$ rpki-client -vvf repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft File: 399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft (raw, json) Hash identifier: 9GQC435oxi62kcCs6U/A5p0S9CiQIR8xdxdmiZd3cxs= Subject key identifier: 10:19:99:5E:42:87:6B:8D:5B:39:67:E0:46:7A:29:4F:3D:BA:50:2B Authority key identifier: 39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 Certificate issuer: /CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Certificate serial: 09654233C60C47819EB26A5B9D559D96E62E20D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft Manifest number: 02D8 Signing time: Fri 06 Jun 2025 14:00:49 +0000 Manifest this update: Fri 06 Jun 2025 13:55:49 +0000 Manifest next update: Mon 09 Jun 2025 22:46:49 +0000 Files and hashes: 1: 323030313a6466313a383530303a3a2f34382d3438203d3e20313336313131.roa (hash: XbIXaBlgITySOhG/uspxxWnRxeiDl4kKWER/oYyIcJ4=) 2: 3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa (hash: 8WaehvbTOcF3pzR4s59v/gds3hIUxmrMCC7s3FSug0w=) 3: 3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa (hash: xGtojE5xQ38ofrHeox7psZGSkp6l9QQja9HVSx7iji8=) 4: 399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl (hash: mGA43AgMPP8SxJT4hS1JLu+LejS0MmMYanUTRmY91/0=) 5: 3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa (hash: hDB00TLneDpVkLNbe7aAfk3b6UUvF3I8dBjAf/SLFFI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 22:46:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:65:42:33:c6:0c:47:81:9e:b2:6a:5b:9d:55:9d:96:e6:2e:20:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Validity Not Before: Jun 6 13:55:49 2025 GMT Not After : Jun 9 22:46:49 2025 GMT Subject: CN=1019995E42876B8D5B3967E0467A294F3DBA502B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:06:91:12:85:19:8e:1b:3c:1f:ed:a5:86:7d: 48:bc:e3:5d:67:f7:a7:f7:87:ff:19:b5:8b:dc:4a: 43:18:30:84:64:e7:22:f7:1f:7a:12:a8:61:39:f2: 67:c2:f0:b8:4e:ab:b5:7e:d8:15:ef:dd:b1:d7:c8: 68:03:d7:04:79:18:bb:3e:d8:60:e4:f9:7a:a9:31: 2a:db:dd:25:b5:f4:0a:ce:c4:ca:c0:e7:6c:3c:28: 9a:15:fd:59:56:00:ed:70:a2:ba:d8:83:00:0e:3f: e5:7e:5f:6a:cd:b0:a1:e6:80:0e:f8:e6:13:35:a7: d0:2a:9b:9e:a1:a3:0f:92:c0:9e:51:a7:84:65:ce: 7c:d2:cc:61:43:50:4b:ff:4f:99:75:a2:5e:2d:3a: 7c:9c:f4:1a:dc:a7:ac:07:6d:b0:4f:ac:8b:2a:09: c5:ce:cf:72:b1:cd:60:d7:b2:d2:a3:a7:d8:2a:a2: 49:73:36:59:ee:b4:c9:10:49:b6:0d:96:5c:5d:6a: 12:5f:7a:71:30:3b:01:88:46:5f:95:19:f0:85:97: dc:69:f2:53:31:de:1c:c9:1b:66:51:8a:42:3c:ab: 9e:e4:96:da:79:96:7b:07:de:b1:c5:4b:a1:b6:03: 78:9a:af:e0:b1:c1:45:34:e1:09:55:da:2b:83:be: 5d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:19:99:5E:42:87:6B:8D:5B:39:67:E0:46:7A:29:4F:3D:BA:50:2B