$ rpki-client -vvf repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft File: C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft (raw, json) Hash identifier: gxMruXd/FZgXoaSg8Uzu/36bL8JSddU1U6oUbZiRBA4= Subject key identifier: 24:64:C7:EF:50:9A:CF:B6:F8:43:64:36:AE:96:5C:0C:1B:1A:AC:B6 Authority key identifier: C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F Certificate issuer: /CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F Certificate serial: 7BA9497258DD716A3333A235E695A2E5E607A932 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft Manifest number: 0539 Signing time: Mon 21 Jul 2025 16:22:21 +0000 Manifest this update: Mon 21 Jul 2025 16:17:21 +0000 Manifest next update: Fri 25 Jul 2025 03:28:21 +0000 Files and hashes: 1: 3230332e3137362e3138302e302f32322d3234203d3e20313331313131.roa (hash: VU0ZIZ2pkWLbL/yZX6A7PXJh4wAgz1Lfo/SmUnfVxjs=) 2: 3131392e3233352e3230382e302f32302d3234203d3e20313331313131.roa (hash: bNy3O3/D8sze1XtEAGH5p80v+qY7OivRx/ulln1yeBc=) 3: 32372e35302e31362e302f32302d3234203d3e20313331313131.roa (hash: K0Qyq4TQNm4Gb6O7QApcWBMQFh1hlsrrhE70FrRZJng=) 4: 3230322e34332e3137362e302f32302d3234203d3e20313331313131.roa (hash: 2LFPdQC7sfy55qfY3d9WCKIbl57qZU5+z9zs069asuU=) 5: 3130332e32322e3234382e302f32322d3234203d3e20313331313131.roa (hash: kWqKP/lyIhDws2h8Me6LYP31KQBLG0udbqPtWea7AOc=) 6: 34332e3234332e3134302e302f32322d3234203d3e20313331313131.roa (hash: Ln/zBXifrR3kRN5QO8V+SWT6tpUWR1WnEob5sCVgP4s=) 7: 3230322e34332e3137362e302f32322d3234203d3e20313331313131.roa (hash: o4EuiIX65DjYa3ywyHTPaQSCo34pp+K8+jEM2BCf1A4=) 8: 3130332e32322e3234392e302f32342d3234203d3e20313331313131.roa (hash: aY0anTpEZIat4/VeI01P3kjwTwtzNISJMDgT1crbBNU=) 9: 3130332e32322e3234382e302f32342d3234203d3e20313331313131.roa (hash: UtJjITDA9JHQ6VJXBVisu99jt556rMiuNEZSGObwvAc=) 10: 3130332e32322e3235312e302f32342d3234203d3e20313331313131.roa (hash: FQpoIAC9AkHOj7gF3JsxAlTSaEMd9sYKYRZgoHuK7yw=) 11: 3130332e32322e3235302e302f32342d3234203d3e20313331313131.roa (hash: 516xDtvKLseki+IBX6h+mKjxbuiKgwqfJB4LmOXicXw=) 12: C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl (hash: A5IWQDwj6rN5eZJrf0sPhHfRS04hPmIc5l/3kY5nGoY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 22:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a9:49:72:58:dd:71:6a:33:33:a2:35:e6:95:a2:e5:e6:07:a9:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F Validity Not Before: Jul 21 16:17:21 2025 GMT Not After : Jul 25 03:28:21 2025 GMT Subject: CN=2464C7EF509ACFB6F8436436AE965C0C1B1AACB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:08:7e:fa:2c:39:16:37:b1:68:6e:d1:bd:6f: 08:b5:bb:c0:9e:b8:07:e5:8e:f3:e7:4c:53:a0:43: e8:3f:f8:cd:00:7e:12:3a:aa:7b:f9:80:ad:22:34: 95:c4:9a:ef:d3:6e:2d:c0:bf:7f:b5:1b:83:70:3d: 93:cd:af:a1:b4:1d:40:c1:91:47:66:cb:5f:74:cd: 6b:6d:39:23:aa:32:ae:88:4a:66:a8:6d:3e:c0:47: f8:e9:a5:80:02:85:d6:b9:0d:34:cb:a1:91:68:d0: 39:43:d0:9c:a7:ff:aa:07:63:95:39:bc:0d:8e:7c: af:28:1d:24:95:3b:e7:62:c2:52:b0:6f:af:08:89: 98:4a:65:d4:63:20:e5:56:04:5a:be:04:cb:7e:8e: ff:99:22:79:7a:1e:ad:69:f1:1b:82:b3:9b:86:10: 07:a1:85:56:f9:80:c3:bc:92:96:57:b1:31:2d:91: e4:25:79:ea:51:e7:ff:f3:9f:d3:f7:ef:a6:69:e8: d3:61:66:dc:03:c5:c7:dc:b2:e7:4a:d4:98:80:0d: fb:72:fd:cf:18:e7:81:e9:12:5c:82:b7:aa:a3:5a: bd:ea:bb:4c:11:f3:8e:0a:3c:80:1a:9b:a1:5f:bd: 9c:47:10:ae:18:75:11:8e:64:6a:19:54:d3:09:9a: de:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:64:C7:EF:50:9A:CF:B6:F8:43:64:36:AE:96:5C:0C:1B:1A:AC:B6 X509v3 Authority Key Identifier: keyid:C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:cb:16:6d:fd:a3:13:51:e0:f7:0d:06:29:63:a4:0a:38:a5: c3:c6:bb:61:f5:e1:0f:43:0c:5b:f9:bc:eb:a8:0a:c3:f5:07: 2a:06:5d:25:95:ae:03:ff:16:4d:b3:c2:42:f1:cd:42:ac:d0: 08:96:3d:bc:ed:dc:da:80:f8:1e:d8:e4:bd:fb:0f:29:9f:5b: 26:b2:fe:6f:a5:42:47:07:f5:31:16:93:8a:48:bf:0e:d2:ba: d7:a1:86:8a:10:ea:11:1f:1b:61:50:6e:65:76:95:26:40:f6: c2:de:80:84:8b:64:c1:11:9a:1e:f5:36:b3:69:b5:ee:f6:58: 4b:13:47:43:bd:71:fe:30:9e:db:5e:14:ad:94:14:ab:23:dd: c1:4b:2b:8d:07:de:8f:44:82:4d:99:fc:ce:31:85:f1:5a:88: 6a:43:1d:6a:5e:e2:84:e3:23:89:ab:c0:1c:62:c7:dc:45:a2: e8:31:a5:2e:6e:8f:a3:5d:ae:c5:71:57:83:43:63:8d:f0:51: 04:e5:de:5c:e5:48:64:63:85:fa:a4:ae:36:38:0b:5e:cd:87: 99:fc:d6:ab:28:6e:bf:00:b0:86:c6:19:6c:c3:70:78:46:67: 32:ac:37:4e:94:e0:23:e3:c3:d7:c4:9b:1d:74:49:9f:4d:ed: f0:dc:eb:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe6lJcljdcWozM6I15pWi5eYHqTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFBRjhDOTk5RTlEMDZEQURFQkMzODdENzhCMzA1QUI4 NzE2REMyRjAeFw0yNTA3MjExNjE3MjFaFw0yNTA3MjUwMzI4MjFaMDMxMTAvBgNV BAMTKDI0NjRDN0VGNTA5QUNGQjZGODQzNjQzNkFFOTY1QzBDMUIxQUFDQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjCH76LDkWN7FobtG9bwi1u8Ce uAfljvPnTFOgQ+g/+M0AfhI6qnv5gK0iNJXEmu/Tbi3Av3+1G4NwPZPNr6G0HUDB kUdmy190zWttOSOqMq6ISmaobT7AR/jppYAChda5DTTLoZFo0DlD0Jyn/6oHY5U5 vA2OfK8oHSSVO+diwlKwb68IiZhKZdRjIOVWBFq+BMt+jv+ZInl6Hq1p8RuCs5uG EAehhVb5gMO8kpZXsTEtkeQleepR5//zn9P376Zp6NNhZtwDxcfcsudK1JiADfty /c8Y54HpElyCt6qjWr3qu0wR844KPIAam6FfvZxHEK4YdRGOZGoZVNMJmt67AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJGTH71Caz7b4Q2Q2rpZcDBsarLYwHwYDVR0j BBgwFoAUwa+MmZ6dBtrevDh9eLMFq4cW3C8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OTIwNWU3Yy1hODgxLTQ4NzMtOTE4OC1lNTIxYjZhZjUyOWMvMC9DMUFGOEM5OTlF OUQwNkRBREVCQzM4N0Q3OEIzMDVBQjg3MTZEQzJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFBRjhDOTk5RTlEMDZEQURFQkMzODdENzhCMzA1QUI4NzE2 REMyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTkyMDVlN2MtYTg4MS00ODczLTkx ODgtZTUyMWI2YWY1MjljLzAvQzFBRjhDOTk5RTlEMDZEQURFQkMzODdENzhCMzA1 QUI4NzE2REMyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPLFm39oxNR4PcNBiljpAo4pcPGu2H14Q9D DFv5vOuoCsP1ByoGXSWVrgP/Fk2zwkLxzUKs0AiWPbzt3NqA+B7Y5L37DymfWyay /m+lQkcH9TEWk4pIvw7SutehhooQ6hEfG2FQbmV2lSZA9sLegISLZMERmh71NrNp te72WEsTR0O9cf4wntteFK2UFKsj3cFLK40H3o9Egk2Z/M4xhfFaiGpDHWpe4oTj I4mrwBxix9xFougxpS5uj6NdrsVxV4NDY43wUQTl3lzlSGRjhfqkrjY4C17Nh5n8 1qsobr8AsIbGGWzDcHhGZzKsN06U4CPjw9fEmx10SZ9N7fDc6xY= -----END CERTIFICATE-----Generated at Mon Jul 21 18:05:50 2025 by rpki-client