$ rpki-client -vvf repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft File: 1CA9E40710262DA751A67E932477D6E12B4B2DED.mft (raw, json) Hash identifier: Gg7xHMK+4rbN+R0amu6cCfr143Z7KPro7Yv1K/PdBmo= Subject key identifier: 1B:B7:9C:05:D3:D2:D0:89:BB:96:20:B0:99:4C:7A:1C:07:66:84:7E Authority key identifier: 1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED Certificate issuer: /CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Certificate serial: 1A2D95A0A9B0EAC9A5A9422921BE8EDD5FFD31C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft Manifest number: 04E5 Signing time: Sun 15 Jun 2025 19:10:03 +0000 Manifest this update: Sun 15 Jun 2025 19:05:03 +0000 Manifest next update: Wed 18 Jun 2025 21:12:03 +0000 Files and hashes: 1: 323430333a396663303a3a2f33322d3438203d3e20313338303730.roa (hash: g2I091o7xGYF01O50CUZMPsQctw2lflU2v4s2FAorWY=) 2: 3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa (hash: cke05Fz1pU7ph5quQU6BQAXvAK/qW0tlFEcIja5SVaM=) 3: 3130332e3132332e3130352e302f32342d3234203d3e20313338303730.roa (hash: BfFCh7Vfs8z+WKVbxTTngHawwEIYaKlayBm3t+ZFnyU=) 4: 3130332e3132332e3130342e302f32322d3234203d3e20313338303730.roa (hash: Yh/X3wf3xgSBLANEs82b75GugxHKann/OAKH3YrZy2U=) 5: 3130332e3132332e3130362e302f32342d3234203d3e20313338303730.roa (hash: 1Qj+0yJlnyRAkhJQW7JxleOTtApsG7fPmAlVCQ6z7p8=) 6: 1CA9E40710262DA751A67E932477D6E12B4B2DED.crl (hash: pIhlPcqE3dirufiZPdYYC7zM9AoGzUUKHtDT+y0qXqc=) 7: 3130332e3132332e3130342e302f32342d3234203d3e20313338303730.roa (hash: yHCpL2jeoTRdKkL9PeW/BmTUh9ZLAObQa8uLRwAc8Ww=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 21:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:2d:95:a0:a9:b0:ea:c9:a5:a9:42:29:21:be:8e:dd:5f:fd:31:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Validity Not Before: Jun 15 19:05:03 2025 GMT Not After : Jun 18 21:12:03 2025 GMT Subject: CN=1BB79C05D3D2D089BB9620B0994C7A1C0766847E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:50:62:fd:f7:a5:b9:4b:5e:28:c9:26:95:1c: 91:e2:c2:60:11:16:9b:0b:0b:a2:bf:d6:b8:34:d9: 2b:f3:82:45:a3:7a:91:76:8d:7e:27:79:48:5f:19: 35:c8:8b:07:05:77:dc:96:8f:a0:45:8a:26:21:f1: 86:dd:4f:87:ac:13:43:ec:ad:ec:28:31:db:ad:79: 9d:f2:7f:75:7f:65:c9:e5:58:02:84:93:cd:f6:54: f0:d1:1f:47:51:62:c4:1a:23:ce:86:44:13:d4:ec: 8a:af:a3:52:6d:be:5d:d1:db:22:de:81:69:a5:c3: b9:ef:75:8d:c1:ce:52:dc:7a:fb:26:57:21:65:c3: 2f:f4:34:f1:f3:d3:89:13:0f:a5:10:12:9f:48:b2: 61:96:1e:59:e4:76:03:ba:bb:b4:f4:11:6a:68:04: d4:94:85:fb:fa:fe:18:06:79:92:72:18:6b:65:3b: ae:1b:d9:d0:52:36:81:b3:a1:2c:6a:d6:df:d5:f8: 38:f1:33:f7:f5:62:72:ed:d7:ad:fc:7d:cc:08:6a: 0b:c6:2e:a4:5f:98:a0:c6:7e:ae:01:c8:9e:19:44: 6f:b2:d0:5f:a3:13:32:f3:67:7a:14:3d:a3:ed:a3: 