$ rpki-client -vvf repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft File: A230D664FEDFC0266349811ED3999BE5220F1DEA.mft (raw, json) Hash identifier: LhjNhbBhiZ8heLQQSTv640bYm0yK3kOdzOMpJx/XMOA= Subject key identifier: 74:2D:37:1A:7D:A3:A0:0A:52:08:0D:91:68:E0:61:AD:98:84:30:C2 Authority key identifier: A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA Certificate issuer: /CN=A230D664FEDFC0266349811ED3999BE5220F1DEA Certificate serial: 4345CC716DCFD0AC49C6CBD978BD310DC5C8F653 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft Manifest number: 044C Signing time: Fri 25 Jul 2025 13:00:00 +0000 Manifest this update: Fri 25 Jul 2025 12:55:00 +0000 Manifest next update: Mon 28 Jul 2025 14:42:00 +0000 Files and hashes: 1: 3130332e3136322e33342e302f32342d3234203d3e20313431363337.roa (hash: qIkZtUPswOLSzAKIW4faoAC7V/pmv5To5cLrgWfUSjA=) 2: A230D664FEDFC0266349811ED3999BE5220F1DEA.crl (hash: avXZJnCnAoPddddruyurf1SUwXhn2+NtKdf7WtVo9sI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 14:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:45:cc:71:6d:cf:d0:ac:49:c6:cb:d9:78:bd:31:0d:c5:c8:f6:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A230D664FEDFC0266349811ED3999BE5220F1DEA Validity Not Before: Jul 25 12:55:00 2025 GMT Not After : Jul 28 14:42:00 2025 GMT Subject: CN=742D371A7DA3A00A52080D9168E061AD988430C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ba:81:4e:7d:96:b0:32:a3:67:19:b0:12:e0: a9:ee:35:99:8a:7b:d6:21:49:e8:ad:41:18:8f:96: f7:17:6e:c3:04:ef:4a:a7:d7:de:cd:d4:89:a0:fc: 7f:bc:f7:1d:d2:e9:a7:15:73:83:36:5d:20:4f:f3: 51:b8:87:79:48:b3:a0:f9:3e:0e:b5:f5:5d:08:63: 30:4c:0a:37:7e:b1:02:cc:fc:fe:f8:33:c2:1d:57: 22:38:a3:0d:74:fc:1f:43:ac:70:0b:df:cc:de:5b: 20:5d:44:3e:c7:cc:ec:63:d2:9e:63:d7:72:b9:d4: 3a:c2:43:6f:14:64:1f:7e:cb:02:b4:95:8e:89:6b: 1f:9c:ea:81:cc:b7:11:03:62:c1:38:2d:a0:7e:1d: 1a:21:05:2d:5b:08:39:88:01:94:28:f9:cd:ef:fe: 91:fc:65:8a:fc:90:a1:16:81:d9:94:aa:8c:69:2e: 29:24:6d:71:f0:ba:e4:8a:2a:43:fb:88:21:dd:23: 2a:4a:0f:66:60:6a:cc:0f:34:a6:63:35:fa:05:7e: 15:9f:2a:be:82:98:43:1f:cb:25:97:38:a2:df:3a: 50:7c:82:cc:28:dd:c2:11:a8:0d:3d:27:49:5d:14: f7:34:64:e1:64:89:7b:b7:a0:10:6e:39:a9:dd:e6: 2c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2D:37:1A:7D:A3:A0:0A:52:08:0D:91:68:E0:61:AD:98:84:30:C2 X509v3 Authority Key Identifier: keyid:A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:42:e2:5c:ce:c5:0e:02:36:2a:8e:ed:22:86:4a:f2:07:a4: 