:49 Authority key identifier: 41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C Certificate issuer: /CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C Certificate serial: 7C537C60ECD6798B0DDBF648E237C5D651BD8613 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft Manifest number: 0199 Signing time: Tue 05 Aug 2025 21:01:30 +0000 Manifest this update: Tue 05 Aug 2025 20:56:30 +0000 Manifest next update: Fri 08 Aug 2025 21:53:30 +0000 Files and hashes: 1: 3230322e3137332e39342e302f32342d3234203d3e203233363935.roa (hash: kYREuhiT4n/pjRYISa3PHavGRxERDOS8izljvugeJrk=) 2: 3230322e3137332e38322e302f32342d3234203d3e203233363935.roa (hash: 8/H1q3EcizQtYAaVI5vaP4CIs/Srkv0IwoIGGhf07is=) 3: 3230322e3137332e37322e302f32342d3234203d3e203233363935.roa (hash: o2ln+IfG7vkZVTnGCTylCBTI2pbcc89CV9g/agRQLtQ=) 4: 3230322e3137332e38312e302f32342d3234203d3e203233363935.roa (hash: fZQK9JY5pm3VYutUjV1YUz0UdbDku9RPZXo98IsSdnQ=) 5: 3230322e3137332e38342e302f32342d3234203d3e203233363935.roa (hash: X9OlKSdhEP9aR8QcezvNKe8bo7GaRw8yvBmdk6EUw2A=) 6: 3230322e3137332e36362e302f32342d3234203d3e203233363935.roa (hash: yeM18fVhFIvaqgN5QmmIrEdPBDtaljcx9XyjNtHhwl4=) 7: 3230322e3137332e38392e302f32342d3234203d3e203233363935.roa (hash: lhuajvGIv7rcCg6mlRyz9c9eb3L+IyDr9Q9rPP2Ha5s=) 8: 3230322e3137332e36352e302f32342d3234203d3e203233363935.roa (hash: JrMofhOCMVdNP1sEAWvpSSTT2LmZl0HuhRslYJ7iy9U=) 9: 3230322e3137332e38372e302f32342d3234203d3e203233363935.roa (hash: SmTukg2uSres2nPLyHTBL++dFIaU5SWdWD9V1LnZKzA=) 10: 3230322e3137332e37382e302f32342d3234203d3e203233363935.roa (hash: qIgN11+WPom9/7TNDZoyX6fP1sCsas2zffkRRMYFeHM=) 11: 3230322e3137332e39322e302f32342d3234203d3e203233363935.roa (hash: HIAVUx6ij09H4kiiZ/OJGBRVevXktqzOjuX4vjeRYfI=) 12: 3230322e3137332e39302e302f32342d3234203d3e203233363935.roa (hash: Vcu3cvP6TpAtiqIJRyIG86FnbkyFCwZwDKOk+Zdad3Y=) 13: 3230322e3137332e39312e302f32342d3234203d3e203233363935.roa (hash: QpQ1/sm5zXzKMRcJ3nXPQnI+vIIBo+CCNe1F4YSgeSo=) 14: 3230322e3137332e38352e302f32342d3234203d3e203233363935.roa (hash: UlX0UeHxNwDo/jIJmlDlRnsp3ZbSu9xVDF7FdNoezxw=) 15: 3230322e3137332e37332e302f32342d3234203d3e203233363935.roa (hash: nSzlfFPpI7N3qrGPleUZ7U2AGFdMYcBNQO4RGyLMKDU=) 16: 41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl (hash: uzM0fL4if8pab7B25PeytgtIqAmFOMlF5Wsd1UYP2j0=) 17: 3230322e3137332e36392e302f32342d3234203d3e203233363935.roa (hash: vDU9gcRo8sjLDkCnZOzt+rm8fLZLUHyOqnl2eV08+uU=) 18: 3230322e3137332e38362e302f32342d3234203d3e203233363935.roa (hash: w2YQbT4d401gEkexkGPNI5ffRS/JYHdhmh+BaqpDiJs=) 19: 3230322e3137332e36342e302f32342d3234203d3e203233363935.roa (hash: mn95e/RHwrm52jwgTOEuu2HIFPqZkwjgw7iJzDcC0Aw=) 20: 3230322e3137332e36372e302f32342d3234203d3e203233363935.roa (hash: NGImgtjhDUZw4LYbto24tiacu1uj5ePcNIzwHQKWr60=) 21: 3230322e3137332e37302e302f32342d3234203d3e203233363935.roa (hash: IuagBHs+wXzOnacnPUkJxU6l40oN7NESENKBCYPpsBU=) 22: 3230322e3137332e38382e302f32342d3234203d3e203233363935.roa (hash: kWaiaFCi5F4TW6LYG0q3VELQGQNXbZe+dclFyLeSNAY=) 23: 3230322e3137332e36382e302f32342d3234203d3e203233363935.roa (hash: kBeUG+J3aaoaEctPb/7V99FsXKX0tZO2cRt3bs0z0/k=) 24: 3230322e3137332e37392e302f32342d3234203d3e203233363935.roa (hash: JlV82roW0wq9X2Q7J+tUUs8b8oUVk7NAH3mIbLD0we8=) 25: 3230322e3137332e39352e302f32342d3234203d3e203233363935.roa (hash: bXcYT55Yk5nGWBx7FCOVlDHnPL+/TKis1JRYYVSX17o=) 26: 3230322e3137332e37342e302f32342d3234203d3e203233363935.roa (hash: 6QSQEwf0Vg6SaXjS+GIzWwNuYlP7VRzDWIXvyWeiVCo=) 27: 3230322e3137332e37352e302f32342d3234203d3e203233363935.roa (hash: kHEvnsONRQITDgcaeW14+b5i/pT074x2j6ak8xJ3qTA=) 28: 3230322e3137332e38302e302f32342d3234203d3e203233363935.roa (hash: Vmt2hMQ1PzBTrS/Zf6NsqZ+thU+zV90I3cLmY00k7VU=) 29: 3230322e3137332e37362e302f32342d3234203d3e203233363935.roa (hash: P5crg0R32gyS1n02458lLpX18WRXH3sQSc1skd1DZ2k=) 30: 3230322e3137332e39332e302f32342d3234203d3e203233363935.roa (hash: uUWqQ+r90afq72pms35ZsH7xSBYfCse9ZKzmHy/kk18=) 31: 3230322e3137332e37312e302f32342d3234203d3e203233363935.roa (hash: HSD+rz78f30+7qMkNj8RIXAP7toiDue03fxCDLpd1gQ=) 32: 3230322e3137332e36342e302f31392d3139203d3e203233363935.roa (hash: 2bUXUTcYKqH84i/OW2TNfGKGcjdUBjA5fkOcr7LqU+Y=) 33: 3230322e3137332e37372e302f32342d3234203d3e203233363935.roa (hash: fMnLos8+J1VIZ4qwJVBJ1J3B9BHaKTUBDhVAh5aNCi8=) 34: 3230322e3137332e38332e302f32342d3234203d3e203233363935.roa (hash: oDlDI6fU21fZbXJ7xjJnRhwvlH5l3glqD9qF8ZX5Ecs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 21:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:53:7c:60:ec:d6:79:8b:0d:db:f6:48:e2:37:c5:d6:51:bd:86:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C Validity Not Before: Aug 5 20:56:30 2025 GMT Not After : Aug 8 21:53:30 2025 GMT Subject: CN=A1D8051D08846163C002E892CDFEA1A30481EE49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:24:23:63:4c:55:43:bb:38:0c:6d:8f:c4:ff: 23:df:ed:c1:f9:41:3e:ab:30:c8:e4:b3:02:14:9d: 18:77:bc:75:03:2c:9d:f1:4d:9c:a2:46:65:9a:1d: 8f:6c:7c:46:5a:bf:c4:14:35:c0:a0:a5:50:48:4c: 82:ef:d0:1e:b9:b7:6a:65:f6:ab:8e:8d:5a:32:4c: cb:ea:8b:f2:e3:65:45:5f:cd:6a:09:75:10:ab:a5: d7:1e:a8:29:89:69:21:05:97:66:26:58:8d:b0:95: f6:af:d3:c0:11:f9:ab:b6:f0:bc:24:93:51:79:d4: 11:6b:c9:92:81:c2:04:50:9f:f8:84:43:13:e7:6a: d0:25:b6:6d:c4:8f:c5:ed:24:48:d8:88:de:ad:8d: 9d:7b:8c:2f:f9:0e:95:1f:fc:50:d8:8b:c4:64:8d: d3:47:1f:73:41:0f:df:e2:b6:9c:f5:d7:98:37:01: 5d:0d:9c:be:8b:ae:d7:de:d8:89:c4:b8:5e:15:5c: 5f:f9:23:13:c9:64:29:ff:42:bb:d0:96:37:cc:a0: e5:0d:c5:fc:15:71:3d:3d:d8:da:5e:06:e7:24:85: 