$ rpki-client -vvf repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft File: 41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft (raw, json) Hash identifier: JcKcL+xHuO5/l58qq/YImQlb2I9KnHgvujzE3pOhs+U= Subject key identifier: 2A:52:2C:97:EC:D0:88:98:08:48:9A:BE:1A:F4:11:CC:C7:76:18:2C Authority key identifier: 41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C Certificate issuer: /CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C Certificate serial: 28882D35254114C5E9DCC163066EC56A29CEBB3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft Manifest number: 0187 Signing time: Sat 28 Jun 2025 22:51:32 +0000 Manifest this update: Sat 28 Jun 2025 22:46:32 +0000 Manifest next update: Wed 02 Jul 2025 05:02:32 +0000 Files and hashes: 1: 3230322e3137332e36342e302f32342d3234203d3e203233363935.roa (hash: mn95e/RHwrm52jwgTOEuu2HIFPqZkwjgw7iJzDcC0Aw=) 2: 3230322e3137332e37372e302f32342d3234203d3e203233363935.roa (hash: fMnLos8+J1VIZ4qwJVBJ1J3B9BHaKTUBDhVAh5aNCi8=) 3: 3230322e3137332e37362e302f32342d3234203d3e203233363935.roa (hash: P5crg0R32gyS1n02458lLpX18WRXH3sQSc1skd1DZ2k=) 4: 3230322e3137332e38382e302f32342d3234203d3e203233363935.roa (hash: kWaiaFCi5F4TW6LYG0q3VELQGQNXbZe+dclFyLeSNAY=) 5: 3230322e3137332e37342e302f32342d3234203d3e203233363935.roa (hash: 6QSQEwf0Vg6SaXjS+GIzWwNuYlP7VRzDWIXvyWeiVCo=) 6: 3230322e3137332e37312e302f32342d3234203d3e203233363935.roa (hash: Xthgw31h3s+GW8ypk/PRH8TnEVJQ++dwiKocGGYj4NY=) 7: 3230322e3137332e37322e302f32342d3234203d3e203233363935.roa (hash: o2ln+IfG7vkZVTnGCTylCBTI2pbcc89CV9g/agRQLtQ=) 8: 3230322e3137332e38342e302f32342d3234203d3e203233363935.roa (hash: X9OlKSdhEP9aR8QcezvNKe8bo7GaRw8yvBmdk6EUw2A=) 9: 3230322e3137332e37332e302f32342d3234203d3e203233363935.roa (hash: nSzlfFPpI7N3qrGPleUZ7U2AGFdMYcBNQO4RGyLMKDU=) 10: 3230322e3137332e38302e302f32342d3234203d3e203233363935.roa (hash: Qe7KScU7+lZMmSIY+33thQD4DgpTET1HSNVXslVMyw8=) 11: 3230322e3137332e36352e302f32342d3234203d3e203233363935.roa (hash: JrMofhOCMVdNP1sEAWvpSSTT2LmZl0HuhRslYJ7iy9U=) 12: 3230322e3137332e39332e302f32342d3234203d3e203233363935.roa (hash: uUWqQ+r90afq72pms35ZsH7xSBYfCse9ZKzmHy/kk18=) 13: 3230322e3137332e38352e302f32342d3234203d3e203233363935.roa (hash: UlX0UeHxNwDo/jIJmlDlRnsp3ZbSu9xVDF7FdNoezxw=) 14: 3230322e3137332e37302e302f32342d3234203d3e203233363935.roa (hash: QfY1rUIQ5PL3Z5jxkldepfjgl0wlr3DkT3fjGc62FLQ=) 15: 3230322e3137332e37352e302f32342d3234203d3e203233363935.roa (hash: kHEvnsONRQITDgcaeW14+b5i/pT074x2j6ak8xJ3qTA=) 16: 3230322e3137332e39352e302f32342d3234203d3e203233363935.roa (hash: bXcYT55Yk5nGWBx7FCOVlDHnPL+/TKis1JRYYVSX17o=) 17: 3230322e3137332e38372e302f32342d3234203d3e203233363935.roa (hash: SmTukg2uSres2nPLyHTBL++dFIaU5SWdWD9V1LnZKzA=) 18: 3230322e3137332e39312e302f32342d3234203d3e203233363935.roa (hash: QpQ1/sm5zXzKMRcJ3nXPQnI+vIIBo+CCNe1F4YSgeSo=) 