$ rpki-client -vvf repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft File: 4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft (raw, json) Hash identifier: B3ujPJSeir4TN2cba1xjNyult9K/+5w61u1ruEa7178= Subject key identifier: 16:07:4E:A5:21:13:22:E4:0F:84:87:E9:1D:B3:AC:10:36:36:3E:68 Authority key identifier: 4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36 Certificate issuer: /CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36 Certificate serial: 5EA25FB8085801F6371A68D3AD3BE167910FC2A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft Manifest number: 04E5 Signing time: Sat 28 Jun 2025 13:01:52 +0000 Manifest this update: Sat 28 Jun 2025 12:56:52 +0000 Manifest next update: Tue 01 Jul 2025 15:48:52 +0000 Files and hashes: 1: 3130332e3130352e39382e302f32342d3234203d3e20313336383638.roa (hash: gEF6XHOWRCqM+iWbvzjd5eE8QEvtBHMbgAap2D0U424=) 2: 3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa (hash: KrFiIsKebuclmAnJCp7i0qAQI2dNZ1dLN7tW2prCRMk=) 3: 4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl (hash: UxpiN46mN455S+evoqb2gzJbxDeavPHCEIIfnMxLn6k=) 4: 323030313a6466333a373130303a3a2f34382d3438203d3e20313336383638.roa (hash: gxzjhOqlSfyvVQV8GuZutKZCxMRY+U2lIgUsJNuDYjo=) 5: 3130332e3133332e32302e302f32332d3234203d3e20313336383638.roa (hash: kKOPYDd68IbPpSS7OOzul5ii2GOnq8I9waVsMp0r138=) 6: 3130332e3130352e39392e302f32342d3234203d3e20313336383638.roa (hash: RarippCnWnMmEjTgkPvYhkG55G9O0lUfwe2+0FeUYpg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 15:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:a2:5f:b8:08:58:01:f6:37:1a:68:d3:ad:3b:e1:67:91:0f:c2:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36 Validity Not Before: Jun 28 12:56:52 2025 GMT Not After : Jul 1 15:48:52 2025 GMT Subject: CN=16074EA5211322E40F8487E91DB3AC1036363E68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ae:8f:68:ff:73:eb:10:f5:81:41:2d:4e:b4: 67:65:53:ce:c1:96:bd:2a:20:6f:33:be:1e:cf:b3: 93:2b:84:16:c8:7b:c9:7c:e0:1e:56:26:f2:9e:73: 30:ab:31:7b:d3:89:a8:f4:07:90:89:52:97:34:db: 7d:01:61:cd:b9:02:74:a3:aa:e9:30:20:f2:a6:dc: a2:8a:81:50:a0:60:a1:3c:15:5f:38:b5:28:73:fc: 4a:a8:6e:59:30:d1:fc:78:ed:55:b9:02:bc:42:d7: 9a:32:64:9a:b3:a6:a7:36:3f:b1:15:ac:e8:1b:0f: 49:10:4d:4f:af:a9:45:c3:68:6b:3b:67:0a:73:60: 7a:bb:67:ad:ad:8e:82:f1:82:b8:75:b3:f7:88:07: 2c:15:6d:ab:38:81:75:bf:51:b3:9f:2d:c5:ca:20: 10:93:df:78:2a:6a:51:9d:08:f5:d5:96:56:49:17: eb:1d:1e:3d:5a:29:f7:a8:05:30:55:f0:01:fa:2e: 6d:6b:b5:e8:ed:bc:28:fe:66:dc:34:44:75:8d:0c: c4:1d:b6:e2:fe:26:e2:a9:32:e5:c9:32:b4:f6:21: 5f:25:d9:f3:9f:b7:41:71:5d:dd:ad:22:00:9b:93: ba:5e:ff:4e:ca:29:3f:71:cd:a3:8d:e3:60:ee:e9: 