89:77:20:e3:1f:cb:ab:9d:06:a8:0f:c8:4d:7d:0f: fd:e1:ec:94:35:78:23:5c:18:99:e9:08:fe:48:27: fe:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D8:05:1D:08:84:61:63:C0:02:E8:92:CD:FE:A1:A3:04:81:EE:49 X509v3 Authority Key Identifier: keyid:41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:41:27:92:d7:65:02:8c:ed:e5:f2:1d:82:8d:23:12:f7:38: b9:7c:10:b3:60:9c:61:43:3b:c9:10:f1:98:7d:b1:6e:db:50: ba:05:ab:07:85:6a:94:d2:14:31:63:f7:ff:36:4c:52:ad:bc: fb:ac:be:18:be:91:8a:b5:14:d0:dd:8c:83:b7:e4:30:b5:f9: 27:94:c0:40:bb:ed:23:97:0e:29:9f:7e:64:76:b2:1b:dc:29: 82:dc:a9:55:a0:a5:13:fb:d2:b1:8d:d5:29:8a:34:75:fc:c4: 96:26:3d:f5:98:ea:a7:ad:63:3e:eb:d7:3b:72:40:5d:f3:a6: 70:a5:a7:33:2d:73:e2:3a:1d:16:02:e7:85:e3:3a:ab:61:38: 98:fe:19:ae:1a:d0:9d:d9:fd:66:a6:35:26:ff:aa:85:47:0e: 8e:17:aa:22:83:e2:66:63:63:a2:4f:2c:84:04:4e:96:32:db: 46:39:96:86:fe:6b:77:f1:d7:fb:63:77:af:03:e7:f8:fa:c1: 69:06:08:62:70:85:12:f9:9c:11:3d:ae:9d:49:00:a5:b0:da: da:52:15:9d:f3:9c:08:1e:71:9f:f6:97:e1:a2:99:b1:2a:6e: 79:97:35:72:38:7f:c2:cd:1a:83:c9:71:60:a0:3f:d8:60:01: 60:bd:a0:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfFN8YOzWeYsN2/ZI4jfF1lG9hhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzczOTRB RTRFMkQ4QzAeFw0yNTA4MDUyMDU2MzBaFw0yNTA4MDgyMTUzMzBaMDMxMTAvBgNV BAMTKEExRDgwNTFEMDg4NDYxNjNDMDAyRTg5MkNERkVBMUEzMDQ4MUVFNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBJCNjTFVDuzgMbY/E/yPf7cH5 QT6rMMjkswIUnRh3vHUDLJ3xTZyiRmWaHY9sfEZav8QUNcCgpVBITILv0B65t2pl 9quOjVoyTMvqi/LjZUVfzWoJdRCrpdceqCmJaSEFl2YmWI2wlfav08AR+au28Lwk k1F51BFryZKBwgRQn/iEQxPnatAltm3Ej8XtJEjYiN6tjZ17jC/5DpUf/FDYi8Rk jdNHH3NBD9/itpz115g3AV0NnL6Lrtfe2InEuF4VXF/5IxPJZCn/QrvQljfMoOUN xfwVcT092NpeBuckhYl3IOMfy6udBqgPyE19D/3h7JQ1eCNcGJnpCP5IJ/7tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUodgFHQiEYWPAAuiSzf6howSB7kkwHwYDVR0j BBgwFoAUQeCTJvaM4BE2NerK9ONzlK5OLYwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjBmMmJkOS00MmFlLTQ0OWEtOGQ1Ny1iMjZkYTA0ZDdlZTEvMC80MUUwOTMyNkY2 OENFMDExMzYzNUVBQ0FGNEUzNzM5NEFFNEUyRDhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzczOTRBRTRF MkQ4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmYwZjJiZDktNDJhZS00NDlhLThk NTctYjI2ZGEwNGQ3ZWUxLzAvNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzcz OTRBRTRFMkQ4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK9BJ5LXZQKM7eXyHYKNIxL3OLl8ELNgnGFD O8kQ8Zh9sW7bULoFqweFapTSFDFj9/82TFKtvPusvhi+kYq1FNDdjIO35DC1+SeU wEC77SOXDimffmR2shvcKYLcqVWgpRP70rGN1SmKNHX8xJYmPfWY6qetYz7r1zty QF3zpnClpzMtc+I6HRYC54XjOqthOJj+Ga4a0J3Z/WamNSb/qoVHDo4XqiKD4mZj Y6JPLIQETpYy20Y5lob+a3fx1/tjd68D5/j6wWkGCGJwhRL5nBE9rp1JAKWw2tpS FZ3znAgecZ/2l+GimbEqbnmXNXI4f8LNGoPJcWCgP9hgAWC9oJc= -----END CERTIFICATE-----Generated at Thu Aug 7 00:25:55 2025 by rpki-client