$ rpki-client -vvf repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft File: 405E466852C38FD4CD20BA6115840947D5D24F5D.mft (raw, json) Hash identifier: EaDowtidFUMDHhNWASXhZ3tYhnnLb4NkVMHLkAv174s= Subject key identifier: CA:49:13:12:5E:12:D9:BF:03:23:D9:3C:5C:FB:8B:A3:AE:86:EB:43 Authority key identifier: 40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D Certificate issuer: /CN=405E466852C38FD4CD20BA6115840947D5D24F5D Certificate serial: 0391AE5EDCC0290A6067B75F3104E996BECEE105 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft Manifest number: 90 Signing time: Sat 28 Jun 2025 14:01:08 +0000 Manifest this update: Sat 28 Jun 2025 13:56:08 +0000 Manifest next update: Wed 02 Jul 2025 00:40:08 +0000 Files and hashes: 1: 405E466852C38FD4CD20BA6115840947D5D24F5D.crl (hash: x/RDBv3vLNLxIYhL5c2u3NqHZiAw7908FaZtYG7dzfE=) 2: 3136302e32352e3230332e302f32342d3234203d3e20313533313038.roa (hash: hOlyHuu2wphYhBJDocKFWHEZrEGEanCNnjs4wR5XHPw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 00:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:91:ae:5e:dc:c0:29:0a:60:67:b7:5f:31:04:e9:96:be:ce:e1:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=405E466852C38FD4CD20BA6115840947D5D24F5D Validity Not Before: Jun 28 13:56:08 2025 GMT Not After : Jul 2 00:40:08 2025 GMT Subject: CN=CA4913125E12D9BF0323D93C5CFB8BA3AE86EB43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:01:1c:31:c9:ef:04:78:b2:f0:c7:4e:82:b0: 6f:94:24:dc:cc:b6:f9:26:03:5f:82:4c:b8:16:c8: 10:42:50:13:b8:9f:a2:29:de:ad:bd:32:5d:cf:ae: b0:8f:67:e4:f4:fd:73:53:2a:3b:58:10:63:60:72: 20:e3:fa:74:27:30:10:90:64:fd:a9:f9:4d:89:54: a3:b3:0c:b3:82:2b:84:38:77:d7:a6:e8:ca:18:da: 07:be:a6:01:75:1e:63:b8:9e:13:6f:87:a9:58:62: 53:7a:85:4b:d1:29:77:49:06:69:45:e5:1e:cf:ce: f9:4d:80:bc:fb:95:ee:e1:9d:eb:46:45:2a:26:b0: e6:35:63:9b:6c:9e:92:c6:7e:00:20:28:8e:51:62: b8:8d:6c:5b:ae:63:27:a7:1d:ce:ed:12:06:31:0d: a5:83:6c:ef:1f:70:e8:b3:44:d2:4e:a3:19:c5:1e: 27:98:7f:34:36:3c:e7:2b:3a:d2:0e:78:d1:c3:f8: 84:be:f7:b4:a3:15:08:65:ba:dc:9e:99:69:69:80: fa:f2:03:b2:1d:ae:ce:dc:97:84:3b:ff:36:1e:e2: e1:c6:45:69:2c:74:34:df:45:fd:28:87:c4:5e:bf: b3:2a:4b:5e:1d:1d:a3:f3:1b:c0:1a:22:3d:84:ce: 31:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:49:13:12:5E:12:D9:BF:03:23:D9:3C:5C:FB:8B:A3:AE:86:EB:43 X509v3 Authority Key Identifier: keyid:40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:b5:3c:78:25:8d:3e:81:90:6d:98:5e:9a:7b:8c:3e:c4:cd: 