19: 3230322e3137332e39322e302f32342d3234203d3e203233363935.roa (hash: HIAVUx6ij09H4kiiZ/OJGBRVevXktqzOjuX4vjeRYfI=) 20: 3230322e3137332e36392e302f32342d3234203d3e203233363935.roa (hash: vDU9gcRo8sjLDkCnZOzt+rm8fLZLUHyOqnl2eV08+uU=) 21: 3230322e3137332e38322e302f32342d3234203d3e203233363935.roa (hash: 8/H1q3EcizQtYAaVI5vaP4CIs/Srkv0IwoIGGhf07is=) 22: 3230322e3137332e36372e302f32342d3234203d3e203233363935.roa (hash: NGImgtjhDUZw4LYbto24tiacu1uj5ePcNIzwHQKWr60=) 23: 3230322e3137332e38392e302f32342d3234203d3e203233363935.roa (hash: lhuajvGIv7rcCg6mlRyz9c9eb3L+IyDr9Q9rPP2Ha5s=) 24: 3230322e3137332e36382e302f32342d3234203d3e203233363935.roa (hash: kBeUG+J3aaoaEctPb/7V99FsXKX0tZO2cRt3bs0z0/k=) 25: 3230322e3137332e38312e302f32342d3234203d3e203233363935.roa (hash: fZQK9JY5pm3VYutUjV1YUz0UdbDku9RPZXo98IsSdnQ=) 26: 3230322e3137332e36342e302f31392d3139203d3e203233363935.roa (hash: 2bUXUTcYKqH84i/OW2TNfGKGcjdUBjA5fkOcr7LqU+Y=) 27: 3230322e3137332e37392e302f32342d3234203d3e203233363935.roa (hash: JlV82roW0wq9X2Q7J+tUUs8b8oUVk7NAH3mIbLD0we8=) 28: 3230322e3137332e37382e302f32342d3234203d3e203233363935.roa (hash: qIgN11+WPom9/7TNDZoyX6fP1sCsas2zffkRRMYFeHM=) 29: 41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl (hash: 8k/NiLYIquEDA/kgaGI2feEN0RwXxnHksK/3SpfJLMs=) 30: 3230322e3137332e38332e302f32342d3234203d3e203233363935.roa (hash: oDlDI6fU21fZbXJ7xjJnRhwvlH5l3glqD9qF8ZX5Ecs=) 31: 3230322e3137332e36362e302f32342d3234203d3e203233363935.roa (hash: yeM18fVhFIvaqgN5QmmIrEdPBDtaljcx9XyjNtHhwl4=) 32: 3230322e3137332e38362e302f32342d3234203d3e203233363935.roa (hash: w2YQbT4d401gEkexkGPNI5ffRS/JYHdhmh+BaqpDiJs=) 33: 3230322e3137332e39302e302f32342d3234203d3e203233363935.roa (hash: Vcu3cvP6TpAtiqIJRyIG86FnbkyFCwZwDKOk+Zdad3Y=) 34: 3230322e3137332e39342e302f32342d3234203d3e203233363935.roa (hash: kYREuhiT4n/pjRYISa3PHavGRxERDOS8izljvugeJrk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 05:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:88:2d:35:25:41:14:c5:e9:dc:c1:63:06:6e:c5:6a:29:ce:bb:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C Validity Not Before: Jun 28 22:46:32 2025 GMT Not After : Jul 2 05:02:32 2025 GMT Subject: CN=2A522C97ECD0889808489ABE1AF411CCC776182C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7e:fb:56:52:8c:70:c8:02:bf:43:00:89:9c: cc:fa:9f:ba:db:fc:a9:51:6e:96:e1:49:81:7a:e3: c0:6c:51:30:0d:07:ff:ba:84:90:61:aa:f9:77:e1: 47:1a:09:15:2f:50:8e:37:db:78:e9:90:7f:60:9d: f4:9c:32:39:14:ed:68:a4:fc:71:d3:5c:64:b4:c9: 9e:23:90:6c:af:5b:1c:f2:7e:0c:cc:77:e4:f2:ca: 26:f9:f2:db:c3:ca:7e:17:5d:d6:cc:2c:74:69:77: 40:ec:55:03:1f:f6:d2:dc:1b:45:df:ae:ab:44:62: 92:3e:07:06:0a:ba:bb:72:05:4b:5a:4c:43:75:51: 26:39:3a:44:b2:93:ff:a9:c2:be:5b:c4:35:71:d7: 72:6d:58:b9:65:59:c2:69:9f:c8:67:81:39:e2:b6: 27:1c:5f:ff:3e:55:c6:cb:7d:3e:de:2f:d8:2c:79: 69:86:9a:7e:f1:d9:df:6b:5d:05:d9:bf:e9:4a:ac: ca:3d:83:ca:f8:7e:b5:4c:15:96:67:c0:89:55:05: 4e:60:79:d7:d6:16:14:ce:21:72:9f:33:0c:13:11: dd:b5:42:b7:85:e9:21:97:b9:69:e1:68:12:73:92: 5c:ec:44:91:6d:de:c1:79:07:62:6a:8d:ce:0b:43: 1c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:52:2C:97:EC:D0:88:98:08:48:9A:BE:1A:F4:11:CC:C7:76:18:2C X509v3 Authority Key Identifier: keyid:41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:9e:7b:33:04:ac:9c:81:3d:ca:5e:ab:5e:be:25:e7:1c:a6: e5:9e:cc:d1:21:76:23:63:49:2a:03:29:19:7e:e4:ae:c6:c5: c0:9e:03:47:59:fe:7a:9e:6a:cd:8f:e6:30:04:5f:b8:30:10: 0d:43:97:e8:87:e6:ae:a3:1e:12:12:66:0c:a3:0e:a7:d0:13: 97:d1:9e:40:1a:13:ac:26:ad:a5:fe:4f:33:f5:ba:2d:26:c4: 0b:0c:3a:81:b4:eb:7d:26:0b:7d:6c:39:67:67:99:08:6c:0d: 59:c8:c1:de:fc:02:3d:b7:09:61:83:9b:b4:c1:ee:95:dc:f5: c4:aa:dd:9c:52:45:3c:27:9e:ed:cc:37:7c:ee:ec:3d:49:30: 90:45:97:ef:d9:d6:f0:7a:dc:a5:70:92:26:ba:ab:67:ed:ed: 64:82:7b:97:0b:93:b9:5e:f6:5a:e4:e5:15:f6:b5:13:17:0e: 2b:e3:5a:02:bb:30:0c:ac:ae:13:48:e0:8c:95:8b:34:58:26: 9d:16:91:3f:6c:14:7b:18:ce:de:63:95:c1:fb:6f:18:f1:bb: dc:30:4e:86:8b:f2:7b:63:28:15:ff:3d:75:1c:45:ba:6d:35: ff:4d:29:e2:b2:70:2d:d3:8b:9e:29:dd:37:81:10:89:ac:ae: a2:ce:8f:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKIgtNSVBFMXp3MFjBm7FainOuzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzczOTRB RTRFMkQ4QzAeFw0yNTA2MjgyMjQ2MzJaFw0yNTA3MDIwNTAyMzJaMDMxMTAvBgNV BAMTKDJBNTIyQzk3RUNEMDg4OTgwODQ4OUFCRTFBRjQxMUNDQzc3NjE4MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJfvtWUoxwyAK/QwCJnMz6n7rb /KlRbpbhSYF648BsUTANB/+6hJBhqvl34UcaCRUvUI4323jpkH9gnfScMjkU7Wik /HHTXGS0yZ4jkGyvWxzyfgzMd+Tyyib58tvDyn4XXdbMLHRpd0DsVQMf9tLcG0Xf rqtEYpI+BwYKurtyBUtaTEN1USY5OkSyk/+pwr5bxDVx13JtWLllWcJpn8hngTni ticcX/8+VcbLfT7eL9gseWmGmn7x2d9rXQXZv+lKrMo9g8r4frVMFZZnwIlVBU5g edfWFhTOIXKfMwwTEd21QreF6SGXuWnhaBJzklzsRJFt3sF5B2Jqjc4LQxynAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKlIsl+zQiJgISJq+GvQRzMd2GCwwHwYDVR0j BBgwFoAUQeCTJvaM4BE2NerK9ONzlK5OLYwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjBmMmJkOS00MmFlLTQ0OWEtOGQ1Ny1iMjZkYTA0ZDdlZTEvMC80MUUwOTMyNkY2 OENFMDExMzYzNUVBQ0FGNEUzNzM5NEFFNEUyRDhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzczOTRBRTRF MkQ4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmYwZjJiZDktNDJhZS00NDlhLThk NTctYjI2ZGEwNGQ3ZWUxLzAvNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzcz OTRBRTRFMkQ4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImeezMErJyBPcpeq16+JeccpuWezNEhdiNj SSoDKRl+5K7GxcCeA0dZ/nqeas2P5jAEX7gwEA1Dl+iH5q6jHhISZgyjDqfQE5fR nkAaE6wmraX+TzP1ui0mxAsMOoG0630mC31sOWdnmQhsDVnIwd78Aj23CWGDm7TB 7pXc9cSq3ZxSRTwnnu3MN3zu7D1JMJBFl+/Z1vB63KVwkia6q2ft7WSCe5cLk7le 9lrk5RX2tRMXDivjWgK7MAysrhNI4IyVizRYJp0WkT9sFHsYzt5jlcH7bxjxu9ww ToaL8ntjKBX/PXUcRbptNf9NKeKycC3Ti54p3TeBEImsrqLOj9E= -----END CERTIFICATE-----Generated at Sun Jun 29 18:43:43 2025 by rpki-client