$ rpki-client -vvf repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft File: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft (raw, json) Hash identifier: YA0PbEAr9EVfFb0zTUaRFpgVQVpno+NCH9VgIGK6vis= Subject key identifier: F2:5A:BC:1F:2F:56:63:87:33:24:73:1B:8B:D1:16:AA:C9:8C:B5:AC Authority key identifier: 49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 Certificate issuer: /CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Certificate serial: 2581616381AF85B16C429D21DA2685E7EC14479A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft Manifest number: 01C4 Signing time: Tue 01 Jul 2025 09:21:01 +0000 Manifest this update: Tue 01 Jul 2025 09:16:01 +0000 Manifest next update: Fri 04 Jul 2025 11:22:01 +0000 Files and hashes: 1: 323430333a393063303a3a2f33322d3430203d3e20313430343037.roa (hash: /AD55gQuIXqmhT7jl8XXbRiu7aeneAmR5bk7jupkCNk=) 2: 3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa (hash: MUfRn9lbrp81WMx09UFWCA0kG2/2E+bxpD3Uyi4FCjU=) 3: 3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa (hash: APvRAxFS/BciWNG05hryQjcSm8DABLzRNy+ilZSBuW8=) 4: 3130332e3132322e3135322e302f32342d3234203d3e20313430343037.roa (hash: 1P2ogrnijw2MvpVLks2hrGbS/RxvIv2H3EW9osb1JfQ=) 5: 3130332e3132322e3135322e302f32332d3233203d3e20313430343037.roa (hash: NOw/NEm3PMCbXTGqxWPDqyT8dJkjuZuy6Yh+EG0lwcQ=) 6: 3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa (hash: uAd0JDcy4hpWuoEBSRUvaHCaFXVpe2sxWabbA6bZmhw=) 7: 323430333a393063303a3a2f33322d3332203d3e20313430343037.roa (hash: R8Z+hXBnnWiJJKdYZqlOoXUCZ71qI50sWMocZ6icaII=) 8: 3130332e3132322e3135342e302f32332d3233203d3e20313430343037.roa (hash: rvVfeVhsLZ7fWwhIJc3Pd2GqdWdss3UfF7UYtrrPnKo=) 9: 3130332e3132322e3135342e302f32342d3234203d3e20313430343037.roa (hash: FeqaP2txuOgRBx2G96zuc78OrFRr2szEz0GSYPgv878=) 10: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl (hash: echxNAnSL4gZbTagnVOtNZyHfzmLseDGU8UqJhHh+AM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 11:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:81:61:63:81:af:85:b1:6c:42:9d:21:da:26:85:e7:ec:14:47:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Validity Not Before: Jul 1 09:16:01 2025 GMT Not After : Jul 4 11:22:01 2025 GMT Subject: CN=F25ABC1F2F5663873324731B8BD116AAC98CB5AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:45:60:34:96:2a:b3:4c:e2:02:c1:c6:1b:8a: 86:a8:b7:d2:cd:ff:7f:04:a6:38:2b:05:31:f4:e3: c6:ef:12:74:cc:2d:37:cd:02:93:c8:c4:f6:c8:f5: e8:c1:72:b8:1b:3f:14:8c:26:b5:f2:76:d1:3c:2e: cf:08:33:06:0f:be:9e:8e:ec:97:a0:64:71:85:7b: 2b:21:52:6f:ff:d0:db:cf:24:84:e4:51:35:d8:44: e9:3d:cb:65:0a:62:5f:5c:4d:32:74:af:a1:a8:88: fc:d2:49:85:bc:60:e0:a6:54:1b:63:f0:5c:91:16: 77:98:7e:ef:8b:58:e9:ee:f8:99:1d:ea:40:a4:75: 77:4b:cf:d0:43:51:c0:f1:1d:e7:52:22:fd:2a:64: 69:30:7d:86:5e:c2:7a:6e:15:cd:4f:7e:7b:96:ea: 50:18:c1:14:f3:ca:43:de:d6:1a:be:be:39:55:7a: 