$ rpki-client -vvf repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.mft File: 411479424B4016269EB9E266CD48905F63DC9F0B.mft (raw, json) Hash identifier: sx3S3gxWrp9L2sMDoqrHbo2Q+IozVeYiwB+TtYUPTJA= Subject key identifier: 00:0A:15:12:DC:4E:1B:49:D2:38:1F:A0:FD:48:90:FE:2B:59:F1:CB Authority key identifier: 41:14:79:42:4B:40:16:26:9E:B9:E2:66:CD:48:90:5F:63:DC:9F:0B Certificate issuer: /CN=411479424B4016269EB9E266CD48905F63DC9F0B Certificate serial: 66C7C6381910189DE65735229B3CF09C1A4F9B8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.mft Manifest number: 028D Signing time: Mon 30 Jun 2025 05:42:15 +0000 Manifest this update: Mon 30 Jun 2025 05:37:15 +0000 Manifest next update: Thu 03 Jul 2025 12:42:15 +0000 Files and hashes: 1: 3130332e3137382e39302e302f32342d3234203d3e20313430343034.roa (hash: YMDkntnBNEUChh1fjSUxsHUlcIYaP2qrbYkSgf6cNK8=) 2: 411479424B4016269EB9E266CD48905F63DC9F0B.crl (hash: KYIo2k8cEfK959gdwqLeH1odySgEioM9nnLCy81wMBI=) 3: 3130332e3137382e39312e302f32342d3234203d3e20313430343034.roa (hash: vr+BxfkmoPeng8pSy2LdmDpMjQR/gXY9KvmthDLXE0s=) 4: 3130332e3137382e39302e302f32332d3233203d3e20313430343034.roa (hash: bLbFLRF4nCoMUEy8txljQ1KpQ4biSpv3zVxmLsxYZs4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.crl rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 12:42:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c7:c6:38:19:10:18:9d:e6:57:35:22:9b:3c:f0:9c:1a:4f:9b:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411479424B4016269EB9E266CD48905F63DC9F0B Validity Not Before: Jun 30 05:37:15 2025 GMT Not After : Jul 3 12:42:15 2025 GMT Subject: CN=000A1512DC4E1B49D2381FA0FD4890FE2B59F1CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:42:8a:76:d4:e6:58:8e:21:6c:e7:55:0d:ce: 3c:93:2b:ea:92:a5:cf:74:77:48:4d:57:8a:76:bc: da:28:2e:c7:79:50:f2:10:5a:29:f9:ef:59:00:36: ef:22:d0:c3:4a:81:89:c3:6e:41:d2:54:e1:2f:43: fb:b6:7f:9a:35:fe:d7:43:52:8b:c3:e0:fa:93:7f: f2:05:e0:2c:88:75:fa:3b:25:1b:8a:2e:af:89:35: 9d:51:df:4b:64:84:d6:5b:6c:23:cb:c1:ae:25:6e: 35:af:d2:f6:c1:48:99:d4:05:92:29:c7:53:cf:a4: 78:38:12:25:87:8b:6e:91:ce:52:77:76:47:1c:1c: f3:46:d0:eb:7e:85:7d:e5:11:3e:a3:94:a4:a7:1a: 32:35:3c:bd:58:69:55:7e:9d:f4:63:e0:f9:f5:e6: e1:15:48:9b:24:6c:13:9e:46:b1:1b:56:1a:f4:56: b8:aa:1c:16:ca:fb:9b:c7:15:55:58:89:47:bb:0c: 71:31:4a:94:22:c7:91:f9:da:09:89:98:b8:74:52: ef:30:21:4e:25:7a:2f:df:b5:5a:4b:5b:1a:38:a7: 76:02:84:9a:5c:26:2d:f5:4c:34:60:3c:59:d1:41: 43:9e:c1:27:b6:5f:9b:1f:27:e2:bc:e2:f8:1e:b7: 80:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0A:15:12:DC:4E:1B:49:D2:38:1F:A0:FD:48:90:FE:2B:59:F1:CB X509v3 Authority Key