$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft File: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft (raw, json) Hash identifier: FHuhqA6dPjDaxYFHbE9nt7AxuXAq8CCRTtgNu9bWT9I= Subject key identifier: 99:44:82:68:7D:2F:44:ED:01:F1:B6:BF:3C:43:74:AA:C1:6C:5B:68 Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Certificate serial: 71E7A480A193FFC919EE54D102A038A0BA2801D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft Manifest number: B7 Signing time: Mon 30 Jun 2025 04:51:23 +0000 Manifest this update: Mon 30 Jun 2025 04:46:23 +0000 Manifest next update: Thu 03 Jul 2025 09:26:23 +0000 Files and hashes: 1: 323430343a393763303a393030303a3a2f33362d3336203d3e20313533303837.roa (hash: vJHjXSNbN+nrHshiQZVlbnAzNovBDlJVOtnmhWeep78=) 2: 323430343a393763303a353030303a3a2f33362d3336203d3e20313533303837.roa (hash: jSQKKM5t1FotHl9IvmmOV1bpO2Bm+Ktc/PrlSfNtDhw=) 3: 323430343a393763303a3232323a3a2f34382d3438203d3e20313533303837.roa (hash: v0m70RT7TsMBD2CfWXOxviOzxM9VbD9adOYfqtuzcmg=) 4: 323430343a393763303a393763303a3a2f34382d3438203d3e20313533303837.roa (hash: balnJcNONLw8SBYvt7tVe9VLlUUBAlIKjs8CUCdy5n0=) 5: 323430343a393763303a633030303a3a2f33362d3336203d3e20313533303837.roa (hash: CExyw62yhaULfuFNwHgJQzvOaDneumlJpO9PSL24k5c=) 6: 323430343a393763303a613030303a3a2f33362d3336203d3e20313533303837.roa (hash: cFUzi273SYArAUsUFdIqNgQFTFMOnTlJq02/dC40bZE=) 7: 323430343a393763303a313630303a3a2f34302d3430203d3e20313533303837.roa (hash: mdadZ+r3nk3ljg8TD8Qk3FJTWop4VzOG0q1+8q98qdQ=) 8: 323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa (hash: BcmLy7eGAXxwcAZfEvgQEqwzVahjl/LS8t/7DNQb3O0=) 9: 323430343a393763303a643030303a3a2f33362d3336203d3e20313533303837.roa (hash: NVdbP46U9HcnF9BcVuhppXenoJ+oGsK6bpcGbNkhYrY=) 10: 323430343a393763303a3937303a3a2f34342d3434203d3e20313533303837.roa (hash: FCPjRuILimc1y3AzWysntAW1lv6bPjvpNuCAb/4Y8KY=) 11: 323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa (hash: Lk2DgYj+QODfg+053uFba0kcIHOb5Vr+/MafHCR41Bo=) 12: 323430343a393763303a323232303a3a2f34342d3434203d3e20313533303837.roa (hash: /Nnh6j9dQCYcuoIKmMpFeUVi7V4lhYfyFAMUQ8KcTyY=) 13: 323430343a393763303a373030303a3a2f33362d3336203d3e20313533303837.roa (hash: lc21YQEjyBtBR3cEzA2MpTAYh2Z++8zZog+Taujf5EA=) 14: 323430343a393763303a323330303a3a2f34302d3430203d3e20313533303837.roa (hash: hfVgYmT+s3T/gP2ZWIlWtZU/K6JQ3MvR1bPnXxp9XLc=) 15: 323430343a393763303a323230303a3a2f34302d3430203d3e20313533303837.roa (hash: Wdn8WLm/z70TbHCfvi7cPeFpinXRYOP3acHf9F2yoZI=) 16: 323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa (hash: PWcu8n1GQVYIbIpIIeTmS8WPhGjRtUMxtKVHKNkmcLA=) 17: 323430343a393763303a623030303a3a2f33362d3336203d3e20313533303837.roa (hash: htvHw1UId6QYt8Zem0GwkkJ79UHzGuY9MeNMUAYecR4=) 18: 323430343a393763303a333030303a3a2f33362d3336203d3e20313533303837.roa (hash: 9hl66Fb3ZZtaq9RTVyzyMYKvn9CeIA27uiDhLsoWI3A=) 19: 323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa (hash: 62idZGQxlSWM3llZuSqKAdjwW6hLve0VhfHgcV849wU=) 