65:d4:d1:f9:18:a6:f2:10:31:20:3d:d8:e2:c0:83: d7:2b:02:63:6b:e3:5f:21:c6:a7:fb:ea:4d:03:ef: 26:83:d5:32:b7:f0:82:f6:7a:33:4e:3a:e3:fb:e5: 6d:43:f6:d0:0d:3a:98:95:41:42:e3:e8:11:17:33: 5c:d7:ec:b6:b9:6a:6c:4f:d1:a4:97:93:73:6e:10: 68:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:5A:BC:1F:2F:56:63:87:33:24:73:1B:8B:D1:16:AA:C9:8C:B5:AC X509v3 Authority Key Identifier: keyid:49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:5c:43:4f:71:34:3b:12:2f:e5:66:29:e6:59:7e:7c:a0:6c: 0e:d4:1a:80:1b:8e:a1:33:ac:d0:b0:7a:e2:41:55:48:50:32: df:d7:0f:13:bf:bd:a7:c2:e3:94:1b:27:22:5e:fe:65:02:0b: 5c:56:b5:be:b1:a8:29:c3:48:df:42:d1:ef:80:39:c7:94:2e: 6a:94:b9:39:b4:bb:64:99:b1:10:8e:5e:18:66:03:c0:10:19: 55:55:9d:61:b1:f2:ed:6d:6a:3e:83:63:09:d2:19:bc:bb:fa: 79:c4:d2:1e:06:83:8a:9e:c3:80:4a:6c:10:fd:75:19:69:1c: 74:34:85:fa:78:d9:1e:c0:45:0c:e1:d6:09:03:c9:7d:8e:d6: c6:5c:0c:31:f5:b6:f3:7f:ca:4e:10:31:4d:90:33:88:4c:db: 57:a1:78:14:a6:1f:92:bb:29:d8:f4:f7:e8:ab:8d:59:73:a9: 93:df:d5:0b:1f:4c:09:7b:b5:d5:b4:5c:3a:d6:5d:83:27:b4: 99:e6:38:41:4c:9b:d3:c2:6d:93:c3:a9:ec:9f:99:44:18:5c: 89:7a:1a:48:3b:d9:ba:f1:42:16:d9:58:24:f0:03:1b:1c:b5: f4:07:ca:54:8c:8f:de:cc:28:a0:eb:ab:c8:b8:f7:a6:36:b8: 0d:de:a6:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJYFhY4GvhbFsQp0h2iaF5+wUR5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1 QTlEMkY5NTAeFw0yNTA3MDEwOTE2MDFaFw0yNTA3MDQxMTIyMDFaMDMxMTAvBgNV BAMTKEYyNUFCQzFGMkY1NjYzODczMzI0NzMxQjhCRDExNkFBQzk4Q0I1QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9RWA0liqzTOICwcYbioaot9LN /38EpjgrBTH048bvEnTMLTfNApPIxPbI9ejBcrgbPxSMJrXydtE8Ls8IMwYPvp6O 7JegZHGFeyshUm//0NvPJITkUTXYROk9y2UKYl9cTTJ0r6GoiPzSSYW8YOCmVBtj 8FyRFneYfu+LWOnu+Jkd6kCkdXdLz9BDUcDxHedSIv0qZGkwfYZewnpuFc1PfnuW 6lAYwRTzykPe1hq+vjlVemXU0fkYpvIQMSA92OLAg9crAmNr418hxqf76k0D7yaD 1TK38IL2ejNOOuP75W1D9tANOpiVQULj6BEXM1zX7La5amxP0aSXk3NuEGgbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8lq8Hy9WY4czJHMbi9EWqsmMtawwHwYDVR0j BBgwFoAUSRsOpUQFY76bDxZ9p2wF6FqdL5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjI5NzgxYS04YWM5LTQ0NTItYjI1Zi01NGU3ZWRmN2Q0YTQvMC80OTFCMEVBNTQ0 MDU2M0JFOUIwRjE2N0RBNzZDMDVFODVBOUQyRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1QTlE MkY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzIyOTc4MWEtOGFjOS00NDUyLWIy NWYtNTRlN2VkZjdkNGE0LzAvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1 RTg1QTlEMkY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtcQ09xNDsSL+VmKeZZfnygbA7UGoAbjqEz rNCweuJBVUhQMt/XDxO/vafC45QbJyJe/mUCC1xWtb6xqCnDSN9C0e+AOceULmqU uTm0u2SZsRCOXhhmA8AQGVVVnWGx8u1taj6DYwnSGby7+nnE0h4Gg4qew4BKbBD9 dRlpHHQ0hfp42R7ARQzh1gkDyX2O1sZcDDH1tvN/yk4QMU2QM4hM21eheBSmH5K7 Kdj09+irjVlzqZPf1QsfTAl7tdW0XDrWXYMntJnmOEFMm9PCbZPDqeyfmUQYXIl6 Gkg72brxQhbZWCTwAxsctfQHylSMj97MKKDrq8i496Y2uA3epnw= -----END CERTIFICATE-----Generated at Tue Jul 1 10:37:30 2025 by rpki-client