$ rpki-client -vvf repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft File: 139934661CE07BEBBFA824F7225502B15AE8B653.mft (raw, json) Hash identifier: +V+WgHJAY/Y672k7ZWBCx+ayX6Al6nNvTm5iGT+u1sY= Subject key identifier: C4:B2:F5:7E:4D:C0:38:3D:EA:65:AC:DE:DC:77:2D:2E:94:60:86:57 Authority key identifier: 13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53 Certificate issuer: /CN=139934661CE07BEBBFA824F7225502B15AE8B653 Certificate serial: 054173EF2DF0D2F5C9B006F2866480457B5178D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft Manifest number: 0271 Signing time: Thu 04 Sep 2025 04:32:21 +0000 Manifest this update: Thu 04 Sep 2025 04:27:21 +0000 Manifest next update: Sun 07 Sep 2025 05:24:21 +0000 Files and hashes: 1: 3130332e3137392e3231392e302f32342d3234203d3e20313431353936.roa (hash: A42BqVzjqFV46OV6hAZdG9PjgUwdu1Wwh4Yi98wXVBI=) 2: 139934661CE07BEBBFA824F7225502B15AE8B653.crl (hash: CTXU8SwI7Lg1QPkhPZ9Q28HmhwuRDoZXfnQuH+b4l+8=) 3: 3130332e3137392e3231382e302f32332d3233203d3e20313431353936.roa (hash: UDTJVQMfh18042dfeJjUO+1EVnoX+eeQWO16oZtQKXE=) 4: 3130332e3137392e3231382e302f32342d3234203d3e20313431353936.roa (hash: 8fuakgFHy3xUm7QgcDkjO9QSLBuvkIz5uGSpSL5YMTY=) 5: 323030313a6466303a353463303a3a2f34382d3438203d3e20313431353936.roa (hash: JfuES0kaATSQOVSGSxANPI5Fc3cOe+x8BKWfAi4CWYs=) 6: 323030313a6466303a353463303a3a2f34382d3438203d3e20313439333437.roa (hash: MLL6/qDsxtEsMRa44Zl6aIIBEl0tDem6dFSdspx4PV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.crl rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 05:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:41:73:ef:2d:f0:d2:f5:c9:b0:06:f2:86:64:80:45:7b:51:78:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=139934661CE07BEBBFA824F7225502B15AE8B653 Validity Not Before: Sep 4 04:27:21 2025 GMT Not After : Sep 7 05:24:21 2025 GMT Subject: CN=C4B2F57E4DC0383DEA65ACDEDC772D2E94608657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c8:ca:5f:ab:d8:80:74:7c:4d:f5:4e:7a:8b: 45:2c:64:f7:fe:ca:54:31:0d:6b:3f:c2:8b:59:59: 12:8b:24:a3:ce:47:b3:2b:ac:3b:d2:cb:e6:a3:1e: a2:61:03:48:4a:17:97:ef:d9:23:27:c3:73:34:fb: 71:ea:48:6c:ac:1e:3a:f0:7e:5a:af:f8:95:bc:52: 4e:b2:d3:14:e4:de:10:99:09:ea:38:07:f2:ef:01: a0:5c:aa:a2:72:cd:ff:9b:0e:90:bd:eb:85:03:e0: e6:af:01:12:be:d6:8a:b9:06:f1:e1:b4:59:03:c4: 56:e8:5e:59:b5:d7:3f:01:3b:c6:6d:86:d5:54:01: cf:53:5e:50:b1:49:5d:44:66:c5:50:36:4b:aa:39: a7:3f:cf:93:7a:24:6f:94:dd:44:b7:a7:7c:9e:6f: 66:d2:f6:b1:4a:b3:e4:5a:03:c9:9e:e1:02:d5:88: 0e:01:30:d9:1c:f8:ed:ce:fe:b3:a5:e0:2b:50:26: 99:4b:7f:3b:f0:2a:db:29:83:45:cf:34:6c:2d:f7: f0:28:db:34:48:6b:c7:84:ab:47:47:7d:f0:e9:58: 58:b8:5c:d6:63:03:13:11:a9:e4:ad:c7:53:cd:e6: fd:2b:55:71:6e:04:17:3e:73:af:44:28:3f:77:a8: 