$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft File: C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft (raw, json) Hash identifier: y7681wtWyp/H/OxxawUfewBZrWzlvAJvSO1Y08luh+0= Subject key identifier: B5:02:AD:7C:65:1D:83:7B:D4:4F:78:4F:64:D2:5A:36:DF:50:BD:6C Authority key identifier: C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A Certificate issuer: /CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A Certificate serial: 029E58B8842298AF7678880D5FA134A9F7D52F3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft Manifest number: 047E Signing time: Sun 29 Jun 2025 07:41:30 +0000 Manifest this update: Sun 29 Jun 2025 07:36:30 +0000 Manifest next update: Wed 02 Jul 2025 08:04:30 +0000 Files and hashes: 1: 323030313a6466303a3266633a3a2f34382d3438203d3e203538343034.roa (hash: 8zY41tTngWvKTe/HAKHtyytdzc6XdijkL5LcFd6Ewbk=) 2: 3130332e32382e31322e302f32332d3234203d3e203538343034.roa (hash: IQxqj9PY3nbC6wwPV82C6ExLe7/jv0UMpi+DEeQSqxQ=) 3: 34332e3235322e3133362e302f32322d3233203d3e203538343034.roa (hash: g0FFTgDxa4Hez+HwVNQ7bFyBpeqsTBamtra1C6gMee0=) 4: 3130332e32382e31342e302f32332d3234203d3e203538343034.roa (hash: g8UPVDpb1m/IFnDlcUZIzOXR04b/PAWmv165hevmi70=) 5: 34332e3235322e3133392e302f32342d3234203d3e203538343034.roa (hash: c6fpSUbyQdt1ZsHYs9eWhZI0zdnm3cArV6v/GBThWWc=) 6: 34332e3235322e3133372e302f32342d3234203d3e203538343034.roa (hash: N7dD/FSi3TZ7eLd1FkTH81UWI+fs0udUhwSc1vTMSUU=) 7: 34332e3235322e3133362e302f32342d3234203d3e203538343034.roa (hash: 3T8MbbOtG2+ZgU9C1xgwAYx2HlDNUDW4JXH7L0pvZ80=) 8: 34332e3235322e3133382e302f32342d3234203d3e203538343034.roa (hash: cfaaVl5RivAI5aEsFEpR96b1yzNXPD55gNZl0+j6JoI=) 9: 3130332e32382e31322e302f32322d3233203d3e203538343034.roa (hash: HyCE+wb3o9CDjWwDlbm/esNR5nByEQvKGtR35PJURy0=) 10: C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl (hash: QjbdjZ8bqGmH6zFPEKKC6OcIHhxeSrizdJVjWbPoRns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 08:04:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:9e:58:b8:84:22:98:af:76:78:88:0d:5f:a1:34:a9:f7:d5:2f:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A Validity Not Before: Jun 29 07:36:30 2025 GMT Not After : Jul 2 08:04:30 2025 GMT Subject: CN=B502AD7C651D837BD44F784F64D25A36DF50BD6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9a:f2:4e:58:f4:02:4a:85:d9:de:e1:73:cf: cc:68:9b:3f:c0:9d:5a:4e:67:d0:c6:b5:ff:81:de: c4:c8:b6:c0:e7:ce:5b:fb:28:7f:d7:53:21:a7:61: 4e:fd:83:c0:c3:45:22:71:f4:e4:0b:56:15:91:d9: e7:6d:fb:35:17:c7:52:bf:1f:31:0e:6f:e3:bb:58: 0d:62:9b:64:30:63:b6:84:bf:df:4c:39:f9:01:90: 1d:ce:f4:56:a4:63:9d:71:a2:76:01:91:45:d2:9b: 58:cd:c0:a6:cd:47:41:73:49:9e:87:f8:22:70:a7: 94:0f:68:ad:07:6d:84:fd:53:af:26:b3:7f:79:65: ef:31:9e:1b:f6:17:6f:6f:b5:2a:d6:62:6d:48:9a: 4a:7d:bb:f1:a1:78:1d:16:f6:af:9b:60:8f:9d:9a: 26:39:85:84:1c:a0:1b:a9:f8:12:2c:f5:51:1f:d3: c3:16:3b:be:94:a4:b1:68:7f:e8:35:35:ec:a7:12: 3c:e9:0a:25:35:3c:d7:90:3c:b5:ad:3f:0a:0d:d6: 85:ec:f9:d7:c7:cf:98:cd:f0:90:be:2d:69:78:ac: 35:de:b0:20:9c:09:f6:a5:f5:94:56:4a:69:a1:c9: 90:86:45:3c:eb:52:d2:b5:3b:f4:3b:78:d7:13:d6: 8e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:02:AD:7C:65:1D:83:7B:D4:4F:78:4F:64:D2:5A:36:DF:50:BD:6C X509v3 Authority Key Identifier: keyid:C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ed:fa:3d:a5:37:86:83:94:83:6b:d5:0a:e1:6e:dd:66:8b: bd:3b:49:d7:5b:c2:4e:a9:a9:91:31:fd:94:ea:d5:62:3c:34: d6:1e:7d:51:56:9b:69:36:fc:be:65:31:2b:b3:d9:18:32:ff: 59:cb:d1:7a:f2:f6:71:a9:23:5e:f9:48:01:9c:ea:a5:2f:1e: 57:2d:34:ec:97:87:a8:71:8b:ef:fe:4e:34:4f:16:e2:f8:c8: ac:4d:a8:d0:bc:f6:7c:f5:44:42:94:06:00:83:99:68:65:2a: 9d:ea:6f:5c:7c:d1:94:b1:be:91:33:f0:02:b7:fd:1f:36:9d: 35:0c:63:26:a5:22:a6:c4:c6:0a:bf:17:a4:48:c2:98:7c:29: fe:fa:51:e2:9a:f8:09:e1:35:e8:aa:3a:02:f2:84:10:45:29: 12:26:86:a8:87:a4:4f:d8:a9:a5:41:e7:cd:88:35:cf:bc:ed: 6f:7f:c3:4d:5e:08:5c:13:b4:4f:d9:44:63:17:84:23:bb:78: 53:be:d3:32:94:31:f6:fa:fc:29:a4:dd:a1:a5:1a:9a:3b:34: 22:54:38:5a:8f:81:b1:0f:66:14:1a:d6:0e:83:64:95:1f:cb: 75:dd:c1:59:19:c0:1c:d1:fe:08:22:7a:51:a2:95:f4:b4:ae: 90:52:e0:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAp5YuIQimK92eIgNX6E0qffVLzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAxMkZG QjQ4ODcxQTAeFw0yNTA2MjkwNzM2MzBaFw0yNTA3MDIwODA0MzBaMDMxMTAvBgNV BAMTKEI1MDJBRDdDNjUxRDgzN0JENDRGNzg0RjY0RDI1QTM2REY1MEJENkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDmvJOWPQCSoXZ3uFzz8xomz/A nVpOZ9DGtf+B3sTItsDnzlv7KH/XUyGnYU79g8DDRSJx9OQLVhWR2edt+zUXx1K/ HzEOb+O7WA1im2QwY7aEv99MOfkBkB3O9FakY51xonYBkUXSm1jNwKbNR0FzSZ6H +CJwp5QPaK0HbYT9U68ms395Ze8xnhv2F29vtSrWYm1Imkp9u/GheB0W9q+bYI+d miY5hYQcoBup+BIs9VEf08MWO76UpLFof+g1NeynEjzpCiU1PNeQPLWtPwoN1oXs +dfHz5jN8JC+LWl4rDXesCCcCfal9ZRWSmmhyZCGRTzrUtK1O/Q7eNcT1o4FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtQKtfGUdg3vUT3hPZNJaNt9QvWwwHwYDVR0j BBgwFoAUwlRKDB7oq/naBhRQCTABL/tIhxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTBmOTE2My0zZTVhLTRlZmEtOGJkOS00YWM0YmM2MzA0MTQvMC9DMjU0NEEwQzFF RThBQkY5REEwNjE0NTAwOTMwMDEyRkZCNDg4NzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAxMkZGQjQ4 ODcxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUwZjkxNjMtM2U1YS00ZWZhLThi ZDktNGFjNGJjNjMwNDE0LzAvQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAx MkZGQjQ4ODcxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3t+j2lN4aDlINr1Qrhbt1mi707Sddbwk6p qZEx/ZTq1WI8NNYefVFWm2k2/L5lMSuz2Rgy/1nL0Xry9nGpI175SAGc6qUvHlct NOyXh6hxi+/+TjRPFuL4yKxNqNC89nz1REKUBgCDmWhlKp3qb1x80ZSxvpEz8AK3 /R82nTUMYyalIqbExgq/F6RIwph8Kf76UeKa+AnhNeiqOgLyhBBFKRImhqiHpE/Y qaVB582INc+87W9/w01eCFwTtE/ZRGMXhCO7eFO+0zKUMfb6/Cmk3aGlGpo7NCJU OFqPgbEPZhQa1g6DZJUfy3XdwVkZwBzR/ggielGilfS0rpBS4PE= -----END CERTIFICATE-----Generated at Mon Jun 30 12:30:29 2025 by rpki-client