$ rpki-client -vvf repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft File: 1CA9E40710262DA751A67E932477D6E12B4B2DED.mft (raw, json) Hash identifier: nS56RZGAZBGHdY5N+qQef5QCVpyXxB+rPeWtawtk/lc= Subject key identifier: 24:D1:10:3E:83:65:17:6B:55:20:88:B4:14:71:46:D5:87:19:9C:1A Authority key identifier: 1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED Certificate issuer: /CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Certificate serial: 05B27EB6CF69DB722DEDB0B44D638A0754895063 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft Manifest number: 04DF Signing time: Mon 02 Jun 2025 02:04:11 +0000 Manifest this update: Mon 02 Jun 2025 01:59:11 +0000 Manifest next update: Thu 05 Jun 2025 13:02:11 +0000 Files and hashes: 1: 3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa (hash: cke05Fz1pU7ph5quQU6BQAXvAK/qW0tlFEcIja5SVaM=) 2: 3130332e3132332e3130362e302f32342d3234203d3e20313338303730.roa (hash: 1Qj+0yJlnyRAkhJQW7JxleOTtApsG7fPmAlVCQ6z7p8=) 3: 1CA9E40710262DA751A67E932477D6E12B4B2DED.crl (hash: MjkpO11RdCIqgzbFGaE9pJyQ6qIneC+5rDABOD5PKvs=) 4: 3130332e3132332e3130352e302f32342d3234203d3e20313338303730.roa (hash: BfFCh7Vfs8z+WKVbxTTngHawwEIYaKlayBm3t+ZFnyU=) 5: 3130332e3132332e3130342e302f32342d3234203d3e20313338303730.roa (hash: yHCpL2jeoTRdKkL9PeW/BmTUh9ZLAObQa8uLRwAc8Ww=) 6: 323430333a396663303a3a2f33322d3438203d3e20313338303730.roa (hash: g2I091o7xGYF01O50CUZMPsQctw2lflU2v4s2FAorWY=) 7: 3130332e3132332e3130342e302f32322d3234203d3e20313338303730.roa (hash: Yh/X3wf3xgSBLANEs82b75GugxHKann/OAKH3YrZy2U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 13:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:b2:7e:b6:cf:69:db:72:2d:ed:b0:b4:4d:63:8a:07:54:89:50:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Validity Not Before: Jun 2 01:59:11 2025 GMT Not After : Jun 5 13:02:11 2025 GMT Subject: CN=24D1103E8365176B552088B4147146D587199C1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:1f:0d:c5:dd:e8:00:6e:e3:05:f9:a9:07:10: 31:7b:98:ab:e1:b1:c0:54:e1:21:5e:09:20:4d:80: d8:97:27:96:42:46:02:12:ec:0f:ed:8f:72:7e:e0: 39:b2:a0:13:36:2a:44:67:4c:c2:1e:cd:16:bf:ce: 7b:b8:23:a2:0a:3c:42:d0:dd:b2:11:a1:91:d9:a1: 3d:be:fa:c0:98:49:38:3c:f8:be:65:8b:59:38:0f: 02:2f:cc:51:43:e1:c6:ca:ee:d1:6f:3b:18:1c:8a: 70:3c:08:c3:75:32:e5:de:66:9c:80:2e:38:a9:4d: d6:36:33:7c:91:a0:6f:22:59:c7:96:b1:5e:32:42: e0:f7:02:37:06:34:26:6a:af:5f:b1:f9:26:f9:bf: 66:c4:7c:5a:60:b2:7d:06:92:25:37:f7:96:07:7e: c9:67:71:64:71:82:67:3c:3c:ce:96:7c:00:d4:1e: 88:c1:03:af:f2:c6:50:b1:c3:d2:5c:81:fa:4c:10: 02:3f:f2:35:fe:4f:3a:ae:3d:ed:3b:f3:0e:46:2c: 69:3d:14:85:d5:4f:b0:fa:03:9e:ad:62:3c:76:82: 06:82:64:f5:39:c7:a5:9c:4f:a0:99:4f:d4:06:c0: 