$ rpki-client -vvf repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft File: 407919FF69A512DDAE7CCD48BE288F17073A5512.mft (raw, json) Hash identifier: IWbl2midvQa6iv0J4KP+evphBQXMLpnCqmqwiIZZSoQ= Subject key identifier: C1:60:DB:08:70:18:11:31:C1:B1:5C:9B:13:7A:F4:F0:5D:AE:6C:42 Authority key identifier: 40:79:19:FF:69:A5:12:DD:AE:7C:CD:48:BE:28:8F:17:07:3A:55:12 Certificate issuer: /CN=407919FF69A512DDAE7CCD48BE288F17073A5512 Certificate serial: 364A009C81C67BDC2FC625E8F614C6DA233BC540 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft Manifest number: 91 Signing time: Mon 30 Jun 2025 04:41:42 +0000 Manifest this update: Mon 30 Jun 2025 04:36:42 +0000 Manifest next update: Thu 03 Jul 2025 15:28:42 +0000 Files and hashes: 1: 3130332e3132302e3233322e302f32342d3234203d3e20313337333834.roa (hash: bnY3Rdf5tjyvjTmTZpR60TzQq/Y/scdeVckhMsSJm4w=) 2: 407919FF69A512DDAE7CCD48BE288F17073A5512.crl (hash: u/41J13G1S3+YGfT0Byio20EpHAcAdwTpfhBwP2krCs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.crl rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 15:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:4a:00:9c:81:c6:7b:dc:2f:c6:25:e8:f6:14:c6:da:23:3b:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407919FF69A512DDAE7CCD48BE288F17073A5512 Validity Not Before: Jun 30 04:36:42 2025 GMT Not After : Jul 3 15:28:42 2025 GMT Subject: CN=C160DB0870181131C1B15C9B137AF4F05DAE6C42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:21:cd:f0:b9:62:e9:49:54:39:42:6e:24:3b: 0d:4a:b3:e6:cd:49:bf:4b:74:4c:b0:2d:61:5b:5d: dc:40:3f:d2:23:50:01:95:6b:52:a7:35:7b:ee:c2: 6b:a0:2f:02:20:7f:3e:32:11:06:36:94:50:e1:20: cf:49:93:48:f4:5c:50:46:89:2a:a8:93:92:ef:37: 32:96:32:a6:af:88:39:bf:b6:af:bb:86:3c:ef:2f: 24:3f:bc:5b:25:a7:3e:2b:bb:9a:62:c8:55:5a:64: 87:13:d8:b5:a8:5d:f9:74:3e:32:e8:89:77:31:c6: 01:d3:bd:d0:57:44:ec:f0:00:a7:fa:d7:55:04:85: 08:b2:fe:95:fb:d6:3b:3f:5b:8b:89:23:cb:31:e5: 50:b7:74:c0:b0:20:f7:99:33:bf:9c:6c:56:20:64: dd:50:74:67:64:96:23:47:9e:c9:78:e1:2d:b1:ae: 82:f0:38:81:84:ac:ff:23:14:b3:06:cb:7d:21:a4: f7:1e:d5:a1:36:11:f5:4d:aa:73:8b:b9:0e:fe:95: 00:9b:75:7d:bf:e8:d7:a8:54:ac:e2:5d:6a:a9:36: 91:60:3b:7c:d2:37:66:83:2e:87:95:1a:23:00:11: dd:6e:e2:72:b9:0c:99:be:fc:ab:c4:a8:4b:a6:f0: 04:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:60:DB:08:70:18:11:31:C1:B1:5C:9B:13:7A:F4:F0:5D:AE:6C:42 X509v3 Authority Key Identifier: