$ rpki-client -vvf repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft File: 415543D423E0BD035D612DEA9BF060290E5552D2.mft (raw, json) Hash identifier: 6GZlAxwpi9uZNB0t9qe8OFy/l6SguT3bQl7H8Va6sWQ= Subject key identifier: 37:05:5D:D1:DD:C2:B4:43:5A:FC:2A:1D:8C:CD:FC:AA:FB:FF:E7:85 Authority key identifier: 41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 Certificate issuer: /CN=415543D423E0BD035D612DEA9BF060290E5552D2 Certificate serial: 512681BB698FF8E6DF11B60FA00444702F25D0C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft Manifest number: 0226 Signing time: Sun 20 Jul 2025 21:51:20 +0000 Manifest this update: Sun 20 Jul 2025 21:46:20 +0000 Manifest next update: Wed 23 Jul 2025 22:20:20 +0000 Files and hashes: 1: 3130332e39352e31302e302f32342d3234203d3e20313335343838.roa (hash: nboIz3jrBgP6JOmA3BVAd2UeOfnp74QAUC5BcPTJ2ug=) 2: 3130332e39352e392e302f32342d3234203d3e20313335343838.roa (hash: VFHHlL/fG0xnRMHoMgqrHUpXEdzrJEYbY3L4Yb6Ynkg=) 3: 415543D423E0BD035D612DEA9BF060290E5552D2.crl (hash: WwMsTem+iPWJLXgMHFulkupsvSvsWMktC2+Jx/Ivim0=) 4: 3130332e39352e382e302f32322d3232203d3e20313335343838.roa (hash: V41dsoCGv/A1SNxCT74tNpzG0O4+YBlV/SgqxtUPiBI=) 5: 3130332e39352e382e302f32342d3234203d3e20313335343838.roa (hash: P5qy6MSQkzBzIpWfwlqRGgttfjrknKyQRFiwh+AluKw=) 6: 3130332e39352e31312e302f32342d3234203d3e20313335343838.roa (hash: uRQw+5QQP0wXxplDqYvXD7a/PuPwjnqYNZPmeOG1eFc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 22:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:26:81:bb:69:8f:f8:e6:df:11:b6:0f:a0:04:44:70:2f:25:d0:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=415543D423E0BD035D612DEA9BF060290E5552D2 Validity Not Before: Jul 20 21:46:20 2025 GMT Not After : Jul 23 22:20:20 2025 GMT Subject: CN=37055DD1DDC2B4435AFC2A1D8CCDFCAAFBFFE785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b7:be:a9:01:66:3e:ec:84:43:3e:fb:53:78: a2:e4:c0:54:e2:1d:5a:cb:3a:ca:65:8c:ba:ee:a5: 77:f0:9c:e4:5d:b2:cc:f7:18:39:98:7d:8d:b9:51: 37:d7:76:ef:15:f0:fb:31:a0:3e:44:9c:b8:2e:3c: ad:fc:46:d4:1c:ef:fe:b0:c9:60:38:4b:27:65:06: 0a:79:2d:da:17:5e:3d:45:5e:dc:d7:d3:6e:04:dc: 8c:bc:57:52:91:39:47:a0:0f:26:d1:8d:94:f2:ac: f1:f5:84:97:44:4b:7c:dd:e4:68:47:e3:01:b5:c3: a6:f6:3c:7e:6d:c5:9c:2f:aa:48:3b:9f:7c:a4:ab: 54:e0:53:b7:7b:82:01:e6:1b:a5:9f:94:9e:f9:57: 45:00:7b:10:b1:2c:b1:80:9a:90:9f:af:69:10:7b: b4:2b:ff:ea:4c:b4:02:be:05:73:42:c7:dd:15:14: 43:1d:ff:a0:ed:49:53:42:a0:02:b1:43:ad:b1:27: ae:22:ee:fd:d7:26:70:80:5a:d2:07:8b:a3:5e:ea: f2:21:2d:e5:15:cd:2a:d0:2e:bc:21:eb:c0:8a:1b: 17:dc:ad:3c:04:63:86:ce:cd:2b:5a:ca:ea:0d:64: 4e:96:43:6e:df:84:65:5a:fc:96:c1:37:2c:4f:e5: c9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:05:5D:D1:DD:C2:B4:43:5A:FC:2A:1D:8C:CD:FC:AA:FB:FF:E7:85 X509v3 Authority Key Identifier: keyid:41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:7e:9e:e5:fe:4d:69:15:4f:a6:52:63:b8:22:65:46:f8:e5: 64:e2:0c:3f:4f:38:17:a7:33:92:a4:a4:a7:14:7d:d7:17:2f: 9d:1d:c9:f9:66:d5:93:e2:3b:3f:05:92:c8:b2:7c:c8:a5:44: ec:49:10:6a:5e:08:13:b7:58:cb:8c:9b:6a:63:72:18:af:38: 58:22:e4:9c:eb:0a:2f:a8:50:24:fc:ea:e3:e7:d5:4e:ae:4d: 82:2e:b2:b1:80:3e:bb:0d:fb:6b:1d:1c:ae:86:64:dc:dd:a1: 2c:fc:17:a7:18:d6:1f:63:79:fb:ac:4a:c7:51:78:ad:43:04: 6b:24:95:30:78:8d:f5:41:01:ad:28:fd:bc:34:5a:f8:de:c8: e5:88:6b:eb:72:fb:17:0f:e1:49:41:fb:91:da:b6:82:cd:c0: 78:ad:83:9b:ce:b7:a9:ef:f4:3d:02:77:f0:d2:05:ef:0d:2c: df:bf:c7:88:a3:e9:8c:69:ef:b4:7c:25:e1:22:2b:28:e4:d4: da:f1:83:47:b7:9d:92:72:e3:db:23:b6:17:7b:38:6d:16:c1: 38:44:d5:4a:5e:e6:19:97:0a:1f:1a:e2:b3:77:e1:9a:47:eb: a6:e3:7a:48:ed:05:fc:27:9f:0c:aa:b4:50:40:d7:1f:fe:56: d2:18:96:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUSaBu2mP+ObfEbYPoAREcC8l0MMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkw RTU1NTJEMjAeFw0yNTA3MjAyMTQ2MjBaFw0yNTA3MjMyMjIwMjBaMDMxMTAvBgNV BAMTKDM3MDU1REQxRERDMkI0NDM1QUZDMkExRDhDQ0RGQ0FBRkJGRkU3ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmt76pAWY+7IRDPvtTeKLkwFTi HVrLOspljLrupXfwnORdssz3GDmYfY25UTfXdu8V8PsxoD5EnLguPK38RtQc7/6w yWA4SydlBgp5LdoXXj1FXtzX024E3Iy8V1KROUegDybRjZTyrPH1hJdES3zd5GhH 4wG1w6b2PH5txZwvqkg7n3ykq1TgU7d7ggHmG6WflJ75V0UAexCxLLGAmpCfr2kQ e7Qr/+pMtAK+BXNCx90VFEMd/6DtSVNCoAKxQ62xJ64i7v3XJnCAWtIHi6Ne6vIh LeUVzSrQLrwh68CKGxfcrTwEY4bOzStayuoNZE6WQ27fhGVa/JbBNyxP5cm9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNwVd0d3CtENa/CodjM38qvv/54UwHwYDVR0j BBgwFoAUQVVD1CPgvQNdYS3qm/BgKQ5VUtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzY0NjVlYy05MTYwLTQ1OWItOGQxMS05NDhmYzI2ZGExYzAvMC80MTU1NDNENDIz RTBCRDAzNUQ2MTJERUE5QkYwNjAyOTBFNTU1MkQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkwRTU1 NTJEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM2NDY1ZWMtOTE2MC00NTliLThk MTEtOTQ4ZmMyNmRhMWMwLzAvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYw MjkwRTU1NTJEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIt+nuX+TWkVT6ZSY7giZUb45WTiDD9POBen M5KkpKcUfdcXL50dyflm1ZPiOz8FksiyfMilROxJEGpeCBO3WMuMm2pjchivOFgi 5JzrCi+oUCT86uPn1U6uTYIusrGAPrsN+2sdHK6GZNzdoSz8F6cY1h9jefusSsdR eK1DBGsklTB4jfVBAa0o/bw0WvjeyOWIa+ty+xcP4UlB+5HatoLNwHitg5vOt6nv 9D0Cd/DSBe8NLN+/x4ij6Yxp77R8JeEiKyjk1Nrxg0e3nZJy49sjthd7OG0WwThE 1Upe5hmXCh8a4rN34ZpH66bjekjtBfwnnwyqtFBA1x/+VtIYlkc= -----END CERTIFICATE-----Generated at Mon Jul 21 03:07:43 2025 by rpki-client