93:a4:55:7a:1f:50:aa:5b:e1:dd:a2:8d:eb:3b:24:1d:3b:4a: 53:79:02:2a:7a:c6:63:44:00:e8:47:18:e0:c7:62:5a:3b:56: 78:eb:28:3d:3a:44:a8:74:e3:0c:5f:76:33:ed:77:63:24:18: 33:5d:bb:63:a6:72:8f:6a:75:9f:29:7e:2b:e0:84:0f:55:08: 33:79:7b:02:88:d2:f1:07:ca:42:07:25:64:9c:d2:0e:24:ea: 08:d0:9b:7f:db:42:a4:32:d6:00:48:a6:ab:fa:74:8e:ac:d9: 50:df:f5:db:64:53:fb:dc:17:08:70:04:0a:08:5a:b5:d0:44: 0a:e7:43:ba:64:1e:8c:d8:6e:9b:81:cd:0e:86:30:f8:a0:a7: 35:db:cd:e0:7c:ac:ce:58:19:cc:68:54:48:54:04:63:96:f3: a4:4a:66:a7:04:66:91:4d:c6:89:8e:f8:b5:a2:a6:e8:93:90: 41:85:a0:e8:fe:7c:f2:98:c5:79:dc:1f:d5:83:64:c0:ae:56: 7a:b5:8a:6f:4d:6e:43:de:8b:de:17:40:a9:8a:a5:c1:a9:c4: ad:8e:dd:50:3a:65:0d:81:73:85:e2:42:ba:87:8a:36:06:57: 65:f0:e8:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ0XMcW3P0KxJxsvZeL0xDcXI9lMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlCRTUy MjBGMURFQTAeFw0yNTA3MjUxMjU1MDBaFw0yNTA3MjgxNDQyMDBaMDMxMTAvBgNV BAMTKDc0MkQzNzFBN0RBM0EwMEE1MjA4MEQ5MTY4RTA2MUFEOTg4NDMwQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXuoFOfZawMqNnGbAS4KnuNZmK e9YhSeitQRiPlvcXbsME70qn197N1Img/H+89x3S6acVc4M2XSBP81G4h3lIs6D5 Pg619V0IYzBMCjd+sQLM/P74M8IdVyI4ow10/B9DrHAL38zeWyBdRD7HzOxj0p5j 13K51DrCQ28UZB9+ywK0lY6Jax+c6oHMtxEDYsE4LaB+HRohBS1bCDmIAZQo+c3v /pH8ZYr8kKEWgdmUqoxpLikkbXHwuuSKKkP7iCHdIypKD2ZgaswPNKZjNfoFfhWf Kr6CmEMfyyWXOKLfOlB8gswo3cIRqA09J0ldFPc0ZOFkiXu3oBBuOand5iz9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdC03Gn2joApSCA2RaOBhrZiEMMIwHwYDVR0j BBgwFoAUojDWZP7fwCZjSYEe05mb5SIPHeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDI0MjM1NS1hN2UyLTRjYjktOGNmZi05ZTE3Yzc0MmMyZWYvMC9BMjMwRDY2NEZF REZDMDI2NjM0OTgxMUVEMzk5OUJFNTIyMEYxREVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlCRTUyMjBG MURFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQyNDIzNTUtYTdlMi00Y2I5LThj ZmYtOWUxN2M3NDJjMmVmLzAvQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlC RTUyMjBGMURFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtC4lzOxQ4CNiqO7SKGSvIHpJOkVXofUKpb 4d2ijes7JB07SlN5Aip6xmNEAOhHGODHYlo7VnjrKD06RKh04wxfdjPtd2MkGDNd u2Omco9qdZ8pfivghA9VCDN5ewKI0vEHykIHJWSc0g4k6gjQm3/bQqQy1gBIpqv6 dI6s2VDf9dtkU/vcFwhwBAoIWrXQRArnQ7pkHozYbpuBzQ6GMPigpzXbzeB8rM5Y GcxoVEhUBGOW86RKZqcEZpFNxomO+LWipuiTkEGFoOj+fPKYxXncH9WDZMCuVnq1 im9NbkPei94XQKmKpcGpxK2O3VA6ZQ2Bc4XiQrqHijYGV2Xw6HA= -----END CERTIFICATE-----Generated at Sat Jul 26 01:52:47 2025 by rpki-client