01:01:92:b9:df:45:04:be:41:2a:5e:22:ca:7c:ff:94:00:cd: 7c:08:c9:d7:bb:51:01:13:8a:f6:b3:4e:08:f7:a7:92:6f:58: b8:ec:f6:ac:47:cf:56:96:e1:9e:0c:c4:75:25:67:7a:69:f2: 21:da:db:9f:42:3d:80:0d:ca:9c:09:98:42:29:08:d0:19:18: 0e:b6:78:c1:42:6e:2e:ab:6b:60:bd:33:ff:18:08:b1:5e:a4: 6b:e1:9b:a9:96:59:a5:a2:38:c9:b2:1e:fb:92:e6:90:e0:23: 9d:ca:02:69:a2:69:01:5b:24:f2:20:47:38:7f:b2:9c:08:25: 53:46:c4:f7:38:c9:6c:5f:16:30:89:5f:52:ce:c5:30:93:b8: f1:17:d5:aa:b8:6e:f4:91:c9:a7:d5:72:7b:fd:c6:89:a6:1b: b0:3f:6f:52:e3:43:0e:e7:48:3b:33:d3:d7:65:7b:1d:15:62: b5:ff:ac:68:cf:f3:10:7b:ee:4f:ba:ef:8f:89:d5:37:4a:96: b4:43:4c:86:eb:2b:f1:86:3a:c1:fd:54:00:10:88:6f:f3:67: 4f:94:6a:60:e9:73:a9:fd:d9:78:13:cd:29:f0:12:14:8f:27: a9:31:4d:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA5GuXtzAKQpgZ7dfMQTplr7O4QUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5NDdE NUQyNEY1RDAeFw0yNTA2MjgxMzU2MDhaFw0yNTA3MDIwMDQwMDhaMDMxMTAvBgNV BAMTKENBNDkxMzEyNUUxMkQ5QkYwMzIzRDkzQzVDRkI4QkEzQUU4NkVCNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAARwxye8EeLLwx06CsG+UJNzM tvkmA1+CTLgWyBBCUBO4n6Ip3q29Ml3PrrCPZ+T0/XNTKjtYEGNgciDj+nQnMBCQ ZP2p+U2JVKOzDLOCK4Q4d9em6MoY2ge+pgF1HmO4nhNvh6lYYlN6hUvRKXdJBmlF 5R7PzvlNgLz7le7hnetGRSomsOY1Y5tsnpLGfgAgKI5RYriNbFuuYyenHc7tEgYx DaWDbO8fcOizRNJOoxnFHieYfzQ2POcrOtIOeNHD+IS+97SjFQhlutyemWlpgPry A7Idrs7cl4Q7/zYe4uHGRWksdDTfRf0oh8Rev7MqS14dHaPzG8AaIj2EzjF3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUykkTEl4S2b8DI9k8XPuLo66G60MwHwYDVR0j BBgwFoAUQF5GaFLDj9TNILphFYQJR9XST10wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWM2MTU1ZS0yZDJmLTRmOWUtYjIxOC1lYjUyNWIzYTExMTkvMC80MDVFNDY2ODUy QzM4RkQ0Q0QyMEJBNjExNTg0MDk0N0Q1RDI0RjVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5NDdENUQy NEY1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFjNjE1NWUtMmQyZi00ZjllLWIy MTgtZWI1MjViM2ExMTE5LzAvNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5 NDdENUQyNEY1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKe1PHgljT6BkG2YXpp7jD7EzQEBkrnfRQS+ QSpeIsp8/5QAzXwIyde7UQETivazTgj3p5JvWLjs9qxHz1aW4Z4MxHUlZ3pp8iHa 259CPYANypwJmEIpCNAZGA62eMFCbi6ra2C9M/8YCLFepGvhm6mWWaWiOMmyHvuS 5pDgI53KAmmiaQFbJPIgRzh/spwIJVNGxPc4yWxfFjCJX1LOxTCTuPEX1aq4bvSR yafVcnv9xommG7A/b1LjQw7nSDsz09dlex0VYrX/rGjP8xB77k+674+J1TdKlrRD TIbrK/GGOsH9VAAQiG/zZ0+UamDpc6n92XgTzSnwEhSPJ6kxTVA= -----END CERTIFICATE-----Generated at Mon Jun 30 07:11:28 2025 by rpki-client