$ rpki-client -vvf repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft File: 41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft (raw, json) Hash identifier: F9SKNuk3IbhRBGxYPlIbhmY3nKoTPxOTC84w8m0B9ds= Subject key identifier: 78:6F:9B:48:3E:C4:FE:4B:57:74:14:28:AB:5C:14:BA:D5:29:E1:79 Authority key identifier: 41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C Certificate issuer: /CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C Certificate serial: 2E25F3A5A817B5B3F2990BE75C04D3A4F9851797 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft Manifest number: 017C Signing time: Tue 03 Jun 2025 16:44:48 +0000 Manifest this update: Tue 03 Jun 2025 16:39:48 +0000 Manifest next update: Fri 06 Jun 2025 21:57:48 +0000 Files and hashes: 1: 3230322e3137332e39312e302f32342d3234203d3e203233363935.roa (hash: QpQ1/sm5zXzKMRcJ3nXPQnI+vIIBo+CCNe1F4YSgeSo=) 2: 3230322e3137332e36382e302f32342d3234203d3e203233363935.roa (hash: kBeUG+J3aaoaEctPb/7V99FsXKX0tZO2cRt3bs0z0/k=) 3: 3230322e3137332e38332e302f32342d3234203d3e203233363935.roa (hash: oDlDI6fU21fZbXJ7xjJnRhwvlH5l3glqD9qF8ZX5Ecs=) 4: 3230322e3137332e36392e302f32342d3234203d3e203233363935.roa (hash: vDU9gcRo8sjLDkCnZOzt+rm8fLZLUHyOqnl2eV08+uU=) 5: 3230322e3137332e38302e302f32342d3234203d3e203233363935.roa (hash: Qe7KScU7+lZMmSIY+33thQD4DgpTET1HSNVXslVMyw8=) 6: 3230322e3137332e39322e302f32342d3234203d3e203233363935.roa (hash: HIAVUx6ij09H4kiiZ/OJGBRVevXktqzOjuX4vjeRYfI=) 7: 3230322e3137332e38312e302f32342d3234203d3e203233363935.roa (hash: fZQK9JY5pm3VYutUjV1YUz0UdbDku9RPZXo98IsSdnQ=) 8: 3230322e3137332e36342e302f32342d3234203d3e203233363935.roa (hash: mn95e/RHwrm52jwgTOEuu2HIFPqZkwjgw7iJzDcC0Aw=) 9: 3230322e3137332e39302e302f32342d3234203d3e203233363935.roa (hash: Vcu3cvP6TpAtiqIJRyIG86FnbkyFCwZwDKOk+Zdad3Y=) 10: 3230322e3137332e37362e302f32342d3234203d3e203233363935.roa (hash: P5crg0R32gyS1n02458lLpX18WRXH3sQSc1skd1DZ2k=) 11: 3230322e3137332e37332e302f32342d3234203d3e203233363935.roa (hash: nSzlfFPpI7N3qrGPleUZ7U2AGFdMYcBNQO4RGyLMKDU=) 12: 3230322e3137332e36342e302f31392d3139203d3e203233363935.roa (hash: 2bUXUTcYKqH84i/OW2TNfGKGcjdUBjA5fkOcr7LqU+Y=) 13: 3230322e3137332e36352e302f32342d3234203d3e203233363935.roa (hash: JrMofhOCMVdNP1sEAWvpSSTT2LmZl0HuhRslYJ7iy9U=) 14: 3230322e3137332e39332e302f32342d3234203d3e203233363935.roa (hash: uUWqQ+r90afq72pms35ZsH7xSBYfCse9ZKzmHy/kk18=) 15: 3230322e3137332e37372e302f32342d3234203d3e203233363935.roa (hash: fMnLos8+J1VIZ4qwJVBJ1J3B9BHaKTUBDhVAh5aNCi8=) 16: 3230322e3137332e37352e302f32342d3234203d3e203233363935.roa (hash: kHEvnsONRQITDgcaeW14+b5i/pT074x2j6ak8xJ3qTA=) 17: 3230322e3137332e38382e302f32342d3234203d3e203233363935.roa (hash: kWaiaFCi5F4TW6LYG0q3VELQGQNXbZe+dclFyLeSNAY=) 18: 3230322e3137332e38372e302f32342d3234203d3e203233363935.roa (hash: SmTukg2uSres2nPLyHTBL++dFIaU5SWdWD9V1LnZKzA=) 