$ rpki-client -vvf repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft File: 408585C1D62A4F618C0424E9BEDC3B91411C2276.mft (raw, json) Hash identifier: PfrJQ1OaYk59pL48yX5CC6My1fLyyUFxb2DUEQq5grg= Subject key identifier: 45:B6:E5:88:1C:EC:1A:15:43:37:FF:16:86:C6:BB:91:80:AC:66:D8 Authority key identifier: 40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 Certificate issuer: /CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Certificate serial: 333E2B685849E7ED60CB3FCC4097FDF6B82FE8CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft Manifest number: 0201 Signing time: Sat 19 Jul 2025 10:02:01 +0000 Manifest this update: Sat 19 Jul 2025 09:57:01 +0000 Manifest next update: Tue 22 Jul 2025 19:04:01 +0000 Files and hashes: 1: 3130332e3132322e3132312e302f32342d3234203d3e20313338303836.roa (hash: NWTKjHM3PgU/D8DgzFheKr586Q+n/qcGSV1ZOdpOXco=) 2: 408585C1D62A4F618C0424E9BEDC3B91411C2276.crl (hash: zvCFboOcCLCrWMyZmoBz3JDIQt36CMnW/HVV1ByiWAI=) 3: 323030313a6466363a616630303a3a2f34382d3438203d3e20313338303836.roa (hash: pJzBSpecNdGxtRhriNjcTDwpDG6NNdRtxmQUp3nGEzE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 19:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:3e:2b:68:58:49:e7:ed:60:cb:3f:cc:40:97:fd:f6:b8:2f:e8:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Validity Not Before: Jul 19 09:57:01 2025 GMT Not After : Jul 22 19:04:01 2025 GMT Subject: CN=45B6E5881CEC1A154337FF1686C6BB9180AC66D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bf:fe:d1:2e:ce:db:4e:6d:f5:17:3d:6a:3f: 48:a0:f4:0f:91:d3:ed:34:4d:6e:e8:4b:ec:d1:e3: 27:e3:68:da:0d:8f:13:d1:64:33:d9:a4:d6:d3:64: fe:af:e3:ff:04:77:a4:b2:cc:4d:37:8a:d0:4e:8e: f9:7b:66:2a:83:34:12:c0:26:5a:76:a9:cb:a5:c6: f5:b1:8f:a1:95:f5:c6:e3:c8:bb:2b:10:e9:e0:68: 99:73:e4:ea:cc:70:53:66:39:99:1c:a0:d6:0e:72: 93:d8:d7:80:8e:0a:0a:1e:2b:21:0a:e4:f3:14:60: 56:da:a9:26:49:8f:bc:81:3c:5f:6e:36:47:6e:fb: 15:21:4e:3d:c6:f2:b1:52:d5:84:65:53:40:19:d4: a6:6a:bc:7b:40:4b:65:f5:39:4c:ad:bf:25:57:8d: db:78:56:be:4f:95:dd:08:e7:e7:cd:68:a4:f4:bb: 25:00:50:46:a5:88:64:dc:bb:6c:c0:67:3a:c0:c4: af:dc:56:4b:10:91:dd:48:24:5c:5e:63:5c:f0:13: b5:50:7b:47:89:96:4b:0e:19:82:b5:ed:5f:d3:15: 42:87:60:ba:98:11:da:54:78:8c:f2:42:75:ff:2f: c3:35:7b:1b:1a:4e:d3:55:09:b5:d0:2b:c4:51:9b: 31:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B6:E5:88:1C:EC:1A:15:43:37:FF:16:86:C6:BB:91:80:AC:66:D8 X509v3 Authority Key Identifier: keyid:40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:d6:82:37:a0:cb:a2:00:00:bf:00:65:0a:50:36:16:f3:a4: c8:d8:b6:19:54:0d:0a:c4:ec:39:4b:1e:b7:c7:c9:5c:2a:b6: 36:f4:d7:65:39:90:30:61:5a:c9:64:42:cf:04:e9:4c:bb:00: 4b:76:b2:8b:80:86:d6:f6:69:34:df:a3:70:0a:9e:df:57:df: 3b:8a:6a:a9:31:73:42:5e:e2:7b:4b:f9:50:72:2d:57:33:c8: d9:d6:d3:6f:4a:bd:de:7b:31:69:f8:ae:49:4a:c7:d4:4f:eb: 0e:2f:56:1d:5a:80:26:6f:91:f6:8d:79:18:03:0d:27:f5:bd: 77:5a:fe:66:53:06:de:cc:42:45:95:80:9d:db:97:87:69:41: 51:c4:a6:cb:2a:db:ec:cc:f1:21:ef:53:5d:52:6d:68:23:25: fa:b4:dc:57:02:43:b8:86:56:cf:9f:98:f4:a5:ad:c5:55:a4: 8c:03:ff:cc:68:9c:52:23:aa:c4:d2:37:82:63:41:d0:21:8a: 66:02:24:96:b0:f7:cc:9b:a7:fe:a4:5b:e7:0f:ac:d9:4c:01: d0:9e:3c:13:5a:d6:e3:42:d6:49:e1:67:93:f8:c2:15:1f:78: f3:55:91:49:e7:75:ce:84:69:3d:66:61:f8:56:76:e1:c5:41: 39:8c:e6:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMz4raFhJ5+1gyz/MQJf99rgv6MowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0 MTFDMjI3NjAeFw0yNTA3MTkwOTU3MDFaFw0yNTA3MjIxOTA0MDFaMDMxMTAvBgNV BAMTKDQ1QjZFNTg4MUNFQzFBMTU0MzM3RkYxNjg2QzZCQjkxODBBQzY2RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPv/7RLs7bTm31Fz1qP0ig9A+R 0+00TW7oS+zR4yfjaNoNjxPRZDPZpNbTZP6v4/8Ed6SyzE03itBOjvl7ZiqDNBLA Jlp2qculxvWxj6GV9cbjyLsrEOngaJlz5OrMcFNmOZkcoNYOcpPY14COCgoeKyEK 5PMUYFbaqSZJj7yBPF9uNkdu+xUhTj3G8rFS1YRlU0AZ1KZqvHtAS2X1OUytvyVX jdt4Vr5Pld0I5+fNaKT0uyUAUEaliGTcu2zAZzrAxK/cVksQkd1IJFxeY1zwE7VQ e0eJlksOGYK17V/TFUKHYLqYEdpUeIzyQnX/L8M1exsaTtNVCbXQK8RRmzHJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURbbliBzsGhVDN/8Whsa7kYCsZtgwHwYDVR0j BBgwFoAUQIWFwdYqT2GMBCTpvtw7kUEcInYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2UyNmM4My01ZWQyLTRjOGItOGEwMy02Y2IwMGQxZWQzMzgvMC80MDg1ODVDMUQ2 MkE0RjYxOEMwNDI0RTlCRURDM0I5MTQxMUMyMjc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0MTFD MjI3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdlMjZjODMtNWVkMi00YzhiLThh MDMtNmNiMDBkMWVkMzM4LzAvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNC OTE0MTFDMjI3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfWgjegy6IAAL8AZQpQNhbzpMjYthlUDQrE 7DlLHrfHyVwqtjb012U5kDBhWslkQs8E6Uy7AEt2souAhtb2aTTfo3AKnt9X3zuK aqkxc0Je4ntL+VByLVczyNnW029Kvd57MWn4rklKx9RP6w4vVh1agCZvkfaNeRgD DSf1vXda/mZTBt7MQkWVgJ3bl4dpQVHEpssq2+zM8SHvU11SbWgjJfq03FcCQ7iG Vs+fmPSlrcVVpIwD/8xonFIjqsTSN4JjQdAhimYCJJaw98ybp/6kW+cPrNlMAdCe PBNa1uNC1knhZ5P4whUfePNVkUnndc6EaT1mYfhWduHFQTmM5vQ= -----END CERTIFICATE-----Generated at Mon Jul 21 12:29:01 2025 by rpki-client