$ rpki-client -vvf repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft File: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft (raw, json) Hash identifier: Zvorc9MRuJxQ9davQ5l1ZB4w3YKEUY+Qtvt17yDOFlU= Subject key identifier: 5C:8F:C6:E3:E4:10:15:E8:D6:79:52:C6:83:BE:93:26:79:DE:02:5D Authority key identifier: 49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 Certificate issuer: /CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Certificate serial: 6085A97A4DBCCE7B512FDAA71EC965E399E1AE5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft Manifest number: 01BD Signing time: Sun 15 Jun 2025 17:51:01 +0000 Manifest this update: Sun 15 Jun 2025 17:46:01 +0000 Manifest next update: Thu 19 Jun 2025 01:40:01 +0000 Files and hashes: 1: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl (hash: lnqE2SIhXoV+X1cbR7xh7R+GKrYHWha0J04YXDtH9D8=) 2: 3130332e3132322e3135342e302f32342d3234203d3e20313430343037.roa (hash: FeqaP2txuOgRBx2G96zuc78OrFRr2szEz0GSYPgv878=) 3: 3130332e3132322e3135322e302f32342d3234203d3e20313430343037.roa (hash: 1P2ogrnijw2MvpVLks2hrGbS/RxvIv2H3EW9osb1JfQ=) 4: 3130332e3132322e3135342e302f32332d3233203d3e20313430343037.roa (hash: rvVfeVhsLZ7fWwhIJc3Pd2GqdWdss3UfF7UYtrrPnKo=) 5: 3130332e3132322e3135322e302f32332d3233203d3e20313430343037.roa (hash: NOw/NEm3PMCbXTGqxWPDqyT8dJkjuZuy6Yh+EG0lwcQ=) 6: 323430333a393063303a3a2f33322d3430203d3e20313430343037.roa (hash: /AD55gQuIXqmhT7jl8XXbRiu7aeneAmR5bk7jupkCNk=) 7: 3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa (hash: APvRAxFS/BciWNG05hryQjcSm8DABLzRNy+ilZSBuW8=) 8: 3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa (hash: uAd0JDcy4hpWuoEBSRUvaHCaFXVpe2sxWabbA6bZmhw=) 9: 3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa (hash: MUfRn9lbrp81WMx09UFWCA0kG2/2E+bxpD3Uyi4FCjU=) 10: 323430333a393063303a3a2f33322d3332203d3e20313430343037.roa (hash: R8Z+hXBnnWiJJKdYZqlOoXUCZ71qI50sWMocZ6icaII=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 01:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:85:a9:7a:4d:bc:ce:7b:51:2f:da:a7:1e:c9:65:e3:99:e1:ae:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Validity Not Before: Jun 15 17:46:01 2025 GMT Not After : Jun 19 01:40:01 2025 GMT Subject: CN=5C8FC6E3E41015E8D67952C683BE932679DE025D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f2:89:5c:38:6c:52:7d:16:53:ab:ac:1e:ee: 0e:1b:72:ce:c8:a1:cd:15:6a:af:6e:60:cb:77:f8: 30:24:9f:7c:2a:42:78:50:2d:ce:37:c5:e4:48:ae: 96:80:04:20:35:2a:3c:b4:97:db:fc:7d:43:1f:61: 94:6e:e2:73:3f:eb:e5:4f:e6:bb:41:a7:40:5a:2b: 69:89:ef:40:35:38:6d:4b:0f:49:17:03:fe:e2:2f: 68:7b:0c:f2:ed:6f:3c:40:9f:bd:70:8f:2c:0a:f1: 27:3f:ce:9f:da:17:7f:c2:4b:71:d1:02:af:59:5f: 82:c4:0b:af:d5:6b:14:2d:8f:17:d5:22:d0:da:ef: 22:61:fc:b8:79:f0:7a:b0:ab:a0:a8:84:27:d8:7d: 69:34:7e:a0:87:45:3b:10:bc:dd:0a:ef:08:5e:64: 97:68:53:b4:1c:73:48:b6:91:29:f7:40:09:01:0b: f1:5b:98:b7:75:25:c3:d3:65:9b:04:ce:7f:ee:9c: c2:5e:34:1b:06:f9:8d:44:3f:ad:3c:e7:29:73:96: 3e:89:43:1a:5b:17:23:4c:8c:95:5a:e7:f8:45:68: dd:7d:19:1e:14:a1:12:fd:26:5e:96:7b:5b:e2:3d: a1:b6:53:b4:0a:c2:9d:98:08:26:b0:27:99:50:96: 46:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8F:C6:E3:E4:10:15:E8:D6:79:52:C6:83:BE:93:26:79:DE:02:5D X509v3 Authority Key Identifier: keyid:49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:72:51:3c:78:30:e2:48:75:2a:22:96:06:12:75:7b:a9:c1: 2f:ca:3d:5d:53:88:79:43:5a:32:75:1f:ab:a3:0a:0a:31:cd: 6c:ab:17:cb:af:c4:4e:fb:2c:aa:3a:4c:43:8e:c6:ab:0e:e7: fc:50:56:41:43:9c:88:d8:15:28:02:40:79:21:b5:50:af:c6: 4b:bb:58:86:89:92:6f:bb:dc:53:ef:83:ef:86:53:7a:51:2c: fa:e8:c4:ad:6f:b6:12:9e:ac:61:9a:a0:23:5e:c0:61:82:0c: ca:e0:78:23:50:bd:64:42:c8:e6:89:d5:1b:db:8e:58:a1:de: ab:47:2f:b1:0e:66:25:28:31:ca:e3:56:8c:ee:ee:d7:2a:b6: ba:5e:9c:55:e0:4e:45:80:46:00:41:ee:9b:66:23:2d:d6:cd: a6:e3:e8:97:00:99:9f:0b:81:e7:da:ca:dc:15:98:07:16:5f: b2:bd:72:b0:32:35:5f:2b:9f:fc:33:04:8b:98:97:be:13:b8: f0:99:85:a9:64:0d:d0:f7:f4:e2:37:04:a2:92:54:e9:62:80: 9b:b2:3d:ac:b0:8e:c6:12:00:e6:75:f6:c2:a4:8c:6c:3d:23: 80:9c:72:be:ee:b3:11:a5:cf:97:11:02:a5:60:4e:9a:20:84: 12:30:8f:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYIWpek28zntRL9qnHsll45nhrlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1 QTlEMkY5NTAeFw0yNTA2MTUxNzQ2MDFaFw0yNTA2MTkwMTQwMDFaMDMxMTAvBgNV BAMTKDVDOEZDNkUzRTQxMDE1RThENjc5NTJDNjgzQkU5MzI2NzlERTAyNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx8olcOGxSfRZTq6we7g4bcs7I oc0Vaq9uYMt3+DAkn3wqQnhQLc43xeRIrpaABCA1Kjy0l9v8fUMfYZRu4nM/6+VP 5rtBp0BaK2mJ70A1OG1LD0kXA/7iL2h7DPLtbzxAn71wjywK8Sc/zp/aF3/CS3HR Aq9ZX4LEC6/VaxQtjxfVItDa7yJh/Lh58Hqwq6CohCfYfWk0fqCHRTsQvN0K7whe ZJdoU7Qcc0i2kSn3QAkBC/FbmLd1JcPTZZsEzn/unMJeNBsG+Y1EP6085ylzlj6J QxpbFyNMjJVa5/hFaN19GR4UoRL9Jl6We1viPaG2U7QKwp2YCCawJ5lQlkbrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXI/G4+QQFejWeVLGg76TJnneAl0wHwYDVR0j BBgwFoAUSRsOpUQFY76bDxZ9p2wF6FqdL5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjI5NzgxYS04YWM5LTQ0NTItYjI1Zi01NGU3ZWRmN2Q0YTQvMC80OTFCMEVBNTQ0 MDU2M0JFOUIwRjE2N0RBNzZDMDVFODVBOUQyRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1QTlE MkY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzIyOTc4MWEtOGFjOS00NDUyLWIy NWYtNTRlN2VkZjdkNGE0LzAvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1 RTg1QTlEMkY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL1yUTx4MOJIdSoilgYSdXupwS/KPV1TiHlD WjJ1H6ujCgoxzWyrF8uvxE77LKo6TEOOxqsO5/xQVkFDnIjYFSgCQHkhtVCvxku7 WIaJkm+73FPvg++GU3pRLProxK1vthKerGGaoCNewGGCDMrgeCNQvWRCyOaJ1Rvb jlih3qtHL7EOZiUoMcrjVozu7tcqtrpenFXgTkWARgBB7ptmIy3Wzabj6JcAmZ8L gefaytwVmAcWX7K9crAyNV8rn/wzBIuYl74TuPCZhalkDdD39OI3BKKSVOligJuy PaywjsYSAOZ19sKkjGw9I4Cccr7usxGlz5cRAqVgTpoghBIwj4k= -----END CERTIFICATE-----Generated at Wed Jun 18 03:59:46 2025 by rpki-client