$ rpki-client -vvf repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft File: 408585C1D62A4F618C0424E9BEDC3B91411C2276.mft (raw, json) Hash identifier: loyzhA0g16gKrI8tTpiNvmclIsnxqgumHf6ECDMz9WY= Subject key identifier: FF:47:62:A9:28:A4:DF:FD:9D:CA:F0:74:EA:81:27:42:F9:8A:BB:7A Authority key identifier: 40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 Certificate issuer: /CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Certificate serial: 2B7A4D780FBA55A68660B405A8FDBB28A86ACD09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft Manifest number: 01ED Signing time: Wed 04 Jun 2025 03:02:53 +0000 Manifest this update: Wed 04 Jun 2025 02:57:53 +0000 Manifest next update: Sat 07 Jun 2025 08:51:53 +0000 Files and hashes: 1: 408585C1D62A4F618C0424E9BEDC3B91411C2276.crl (hash: iBdpcMT1RCEDZonzyuninilLQbVXYBTCiCwxjO/f2oI=) 2: 3130332e3132322e3132312e302f32342d3234203d3e20313338303836.roa (hash: NWTKjHM3PgU/D8DgzFheKr586Q+n/qcGSV1ZOdpOXco=) 3: 323030313a6466363a616630303a3a2f34382d3438203d3e20313338303836.roa (hash: pJzBSpecNdGxtRhriNjcTDwpDG6NNdRtxmQUp3nGEzE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 08:51:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:7a:4d:78:0f:ba:55:a6:86:60:b4:05:a8:fd:bb:28:a8:6a:cd:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Validity Not Before: Jun 4 02:57:53 2025 GMT Not After : Jun 7 08:51:53 2025 GMT Subject: CN=FF4762A928A4DFFD9DCAF074EA812742F98ABB7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d1:c1:78:b2:51:f5:a7:6b:2e:90:97:25:7c: af:ca:f1:f5:d1:a5:66:54:f3:51:3f:30:b6:b2:f1: 77:ce:ec:37:98:88:c5:2e:c5:f6:91:66:04:ab:01: 70:b6:32:02:ed:5a:77:e9:4c:3c:b0:33:7b:e8:01: 7f:b3:fe:44:f5:49:ac:07:55:a4:a2:1e:53:7b:2b: 3b:93:fd:52:58:44:4a:22:0b:c1:16:d9:95:3c:4e: 71:58:07:9e:7a:d7:30:cd:4a:70:9e:30:36:76:77: 00:1d:91:9a:1b:36:4e:2b:2d:c1:30:5c:0f:bf:94: c2:a0:fa:5c:13:8f:2a:0a:a9:1f:44:3b:ea:a3:f9: d1:48:96:c8:c4:88:51:32:78:94:ef:75:95:21:55: 5b:4c:1f:02:62:4e:4f:e6:f9:d4:84:5d:da:aa:1b: 50:ba:bc:a4:44:5a:cb:cf:66:e3:09:15:17:97:c3: 87:ca:0e:51:9e:e6:cf:64:ef:dd:de:3e:54:78:ce: 9b:51:82:46:9b:ea:3e:08:d5:cd:32:0c:35:3d:6a: 09:4d:b4:63:86:7f:57:87:33:8d:51:4d:c2:c4:3a: 96:0e:cd:68:09:a9:f0:c0:ec:f0:8e:67:10:e4:6c: 7d:50:cb:90:94:83:87:07:f5:c4:e5:83:a0:0e:f1: 04:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:47:62:A9:28:A4:DF:FD:9D:CA:F0:74:EA:81:27:42:F9:8A:BB:7A X509v3 Authority Key Identifier: keyid:40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:8e:6e:35:c6:5c:2b:66:15:f2:8f:32:c8:b7:e5:d6:50:cd: 7e:95:7f:e6:55:50:36:18:dd:65:7f:72:9a:90:87:df:00:e8: c5:7e:61:77:9a:69:56:e5:f4:48:a9:f5:d7:ce:6c:df:be:cf: b1:23:87:0c:26:c3:35:37:ca:ca:8f:69:9d:50:91:dc:81:34: 5f:5b:a6:19:e2:f3:d0:26:5e:c8:54:3b:af:91:7f:b8:76:d8: 84:70:0c:90:29:15:33:35:74:fa:ff:c0:3d:1e:8e:4d:ab:f3: 1f:0d:e0:18:e0:7c:05:78:7d:e6:8e:02:9a:3b:18:67:df:6f: 53:0a:37:5f:a8:27:4c:a5:17:16:be:55:9c:90:d7:14:60:b6: e7:c3:17:25:c0:da:f1:43:75:0d:de:ed:3a:df:23:35:4c:20: 90:47:e7:56:f8:fa:e0:21:95:84:f9:14:af:07:bf:c7:c0:0c: 6d:9c:80:18:d5:dd:50:70:75:8e:75:60:6c:67:c0:da:fd:25: 39:e4:e5:8a:4d:22:94:b2:f0:7e:92:1b:c5:87:4c:03:b7:ef: 66:c8:9b:df:f2:2b:ec:3f:8f:9c:67:59:8a:c1:80:8a:41:27: 6c:e6:c4:36:2f:de:b0:bf:b4:8c:2f:d2:aa:8f:fd:5e:79:fe: 16:69:ab:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK3pNeA+6VaaGYLQFqP27KKhqzQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0 MTFDMjI3NjAeFw0yNTA2MDQwMjU3NTNaFw0yNTA2MDcwODUxNTNaMDMxMTAvBgNV BAMTKEZGNDc2MkE5MjhBNERGRkQ5RENBRjA3NEVBODEyNzQyRjk4QUJCN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk0cF4slH1p2sukJclfK/K8fXR pWZU81E/MLay8XfO7DeYiMUuxfaRZgSrAXC2MgLtWnfpTDywM3voAX+z/kT1SawH VaSiHlN7KzuT/VJYREoiC8EW2ZU8TnFYB5561zDNSnCeMDZ2dwAdkZobNk4rLcEw XA+/lMKg+lwTjyoKqR9EO+qj+dFIlsjEiFEyeJTvdZUhVVtMHwJiTk/m+dSEXdqq G1C6vKREWsvPZuMJFReXw4fKDlGe5s9k793ePlR4zptRgkab6j4I1c0yDDU9aglN tGOGf1eHM41RTcLEOpYOzWgJqfDA7PCOZxDkbH1Qy5CUg4cH9cTlg6AO8QT3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/0diqSik3/2dyvB06oEnQvmKu3owHwYDVR0j BBgwFoAUQIWFwdYqT2GMBCTpvtw7kUEcInYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2UyNmM4My01ZWQyLTRjOGItOGEwMy02Y2IwMGQxZWQzMzgvMC80MDg1ODVDMUQ2 MkE0RjYxOEMwNDI0RTlCRURDM0I5MTQxMUMyMjc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0MTFD MjI3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdlMjZjODMtNWVkMi00YzhiLThh MDMtNmNiMDBkMWVkMzM4LzAvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNC OTE0MTFDMjI3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaObjXGXCtmFfKPMsi35dZQzX6Vf+ZVUDYY 3WV/cpqQh98A6MV+YXeaaVbl9Eip9dfObN++z7EjhwwmwzU3ysqPaZ1QkdyBNF9b phni89AmXshUO6+Rf7h22IRwDJApFTM1dPr/wD0ejk2r8x8N4BjgfAV4feaOApo7 GGffb1MKN1+oJ0ylFxa+VZyQ1xRgtufDFyXA2vFDdQ3e7TrfIzVMIJBH51b4+uAh lYT5FK8Hv8fADG2cgBjV3VBwdY51YGxnwNr9JTnk5YpNIpSy8H6SG8WHTAO372bI m9/yK+w/j5xnWYrBgIpBJ2zmxDYv3rC/tIwv0qqP/V55/hZpq94= -----END CERTIFICATE-----Generated at Thu Jun 5 19:48:35 2025 by rpki-client