4b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B2:F5:7E:4D:C0:38:3D:EA:65:AC:DE:DC:77:2D:2E:94:60:86:57 X509v3 Authority Key Identifier: keyid:13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:b4:78:6e:6d:bb:15:ad:b1:76:cd:dd:d3:18:56:ee:e6:df: 86:24:49:ee:33:4f:f4:a4:44:5f:f8:9f:ae:0e:ee:09:ee:6f: 44:b7:29:ed:cf:ea:e1:e9:9c:b3:33:bd:88:7b:2e:56:25:da: 5c:9c:a1:d3:74:61:c0:1c:93:59:5c:94:77:26:18:d6:84:de: a3:0a:1d:4f:ac:7b:92:7d:67:90:1f:26:e6:7f:86:d3:bf:7d: 5d:83:64:b6:d7:fb:9b:04:b4:ca:53:c1:db:99:aa:23:c5:5d: 65:63:e9:68:7e:2f:38:90:e2:c6:43:42:b6:21:c8:71:fa:b3: 36:6e:9a:0c:e9:31:2f:ee:9d:bc:5e:56:5b:31:e5:20:6d:a5: 85:20:d9:ae:8e:5a:c4:84:ec:43:eb:b6:06:01:64:e9:4f:d3: ea:2b:37:e4:dc:71:a0:18:de:42:6b:4b:06:89:a2:ba:74:17: 80:d1:3f:50:30:75:7e:b7:a9:05:5f:bb:11:f5:06:d2:d6:bd: 90:46:6b:52:5f:7e:fc:2c:e3:09:8b:c1:8f:03:ed:d1:fc:0c: c6:60:21:f9:31:ad:f1:80:c7:31:38:8a:fe:8b:44:ee:d4:f6: 4b:a7:e7:43:96:5a:c5:40:b7:65:a8:b7:37:0c:4d:d3:07:46: eb:1b:55:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBUFz7y3w0vXJsAbyhmSARXtReNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM5OTM0NjYxQ0UwN0JFQkJGQTgyNEY3MjI1NTAyQjE1 QUU4QjY1MzAeFw0yNTA5MDQwNDI3MjFaFw0yNTA5MDcwNTI0MjFaMDMxMTAvBgNV BAMTKEM0QjJGNTdFNERDMDM4M0RFQTY1QUNERURDNzcyRDJFOTQ2MDg2NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDByMpfq9iAdHxN9U56i0UsZPf+ ylQxDWs/wotZWRKLJKPOR7MrrDvSy+ajHqJhA0hKF5fv2SMnw3M0+3HqSGysHjrw flqv+JW8Uk6y0xTk3hCZCeo4B/LvAaBcqqJyzf+bDpC964UD4OavARK+1oq5BvHh tFkDxFboXlm11z8BO8ZthtVUAc9TXlCxSV1EZsVQNkuqOac/z5N6JG+U3US3p3ye b2bS9rFKs+RaA8me4QLViA4BMNkc+O3O/rOl4CtQJplLfzvwKtspg0XPNGwt9/Ao 2zRIa8eEq0dHffDpWFi4XNZjAxMRqeStx1PN5v0rVXFuBBc+c69EKD93qEuPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxLL1fk3AOD3qZaze3HctLpRghlcwHwYDVR0j BBgwFoAUE5k0Zhzge+u/qCT3IlUCsVrotlMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x Y2EyOTJiMi00YWU0LTQxZGYtODg3YS1jMTcyYzNlMWFlNzMvMC8xMzk5MzQ2NjFD RTA3QkVCQkZBODI0RjcyMjU1MDJCMTVBRThCNjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTM5OTM0NjYxQ0UwN0JFQkJGQTgyNEY3MjI1NTAyQjE1QUU4 QjY1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWNhMjkyYjItNGFlNC00MWRmLTg4 N2EtYzE3MmMzZTFhZTczLzAvMTM5OTM0NjYxQ0UwN0JFQkJGQTgyNEY3MjI1NTAy QjE1QUU4QjY1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKK0eG5tuxWtsXbN3dMYVu7m34YkSe4zT/Sk RF/4n64O7gnub0S3Ke3P6uHpnLMzvYh7LlYl2lycodN0YcAck1lclHcmGNaE3qMK HU+se5J9Z5AfJuZ/htO/fV2DZLbX+5sEtMpTwduZqiPFXWVj6Wh+LziQ4sZDQrYh yHH6szZumgzpMS/unbxeVlsx5SBtpYUg2a6OWsSE7EPrtgYBZOlP0+orN+TccaAY 3kJrSwaJorp0F4DRP1AwdX63qQVfuxH1BtLWvZBGa1Jffvws4wmLwY8D7dH8DMZg IfkxrfGAxzE4iv6LRO7U9kun50OWWsVAt2WotzcMTdMHRusbVYI= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:20 2025 by rpki-client