43:e3:e1:78:9c:77:66:d3:01:be:5b:87:eb:cb:7d: a4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B7:9C:05:D3:D2:D0:89:BB:96:20:B0:99:4C:7A:1C:07:66:84:7E X509v3 Authority Key Identifier: keyid:1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:21:c1:e3:7a:0b:a0:4d:9e:ce:2b:22:42:6c:64:c3:92:31: f4:49:c3:9e:b1:ca:67:63:b9:2f:6a:c8:64:9a:f9:a1:41:a8: 09:ef:bf:ca:33:ad:15:f8:18:4a:48:d7:7f:c8:57:57:b6:17: 8c:2c:16:8a:0a:87:81:cd:12:92:94:73:d3:28:d5:20:72:4f: b0:1f:fc:75:e8:d1:25:b8:c1:7d:f2:91:e8:fe:bd:e4:49:39: db:fe:1c:db:6c:94:1c:f4:76:9d:38:35:98:8f:b7:6d:1e:d9: 80:47:51:e9:a9:ef:19:cc:0f:cc:6d:dd:ae:f4:44:fb:2e:28: 9f:a6:0a:0b:07:8f:c0:08:8a:ff:44:d4:65:e1:57:10:90:62: ec:57:a6:8b:d3:87:08:7b:20:9c:a5:16:e4:16:7d:6a:f4:99: 87:44:f5:19:0b:72:cb:69:f3:7a:18:22:75:a7:12:38:54:7f: 56:c0:1a:7e:41:b2:c0:40:2c:e5:e7:0d:ea:9b:2f:42:e8:1b: 57:2e:04:39:4e:e4:65:c3:a9:b8:47:c2:1b:54:6b:28:c6:4e: ca:bb:c1:49:e1:23:d6:0d:60:37:7e:a2:a7:05:94:3c:09:13: 6b:4a:1e:c7:6b:ca:ca:fa:db:71:74:d9:a8:29:b8:32:a7:4d: e3:94:9e:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGi2VoKmw6smlqUIpIb6O3V/9McYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEy QjRCMkRFRDAeFw0yNTA2MTUxOTA1MDNaFw0yNTA2MTgyMTEyMDNaMDMxMTAvBgNV BAMTKDFCQjc5QzA1RDNEMkQwODlCQjk2MjBCMDk5NEM3QTFDMDc2Njg0N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+UGL996W5S14oySaVHJHiwmAR FpsLC6K/1rg02SvzgkWjepF2jX4neUhfGTXIiwcFd9yWj6BFiiYh8YbdT4esE0Ps rewoMduteZ3yf3V/ZcnlWAKEk832VPDRH0dRYsQaI86GRBPU7Iqvo1Jtvl3R2yLe gWmlw7nvdY3BzlLcevsmVyFlwy/0NPHz04kTD6UQEp9IsmGWHlnkdgO6u7T0EWpo BNSUhfv6/hgGeZJyGGtlO64b2dBSNoGzoSxq1t/V+DjxM/f1YnLt1638fcwIagvG LqRfmKDGfq4ByJ4ZRG+y0F+jEzLzZ3oUPaPto0Pj4Xicd2bTAb5bh+vLfaS1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG7ecBdPS0Im7liCwmUx6HAdmhH4wHwYDVR0j BBgwFoAUHKnkBxAmLadRpn6TJHfW4StLLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWQ2N2Q1Zi01NzEzLTQxNTMtODcxYi0xYjAwOGY3ZmZkZDIvMC8xQ0E5RTQwNzEw MjYyREE3NTFBNjdFOTMyNDc3RDZFMTJCNEIyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEyQjRC MkRFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFkNjdkNWYtNTcxMy00MTUzLTg3 MWItMWIwMDhmN2ZmZGQyLzAvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2 RTEyQjRCMkRFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwhweN6C6BNns4rIkJsZMOSMfRJw56xymdj uS9qyGSa+aFBqAnvv8ozrRX4GEpI13/IV1e2F4wsFooKh4HNEpKUc9Mo1SByT7Af /HXo0SW4wX3ykej+veRJOdv+HNtslBz0dp04NZiPt20e2YBHUemp7xnMD8xt3a70 RPsuKJ+mCgsHj8AIiv9E1GXhVxCQYuxXpovThwh7IJylFuQWfWr0mYdE9RkLcstp 83oYInWnEjhUf1bAGn5BssBALOXnDeqbL0LoG1cuBDlO5GXDqbhHwhtUayjGTsq7 wUnhI9YNYDd+oqcFlDwJE2tKHsdrysr623F02agpuDKnTeOUnhM= -----END CERTIFICATE-----Generated at Tue Jun 17 05:15:59 2025 by rpki-client