Identifier: keyid:41:14:79:42:4B:40:16:26:9E:B9:E2:66:CD:48:90:5F:63:DC:9F:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:cf:98:5a:fc:ad:7a:23:13:47:4d:11:f3:c7:1b:b1:6d:c4: bd:de:0b:31:68:04:42:de:8b:d0:02:f2:2d:60:ef:72:86:ad: ad:c2:1f:a8:ac:ca:ee:4c:7f:70:8f:20:d8:52:9f:bd:f4:5e: 98:87:6f:99:1f:e8:3b:ed:94:45:87:7e:2d:8b:49:6e:d7:83: f3:e6:20:3f:09:cc:e1:ce:ea:aa:0f:94:71:fb:ec:5a:c4:a2: 5e:ab:d5:80:e9:e1:81:42:b5:f2:b6:2f:95:bf:76:70:7d:00: 4d:7d:25:4a:06:77:1f:74:78:43:ac:2f:81:ae:f9:eb:af:6f: 87:6d:74:52:63:30:87:26:18:e5:e9:0b:6b:3b:44:62:8c:cd: 2a:72:2d:ff:4d:b5:a7:19:83:b8:92:48:4e:1f:33:96:c4:b4: 3c:37:2c:95:fe:3b:1b:c9:db:8b:22:6c:1d:a2:27:78:2a:0b: 07:10:27:57:cc:ef:60:a1:78:f0:20:84:cb:1b:8e:3a:8f:89: 6c:f7:15:be:f7:78:ac:46:85:9b:5e:d8:39:e2:5c:14:67:40: d6:42:be:0b:37:b8:b6:13:c9:08:04:80:50:3b:ed:c5:a9:64: 40:cb:30:7d:39:37:6a:8f:c0:13:1a:2b:f7:45:8e:2c:dd:06: f2:19:35:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZsfGOBkQGJ3mVzUimzzwnBpPm4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDExNDc5NDI0QjQwMTYyNjlFQjlFMjY2Q0Q0ODkwNUY2 M0RDOUYwQjAeFw0yNTA2MzAwNTM3MTVaFw0yNTA3MDMxMjQyMTVaMDMxMTAvBgNV BAMTKDAwMEExNTEyREM0RTFCNDlEMjM4MUZBMEZENDg5MEZFMkI1OUYxQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMQop21OZYjiFs51UNzjyTK+qS pc90d0hNV4p2vNooLsd5UPIQWin571kANu8i0MNKgYnDbkHSVOEvQ/u2f5o1/tdD UovD4PqTf/IF4CyIdfo7JRuKLq+JNZ1R30tkhNZbbCPLwa4lbjWv0vbBSJnUBZIp x1PPpHg4EiWHi26RzlJ3dkccHPNG0Ot+hX3lET6jlKSnGjI1PL1YaVV+nfRj4Pn1 5uEVSJskbBOeRrEbVhr0VriqHBbK+5vHFVVYiUe7DHExSpQix5H52gmJmLh0Uu8w IU4lei/ftVpLWxo4p3YChJpcJi31TDRgPFnRQUOewSe2X5sfJ+K84vget4DfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAAoVEtxOG0nSOB+g/UiQ/itZ8cswHwYDVR0j BBgwFoAUQRR5QktAFiaeueJmzUiQX2PcnwswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MTM3MzllMS1iNWRiLTQ3MzQtODM4YS1iMGI1ODBiZWI5ZjMvMC80MTE0Nzk0MjRC NDAxNjI2OUVCOUUyNjZDRDQ4OTA1RjYzREM5RjBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDExNDc5NDI0QjQwMTYyNjlFQjlFMjY2Q0Q0ODkwNUY2M0RD OUYwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzEzNzM5ZTEtYjVkYi00NzM0LTgz OGEtYjBiNTgwYmViOWYzLzAvNDExNDc5NDI0QjQwMTYyNjlFQjlFMjY2Q0Q0ODkw NUY2M0RDOUYwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfPmFr8rXojE0dNEfPHG7FtxL3eCzFoBELe i9AC8i1g73KGra3CH6isyu5Mf3CPINhSn730XpiHb5kf6DvtlEWHfi2LSW7Xg/Pm ID8JzOHO6qoPlHH77FrEol6r1YDp4YFCtfK2L5W/dnB9AE19JUoGdx90eEOsL4Gu +euvb4dtdFJjMIcmGOXpC2s7RGKMzSpyLf9NtacZg7iSSE4fM5bEtDw3LJX+OxvJ 24sibB2iJ3gqCwcQJ1fM72ChePAghMsbjjqPiWz3Fb73eKxGhZte2DniXBRnQNZC vgs3uLYTyQgEgFA77cWpZEDLMH05N2qPwBMaK/dFjizdBvIZNao= -----END CERTIFICATE-----Generated at Tue Jul 1 01:43:43 2025 by rpki-client