$ rpki-client -vvf repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft File: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft (raw, json) Hash identifier: avJZKNNsrhu+xgM07Gq2sKJVHYHlzosZdgvjkwpjRgg= Subject key identifier: 30:6D:BC:29:DD:F5:61:FA:4F:57:F2:08:23:00:42:BA:26:61:A6:60 Authority key identifier: 40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD Certificate issuer: /CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Certificate serial: 2E999AF3BAF65CABD08C9BB95B1622D1DAC7150F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft Manifest number: 01BE Signing time: Tue 03 Jun 2025 17:54:34 +0000 Manifest this update: Tue 03 Jun 2025 17:49:34 +0000 Manifest next update: Sat 07 Jun 2025 04:43:34 +0000 Files and hashes: 1: 3130332e3136302e36392e302f32342d3234203d3e20313431363037.roa (hash: a7mgV41OX87LjUgmR9JI4fbD1k92EJK28gdqBsIBQfU=) 2: 3130332e3136302e36392e302f32342d3234203d3e203438343635.roa (hash: auLcgmSGCQAKQQp7IS/UW/PKknCFg/ObGvfBAC+PkNE=) 3: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl (hash: gWAyo7rx+waOnKGk8ipRNiFgody8hVwWOmCQ096AJtU=) 4: 3130332e3136302e36382e302f32342d3234203d3e203438343635.roa (hash: xfIhG1WqC8mycFYz+vcqQY0Ov8VUQ3o8w6al6PEEFwc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:99:9a:f3:ba:f6:5c:ab:d0:8c:9b:b9:5b:16:22:d1:da:c7:15:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Validity Not Before: Jun 3 17:49:34 2025 GMT Not After : Jun 7 04:43:34 2025 GMT Subject: CN=306DBC29DDF561FA4F57F208230042BA2661A660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ff:62:25:d7:69:65:29:80:03:50:f6:d3:22: 78:2b:fd:9e:cc:c7:ab:7b:0b:58:ac:24:0e:f3:4e: fd:81:9c:f6:59:67:c8:33:cd:03:93:d3:57:bb:ce: 1d:89:e2:e3:d3:65:1e:f9:34:bb:a9:ac:9e:ab:62: 09:3e:24:15:ff:84:e0:8b:54:61:ef:3c:9f:b9:18: 68:16:b2:53:9d:9c:60:ac:b3:09:66:0a:7a:01:ce: 6e:16:28:1f:74:f3:52:db:eb:26:92:00:19:19:c5: a4:f1:b2:38:f0:60:50:76:38:ac:9d:af:9d:2e:35: 4b:66:d7:78:9b:ba:49:c8:c5:91:be:2d:6c:16:6d: 71:df:54:9c:6b:31:54:23:a7:f2:53:db:04:61:40: f1:d9:e3:3f:52:41:27:b3:46:c8:d6:5c:19:11:1d: 18:1a:e9:2f:f7:d1:40:76:61:b4:25:72:4f:e5:c9: ca:1b:4f:c4:7b:11:11:7a:10:42:26:53:da:05:8f: 62:bf:e1:60:d3:45:18:bf:67:0b:78:7f:ff:6e:16: ba:e3:85:c3:8c:e3:eb:e9:1a:e2:08:fa:e0:14:60: 0b:97:06:71:f0:78:30:2a:a5:73:46:24:a4:ef:17: 75:ad:31:16:0c:af:2b:4b:c3:ec:71:01:0e:df:3b: bf:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6D:BC:29:DD:F5:61:FA:4F:57:F2:08:23:00:42:BA:26:61:A6:60 X509v3 Authority Key Identifier: keyid:40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:75:50:2d:95:53:41:9f:10:82:59:55:aa:48:36:aa:8d:7e: 56:bd:fe:f4:e0:43:82:46:ad:f2:79:a9:cc:cd:2c:79:bf:f0: f1:89:82:1f:ea:38:9d:11:89:ff:bf:f6:ed:83:6b:24:27:20: 85:17:96:6d:2e:e2:2e:39:60:b2:2b:f7:18:27:4a:85:a6:02: e2:c7:1f:9d:f8:d5:82:05:58:b8:01:14:57:b6:00:0c:e5:7c: 79:c8:be:7e:8d:53:ef:6a:a9:32:0c:3b:17:02:c9:61:a7:57: 48:76:61:04:bc:b0:b0:0f:84:38:08:0c:af:21:f3:91:15:80: 74:78:50:45:20:5a:e4:b6:23:5b:bd:41:32:c9:b4:b2:f3:ae: f2:bb:39:70:e1:ba:0b:3e:c9:55:01:ff:12:bd:8b:eb:28:16: 87:34:90:e4:9a:f2:77:e2:70:ff:68:39:52:64:72:5c:c8:ae: 2a:60:2c:3c:0e:48:da:1b:96:3e:83:c9:fc:50:42:a7:5e:c7: 33:49:36:9a:13:8e:cf:1b:13:83:22:48:b3:30:d3:c8:94:d6: 55:46:2e:5f:b0:aa:7e:4b:20:a4:7a:84:23:3c:dd:46:b2:6e: 41:27:e6:ee:8b:f9:66:d9:54:07:23:dc:86:af:03:07:1d:9c: 85:49:4e:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULpma87r2XKvQjJu5WxYi0drHFQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZG OURERTNERDAeFw0yNTA2MDMxNzQ5MzRaFw0yNTA2MDcwNDQzMzRaMDMxMTAvBgNV BAMTKDMwNkRCQzI5RERGNTYxRkE0RjU3RjIwODIzMDA0MkJBMjY2MUE2NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP/2Il12llKYADUPbTIngr/Z7M x6t7C1isJA7zTv2BnPZZZ8gzzQOT01e7zh2J4uPTZR75NLuprJ6rYgk+JBX/hOCL VGHvPJ+5GGgWslOdnGCsswlmCnoBzm4WKB9081Lb6yaSABkZxaTxsjjwYFB2OKyd r50uNUtm13ibuknIxZG+LWwWbXHfVJxrMVQjp/JT2wRhQPHZ4z9SQSezRsjWXBkR HRga6S/30UB2YbQlck/lycobT8R7ERF6EEImU9oFj2K/4WDTRRi/Zwt4f/9uFrrj hcOM4+vpGuII+uAUYAuXBnHweDAqpXNGJKTvF3WtMRYMrytLw+xxAQ7fO79rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMG28Kd31YfpPV/IIIwBCuiZhpmAwHwYDVR0j BBgwFoAUQBqlavWZzKLNcaaE/89T//nd490wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWM3OWZiZS00NzkwLTQ2YmUtYjliMi0wMzU5YjFhMThlMzMvMC80MDFBQTU2QUY1 OTlDQ0EyQ0Q3MUE2ODRGRkNGNTNGRkY5RERFM0RELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZGOURE RTNERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjNzlmYmUtNDc5MC00NmJlLWI5 YjItMDM1OWIxYTE4ZTMzLzAvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUz RkZGOURERTNERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZ1UC2VU0GfEIJZVapINqqNfla9/vTgQ4JG rfJ5qczNLHm/8PGJgh/qOJ0Rif+/9u2DayQnIIUXlm0u4i45YLIr9xgnSoWmAuLH H5341YIFWLgBFFe2AAzlfHnIvn6NU+9qqTIMOxcCyWGnV0h2YQS8sLAPhDgIDK8h 85EVgHR4UEUgWuS2I1u9QTLJtLLzrvK7OXDhugs+yVUB/xK9i+soFoc0kOSa8nfi cP9oOVJkclzIripgLDwOSNoblj6DyfxQQqdexzNJNpoTjs8bE4MiSLMw08iU1lVG Ll+wqn5LIKR6hCM83UaybkEn5u6L+WbZVAcj3IavAwcdnIVJTtM= -----END CERTIFICATE-----Generated at Tue Jun 3 23:42:07 2025 by rpki-client