$ rpki-client -vvf repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft File: 408585C1D62A4F618C0424E9BEDC3B91411C2276.mft (raw, json) Hash identifier: dP43q4LQU64PUb77R06UHikUyErosXRndpMT+2yZbcM= Subject key identifier: A7:9F:16:0A:46:0A:B6:A6:3B:AA:1F:17:30:0C:08:8C:8A:6D:E8:1A Authority key identifier: 40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 Certificate issuer: /CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Certificate serial: 7525EBCC23BEA31E21C0C208A8132C2F5CF3FF1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft Manifest number: 01F9 Signing time: Tue 01 Jul 2025 10:22:00 +0000 Manifest this update: Tue 01 Jul 2025 10:17:00 +0000 Manifest next update: Fri 04 Jul 2025 19:13:00 +0000 Files and hashes: 1: 323030313a6466363a616630303a3a2f34382d3438203d3e20313338303836.roa (hash: pJzBSpecNdGxtRhriNjcTDwpDG6NNdRtxmQUp3nGEzE=) 2: 3130332e3132322e3132312e302f32342d3234203d3e20313338303836.roa (hash: NWTKjHM3PgU/D8DgzFheKr586Q+n/qcGSV1ZOdpOXco=) 3: 408585C1D62A4F618C0424E9BEDC3B91411C2276.crl (hash: /0FlfVg2Urs5SfvOCHDTh5iTIhhyTxT0zkF5S455J78=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 19:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:25:eb:cc:23:be:a3:1e:21:c0:c2:08:a8:13:2c:2f:5c:f3:ff:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Validity Not Before: Jul 1 10:17:00 2025 GMT Not After : Jul 4 19:13:00 2025 GMT Subject: CN=A79F160A460AB6A63BAA1F17300C088C8A6DE81A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ad:23:51:db:b7:0c:0b:08:cb:ef:9a:1c:3d: 1e:89:cb:6e:39:92:2e:c3:ed:ab:05:54:62:03:f7: 7c:ea:60:94:62:d5:f5:27:f2:ca:d0:17:1e:7c:ce: c1:3d:dc:72:0d:1f:09:c2:60:36:62:76:83:ae:8f: 48:8e:e0:53:38:9e:a4:bc:81:67:76:88:ef:a5:f4: 2e:5c:e9:ca:ef:70:44:ea:98:f7:a0:38:87:75:c5: e3:a6:55:7a:3a:65:1f:d9:de:18:e3:d3:86:58:53: ef:60:a8:b7:eb:a2:29:3a:70:5c:8c:2a:8e:1d:44: ef:07:e8:3a:df:db:86:5a:9c:2f:10:59:97:54:73: f8:30:51:02:65:e1:9e:92:72:55:d2:93:96:12:d4: 21:49:24:0d:aa:df:d2:34:79:a5:fc:59:d9:e0:08: fe:24:59:91:6a:5f:33:e8:fa:35:bb:57:9d:78:92: c3:f7:8e:62:cc:da:75:ce:6a:1a:5d:6d:51:2a:29: f1:b6:26:c2:e7:c3:c5:a6:21:4a:18:16:ab:b0:4b: 06:fd:50:fc:72:fd:a3:2c:8e:dc:d1:27:7e:84:f8: d1:68:8b:ab:36:f5:32:5d:ab:c5:9c:15:80:fe:78: d3:7c:d2:27:7c:55:ea:39:2c:5d:33:fb:ef:e2:c6: e8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9F:16:0A:46:0A:B6:A6:3B:AA:1F:17:30:0C:08:8C:8A:6D:E8:1A X509v3 Authority Key Identifier: keyid:40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:58:27:63:8b:a0:79:68:95:d5:54:ae:4e:8b:28:c6:21:d3: 68:4e:58:2a:c1:48:ac:96:6e:81:bc:0f:37:a0:b4:63:6d:24: 53:0a:5e:ba:49:35:83:60:62:c2:1e:a6:18:17:97:68:e0:a3: 60:40:c1:5f:c0:2a:63:13:da:ce:37:34:e3:eb:be:8d:58:c5: 04:1b:1b:15:55:d6:b3:dc:87:bd:b2:4c:5c:59:b8:13:b1:a2: 7f:87:b3:91:de:af:83:c5:dd:7b:c9:d7:b1:cb:f8:c2:61:a4: d7:55:bc:91:e5:31:2d:81:8c:a8:a4:68:99:c9:a4:48:0f:05: 51:45:d9:24:f5:67:7d:3c:44:94:6c:6a:28:90:fd:35:fe:36: 71:8f:d6:bf:80:35:07:18:ca:08:2e:42:0d:70:55:57:07:b7: 2b:b0:47:6f:6b:33:de:2e:89:2f:9e:92:f7:27:20:e3:1a:1e: 56:d5:2d:b2:e6:f1:fb:1f:8d:14:96:5d:6e:a1:49:0d:d5:a9: 5d:f5:30:3a:6a:e7:0a:68:ec:bc:9a:6c:dd:3b:48:1f:0d:dd: 27:89:af:75:f3:28:b8:57:1c:26:1a:eb:54:7e:23:7f:3e:51: 9e:79:b5:8f:91:61:5c:d1:10:2d:9a:d3:29:19:89:1a:4d:3d: c9:3b:d4:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdSXrzCO+ox4hwMIIqBMsL1zz/xswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0 MTFDMjI3NjAeFw0yNTA3MDExMDE3MDBaFw0yNTA3MDQxOTEzMDBaMDMxMTAvBgNV BAMTKEE3OUYxNjBBNDYwQUI2QTYzQkFBMUYxNzMwMEMwODhDOEE2REU4MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPrSNR27cMCwjL75ocPR6Jy245 ki7D7asFVGID93zqYJRi1fUn8srQFx58zsE93HINHwnCYDZidoOuj0iO4FM4nqS8 gWd2iO+l9C5c6crvcETqmPegOId1xeOmVXo6ZR/Z3hjj04ZYU+9gqLfroik6cFyM Ko4dRO8H6Drf24ZanC8QWZdUc/gwUQJl4Z6SclXSk5YS1CFJJA2q39I0eaX8Wdng CP4kWZFqXzPo+jW7V514ksP3jmLM2nXOahpdbVEqKfG2JsLnw8WmIUoYFquwSwb9 UPxy/aMsjtzRJ36E+NFoi6s29TJdq8WcFYD+eNN80id8Veo5LF0z++/ixugHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp58WCkYKtqY7qh8XMAwIjIpt6BowHwYDVR0j BBgwFoAUQIWFwdYqT2GMBCTpvtw7kUEcInYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2UyNmM4My01ZWQyLTRjOGItOGEwMy02Y2IwMGQxZWQzMzgvMC80MDg1ODVDMUQ2 MkE0RjYxOEMwNDI0RTlCRURDM0I5MTQxMUMyMjc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0MTFD MjI3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdlMjZjODMtNWVkMi00YzhiLThh MDMtNmNiMDBkMWVkMzM4LzAvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNC OTE0MTFDMjI3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1YJ2OLoHloldVUrk6LKMYh02hOWCrBSKyW boG8DzegtGNtJFMKXrpJNYNgYsIephgXl2jgo2BAwV/AKmMT2s43NOPrvo1YxQQb GxVV1rPch72yTFxZuBOxon+Hs5Her4PF3XvJ17HL+MJhpNdVvJHlMS2BjKikaJnJ pEgPBVFF2ST1Z308RJRsaiiQ/TX+NnGP1r+ANQcYygguQg1wVVcHtyuwR29rM94u iS+ekvcnIOMaHlbVLbLm8fsfjRSWXW6hSQ3VqV31MDpq5wpo7LyabN07SB8N3SeJ r3XzKLhXHCYa61R+I38+UZ55tY+RYVzREC2a0ykZiRpNPck71CQ= -----END CERTIFICATE-----Generated at Wed Jul 2 15:02:45 2025 by rpki-client