85:ac:de:41:41:db:a8:fc:35:8c:03:fd:3b:9f:74: 43:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D1:10:3E:83:65:17:6B:55:20:88:B4:14:71:46:D5:87:19:9C:1A X509v3 Authority Key Identifier: keyid:1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:70:c1:f2:84:e1:c0:53:bb:1b:cc:ba:c6:d7:e9:47:67:43: 3f:04:2e:7b:d9:5a:0d:fd:b9:dd:b3:07:53:26:f6:55:54:b7: 3c:7a:d9:64:68:df:0e:5e:df:f0:6d:ec:55:d9:24:32:9e:78: 6e:23:f0:d8:66:ca:90:4e:3c:4b:31:54:19:18:a4:ea:2d:21: 87:9a:fa:fb:ac:d5:bc:86:20:b6:f5:72:47:27:88:a6:e6:98: 42:d7:f9:d7:9d:82:fa:f4:f5:cb:9f:ad:8d:bf:08:55:14:a0: c4:31:1a:00:dd:59:41:fa:71:1a:ed:84:1c:19:61:df:fb:f3: 7f:12:1d:b4:fb:7b:94:5c:25:32:d5:8c:23:cd:87:9f:d0:f5: ef:a6:a8:17:f2:44:4d:7d:a6:12:be:a6:9d:98:22:b7:fe:d5: 05:b9:35:56:19:11:7a:ee:d8:51:6e:a3:8a:57:6a:a9:be:56: 55:a3:32:b5:54:99:f9:73:30:c0:56:bc:58:61:b5:6d:4a:be: e5:91:73:40:44:7e:22:bc:ed:7a:c9:64:c0:c6:07:53:5a:9f: 5a:f4:df:9a:14:99:c3:5a:c3:22:7b:fb:ad:ec:07:5a:16:d3: d6:e3:05:37:9c:46:6a:98:d5:5b:96:61:ab:07:c0:b0:42:c3: b4:47:5e:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBbJ+ts9p23It7bC0TWOKB1SJUGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEy QjRCMkRFRDAeFw0yNTA2MDIwMTU5MTFaFw0yNTA2MDUxMzAyMTFaMDMxMTAvBgNV BAMTKDI0RDExMDNFODM2NTE3NkI1NTIwODhCNDE0NzE0NkQ1ODcxOTlDMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxHw3F3egAbuMF+akHEDF7mKvh scBU4SFeCSBNgNiXJ5ZCRgIS7A/tj3J+4DmyoBM2KkRnTMIezRa/znu4I6IKPELQ 3bIRoZHZoT2++sCYSTg8+L5li1k4DwIvzFFD4cbK7tFvOxgcinA8CMN1MuXeZpyA LjipTdY2M3yRoG8iWceWsV4yQuD3AjcGNCZqr1+x+Sb5v2bEfFpgsn0GkiU395YH fslncWRxgmc8PM6WfADUHojBA6/yxlCxw9JcgfpMEAI/8jX+TzquPe078w5GLGk9 FIXVT7D6A56tYjx2ggaCZPU5x6WcT6CZT9QGwIWs3kFB26j8NYwD/TufdEPFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJNEQPoNlF2tVIIi0FHFG1YcZnBowHwYDVR0j BBgwFoAUHKnkBxAmLadRpn6TJHfW4StLLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWQ2N2Q1Zi01NzEzLTQxNTMtODcxYi0xYjAwOGY3ZmZkZDIvMC8xQ0E5RTQwNzEw MjYyREE3NTFBNjdFOTMyNDc3RDZFMTJCNEIyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEyQjRC MkRFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFkNjdkNWYtNTcxMy00MTUzLTg3 MWItMWIwMDhmN2ZmZGQyLzAvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2 RTEyQjRCMkRFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxwwfKE4cBTuxvMusbX6UdnQz8ELnvZWg39 ud2zB1Mm9lVUtzx62WRo3w5e3/Bt7FXZJDKeeG4j8NhmypBOPEsxVBkYpOotIYea +vus1byGILb1ckcniKbmmELX+dedgvr09cufrY2/CFUUoMQxGgDdWUH6cRrthBwZ Yd/7838SHbT7e5RcJTLVjCPNh5/Q9e+mqBfyRE19phK+pp2YIrf+1QW5NVYZEXru 2FFuo4pXaqm+VlWjMrVUmflzMMBWvFhhtW1KvuWRc0BEfiK87XrJZMDGB1Nan1r0 35oUmcNawyJ7+63sB1oW09bjBTecRmqY1VuWYasHwLBCw7RHXhA= -----END CERTIFICATE-----Generated at Tue Jun 3 23:18:15 2025 by rpki-client