20: 323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa (hash: amybII68a8VE28x622WWbP3X6DorgNErjKJn51v04hU=) 21: 323430343a393763303a3a2f33362d3336203d3e20313533303837.roa (hash: bZomEerwTckK0uovhCRCPeCKuhMrW+Qy9Lz5ot1+QLM=) 22: 323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa (hash: opmintFf7rKX4t8MJAAA/SPs3kIqRtIjgx+RStmQ20g=) 23: 323430343a393763303a343030303a3a2f33362d3336203d3e20313533303837.roa (hash: CswFvDupWqQkmZpyiNQV19oxsV8YOajNmUapEbDiz6Q=) 24: 323430343a393763303a3136333a3a2f34382d3438203d3e20313533303837.roa (hash: +efjUKkfN7wyOn1gEZ4iK+HOgdi5kSwgmzRJxOnk92c=) 25: 323430343a393763303a3a2f33322d3332203d3e20313533303837.roa (hash: T8cBlOmjcetrSbtW+daV9YtXlBHJ/TgUuSP0ZRu08us=) 26: 323430343a393763303a393730303a3a2f34302d3430203d3e20313533303837.roa (hash: 2kWw72G7y9+iu7Oj2LdzHrFFqPrgZYlByeJlEDz3xGE=) 27: 323430343a393763303a3130333a3a2f34382d3438203d3e20313533303837.roa (hash: sw0SlIxt+FA7pZy4rkUInlCn0uAcgR4nYJ5Re3N9oxc=) 28: 323430343a393763303a393763303a3a2f34342d3434203d3e20313533303837.roa (hash: Rd+MYgkYtI8Em6b7VkPxEFn2gv60uz4eRZ5jfkklOME=) 29: 323430343a393763303a333132363a3a2f34382d3438203d3e20313533303837.roa (hash: Z2kUGl4d2/nWr+hivZqHD1txvHpg/IJVAL0dy1bjHtc=) 30: 323430343a393763303a313030303a3a2f33362d3336203d3e20313533303837.roa (hash: DUx1uGcFaMxSBQpP1ITofuirpaclZNzBSNRp/I11LcM=) 31: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl (hash: qjst6VBSj3NRpz+BYK/jqNVwC08ws/ijGWdc7qlg6ZU=) 32: 323430343a393763303a3232333a3a2f34382d3438203d3e20313533303837.roa (hash: 12eKUXGhIz6FHVGhhjWlfvlhTiivVo5sPJpz1GDHaMw=) 33: 323430343a393763303a323030303a3a2f33362d3336203d3e20313533303837.roa (hash: 2dvpZD7SkLIO8Bb1a+NTuA+XOzdWGBmc4e1hLBWS+aY=) 34: 323430343a393763303a383030303a3a2f33362d3336203d3e20313533303837.roa (hash: VrqEqcYe4ew7uni6W9u41N7qHk2GgBXWkfjAlNiKflw=) 35: 323430343a393763303a3232303a3a2f34342d3434203d3e20313533303837.roa (hash: f+QA2MdOH3pD5wnFB0dGm2Zrsg4T8gtTfRmGOdNWdhQ=) 36: 323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa (hash: /RbGQNrG5f2b5xUZmbLZIUIJCT8zlW48+GUxpa/P1BY=) 37: 323430343a393763303a3a2f34302d3430203d3e20313533303837.roa (hash: IUWcIIvw/5B79/1vlmhpjp2xq/bxBr1gvBDlm1MJkEE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 09:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:e7:a4:80:a1:93:ff:c9:19:ee:54:d1:02:a0:38:a0:ba:28:01:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Validity Not Before: Jun 30 04:46:23 2025 GMT Not After : Jul 3 09:26:23 2025 GMT Subject: CN=994482687D2F44ED01F1B6BF3C4374AAC16C5B68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4c:04:d8:ac:0c:b6:2e:24:fc:b8:65:65:6e: 1e:c8:20:79:8b:58:19:35:ea:9d:ee:ea:b3:2d:86: 89:0a:c0:b5:fc:01:f3:45:de:73:d5:d6:28:96:2d: 17:79:8d:e8:2f:95:18:25:b3:c7:a7:61:40:0f:cb: b5:5e:1d:c4:0f:6a:90:25:0a:15:2f:05:77:87:12: 74:8f:12:f3:02:9f:50:8f:35:15:8d:e7:f4:9a:84: f3:6a:2d:71:92:29:ac:7c:cf:36:a8:fb:69:1e:2b: c7:88:a2:26:8f:52:fe:72:2b:b9:36:12:b0:d1:70: 00:15:49:b0:9e:8b:c5:71:d3:d7:26:d9:bc:49:44: df:b9:38:24:ba:7a:21:5e:f1:58:62:ab:9b:35:01: 0a:34:8b:31:ea:3b:d8:4d:eb:20:26:02:ca:06:7c: 87:15:57:4c:91:0d:38:8b:60:09:92:7a:e3:d7:8b: 85:45:5a:c1:75:85:b8:0e:8b:1e:e4:93:75:18:05: d1:89:1e:d9:68:c9:c3:8d:0b:a5:a7:d0:84:6b:29: 97:3e:4e:85:68:a6:50:94:10:50:7a:fc:ca:dd:4a: 31:e2:56:66:48:4c:cc:3f:0c:8a:1b:0d:6e:e5:58: d5:7c:bc:39:fd:18:d9:6c:fe:90:61:1a:ac:65:7e: 11:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:44:82:68:7D:2F:44:ED:01:F1:B6:BF:3C:43:74:AA:C1:6C:5B:68 X509v3 Authority Key Identifier: keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:91:37:c2:ee:8e:88:58:5b:8c:e9:1c:52:09:f1:be:6c:98: e4:89:b7:9b:a4:24:bc:c4:8f:31:03:e9:3f:1b:70:ea:7d:a2: f8:74:3e:15:a8:98:5a:c6:73:33:3c:2c:b4:c4:22:70:69:f4: 3e:4d:18:15:07:4c:09:50:b9:34:e5:00:f5:91:e1:2e:98:3e: 4b:63:60:ae:e2:17:0e:d6:96:bc:40:09:6a:9d:93:d1:2d:0c: f9:a4:72:eb:47:59:66:2b:57:34:0d:75:d1:b6:07:f1:c0:7b: 47:f3:52:70:cd:5c:f8:22:09:ab:ce:18:95:99:a2:f3:7c:f5: cb:ca:ae:31:42:b8:1f:4c:6e:54:c4:c5:1b:38:b8:df:ed:eb: 11:76:4f:ac:69:30:2a:36:fa:fb:ba:c5:74:97:00:7c:5e:c1: bc:5a:34:cb:ec:7f:15:de:56:ff:4f:d5:3a:15:4a:96:da:b6: 59:ec:82:28:e4:4d:ba:90:af:fe:95:45:08:f4:49:50:3f:5d: a8:4e:c8:54:58:c1:e2:c9:5f:ab:8c:11:5a:fc:f8:e0:5f:81: cb:29:ad:1f:68:77:e5:09:0b:ee:ef:b0:93:91:52:6a:91:a4: 7e:e4:81:56:ce:b2:eb:03:f7:af:da:46:6f:ee:3c:09:4c:67: 36:28:a5:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUceekgKGT/8kZ7lTRAqA4oLooAdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4 QzFENTE1ODAeFw0yNTA2MzAwNDQ2MjNaFw0yNTA3MDMwOTI2MjNaMDMxMTAvBgNV BAMTKDk5NDQ4MjY4N0QyRjQ0RUQwMUYxQjZCRjNDNDM3NEFBQzE2QzVCNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9TATYrAy2LiT8uGVlbh7IIHmL WBk16p3u6rMthokKwLX8AfNF3nPV1iiWLRd5jegvlRgls8enYUAPy7VeHcQPapAl ChUvBXeHEnSPEvMCn1CPNRWN5/SahPNqLXGSKax8zzao+2keK8eIoiaPUv5yK7k2 ErDRcAAVSbCei8Vx09cm2bxJRN+5OCS6eiFe8Vhiq5s1AQo0izHqO9hN6yAmAsoG fIcVV0yRDTiLYAmSeuPXi4VFWsF1hbgOix7kk3UYBdGJHtloycONC6Wn0IRrKZc+ ToVoplCUEFB6/MrdSjHiVmZITMw/DIobDW7lWNV8vDn9GNls/pBhGqxlfhFnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmUSCaH0vRO0B8ba/PEN0qsFsW2gwHwYDVR0j BBgwFoAUTfPbPaIdACIgITBzbkzLBIwdUVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMS80REYzREIzREEy MUQwMDIyMjAyMTMwNzM2RTRDQ0IwNDhDMUQ1MTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4QzFE NTE1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRlZDU4MTEtYmU1MC00Y2FhLTlm OTYtNjNkMzcyMDMxMWRlLzEvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NC MDQ4QzFENTE1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWRN8LujohYW4zpHFIJ8b5smOSJt5ukJLzE jzED6T8bcOp9ovh0PhWomFrGczM8LLTEInBp9D5NGBUHTAlQuTTlAPWR4S6YPktj YK7iFw7WlrxACWqdk9EtDPmkcutHWWYrVzQNddG2B/HAe0fzUnDNXPgiCavOGJWZ ovN89cvKrjFCuB9MblTExRs4uN/t6xF2T6xpMCo2+vu6xXSXAHxewbxaNMvsfxXe Vv9P1ToVSpbatlnsgijkTbqQr/6VRQj0SVA/XahOyFRYweLJX6uMEVr8+OBfgcsp rR9od+UJC+7vsJORUmqRpH7kgVbOsusD96/aRm/uPAlMZzYopVE= -----END CERTIFICATE-----Generated at Tue Jul 1 16:50:44 2025 by rpki-client