19: 3230322e3137332e39342e302f32342d3234203d3e203233363935.roa (hash: kYREuhiT4n/pjRYISa3PHavGRxERDOS8izljvugeJrk=) 20: 3230322e3137332e37312e302f32342d3234203d3e203233363935.roa (hash: Xthgw31h3s+GW8ypk/PRH8TnEVJQ++dwiKocGGYj4NY=) 21: 3230322e3137332e37392e302f32342d3234203d3e203233363935.roa (hash: JlV82roW0wq9X2Q7J+tUUs8b8oUVk7NAH3mIbLD0we8=) 22: 3230322e3137332e38392e302f32342d3234203d3e203233363935.roa (hash: lhuajvGIv7rcCg6mlRyz9c9eb3L+IyDr9Q9rPP2Ha5s=) 23: 3230322e3137332e36362e302f32342d3234203d3e203233363935.roa (hash: yeM18fVhFIvaqgN5QmmIrEdPBDtaljcx9XyjNtHhwl4=) 24: 3230322e3137332e37302e302f32342d3234203d3e203233363935.roa (hash: QfY1rUIQ5PL3Z5jxkldepfjgl0wlr3DkT3fjGc62FLQ=) 25: 41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl (hash: gSSs5TSPqkaY+dvc8bWj+FVLeHbIQCBmhMHfz/SfGZY=) 26: 3230322e3137332e38322e302f32342d3234203d3e203233363935.roa (hash: 8/H1q3EcizQtYAaVI5vaP4CIs/Srkv0IwoIGGhf07is=) 27: 3230322e3137332e39352e302f32342d3234203d3e203233363935.roa (hash: bXcYT55Yk5nGWBx7FCOVlDHnPL+/TKis1JRYYVSX17o=) 28: 3230322e3137332e36372e302f32342d3234203d3e203233363935.roa (hash: NGImgtjhDUZw4LYbto24tiacu1uj5ePcNIzwHQKWr60=) 29: 3230322e3137332e37322e302f32342d3234203d3e203233363935.roa (hash: o2ln+IfG7vkZVTnGCTylCBTI2pbcc89CV9g/agRQLtQ=) 30: 3230322e3137332e38352e302f32342d3234203d3e203233363935.roa (hash: UlX0UeHxNwDo/jIJmlDlRnsp3ZbSu9xVDF7FdNoezxw=) 31: 3230322e3137332e38342e302f32342d3234203d3e203233363935.roa (hash: X9OlKSdhEP9aR8QcezvNKe8bo7GaRw8yvBmdk6EUw2A=) 32: 3230322e3137332e37382e302f32342d3234203d3e203233363935.roa (hash: qIgN11+WPom9/7TNDZoyX6fP1sCsas2zffkRRMYFeHM=) 33: 3230322e3137332e37342e302f32342d3234203d3e203233363935.roa (hash: 6QSQEwf0Vg6SaXjS+GIzWwNuYlP7VRzDWIXvyWeiVCo=) 34: 3230322e3137332e38362e302f32342d3234203d3e203233363935.roa (hash: w2YQbT4d401gEkexkGPNI5ffRS/JYHdhmh+BaqpDiJs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:25:f3:a5:a8:17:b5:b3:f2:99:0b:e7:5c:04:d3:a4:f9:85:17:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C Validity Not Before: Jun 3 16:39:48 2025 GMT Not After : Jun 6 21:57:48 2025 GMT Subject: CN=786F9B483EC4FE4B57741428AB5C14BAD529E179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3a:71:a3:db:b8:67:f6:d1:59:ce:9d:de:3b: a0:df:74:c9:fe:ce:4f:08:26:57:07:b7:61:5a:3c: b5:81:cc:04:d2:ce:5d:07:78:d4:d9:2e:d7:33:4b: fb:03:f9:35:ba:59:11:fd:f8:9b:74:5c:20:98:62: bf:ef:a5:cd:3e:18:a4:dc:94:ec:a3:20:3f:ed:57: 5d:80:22:d1:55:63:99:05:47:1a:b4:77:d3:f1:68: cc:c7:07:b3:76:f9:4e:45:11:ac:87:fc:6f:58:10: 5e:56:4a:f2:38:00:9c:ba:98:ee:92:18:8c:22:b6: 8d:9f:ce:80:f0:5f:c4:17:43:a3:8a:3e:4b:fe:ba: 47:aa:41:33:db:3d:66:33:9d:03:97:3f:47:3c:4e: 44:36:87:90:b7:73:c0:4f:e6:fc:43:4e:ce:2f:ca: 8a:d2:ba:0c:01:25:ae:6f:06:13:79:2e:cb:21:b7: 1e:72:bd:8e:27:7c:b4:f8:f9:f8:05:45:72:c6:2a: fc:04:08:c4:09:4c:1f:30:a3:e1:99:fb:66:47:fa: 1f:0f:fc:8b:10:20:b3:bd:ee:2c:4c:61:c1:9e:91: cf:0d:61:7f:dc:20:4d:24:1b:47:8c:8e:d0:b9:23: 38:f0:73:ff:64:f1:1f:3f:4b:71:32:92:47:ef:43: 96:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6F:9B:48:3E:C4:FE:4B:57:74:14:28:AB:5C:14:BA:D5:29:E1:79 X509v3 Authority Key Identifier: keyid:41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:fe:dd:65:19:b9:25:f4:26:58:16:4f:b4:6b:23:5f:a1:3b: 38:6c:87:f2:0a:2c:87:41:f0:33:fe:7e:3e:8c:6c:9f:48:ed: de:d7:37:ac:b6:74:14:be:f4:cd:4f:d1:f9:d8:ec:87:a8:b2: 8e:ce:0e:b9:96:bc:13:67:1b:7d:88:b4:77:22:09:b1:2d:aa: 6f:0c:2c:e3:01:3d:50:c3:c0:37:01:65:94:37:ad:38:68:52: 31:45:f8:0c:82:89:ba:dc:42:72:26:ee:24:d2:a0:8c:f2:e8: f6:b7:63:e7:f5:d4:e2:6f:b9:64:cf:52:f5:7a:d6:ce:26:63: 84:7e:5a:8f:c6:24:68:c0:6b:d3:50:fa:47:3c:d5:56:83:8b: 31:2a:a2:95:e3:55:bf:96:db:e4:f1:8d:b2:67:21:2f:00:a2: 6e:38:9e:64:70:40:9c:6f:f1:a1:a9:e4:20:99:84:57:ce:6d: c2:44:39:07:b5:d3:0f:ca:4d:7e:0e:c4:ca:7d:8e:38:01:bf: 34:60:e7:2e:3f:59:c6:47:37:1e:ad:69:d5:68:cd:79:c5:be: fe:c9:42:5a:96:0b:81:0f:93:42:ce:80:42:99:8c:a5:d0:be: af:68:61:80:85:27:a9:06:65:66:53:62:d9:6b:12:c6:4e:6e: f2:f5:47:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULiXzpagXtbPymQvnXATTpPmFF5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzczOTRB RTRFMkQ4QzAeFw0yNTA2MDMxNjM5NDhaFw0yNTA2MDYyMTU3NDhaMDMxMTAvBgNV BAMTKDc4NkY5QjQ4M0VDNEZFNEI1Nzc0MTQyOEFCNUMxNEJBRDUyOUUxNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVOnGj27hn9tFZzp3eO6DfdMn+ zk8IJlcHt2FaPLWBzATSzl0HeNTZLtczS/sD+TW6WRH9+Jt0XCCYYr/vpc0+GKTc lOyjID/tV12AItFVY5kFRxq0d9PxaMzHB7N2+U5FEayH/G9YEF5WSvI4AJy6mO6S GIwito2fzoDwX8QXQ6OKPkv+ukeqQTPbPWYznQOXP0c8TkQ2h5C3c8BP5vxDTs4v yorSugwBJa5vBhN5Lsshtx5yvY4nfLT4+fgFRXLGKvwECMQJTB8wo+GZ+2ZH+h8P /IsQILO97ixMYcGekc8NYX/cIE0kG0eMjtC5Izjwc/9k8R8/S3EykkfvQ5apAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeG+bSD7E/ktXdBQoq1wUutUp4XkwHwYDVR0j BBgwFoAUQeCTJvaM4BE2NerK9ONzlK5OLYwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjBmMmJkOS00MmFlLTQ0OWEtOGQ1Ny1iMjZkYTA0ZDdlZTEvMC80MUUwOTMyNkY2 OENFMDExMzYzNUVBQ0FGNEUzNzM5NEFFNEUyRDhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzczOTRBRTRF MkQ4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmYwZjJiZDktNDJhZS00NDlhLThk NTctYjI2ZGEwNGQ3ZWUxLzAvNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzcz OTRBRTRFMkQ4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM/+3WUZuSX0JlgWT7RrI1+hOzhsh/IKLIdB 8DP+fj6MbJ9I7d7XN6y2dBS+9M1P0fnY7Ieoso7ODrmWvBNnG32ItHciCbEtqm8M LOMBPVDDwDcBZZQ3rThoUjFF+AyCibrcQnIm7iTSoIzy6Pa3Y+f11OJvuWTPUvV6 1s4mY4R+Wo/GJGjAa9NQ+kc81VaDizEqopXjVb+W2+TxjbJnIS8Aom44nmRwQJxv 8aGp5CCZhFfObcJEOQe10w/KTX4OxMp9jjgBvzRg5y4/WcZHNx6tadVozXnFvv7J QlqWC4EPk0LOgEKZjKXQvq9oYYCFJ6kGZWZTYtlrEsZObvL1R0g= -----END CERTIFICATE-----Generated at Thu Jun 5 18:14:25 2025 by rpki-client