keyid:40:79:19:FF:69:A5:12:DD:AE:7C:CD:48:BE:28:8F:17:07:3A:55:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:81:23:16:ce:3d:2f:c6:2c:6d:a2:62:ab:01:16:73:aa:8d: 54:3c:ec:72:18:83:11:9b:2a:4d:d8:d2:f3:73:ae:f3:6c:23: 1c:3d:0d:e9:0c:76:ae:b9:bd:ba:45:10:18:55:9c:36:67:9c: d6:ef:5d:68:a4:11:5a:83:01:d5:e3:af:1a:8b:5d:3e:e3:6e: d1:cb:05:39:84:92:99:60:4a:32:50:00:0e:1a:57:0b:e2:a2: 5c:dc:b2:7d:f9:be:e7:59:a0:5a:a9:e6:af:57:b3:f7:26:00: 40:1e:78:d5:1c:98:a2:94:93:9b:66:20:66:0f:83:80:9a:ee: 45:ef:13:23:d8:aa:0a:de:bd:6f:66:3b:c3:cd:7c:fd:b6:b5: be:7f:d8:93:31:ed:ce:75:29:e9:52:92:97:50:d4:c3:5c:1f: b8:ee:6b:d8:75:53:1a:a4:3d:85:d3:6a:6d:80:b0:fd:74:22: f0:34:f7:2b:98:cb:b8:c1:b3:6d:4d:b7:0e:81:d7:06:b8:2b: 35:41:0d:df:61:89:13:fd:29:86:f8:5c:15:94:7e:cb:42:84: a9:56:cf:5a:dd:5e:f9:29:8d:26:ee:42:68:4b:62:04:f9:53: 49:e5:04:82:5b:f4:f9:7d:e1:1f:da:d0:2b:f1:7a:97:11:02: fa:83:1f:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNkoAnIHGe9wvxiXo9hTG2iM7xUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhGMTcw NzNBNTUxMjAeFw0yNTA2MzAwNDM2NDJaFw0yNTA3MDMxNTI4NDJaMDMxMTAvBgNV BAMTKEMxNjBEQjA4NzAxODExMzFDMUIxNUM5QjEzN0FGNEYwNURBRTZDNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpIc3wuWLpSVQ5Qm4kOw1Ks+bN Sb9LdEywLWFbXdxAP9IjUAGVa1KnNXvuwmugLwIgfz4yEQY2lFDhIM9Jk0j0XFBG iSqok5LvNzKWMqaviDm/tq+7hjzvLyQ/vFslpz4ru5piyFVaZIcT2LWoXfl0PjLo iXcxxgHTvdBXROzwAKf611UEhQiy/pX71js/W4uJI8sx5VC3dMCwIPeZM7+cbFYg ZN1QdGdkliNHnsl44S2xroLwOIGErP8jFLMGy30hpPce1aE2EfVNqnOLuQ7+lQCb dX2/6NeoVKziXWqpNpFgO3zSN2aDLoeVGiMAEd1u4nK5DJm+/KvEqEum8AQNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwWDbCHAYETHBsVybE3r08F2ubEIwHwYDVR0j BBgwFoAUQHkZ/2mlEt2ufM1IviiPFwc6VRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmMwMGY3OS00OWViLTQ1MjUtOTAyNi1hMjM4ZmY0NDgwNzAvMC80MDc5MTlGRjY5 QTUxMkREQUU3Q0NENDhCRTI4OEYxNzA3M0E1NTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhGMTcwNzNB NTUxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJjMDBmNzktNDllYi00NTI1LTkw MjYtYTIzOGZmNDQ4MDcwLzAvNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhG MTcwNzNBNTUxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADaBIxbOPS/GLG2iYqsBFnOqjVQ87HIYgxGb Kk3Y0vNzrvNsIxw9DekMdq65vbpFEBhVnDZnnNbvXWikEVqDAdXjrxqLXT7jbtHL BTmEkplgSjJQAA4aVwviolzcsn35vudZoFqp5q9Xs/cmAEAeeNUcmKKUk5tmIGYP g4Ca7kXvEyPYqgrevW9mO8PNfP22tb5/2JMx7c51KelSkpdQ1MNcH7jua9h1Uxqk PYXTam2AsP10IvA09yuYy7jBs21Ntw6B1wa4KzVBDd9hiRP9KYb4XBWUfstChKlW z1rdXvkpjSbuQmhLYgT5U0nlBIJb9Pl94R/a0CvxepcRAvqDH38= -----END CERTIFICATE-----Generated at Tue Jul 1 01:11:21 2025 by rpki-client