$ rpki-client -vvf repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft File: 415543D423E0BD035D612DEA9BF060290E5552D2.mft (raw, json) Hash identifier: taLKo23f8IP3tACiLmP9ZVfd560368QzLtH8rvUEyac= Subject key identifier: FD:2F:27:D9:BF:EA:B6:34:08:06:92:C9:68:40:5B:90:F1:21:23:99 Authority key identifier: 41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 Certificate issuer: /CN=415543D423E0BD035D612DEA9BF060290E5552D2 Certificate serial: 47373D430CF26C9C15F1DFF53469ECAF90CECC20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft Manifest number: 0211 Signing time: Tue 03 Jun 2025 07:51:16 +0000 Manifest this update: Tue 03 Jun 2025 07:46:16 +0000 Manifest next update: Fri 06 Jun 2025 10:21:16 +0000 Files and hashes: 1: 3130332e39352e382e302f32342d3234203d3e20313335343838.roa (hash: P5qy6MSQkzBzIpWfwlqRGgttfjrknKyQRFiwh+AluKw=) 2: 3130332e39352e31302e302f32342d3234203d3e20313335343838.roa (hash: nboIz3jrBgP6JOmA3BVAd2UeOfnp74QAUC5BcPTJ2ug=) 3: 415543D423E0BD035D612DEA9BF060290E5552D2.crl (hash: fuz9oK0ydq5Cn8aEIN5scbSyXV7764/WbmML0WH3ilg=) 4: 3130332e39352e31312e302f32342d3234203d3e20313335343838.roa (hash: uRQw+5QQP0wXxplDqYvXD7a/PuPwjnqYNZPmeOG1eFc=) 5: 3130332e39352e382e302f32322d3232203d3e20313335343838.roa (hash: V41dsoCGv/A1SNxCT74tNpzG0O4+YBlV/SgqxtUPiBI=) 6: 3130332e39352e392e302f32342d3234203d3e20313335343838.roa (hash: VFHHlL/fG0xnRMHoMgqrHUpXEdzrJEYbY3L4Yb6Ynkg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 10:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:37:3d:43:0c:f2:6c:9c:15:f1:df:f5:34:69:ec:af:90:ce:cc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=415543D423E0BD035D612DEA9BF060290E5552D2 Validity Not Before: Jun 3 07:46:16 2025 GMT Not After : Jun 6 10:21:16 2025 GMT Subject: CN=FD2F27D9BFEAB634080692C968405B90F1212399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:80:f3:f5:3f:c3:5c:e1:6c:ae:8d:4b:b3:1b: 15:e1:8b:aa:49:91:42:ec:25:02:76:d4:2d:3f:6d: f2:40:08:b4:88:46:17:85:66:45:a5:aa:3b:c5:10: e6:91:3c:fe:58:0d:59:0c:1b:c7:75:1b:6c:b7:71: e8:8b:ea:bc:57:5e:34:30:0f:d0:66:ee:2e:af:09: 7a:53:c1:65:49:10:1e:4b:b5:31:a7:89:c4:a3:8c: 85:67:c9:f4:ac:49:ca:45:c3:4e:50:db:69:1f:c6: 5c:d6:b7:0f:dc:79:14:5b:21:d1:75:ce:98:78:80: 43:4f:e1:97:68:81:db:91:3f:2f:57:48:5e:27:d3: 2b:d3:6f:65:56:e4:83:1d:c0:53:6c:cd:b7:d0:f7: f1:b1:fa:e1:93:f0:99:51:c7:32:eb:14:2d:cb:a6: c5:f7:2a:05:c6:76:25:7c:16:81:d8:cf:e0:5d:4f: 2e:b8:5c:71:e2:10:b3:40:8b:5f:02:ca:6b:6a:c5: 99:d3:40:16:60:4a:f9:e5:3a:c3:5e:5f:e7:ba:50: 26:8f:63:d9:6f:09:28:61:08:b4:7b:12:df:23:6d: 77:3d:c6:e9:03:f4:bb:cd:cc:c2:5a:6e:a0:4e:98: 8b:df:ec:eb:34:8c:07:45:03:38:3f:31:c7:77:4e: 15:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2F:27:D9:BF:EA:B6:34:08:06:92:C9:68:40:5B:90:F1:21:23:99 X509v3 Authority Key Identifier: keyid:41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:c9:ca:66:8d:14:5e:dc:2d:c8:79:8f:79:80:6e:c3:18:e1: 89:d0:a7:7b:84:25:d8:52:d5:39:cd:dc:47:be:7b:96:5d:7a: c4:79:67:26:6a:d9:27:59:a4:e6:22:0b:81:47:42:e2:9e:41: 64:bc:67:c0:68:30:3d:05:14:d0:cf:cd:dc:43:83:f0:d6:63: 98:1e:5a:b2:b7:bf:f0:40:88:51:53:c3:e0:1a:8e:d3:10:75: 46:8a:32:a3:f6:75:e6:71:43:b1:5a:fb:1d:e6:59:b4:b4:8d: 04:ea:cb:fb:e2:d5:dd:01:ff:20:40:05:35:a8:e4:07:10:e6: 48:4b:43:49:28:46:75:67:2c:9d:04:5e:bc:4e:7b:29:88:74: 8f:c9:ed:f0:0e:66:ab:1d:b9:2d:d3:16:4e:28:e0:83:36:78: 77:ae:21:4e:7c:13:c3:4b:c8:de:fe:45:28:63:a8:2e:34:59: 7d:11:04:21:1e:05:8d:d7:49:fa:5c:2e:3c:04:57:7f:10:21: 4b:2c:e6:af:0f:4b:29:ee:fe:03:de:47:7d:7a:91:a5:b7:f1: 6f:f6:2e:74:bb:64:4e:4a:e2:d7:24:9f:8f:cf:23:e1:16:9c: 80:08:6f:a6:b7:5e:03:28:a8:6a:b7:b7:1b:91:c6:1d:7e:e9: 5f:28:24:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURzc9QwzybJwV8d/1NGnsr5DOzCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkw RTU1NTJEMjAeFw0yNTA2MDMwNzQ2MTZaFw0yNTA2MDYxMDIxMTZaMDMxMTAvBgNV BAMTKEZEMkYyN0Q5QkZFQUI2MzQwODA2OTJDOTY4NDA1QjkwRjEyMTIzOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDagPP1P8Nc4WyujUuzGxXhi6pJ kULsJQJ21C0/bfJACLSIRheFZkWlqjvFEOaRPP5YDVkMG8d1G2y3ceiL6rxXXjQw D9Bm7i6vCXpTwWVJEB5LtTGnicSjjIVnyfSsScpFw05Q22kfxlzWtw/ceRRbIdF1 zph4gENP4ZdogduRPy9XSF4n0yvTb2VW5IMdwFNszbfQ9/Gx+uGT8JlRxzLrFC3L psX3KgXGdiV8FoHYz+BdTy64XHHiELNAi18CymtqxZnTQBZgSvnlOsNeX+e6UCaP Y9lvCShhCLR7Et8jbXc9xukD9LvNzMJabqBOmIvf7Os0jAdFAzg/Mcd3ThXnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/S8n2b/qtjQIBpLJaEBbkPEhI5kwHwYDVR0j BBgwFoAUQVVD1CPgvQNdYS3qm/BgKQ5VUtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzY0NjVlYy05MTYwLTQ1OWItOGQxMS05NDhmYzI2ZGExYzAvMC80MTU1NDNENDIz RTBCRDAzNUQ2MTJERUE5QkYwNjAyOTBFNTU1MkQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkwRTU1 NTJEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM2NDY1ZWMtOTE2MC00NTliLThk MTEtOTQ4ZmMyNmRhMWMwLzAvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYw MjkwRTU1NTJEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjJymaNFF7cLch5j3mAbsMY4YnQp3uEJdhS 1TnN3Ee+e5ZdesR5ZyZq2SdZpOYiC4FHQuKeQWS8Z8BoMD0FFNDPzdxDg/DWY5ge WrK3v/BAiFFTw+AajtMQdUaKMqP2deZxQ7Fa+x3mWbS0jQTqy/vi1d0B/yBABTWo 5AcQ5khLQ0koRnVnLJ0EXrxOeymIdI/J7fAOZqsduS3TFk4o4IM2eHeuIU58E8NL yN7+RShjqC40WX0RBCEeBY3XSfpcLjwEV38QIUss5q8PSynu/gPeR316kaW38W/2 LnS7ZE5K4tckn4/PI+EWnIAIb6a3XgMoqGq3txuRxh1+6V8oJBE= -----END CERTIFICATE-----Generated at Wed Jun 4 00:18:16 2025 by rpki-client