$ rpki-client -vvf repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft File: 1CA9E40710262DA751A67E932477D6E12B4B2DED.mft (raw, json) Hash identifier: fy8LSCMRA+NJYo9DtMlapteKtHH3ISz/OqZXVGIrpMc= Subject key identifier: 66:9E:D9:E0:59:78:BC:58:8F:44:3F:8B:C8:73:ED:BF:9D:A3:18:9D Authority key identifier: 1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED Certificate issuer: /CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Certificate serial: 0BF973DA4590CD3DE69EF9FB2C862028090C42DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft Manifest number: 04F5 Signing time: Mon 21 Jul 2025 15:00:02 +0000 Manifest this update: Mon 21 Jul 2025 14:55:02 +0000 Manifest next update: Thu 24 Jul 2025 17:34:02 +0000 Files and hashes: 1: 3130332e3132332e3130342e302f32322d3234203d3e20313338303730.roa (hash: Yh/X3wf3xgSBLANEs82b75GugxHKann/OAKH3YrZy2U=) 2: 3130332e3132332e3130342e302f32342d3234203d3e20313338303730.roa (hash: yHCpL2jeoTRdKkL9PeW/BmTUh9ZLAObQa8uLRwAc8Ww=) 3: 3130332e3132332e3130352e302f32342d3234203d3e20313338303730.roa (hash: BfFCh7Vfs8z+WKVbxTTngHawwEIYaKlayBm3t+ZFnyU=) 4: 3130332e3132332e3130362e302f32342d3234203d3e20313338303730.roa (hash: 1Qj+0yJlnyRAkhJQW7JxleOTtApsG7fPmAlVCQ6z7p8=) 5: 1CA9E40710262DA751A67E932477D6E12B4B2DED.crl (hash: LumuVpB6ieiaB9b1lNVAulLKkw0Yu8KfBFBdqyPfoyY=) 6: 323430333a396663303a3a2f33322d3438203d3e20313338303730.roa (hash: g2I091o7xGYF01O50CUZMPsQctw2lflU2v4s2FAorWY=) 7: 3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa (hash: cke05Fz1pU7ph5quQU6BQAXvAK/qW0tlFEcIja5SVaM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 17:34:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:f9:73:da:45:90:cd:3d:e6:9e:f9:fb:2c:86:20:28:09:0c:42:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Validity Not Before: Jul 21 14:55:02 2025 GMT Not After : Jul 24 17:34:02 2025 GMT Subject: CN=669ED9E05978BC588F443F8BC873EDBF9DA3189D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:22:c4:6d:0f:02:e1:be:c8:d5:ab:1a:6e:6a: 23:5b:8e:df:a0:90:fc:62:b4:1f:74:11:6b:04:95: 4e:73:80:11:54:da:39:47:59:56:fa:b5:1c:41:3a: 85:e0:54:8e:3f:6e:bb:eb:6b:94:70:ac:74:ad:60: fc:c6:a8:06:03:d2:48:27:cd:83:05:4f:3d:6c:ac: 24:a4:b5:f3:26:66:a8:ce:57:64:05:f0:91:09:dc: de:b0:1a:25:01:c0:90:f6:89:42:10:11:3b:b8:c0: 23:4c:c2:5f:2c:69:ce:54:e4:33:69:68:ac:25:b2: 07:ba:99:b4:46:d2:7b:d2:c9:36:b7:25:77:3c:12: ae:26:8e:3e:18:b9:e6:8d:49:34:fc:a3:64:2e:d5: 70:5f:4d:a9:6f:0b:90:b7:21:db:45:4b:c1:a2:9c: 0e:c3:6f:0a:67:55:42:a8:68:8e:9b:7c:b0:ce:0c: 3b:4b:6b:d0:bb:a1:39:df:60:dc:ad:f9:8a:15:48: 1a:40:fa:64:4d:35:66:cd:8b:4f:a3:31:83:46:95: c7:1e:c9:b3:77:08:fe:f1:c3:25:9e:ab:7f:15:cc: 88:f5:80:12:cc:ad:b5:c9:69:50:5f:bd:d1:59:4c: