$ rpki-client -vvf repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft File: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft (raw, json) Hash identifier: 4/u/gWl2SLlGPB+nPImukxlSthwj1FXPCslY/d6LlSs= Subject key identifier: 5A:16:B7:E5:E2:97:62:39:60:C0:99:DB:7D:A7:74:39:31:09:E0:C5 Authority key identifier: 49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 Certificate issuer: /CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Certificate serial: 61C73885F449C06BBF86E13809C2684C54AFFC69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft Manifest number: 01CD Signing time: Mon 21 Jul 2025 05:11:01 +0000 Manifest this update: Mon 21 Jul 2025 05:06:01 +0000 Manifest next update: Thu 24 Jul 2025 10:32:01 +0000 Files and hashes: 1: 323430333a393063303a3a2f33322d3332203d3e20313430343037.roa (hash: R8Z+hXBnnWiJJKdYZqlOoXUCZ71qI50sWMocZ6icaII=) 2: 3130332e3132322e3135342e302f32332d3233203d3e20313430343037.roa (hash: rvVfeVhsLZ7fWwhIJc3Pd2GqdWdss3UfF7UYtrrPnKo=) 3: 3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa (hash: uAd0JDcy4hpWuoEBSRUvaHCaFXVpe2sxWabbA6bZmhw=) 4: 3130332e3132322e3135342e302f32342d3234203d3e20313430343037.roa (hash: FeqaP2txuOgRBx2G96zuc78OrFRr2szEz0GSYPgv878=) 5: 3130332e3132322e3135322e302f32332d3233203d3e20313430343037.roa (hash: NOw/NEm3PMCbXTGqxWPDqyT8dJkjuZuy6Yh+EG0lwcQ=) 6: 323430333a393063303a3a2f33322d3430203d3e20313430343037.roa (hash: /AD55gQuIXqmhT7jl8XXbRiu7aeneAmR5bk7jupkCNk=) 7: 3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa (hash: APvRAxFS/BciWNG05hryQjcSm8DABLzRNy+ilZSBuW8=) 8: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl (hash: ZsnGzZ9mCd6zsqXraMsdnZOfwkBV6Kr66okw24Q55EU=) 9: 3130332e3132322e3135322e302f32342d3234203d3e20313430343037.roa (hash: 1P2ogrnijw2MvpVLks2hrGbS/RxvIv2H3EW9osb1JfQ=) 10: 3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa (hash: MUfRn9lbrp81WMx09UFWCA0kG2/2E+bxpD3Uyi4FCjU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 10:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:c7:38:85:f4:49:c0:6b:bf:86:e1:38:09:c2:68:4c:54:af:fc:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Validity Not Before: Jul 21 05:06:01 2025 GMT Not After : Jul 24 10:32:01 2025 GMT Subject: CN=5A16B7E5E297623960C099DB7DA774393109E0C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:64:08:eb:2e:f7:01:bd:f4:4f:7d:be:a5:7a: 2e:55:20:d4:96:7d:12:70:98:d1:c4:00:b3:30:05: 7d:bb:47:6b:24:00:9c:c5:00:f7:c3:1a:20:47:41: fb:88:67:fc:56:45:50:11:b1:c5:76:e4:43:68:e7: 27:e7:0a:89:b8:4c:c6:aa:b6:da:82:7b:be:61:4f: 6a:df:1c:ac:41:87:f9:98:81:7e:b4:ac:cd:cd:47: 46:a9:0b:a0:5d:99:11:d9:42:86:41:25:ef:9f:f8: 4a:8c:0f:85:19:7f:2e:be:a5:bc:ea:6c:b9:aa:12: ec:ff:28:e3:bb:e5:be:1a:f7:c9:3c:e9:22:07:f9: 13:cd:51:61:96:7b:c3:7f:e7:b2:7b:fb:f5:f2:02: e7:5d:5e:6e:11:02:62:ec:2b:2d:fe:99:da:fb:26: e6:64:bd:e0:6d:48:5e:bf:58:f7:73:6f:66:3f:f7: c0:e8:84:cb:6b:80:ee:c1:60:bd:20:5d:3a:0e:7f: 73:c3:cc:63:33:f1:ba:da:b5:ed:6c:2a:d9:e3:b7: 5e:1f:d1:19:85:3b:b0:0d:d8:3e:69:16:1c:b4:53: df:ed:21:62:06:d6:ba:96:46:e0:64:c0:dd:82:52: de:5d:d2:59:67:c9:b0:d6:cf:60:cf:82:85:5f:5f: 51:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:16:B7:E5:E2:97:62:39:60:C0:99:DB:7D:A7:74:39:31:09:E0:C5 X509v3 Authority Key Identifier: keyid:49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:1f:ee:dd:b3:f0:6f:ee:09:ea:c4:24:4a:82:8a:ce:fe:9c: 61:7e:d9:27:75:6e:f4:2d:2d:2f:d3:1c:34:08:65:c4:2f:9f: b7:e7:59:f4:97:33:c8:69:ef:c6:ad:5f:3d:33:ba:c3:1f:71: 82:c4:70:cf:ca:58:de:f9:47:f0:6b:ae:8f:85:da:23:41:d6: aa:24:b9:98:d9:cd:ec:72:8a:8b:6e:ec:a6:b1:c5:e1:60:f1: df:a9:19:6f:08:c9:1b:31:e4:1b:23:58:fe:35:8e:fb:75:f4: 75:9f:37:34:31:4b:b2:35:95:5a:74:73:3c:0f:bd:dc:20:94: cc:e5:e8:b4:02:0f:75:00:08:cb:d3:24:a8:83:e1:5e:11:ad: d6:2b:83:1b:fe:7d:e8:97:21:71:1e:d8:35:95:e0:53:ba:a4: f0:6f:8a:ad:c0:49:b0:29:aa:09:90:38:cd:95:89:1f:94:96: c3:af:64:5d:af:f9:9d:1b:b3:37:42:15:f6:bb:c2:cf:87:06: c2:ad:28:ce:ce:21:be:a6:af:1c:e3:64:84:74:35:87:09:06: 07:99:ae:63:d0:b8:80:7b:6b:6f:43:7b:f3:d4:e1:2b:28:aa: 95:fb:55:fe:34:c3:15:0f:c1:f0:52:0d:a7:f6:d7:7d:53:d5: 2f:b6:ff:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYcc4hfRJwGu/huE4CcJoTFSv/GkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1 QTlEMkY5NTAeFw0yNTA3MjEwNTA2MDFaFw0yNTA3MjQxMDMyMDFaMDMxMTAvBgNV BAMTKDVBMTZCN0U1RTI5NzYyMzk2MEMwOTlEQjdEQTc3NDM5MzEwOUUwQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfZAjrLvcBvfRPfb6lei5VINSW fRJwmNHEALMwBX27R2skAJzFAPfDGiBHQfuIZ/xWRVARscV25ENo5yfnCom4TMaq ttqCe75hT2rfHKxBh/mYgX60rM3NR0apC6BdmRHZQoZBJe+f+EqMD4UZfy6+pbzq bLmqEuz/KOO75b4a98k86SIH+RPNUWGWe8N/57J7+/XyAuddXm4RAmLsKy3+mdr7 JuZkveBtSF6/WPdzb2Y/98DohMtrgO7BYL0gXToOf3PDzGMz8brate1sKtnjt14f 0RmFO7AN2D5pFhy0U9/tIWIG1rqWRuBkwN2CUt5d0llnybDWz2DPgoVfX1FDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWha35eKXYjlgwJnbfad0OTEJ4MUwHwYDVR0j BBgwFoAUSRsOpUQFY76bDxZ9p2wF6FqdL5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjI5NzgxYS04YWM5LTQ0NTItYjI1Zi01NGU3ZWRmN2Q0YTQvMC80OTFCMEVBNTQ0 MDU2M0JFOUIwRjE2N0RBNzZDMDVFODVBOUQyRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1QTlE MkY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzIyOTc4MWEtOGFjOS00NDUyLWIy NWYtNTRlN2VkZjdkNGE0LzAvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1 RTg1QTlEMkY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALkf7t2z8G/uCerEJEqCis7+nGF+2Sd1bvQt LS/THDQIZcQvn7fnWfSXM8hp78atXz0zusMfcYLEcM/KWN75R/Brro+F2iNB1qok uZjZzexyiotu7KaxxeFg8d+pGW8IyRsx5BsjWP41jvt19HWfNzQxS7I1lVp0czwP vdwglMzl6LQCD3UACMvTJKiD4V4RrdYrgxv+feiXIXEe2DWV4FO6pPBviq3ASbAp qgmQOM2ViR+UlsOvZF2v+Z0bszdCFfa7ws+HBsKtKM7OIb6mrxzjZIR0NYcJBgeZ rmPQuIB7a29De/PU4SsoqpX7Vf40wxUPwfBSDaf2131T1S+2/6s= -----END CERTIFICATE-----Generated at Wed Jul 23 02:24:35 2025 by rpki-client