$ rpki-client -vvf repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft File: 415543D423E0BD035D612DEA9BF060290E5552D2.mft (raw, json) Hash identifier: x1/yuqm96Qm6yBRyP0LXf6ZqxrNWsVCcMZ3nI1eq1Fc= Subject key identifier: 61:D7:A0:E1:91:0D:86:A3:84:15:D3:4F:C8:21:51:F6:8C:9D:50:1D Authority key identifier: 41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 Certificate issuer: /CN=415543D423E0BD035D612DEA9BF060290E5552D2 Certificate serial: 581E0703C2777A8D81B5B87350AB860C697E18FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft Manifest number: 0234 Signing time: Thu 21 Aug 2025 12:01:16 +0000 Manifest this update: Thu 21 Aug 2025 11:56:16 +0000 Manifest next update: Sun 24 Aug 2025 16:11:16 +0000 Files and hashes: 1: 3130332e39352e382e302f32342d3234203d3e20313335343838.roa (hash: P5qy6MSQkzBzIpWfwlqRGgttfjrknKyQRFiwh+AluKw=) 2: 3130332e39352e31312e302f32342d3234203d3e20313335343838.roa (hash: uRQw+5QQP0wXxplDqYvXD7a/PuPwjnqYNZPmeOG1eFc=) 3: 3130332e39352e31302e302f32342d3234203d3e20313335343838.roa (hash: nboIz3jrBgP6JOmA3BVAd2UeOfnp74QAUC5BcPTJ2ug=) 4: 415543D423E0BD035D612DEA9BF060290E5552D2.crl (hash: 8SpmFiOziMVUo4C03VvPiEBaZEG2gv0PmSYPdbxKXBc=) 5: 3130332e39352e392e302f32342d3234203d3e20313335343838.roa (hash: VFHHlL/fG0xnRMHoMgqrHUpXEdzrJEYbY3L4Yb6Ynkg=) 6: 3130332e39352e382e302f32322d3232203d3e20313335343838.roa (hash: V41dsoCGv/A1SNxCT74tNpzG0O4+YBlV/SgqxtUPiBI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 16:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:1e:07:03:c2:77:7a:8d:81:b5:b8:73:50:ab:86:0c:69:7e:18:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=415543D423E0BD035D612DEA9BF060290E5552D2 Validity Not Before: Aug 21 11:56:16 2025 GMT Not After : Aug 24 16:11:16 2025 GMT Subject: CN=61D7A0E1910D86A38415D34FC82151F68C9D501D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fd:74:0c:ec:ae:cb:70:c4:f4:e2:b2:0a:06: 6e:d6:f8:ae:fa:9c:b6:f1:2c:17:6f:b7:a0:37:0a: 63:12:37:87:32:9f:a2:a0:75:1e:9e:b6:e8:2e:ee: 6b:64:56:1a:46:b3:88:35:98:17:db:4e:52:e7:c1: e9:df:69:9c:66:c4:d9:d7:0b:3c:50:60:e1:bd:80: 04:31:c9:36:83:00:05:9b:f0:92:27:f3:c6:db:54: b6:cf:c3:fc:40:77:c8:00:73:78:f4:5f:a3:93:0c: 3e:09:fd:fb:c9:10:8f:3f:d9:62:39:d7:e1:fe:24: f7:14:36:a2:28:29:10:45:c4:40:ed:16:f3:c0:fa: 5c:b9:ba:29:7f:d2:99:e2:8f:2e:0f:3b:02:51:4f: f0:a9:34:c2:88:f7:51:fa:23:ab:93:75:54:06:bf: d0:f2:6e:49:74:24:11:55:88:e5:f6:2d:cd:ad:13: 8c:65:ef:1e:42:f8:f7:68:6a:51:28:4c:18:28:bd: 80:0b:4c:33:53:95:7d:6d:23:8d:fc:26:e0:20:b6: 70:6f:30:78:42:dd:a3:b7:55:7c:65:e4:23:41:c6: eb:0c:0e:53:49:c9:31:0e:f5:86:33:af:56:d3:22: b3:9e:f0:79:5f:24:f1:11:f3:b5:3b:01:f6:27:32: f8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D7:A0:E1:91:0D:86:A3:84:15:D3:4F:C8:21:51:F6:8C:9D:50:1D X509v3 Authority Key Identifier: keyid:41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:5f:94:5d:b3:6e:ff:03:a1:7d:c2:f8:b5:a9:a7:ae:03:ba: 5e:e1:6f:af:25:29:54:ff:a2:52:e0:69:5e:21:b5:2f:d1:b4: 5e:f4:d6:d2:05:71:b6:25:be:9d:4c:bf:75:fd:23:83:72:bc: 09:de:10:66:f2:28:4c:7f:01:d2:30:fa:77:9d:38:8f:06:c1: 7f:3b:c7:fe:13:95:b1:3b:b5:42:d5:1c:63:a8:6f:9e:62:3f: 2b:08:9c:05:98:1a:b7:f7:2a:17:ca:1c:e4:8f:dd:e3:5e:86: 89:ca:2c:a4:ae:20:69:c1:40:f3:1c:9f:e5:f7:06:c2:fb:43: a3:0a:7d:b7:0b:13:4e:3b:75:6a:25:b8:e1:0c:3f:22:3f:81: f0:aa:87:01:ac:67:7e:2d:76:c2:98:06:c1:90:1b:f6:eb:4e: 3f:df:70:d6:02:b9:23:7c:ad:30:22:07:2c:f4:dc:95:17:09: 36:23:f8:f9:01:e4:8c:7e:48:e3:69:00:2c:97:e4:2e:47:43: fb:8c:b2:d4:28:93:b7:c5:ea:8b:4c:c9:40:31:f6:be:d6:32: ff:58:5a:6f:a4:2d:a2:48:8b:c2:d2:9f:d9:05:37:e3:e7:ba: ef:2d:b4:a8:0c:29:0c:5c:71:36:31:45:03:01:35:e7:bc:2a: ee:d3:e1:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWB4HA8J3eo2BtbhzUKuGDGl+GP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkw RTU1NTJEMjAeFw0yNTA4MjExMTU2MTZaFw0yNTA4MjQxNjExMTZaMDMxMTAvBgNV BAMTKDYxRDdBMEUxOTEwRDg2QTM4NDE1RDM0RkM4MjE1MUY2OEM5RDUwMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC/XQM7K7LcMT04rIKBm7W+K76 nLbxLBdvt6A3CmMSN4cyn6KgdR6etugu7mtkVhpGs4g1mBfbTlLnwenfaZxmxNnX CzxQYOG9gAQxyTaDAAWb8JIn88bbVLbPw/xAd8gAc3j0X6OTDD4J/fvJEI8/2WI5 1+H+JPcUNqIoKRBFxEDtFvPA+ly5uil/0pnijy4POwJRT/CpNMKI91H6I6uTdVQG v9Dybkl0JBFViOX2Lc2tE4xl7x5C+PdoalEoTBgovYALTDNTlX1tI438JuAgtnBv MHhC3aO3VXxl5CNBxusMDlNJyTEO9YYzr1bTIrOe8HlfJPER87U7AfYnMvhlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYdeg4ZENhqOEFdNPyCFR9oydUB0wHwYDVR0j BBgwFoAUQVVD1CPgvQNdYS3qm/BgKQ5VUtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzY0NjVlYy05MTYwLTQ1OWItOGQxMS05NDhmYzI2ZGExYzAvMC80MTU1NDNENDIz RTBCRDAzNUQ2MTJERUE5QkYwNjAyOTBFNTU1MkQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkwRTU1 NTJEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM2NDY1ZWMtOTE2MC00NTliLThk MTEtOTQ4ZmMyNmRhMWMwLzAvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYw MjkwRTU1NTJEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADhflF2zbv8DoX3C+LWpp64Dul7hb68lKVT/ olLgaV4htS/RtF701tIFcbYlvp1Mv3X9I4NyvAneEGbyKEx/AdIw+nedOI8GwX87 x/4TlbE7tULVHGOob55iPysInAWYGrf3KhfKHOSP3eNehonKLKSuIGnBQPMcn+X3 BsL7Q6MKfbcLE047dWoluOEMPyI/gfCqhwGsZ34tdsKYBsGQG/brTj/fcNYCuSN8 rTAiByz03JUXCTYj+PkB5Ix+SONpACyX5C5HQ/uMstQok7fF6otMyUAx9r7WMv9Y Wm+kLaJIi8LSn9kFN+Pnuu8ttKgMKQxccTYxRQMBNee8Ku7T4cI= -----END CERTIFICATE-----Generated at Sat Aug 23 04:26:34 2025 by rpki-client