f7:f0:2f:d5:bf:5b:a0:aa:9b:35:b4:3c:48:a9:f4: a2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9E:D9:E0:59:78:BC:58:8F:44:3F:8B:C8:73:ED:BF:9D:A3:18:9D X509v3 Authority Key Identifier: keyid:1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:6d:14:cf:24:76:41:5c:9c:7e:9e:c0:e9:7e:cf:5e:1d:c7: 51:8c:2c:87:54:00:dc:96:bc:7f:aa:a8:96:a5:c0:20:82:27: 2c:07:ca:12:8b:99:69:71:f9:9e:ed:35:bd:5e:b4:65:2d:93: 49:70:2a:3f:ae:69:dd:df:86:a2:7b:d2:7e:eb:91:21:13:08: 93:96:bf:f9:f0:e6:65:62:01:3b:18:64:a3:b9:94:9d:fa:64: 05:7b:bd:fb:1a:a2:9e:e7:d9:2f:07:0e:a6:4f:b1:2c:b6:4d: 83:9a:70:06:82:cd:ed:cc:99:bf:ed:ce:a8:8a:ef:ca:92:f1: e6:21:28:ac:b3:58:7b:19:59:d4:73:71:31:ea:19:a0:66:50: 55:2d:62:ca:7c:a6:01:2f:f7:5f:f3:6a:de:98:8a:4d:9d:b4: ad:e6:57:10:9f:97:51:ea:93:d1:00:59:b8:8c:eb:eb:c0:6e: 7b:db:73:b9:30:a9:fd:e7:61:93:ba:77:82:03:23:ad:5f:53: c8:c4:2a:1b:fc:37:fc:bb:23:8c:03:e3:74:19:88:ae:61:8d: 31:38:57:02:46:f5:f3:5f:a2:bf:c6:ee:11:c8:8e:12:76:04: 5a:dc:be:68:17:bc:81:bd:77:b6:b4:e4:95:74:85:11:ef:bf: 9c:00:85:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC/lz2kWQzT3mnvn7LIYgKAkMQt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEy QjRCMkRFRDAeFw0yNTA3MjExNDU1MDJaFw0yNTA3MjQxNzM0MDJaMDMxMTAvBgNV BAMTKDY2OUVEOUUwNTk3OEJDNTg4RjQ0M0Y4QkM4NzNFREJGOURBMzE4OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIIsRtDwLhvsjVqxpuaiNbjt+g kPxitB90EWsElU5zgBFU2jlHWVb6tRxBOoXgVI4/brvra5RwrHStYPzGqAYD0kgn zYMFTz1srCSktfMmZqjOV2QF8JEJ3N6wGiUBwJD2iUIQETu4wCNMwl8sac5U5DNp aKwlsge6mbRG0nvSyTa3JXc8Eq4mjj4YueaNSTT8o2Qu1XBfTalvC5C3IdtFS8Gi nA7DbwpnVUKoaI6bfLDODDtLa9C7oTnfYNyt+YoVSBpA+mRNNWbNi0+jMYNGlcce ybN3CP7xwyWeq38VzIj1gBLMrbXJaVBfvdFZTPfwL9W/W6CqmzW0PEip9KIFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZp7Z4Fl4vFiPRD+LyHPtv52jGJ0wHwYDVR0j BBgwFoAUHKnkBxAmLadRpn6TJHfW4StLLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWQ2N2Q1Zi01NzEzLTQxNTMtODcxYi0xYjAwOGY3ZmZkZDIvMC8xQ0E5RTQwNzEw MjYyREE3NTFBNjdFOTMyNDc3RDZFMTJCNEIyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEyQjRC MkRFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFkNjdkNWYtNTcxMy00MTUzLTg3 MWItMWIwMDhmN2ZmZGQyLzAvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2 RTEyQjRCMkRFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJtFM8kdkFcnH6ewOl+z14dx1GMLIdUANyW vH+qqJalwCCCJywHyhKLmWlx+Z7tNb1etGUtk0lwKj+uad3fhqJ70n7rkSETCJOW v/nw5mViATsYZKO5lJ36ZAV7vfsaop7n2S8HDqZPsSy2TYOacAaCze3Mmb/tzqiK 78qS8eYhKKyzWHsZWdRzcTHqGaBmUFUtYsp8pgEv91/zat6Yik2dtK3mVxCfl1Hq k9EAWbiM6+vAbnvbc7kwqf3nYZO6d4IDI61fU8jEKhv8N/y7I4wD43QZiK5hjTE4 VwJG9fNfor/G7hHIjhJ2BFrcvmgXvIG9d7a05JV0hRHvv5wAhcg= -----END CERTIFICATE-----Generated at Mon Jul 21 18:05:53 2025 by rpki-client