$ rpki-client -vvf repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft File: 408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft (raw, json) Hash identifier: EVg9Aw4Njwx7aPfXOpf1Njw56fskiM+aSPSVkqBg0XI= Subject key identifier: C4:CF:4D:5D:02:AA:27:96:EF:F6:57:54:89:40:CD:26:B0:6B:5A:E8 Authority key identifier: 40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2 Certificate issuer: /CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2 Certificate serial: 394C03B18C4AC628B01E01517F14007058E1978F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft Manifest number: 046D Signing time: Mon 16 Jun 2025 21:41:00 +0000 Manifest this update: Mon 16 Jun 2025 21:36:00 +0000 Manifest next update: Fri 20 Jun 2025 05:14:00 +0000 Files and hashes: 1: 408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl (hash: uSIUrWO20vDjEu7nRJnhzR34357xZjl89pAtNswFJJM=) 2: 3130332e3134332e32302e302f32342d3234203d3e20313339343035.roa (hash: 486gYpHFPIGrMV4cst/8HcDYBuujcWoRBQU44C89Iu0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:4c:03:b1:8c:4a:c6:28:b0:1e:01:51:7f:14:00:70:58:e1:97:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2 Validity Not Before: Jun 16 21:36:00 2025 GMT Not After : Jun 20 05:14:00 2025 GMT Subject: CN=C4CF4D5D02AA2796EFF657548940CD26B06B5AE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:62:8c:06:cd:86:2f:0b:28:4a:0e:9c:16:60: b4:5d:02:c6:5a:0d:88:c7:2d:43:64:c8:ca:dc:10: 42:27:cb:a8:c3:21:08:28:66:53:b1:47:b6:f2:5d: a2:d6:7e:b0:d8:11:30:74:b6:dc:a5:ad:2d:84:f7: 08:e4:eb:4b:74:e7:3d:fc:80:d3:86:4d:b8:0f:a1: eb:7a:bf:f5:e4:63:8e:b1:48:fb:ec:55:ba:eb:c3: de:65:9d:ae:7f:21:f9:13:01:7a:0c:48:a1:b2:c1: 21:23:26:79:79:01:b2:63:89:ed:62:d0:0a:d5:51: 97:c1:92:c3:6f:e9:49:e1:a0:b0:b2:cb:a5:f0:60: 50:f8:f7:d9:39:cb:15:45:2e:91:ba:17:3e:74:1a: 4a:33:38:7e:a7:9d:8e:94:37:7c:f3:b8:df:c0:03: cf:0e:e6:3f:3a:a1:6a:4a:f7:71:50:7c:17:11:84: 73:e1:57:e5:43:24:d4:84:10:10:e2:6a:c6:02:02: 04:03:68:88:b7:02:c9:32:6d:9b:61:39:3b:80:4f: 5d:1c:42:67:22:28:f8:5f:58:70:69:5d:88:68:44: b5:16:33:11:f0:60:ea:84:0d:65:7d:29:26:de:13: 2a:40:dc:8a:76:99:88:b8:57:94:6d:86:87:e6:f2: 6f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CF:4D:5D:02:AA:27:96:EF:F6:57:54:89:40:CD:26:B0:6B:5A:E8 X509v3 Authority Key Identifier: keyid:40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:87:dc:bf:c5:ec:21:9f:2f:5c:bf:05:0e:86:ac:3a:29:39: 71:4c:7c:7c:6d:ad:6b:cf:6a:23:bd:65:6d:45:91:4e:fe:a2: 0c:93:7f:89:23:ab:56:13:ce:05:59:49:e5:ed:ab:4a:a2:0f: 82:39:39:23:ab:17:09:02:0a:99:e7:1d:29:e7:cf:43:b3:6b: 3d:38:4b:4e:55:b7:3f:3b:34:ce:27:d5:d9:46:3e:9c:fa:09: 4a:f6:97:33:12:76:34:41:4a:63:09:ce:4c:8b:eb:13:a9:84: 8b:d1:73:e2:c0:93:38:01:72:0a:4e:93:a0:4b:4f:c5:e5:13: ac:f3:14:5a:25:55:f7:0a:3d:cd:14:73:8e:f4:91:17:11:00: f6:f0:c9:66:50:25:71:6a:39:4b:98:10:44:6f:fd:e7:f8:d5: 88:60:81:36:eb:5b:3d:b5:5a:f3:30:83:45:b1:04:11:f3:5d: 3f:24:ee:3f:51:4b:f3:16:04:1c:60:02:6b:92:83:6e:c2:e5: 7c:b0:00:41:a7:ad:96:c5:ae:57:91:c9:54:9b:ee:21:1c:36: 7c:80:2a:0c:fa:f5:ec:4b:9b:7f:1c:8d:1f:75:ff:22:c0:99: 8e:19:60:02:33:54:2d:90:38:f5:5d:30:b1:81:0a:bb:c0:aa: af:9a:c8:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOUwDsYxKxiiwHgFRfxQAcFjhl48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgyQzYx RTA4MDFGMjAeFw0yNTA2MTYyMTM2MDBaFw0yNTA2MjAwNTE0MDBaMDMxMTAvBgNV BAMTKEM0Q0Y0RDVEMDJBQTI3OTZFRkY2NTc1NDg5NDBDRDI2QjA2QjVBRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKYowGzYYvCyhKDpwWYLRdAsZa DYjHLUNkyMrcEEIny6jDIQgoZlOxR7byXaLWfrDYETB0ttylrS2E9wjk60t05z38 gNOGTbgPoet6v/XkY46xSPvsVbrrw95lna5/IfkTAXoMSKGywSEjJnl5AbJjie1i 0ArVUZfBksNv6UnhoLCyy6XwYFD499k5yxVFLpG6Fz50GkozOH6nnY6UN3zzuN/A A88O5j86oWpK93FQfBcRhHPhV+VDJNSEEBDiasYCAgQDaIi3AskybZthOTuAT10c QmciKPhfWHBpXYhoRLUWMxHwYOqEDWV9KSbeEypA3Ip2mYi4V5Rthofm8m81AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxM9NXQKqJ5bv9ldUiUDNJrBrWugwHwYDVR0j BBgwFoAUQIOVkUoadP9OarHeBj+Cxh4IAfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzhjM2M2OS0zNmQwLTRhZTgtYThkZi02M2QzZjQ0Y2NkOGQvMC80MDgzOTU5MTRB MUE3NEZGNEU2QUIxREUwNjNGODJDNjFFMDgwMUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgyQzYxRTA4 MDFGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc4YzNjNjktMzZkMC00YWU4LWE4 ZGYtNjNkM2Y0NGNjZDhkLzAvNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgy QzYxRTA4MDFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+H3L/F7CGfL1y/BQ6GrDopOXFMfHxtrWvP aiO9ZW1FkU7+ogyTf4kjq1YTzgVZSeXtq0qiD4I5OSOrFwkCCpnnHSnnz0Ozaz04 S05Vtz87NM4n1dlGPpz6CUr2lzMSdjRBSmMJzkyL6xOphIvRc+LAkzgBcgpOk6BL T8XlE6zzFFolVfcKPc0Uc470kRcRAPbwyWZQJXFqOUuYEERv/ef41YhggTbrWz21 WvMwg0WxBBHzXT8k7j9RS/MWBBxgAmuSg27C5XywAEGnrZbFrleRyVSb7iEcNnyA Kgz69exLm38cjR91/yLAmY4ZYAIzVC2QOPVdMLGBCrvAqq+ayJc= -----END CERTIFICATE-----Generated at Tue Jun 17 08:09:00 2025 by rpki-client