5f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:07:4E:A5:21:13:22:E4:0F:84:87:E9:1D:B3:AC:10:36:36:3E:68 X509v3 Authority Key Identifier: keyid:4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:3f:3b:0b:94:19:77:46:b1:50:a0:7e:1a:f6:a0:7d:59:16: e3:ff:39:23:af:43:63:69:aa:ad:74:b3:bc:44:1e:c5:a6:ea: b9:5c:d4:4b:e2:d1:e4:13:88:72:4f:c6:35:fa:f0:fb:77:aa: 21:77:12:0d:2f:38:7b:57:c9:15:88:be:73:da:39:4b:96:e8: 1b:8e:d3:fc:66:be:54:42:01:77:be:78:90:29:93:c9:68:c1: 7a:5f:3b:69:02:b5:42:5f:5b:3b:85:e6:9f:fa:48:e5:1b:e0: cc:63:59:2a:b0:3f:c3:56:1c:a0:c9:a9:72:27:b4:e1:e6:23: 84:7d:5a:8d:59:c4:1f:2e:fc:fd:c9:06:76:87:f6:0f:9c:5f: e1:9a:83:bc:46:24:de:a7:33:e9:6e:8c:7f:17:5b:a3:82:35: 42:a6:71:cf:02:c7:ce:56:45:a8:fc:d3:1a:42:59:00:d6:29: 19:76:43:02:46:ef:f4:51:6f:08:0f:9a:b7:0c:9b:5f:4a:79: 76:4d:6c:e3:ae:de:13:ea:e4:cd:2f:50:20:32:cc:b9:06:18: 6f:18:6f:f0:d7:26:a2:22:97:b7:0e:c3:ba:0e:7c:ab:64:cb: 2d:1d:99:61:83:82:b4:77:16:ec:f9:68:8c:84:6e:3b:33:50: d1:29:05:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXqJfuAhYAfY3GmjTrTvhZ5EPwqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NFNDQx QTc4M0UzNjAeFw0yNTA2MjgxMjU2NTJaFw0yNTA3MDExNTQ4NTJaMDMxMTAvBgNV BAMTKDE2MDc0RUE1MjExMzIyRTQwRjg0ODdFOTFEQjNBQzEwMzYzNjNFNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPro9o/3PrEPWBQS1OtGdlU87B lr0qIG8zvh7Ps5MrhBbIe8l84B5WJvKeczCrMXvTiaj0B5CJUpc0230BYc25AnSj qukwIPKm3KKKgVCgYKE8FV84tShz/Eqoblkw0fx47VW5ArxC15oyZJqzpqc2P7EV rOgbD0kQTU+vqUXDaGs7ZwpzYHq7Z62tjoLxgrh1s/eIBywVbas4gXW/UbOfLcXK IBCT33gqalGdCPXVllZJF+sdHj1aKfeoBTBV8AH6Lm1rtejtvCj+Ztw0RHWNDMQd tuL+JuKpMuXJMrT2IV8l2fOft0FxXd2tIgCbk7pe/07KKT9xzaON42Du6V8TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFgdOpSETIuQPhIfpHbOsEDY2PmgwHwYDVR0j BBgwFoAUTfQV0tt2DDmFWz89nPPORBp4PjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTI0YWE4Yy1kZWRjLTQzNzYtOTM4MS0wYTgxZTZiY2M1NjQvMC80REY0MTVEMkRC NzYwQzM5ODU1QjNGM0Q5Q0YzQ0U0NDFBNzgzRTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NFNDQxQTc4 M0UzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEyNGFhOGMtZGVkYy00Mzc2LTkz ODEtMGE4MWU2YmNjNTY0LzAvNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NF NDQxQTc4M0UzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGk/OwuUGXdGsVCgfhr2oH1ZFuP/OSOvQ2Np qq10s7xEHsWm6rlc1Evi0eQTiHJPxjX68Pt3qiF3Eg0vOHtXyRWIvnPaOUuW6BuO 0/xmvlRCAXe+eJApk8lowXpfO2kCtUJfWzuF5p/6SOUb4MxjWSqwP8NWHKDJqXIn tOHmI4R9Wo1ZxB8u/P3JBnaH9g+cX+Gag7xGJN6nM+lujH8XW6OCNUKmcc8Cx85W Raj80xpCWQDWKRl2QwJG7/RRbwgPmrcMm19KeXZNbOOu3hPq5M0vUCAyzLkGGG8Y b/DXJqIil7cOw7oOfKtkyy0dmWGDgrR3Fuz5aIyEbjszUNEpBQg= -----END CERTIFICATE-----Generated at Sun Jun 29 18:58:50 2025 by rpki-client