X509v3 Authority Key Identifier: keyid:39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:5a:e9:fb:18:c0:8f:4a:46:63:3d:50:76:cb:62:4a:b3:49: 3c:94:9c:dc:d7:41:22:f1:ad:d0:6e:b0:23:d4:b4:b9:f6:4c: 11:2d:f4:cf:9a:a1:79:3e:76:0d:2e:93:34:01:39:fb:fd:8f: 0b:4a:8b:fb:77:1b:09:42:c2:1e:bc:2f:db:d6:d8:f9:53:8a: 78:7a:7c:1b:36:e1:4c:70:ff:55:93:33:b9:27:d5:22:de:6d: ba:2d:ce:a8:89:a9:4b:4c:8f:6b:82:e8:ec:1c:93:54:d4:07: 07:9d:11:d6:f3:be:57:3e:63:7d:32:e8:0b:98:24:f1:3f:2f: cd:8d:fd:98:08:9e:35:bb:fc:51:77:10:2f:80:80:5b:b8:ea: 8d:eb:50:ea:5d:06:ad:ad:ed:60:b5:b8:fc:de:1d:8f:92:03: 63:4e:36:74:1f:3c:ec:89:f3:39:19:22:78:83:9a:d6:02:12: 6d:9c:4c:75:41:e2:7e:7a:a6:37:05:a8:87:42:67:4b:e2:d8: 40:5a:a6:82:85:a8:7d:94:37:15:f6:fe:9f:4f:a4:ef:29:da: d4:15:b3:02:f3:74:93:9f:be:eb:6b:78:64:69:bc:7f:81:45: f6:aa:b8:6f:2a:f1:61:9f:56:80:24:dd:ad:41:8c:0e:57:67: 75:e8:dc:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCWVCM8YMR4GesmpbnVWdluYuINIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1 NzVBRjdEMTAeFw0yNTA2MDYxMzU1NDlaFw0yNTA2MDkyMjQ2NDlaMDMxMTAvBgNV BAMTKDEwMTk5OTVFNDI4NzZCOEQ1QjM5NjdFMDQ2N0EyOTRGM0RCQTUwMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6BpEShRmOGzwf7aWGfUi8411n 96f3h/8ZtYvcSkMYMIRk5yL3H3oSqGE58mfC8LhOq7V+2BXv3bHXyGgD1wR5GLs+ 2GDk+XqpMSrb3SW19ArOxMrA52w8KJoV/VlWAO1worrYgwAOP+V+X2rNsKHmgA74 5hM1p9Aqm56how+SwJ5Rp4RlznzSzGFDUEv/T5l1ol4tOnyc9Brcp6wHbbBPrIsq CcXOz3KxzWDXstKjp9gqoklzNlnutMkQSbYNllxdahJfenEwOwGIRl+VGfCFl9xp 8lMx3hzJG2ZRikI8q57kltp5lnsH3rHFS6G2A3iar+CxwUU04QlV2iuDvl1lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEBmZXkKHa41bOWfgRnopTz26UCswHwYDVR0j BBgwFoAUOZMVsYun0N1mbcqMPbvgE1da99EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmYyODg3OS00ODQ0LTQyZGUtYjJkOS1hOTY2NmRlMjgyZWEvMC8zOTkzMTVCMThC QTdEMERENjY2RENBOEMzREJCRTAxMzU3NUFGN0QxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1NzVB RjdEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJmMjg4NzktNDg0NC00MmRlLWIy ZDktYTk2NjZkZTI4MmVhLzAvMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUw MTM1NzVBRjdEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACta6fsYwI9KRmM9UHbLYkqzSTyUnNzXQSLx rdBusCPUtLn2TBEt9M+aoXk+dg0ukzQBOfv9jwtKi/t3GwlCwh68L9vW2PlTinh6 fBs24Uxw/1WTM7kn1SLebbotzqiJqUtMj2uC6Owck1TUBwedEdbzvlc+Y30y6AuY JPE/L82N/ZgInjW7/FF3EC+AgFu46o3rUOpdBq2t7WC1uPzeHY+SA2NONnQfPOyJ 8zkZIniDmtYCEm2cTHVB4n56pjcFqIdCZ0vi2EBapoKFqH2UNxX2/p9PpO8p2tQV swLzdJOfvutreGRpvH+BRfaquG8q8WGfVoAk3a1BjA5XZ3Xo3EQ= -----END CERTIFICATE-----Generated at Sat Jun 7 17:22:17 2025 by rpki-client