$ rpki-client -vvf repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft File: 408585C1D62A4F618C0424E9BEDC3B91411C2276.mft (raw, json) Hash identifier: rmDEfM3WmBzRP7cTRTGYdWEqzR0klhO9XgrflFPrEWY= Subject key identifier: 36:68:18:25:B1:1F:EB:C4:51:A5:18:40:65:A4:F6:AD:1E:77:82:E2 Authority key identifier: 40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 Certificate issuer: /CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Certificate serial: 2B17927738A4BE6EFE3A8A2ABB44D665CE1127ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft Manifest number: 01F2 Signing time: Sun 15 Jun 2025 19:42:11 +0000 Manifest this update: Sun 15 Jun 2025 19:37:11 +0000 Manifest next update: Wed 18 Jun 2025 22:28:11 +0000 Files and hashes: 1: 408585C1D62A4F618C0424E9BEDC3B91411C2276.crl (hash: tcILtO1CtPUoLFcNjEflI1oi+B9fe2WGPLUg11f9zUM=) 2: 3130332e3132322e3132312e302f32342d3234203d3e20313338303836.roa (hash: NWTKjHM3PgU/D8DgzFheKr586Q+n/qcGSV1ZOdpOXco=) 3: 323030313a6466363a616630303a3a2f34382d3438203d3e20313338303836.roa (hash: pJzBSpecNdGxtRhriNjcTDwpDG6NNdRtxmQUp3nGEzE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 22:28:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:17:92:77:38:a4:be:6e:fe:3a:8a:2a:bb:44:d6:65:ce:11:27:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Validity Not Before: Jun 15 19:37:11 2025 GMT Not After : Jun 18 22:28:11 2025 GMT Subject: CN=36681825B11FEBC451A5184065A4F6AD1E7782E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d8:eb:b7:b7:bc:9f:88:7e:79:40:7b:fb:bc: 2c:32:f3:21:69:25:ca:5a:e3:24:b6:dd:82:37:4e: 20:c2:80:d8:2e:e4:bc:29:54:36:6a:7b:ad:c8:58: a5:2f:b1:a9:58:70:f5:0c:2b:c6:28:cb:e3:46:ad: a0:42:04:47:d9:99:1c:39:c0:d8:e1:cb:67:de:f8: 5b:6b:9b:e0:39:2f:cb:cf:20:84:9e:59:c4:fa:de: ec:11:b8:2f:0a:93:a9:dc:de:67:ad:e7:73:45:33: e8:03:21:86:cd:13:1f:d3:ed:72:af:5c:f7:48:13: f7:46:51:dc:c2:92:2c:54:8b:7d:bc:1d:4a:cf:e3: 8a:87:2f:5f:06:d7:37:58:63:ab:89:21:cc:37:70: b2:a8:23:f7:14:90:04:66:33:f5:0d:40:8d:9f:6f: 6a:f9:86:87:62:55:3d:d3:f4:15:0e:69:1e:d5:cd: 21:85:65:b5:8d:e1:af:c4:37:6f:a5:e7:74:2b:2c: d3:8f:09:2b:8b:b0:8b:fa:80:19:fd:aa:6b:b9:52: 60:2d:d4:8d:ad:59:db:2e:d1:81:ce:9e:4f:7e:86: a8:a5:99:f1:27:11:15:cb:93:6f:7e:c9:5a:81:e3: 7e:25:49:b6:c8:9c:44:fb:0b:fa:b1:a9:c6:1c:47: 23:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:68:18:25:B1:1F:EB:C4:51:A5:18:40:65:A4:F6:AD:1E:77:82:E2 X509v3 Authority Key Identifier: keyid:40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:0f:03:26:42:3a:77:02:26:8b:8a:1e:3d:cc:b7:83:f2:b7: 65:fb:01:fd:f9:15:38:70:5f:25:91:93:80:a5:5c:ff:98:60: b7:4d:37:c2:02:10:0f:48:c0:21:4c:83:3e:de:aa:73:30:ee: 32:d6:8d:8b:11:2a:ae:4e:32:c6:16:a8:c6:d7:ea:21:b0:fa: cd:d6:e0:d4:0a:37:f7:cb:68:c0:3f:b2:c9:62:c1:7d:f0:f1: ba:e3:15:37:64:f0:75:68:07:6d:af:b9:f0:b9:03:e2:24:72: 66:7d:72:11:aa:18:1e:09:54:9b:a7:f4:8d:72:a9:b0:38:a3: 3e:bf:e4:c0:c9:a8:65:01:a1:8a:3a:66:59:5f:7c:68:ab:a5: d3:14:ae:a6:fe:11:63:75:14:bb:46:7a:f6:6c:64:96:2c:02: 7f:d9:69:ee:e0:e7:25:fe:5a:d2:fb:5a:f6:6a:05:c0:87:ec: e8:65:c6:6e:82:b8:18:b5:23:3d:29:05:80:78:2a:01:30:18: fc:12:e4:1b:33:47:c1:4a:84:38:e9:99:ec:54:5a:7a:7d:34: 65:fc:fb:07:98:a7:56:b3:83:99:ee:28:27:31:d1:44:a7:99: 9f:c7:a9:c8:d1:4d:dd:c8:9c:24:aa:21:36:60:bd:45:11:3f: 56:1d:64:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKxeSdzikvm7+Oooqu0TWZc4RJ+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0 MTFDMjI3NjAeFw0yNTA2MTUxOTM3MTFaFw0yNTA2MTgyMjI4MTFaMDMxMTAvBgNV BAMTKDM2NjgxODI1QjExRkVCQzQ1MUE1MTg0MDY1QTRGNkFEMUU3NzgyRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl2Ou3t7yfiH55QHv7vCwy8yFp Jcpa4yS23YI3TiDCgNgu5LwpVDZqe63IWKUvsalYcPUMK8Yoy+NGraBCBEfZmRw5 wNjhy2fe+Ftrm+A5L8vPIISeWcT63uwRuC8Kk6nc3met53NFM+gDIYbNEx/T7XKv XPdIE/dGUdzCkixUi328HUrP44qHL18G1zdYY6uJIcw3cLKoI/cUkARmM/UNQI2f b2r5hodiVT3T9BUOaR7VzSGFZbWN4a/EN2+l53QrLNOPCSuLsIv6gBn9qmu5UmAt 1I2tWdsu0YHOnk9+hqilmfEnERXLk29+yVqB434lSbbInET7C/qxqcYcRyPBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNmgYJbEf68RRpRhAZaT2rR53guIwHwYDVR0j BBgwFoAUQIWFwdYqT2GMBCTpvtw7kUEcInYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2UyNmM4My01ZWQyLTRjOGItOGEwMy02Y2IwMGQxZWQzMzgvMC80MDg1ODVDMUQ2 MkE0RjYxOEMwNDI0RTlCRURDM0I5MTQxMUMyMjc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0MTFD MjI3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdlMjZjODMtNWVkMi00YzhiLThh MDMtNmNiMDBkMWVkMzM4LzAvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNC OTE0MTFDMjI3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcPAyZCOncCJouKHj3Mt4Pyt2X7Af35FThw XyWRk4ClXP+YYLdNN8ICEA9IwCFMgz7eqnMw7jLWjYsRKq5OMsYWqMbX6iGw+s3W 4NQKN/fLaMA/ssliwX3w8brjFTdk8HVoB22vufC5A+IkcmZ9chGqGB4JVJun9I1y qbA4oz6/5MDJqGUBoYo6ZllffGirpdMUrqb+EWN1FLtGevZsZJYsAn/Zae7g5yX+ WtL7WvZqBcCH7Ohlxm6CuBi1Iz0pBYB4KgEwGPwS5BszR8FKhDjpmexUWnp9NGX8 +weYp1azg5nuKCcx0USnmZ/HqcjRTd3InCSqITZgvUURP1YdZJg= -----END CERTIFICATE-----Generated at Tue Jun 17 01:31:25 2025 by rpki-client