$ rpki-client -vvf repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft File: 408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft (raw, json) Hash identifier: RGFHtV7Z7WrN1ofF9zL4e1vtyl8C4pbnhkB7w6hqvpw= Subject key identifier: B0:22:63:DC:AB:61:E0:62:DF:0F:C0:2A:A6:04:30:AB:27:0D:69:52 Authority key identifier: 40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2 Certificate issuer: /CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2 Certificate serial: 70F840715A1FC1BA4F6176A6E17DF290BD6986A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft Manifest number: 047D Signing time: Tue 22 Jul 2025 14:01:00 +0000 Manifest this update: Tue 22 Jul 2025 13:56:00 +0000 Manifest next update: Sat 26 Jul 2025 01:58:00 +0000 Files and hashes: 1: 408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl (hash: 4swAVnmANH8Vu/V6TLu4/u/gRVXOaAS2NXGegX1/GNU=) 2: 3130332e3134332e32302e302f32342d3234203d3e20313339343035.roa (hash: 486gYpHFPIGrMV4cst/8HcDYBuujcWoRBQU44C89Iu0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:f8:40:71:5a:1f:c1:ba:4f:61:76:a6:e1:7d:f2:90:bd:69:86:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2 Validity Not Before: Jul 22 13:56:00 2025 GMT Not After : Jul 26 01:58:00 2025 GMT Subject: CN=B02263DCAB61E062DF0FC02AA60430AB270D6952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:56:b4:bd:e4:5f:98:73:54:44:fc:6f:08:34: 46:ae:bf:ba:d0:99:93:7a:27:58:db:48:87:5a:77: 2b:78:a4:ec:20:12:c9:12:d9:4b:6b:03:b2:1b:85: 68:82:ee:a6:f8:55:37:b9:8e:4d:0e:5b:86:2a:13: cd:4c:56:f7:7c:be:0e:02:00:b4:d7:eb:db:04:f3: 9e:df:36:87:3f:dd:f9:49:cb:7e:06:55:26:15:a9: d4:59:12:6b:f8:9d:29:02:c4:82:7c:3a:bf:98:fc: 29:e8:16:91:11:ab:6b:8b:e1:af:33:13:6a:f4:ed: b8:94:2b:95:22:94:2b:4f:cf:a4:9f:01:8a:39:ba: b3:8a:ef:ce:4f:f4:bb:ca:30:f1:2a:73:98:53:90: e0:e7:de:7e:48:de:e9:ee:53:3f:15:d6:28:82:2a: 90:98:1c:11:61:fc:15:a2:df:9b:5a:aa:b5:b4:d4: a6:db:c9:99:33:5e:63:e1:9e:09:aa:9d:23:8e:7e: 69:6a:2e:5e:58:64:83:fe:b2:79:13:5f:bd:03:d7: e1:24:6c:52:46:72:86:66:00:8c:c9:f3:c6:51:07: 4b:f0:31:37:e1:af:fc:ed:1f:e9:85:f2:25:22:d0: 3c:0f:59:5f:fd:a7:64:97:c6:db:87:3b:9b:81:9d: 01:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:22:63:DC:AB:61:E0:62:DF:0F:C0:2A:A6:04:30:AB:27:0D:69:52 X509v3 Authority Key Identifier: keyid:40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:16:89:e2:ac:0d:47:32:96:03:95:c9:ef:ff:8c:4f:f6:b8: ca:4e:f6:dc:a3:b9:93:ba:fb:bc:99:94:8b:86:13:a7:92:8b: 62:e3:b5:d9:5c:3f:8c:dc:e3:79:f5:ce:b8:c4:b3:b9:04:f9: 72:dd:3e:3a:43:eb:83:e6:69:bb:5b:e0:8b:af:6a:f2:d8:b4: 9c:be:1c:a4:82:4d:e8:3f:b5:39:10:f2:fe:39:1f:72:0f:77: 7c:6d:c7:84:3b:47:b8:81:43:94:de:4a:ba:b2:e8:72:9d:ad: 28:e7:83:d2:40:73:75:94:35:3c:6c:d2:a3:3d:5c:a8:26:29: 32:2e:41:43:07:1f:d0:0d:33:a4:a1:9d:9e:bd:f1:59:53:60: 75:20:34:79:48:50:fd:f3:83:9c:4b:e0:c1:a4:2b:dd:57:f5: cf:d2:60:83:56:58:7e:07:3e:9e:d5:76:f6:c4:26:aa:c5:96: c7:ba:24:7a:c3:33:15:94:9d:73:3b:9d:7b:f8:e9:33:0e:46: e1:5c:53:33:c1:ca:ca:18:e9:6f:80:63:35:04:43:84:c5:74: e7:94:14:08:31:23:f0:00:c4:f9:41:7a:e5:64:6e:31:fc:ec: 70:6e:4f:50:80:bc:7f:c3:85:4b:2d:2a:e7:b2:e8:4c:6b:02: c5:f8:cf:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcPhAcVofwbpPYXam4X3ykL1phqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgyQzYx RTA4MDFGMjAeFw0yNTA3MjIxMzU2MDBaFw0yNTA3MjYwMTU4MDBaMDMxMTAvBgNV BAMTKEIwMjI2M0RDQUI2MUUwNjJERjBGQzAyQUE2MDQzMEFCMjcwRDY5NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWVrS95F+Yc1RE/G8INEauv7rQ mZN6J1jbSIdadyt4pOwgEskS2UtrA7IbhWiC7qb4VTe5jk0OW4YqE81MVvd8vg4C ALTX69sE857fNoc/3flJy34GVSYVqdRZEmv4nSkCxIJ8Or+Y/CnoFpERq2uL4a8z E2r07biUK5UilCtPz6SfAYo5urOK785P9LvKMPEqc5hTkODn3n5I3unuUz8V1iiC KpCYHBFh/BWi35taqrW01KbbyZkzXmPhngmqnSOOfmlqLl5YZIP+snkTX70D1+Ek bFJGcoZmAIzJ88ZRB0vwMTfhr/ztH+mF8iUi0DwPWV/9p2SXxtuHO5uBnQG7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsCJj3Kth4GLfD8AqpgQwqycNaVIwHwYDVR0j BBgwFoAUQIOVkUoadP9OarHeBj+Cxh4IAfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzhjM2M2OS0zNmQwLTRhZTgtYThkZi02M2QzZjQ0Y2NkOGQvMC80MDgzOTU5MTRB MUE3NEZGNEU2QUIxREUwNjNGODJDNjFFMDgwMUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgyQzYxRTA4 MDFGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc4YzNjNjktMzZkMC00YWU4LWE4 ZGYtNjNkM2Y0NGNjZDhkLzAvNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgy QzYxRTA4MDFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwWieKsDUcylgOVye//jE/2uMpO9tyjuZO6 +7yZlIuGE6eSi2LjtdlcP4zc43n1zrjEs7kE+XLdPjpD64Pmabtb4IuvavLYtJy+ HKSCTeg/tTkQ8v45H3IPd3xtx4Q7R7iBQ5TeSrqy6HKdrSjng9JAc3WUNTxs0qM9 XKgmKTIuQUMHH9ANM6ShnZ698VlTYHUgNHlIUP3zg5xL4MGkK91X9c/SYINWWH4H Pp7VdvbEJqrFlse6JHrDMxWUnXM7nXv46TMORuFcUzPBysoY6W+AYzUEQ4TFdOeU FAgxI/AAxPlBeuVkbjH87HBuT1CAvH/DhUstKuey6ExrAsX4z4E= -----END CERTIFICATE-----Generated at Wed Jul 23 06:02:11 2025 by rpki-client