$ rpki-client -vvf repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft File: 99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft (raw, json) Hash identifier: +mCwfJGRjn6HXT95Ul1VRe7eJmT1OMRRWDS96s2WYiA= Subject key identifier: D2:F4:2D:45:26:D3:36:01:D1:F5:CA:5C:01:8B:2C:8F:BA:0C:80:B5 Authority key identifier: 99:CD:13:E1:44:9F:A4:48:AB:F9:FC:6A:74:D3:B1:31:3D:DF:AB:CF Certificate issuer: /CN=99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF Certificate serial: 4279144BCAF5F8B93A8C4FF4EF995C35672AF2B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft Manifest number: 04E4 Signing time: Tue 01 Jul 2025 03:31:22 +0000 Manifest this update: Tue 01 Jul 2025 03:26:22 +0000 Manifest next update: Fri 04 Jul 2025 11:56:22 +0000 Files and hashes: 1: 3130332e3130312e35322e302f32342d3234203d3e20313336383433.roa (hash: pD/9ZN/LtEEVzbK2xymhrif8EXzbhQ+acqdIY2pf7Sw=) 2: 323030313a6466323a393130303a3a2f34382d3438203d3e20313336383433.roa (hash: xEl9WKNeil5vick+EZGgBmq+d9hvCJ6SFKXlmIh83hQ=) 3: 99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl (hash: ygM0Z7MQZOHGehU3E9JO7ZCxWE/YsKjx6GLDrKnMIgc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 11:56:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:79:14:4b:ca:f5:f8:b9:3a:8c:4f:f4:ef:99:5c:35:67:2a:f2:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF Validity Not Before: Jul 1 03:26:22 2025 GMT Not After : Jul 4 11:56:22 2025 GMT Subject: CN=D2F42D4526D33601D1F5CA5C018B2C8FBA0C80B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:00:66:bf:ef:bf:ba:b2:8f:af:da:8c:9c:56: 73:af:7e:48:5c:20:f1:c2:fc:40:ec:fe:29:0a:c8: 99:6b:82:f6:05:4b:dd:e8:33:99:c6:66:85:0b:7a: 4f:bc:2d:82:09:9c:08:c1:c9:a9:b1:c6:4f:86:a7: 17:b4:db:00:81:87:99:15:97:b9:17:e8:b1:93:0a: fe:fb:d0:98:3c:9a:f4:70:b0:d7:c8:af:85:b1:24: 79:5c:d7:82:3b:35:0a:5d:99:a5:9b:bb:c7:31:d1: 42:ec:26:25:98:9a:d6:b8:29:40:7d:58:7b:5c:69: 56:03:e0:9a:ec:14:36:3e:b4:54:ab:28:e2:5b:74: 6b:c7:e8:04:4e:6d:63:ce:07:7a:2e:76:fe:3c:2a: 25:eb:77:d9:ec:d2:cd:0f:be:c6:7d:d9:22:29:11: 0e:8c:b9:6b:9d:72:64:d3:79:c2:ff:31:e4:5e:44: e9:19:f2:a7:27:66:45:10:d1:4f:f6:52:f9:84:1e: 43:09:a2:da:32:47:a4:ea:6b:5e:05:78:11:b4:35: 3e:84:e2:ca:de:20:64:98:f3:37:7e:d9:fe:9a:4f: d8:e1:fd:41:5a:eb:07:eb:0d:49:51:f5:87:11:df: aa:1b:83:c8:b9:a4:17:b2:4b:85:4a:d5:dc:97:b8: d8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F4:2D:45:26:D3:36:01:D1:F5:CA:5C:01:8B:2C:8F:BA:0C:80:B5 X509v3 Authority Key Identifier: keyid:99:CD:13:E1:44:9F:A4:48:AB:F9:FC:6A:74:D3:B1:31:3D:DF:AB:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:23:26:c2:e6:85:f8:f7:0c:24:3e:b3:90:0a:c9:0f:0b:be: 27:dd:46:c0:7e:15:e7:c4:75:f9:81:43:50:93:96:e0:ea:f4: 08:36:0b:8c:b6:5d:a3:0a:3b:d4:c4:13:d3:66:ef:39:57:4a: 5d:c9:ca:1b:c9:ca:43:4f:b8:f5:f1:cd:67:e8:10:6f:a5:61: a0:cd:28:8f:e5:49:bb:b5:64:c6:69:cd:3e:ac:f2:d7:44:fd: c8:01:56:90:3c:c5:af:07:c9:fb:de:29:10:f1:a2:48:71:f5: 9e:a6:90:81:db:d3:a2:d8:6c:2c:51:71:22:19:05:4f:04:01: 9a:36:8a:27:90:2f:bc:07:dd:b0:55:35:12:d1:dc:59:5e:e8: 87:31:88:c7:25:d9:86:73:eb:35:6e:32:68:21:3a:29:cf:73: 42:20:1b:ab:90:5a:de:94:ec:0f:7f:fb:e4:41:14:05:d8:4a: 79:11:59:67:f2:53:d0:97:0a:9a:a5:c7:96:b8:2d:bb:67:42: 72:68:14:c9:76:ac:c5:fc:7f:80:30:7a:44:a0:3d:6e:c5:42: 9e:89:7e:b9:78:6b:97:31:2f:16:ab:85:09:78:1b:86:df:ee: b3:7b:5d:92:b6:46:54:78:2a:04:ef:68:f3:5f:4a:aa:29:f7: b8:b9:d7:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQnkUS8r1+Lk6jE/075lcNWcq8rcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0IxMzEz RERGQUJDRjAeFw0yNTA3MDEwMzI2MjJaFw0yNTA3MDQxMTU2MjJaMDMxMTAvBgNV BAMTKEQyRjQyRDQ1MjZEMzM2MDFEMUY1Q0E1QzAxOEIyQzhGQkEwQzgwQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChAGa/77+6so+v2oycVnOvfkhc IPHC/EDs/ikKyJlrgvYFS93oM5nGZoULek+8LYIJnAjByamxxk+Gpxe02wCBh5kV l7kX6LGTCv770Jg8mvRwsNfIr4WxJHlc14I7NQpdmaWbu8cx0ULsJiWYmta4KUB9 WHtcaVYD4JrsFDY+tFSrKOJbdGvH6ARObWPOB3oudv48KiXrd9ns0s0PvsZ92SIp EQ6MuWudcmTTecL/MeReROkZ8qcnZkUQ0U/2UvmEHkMJotoyR6Tqa14FeBG0NT6E 4sreIGSY8zd+2f6aT9jh/UFa6wfrDUlR9YcR36obg8i5pBeyS4VK1dyXuNg1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0vQtRSbTNgHR9cpcAYssj7oMgLUwHwYDVR0j BBgwFoAUmc0T4USfpEir+fxqdNOxMT3fq88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTBiNGYxNS03NzIwLTRmMmEtODM0My04ZTM3ZmFlODdhNTQvMC85OUNEMTNFMTQ0 OUZBNDQ4QUJGOUZDNkE3NEQzQjEzMTNEREZBQkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0IxMzEzRERG QUJDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2EwYjRmMTUtNzcyMC00ZjJhLTgz NDMtOGUzN2ZhZTg3YTU0LzAvOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0Ix MzEzRERGQUJDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgjJsLmhfj3DCQ+s5AKyQ8LvifdRsB+FefE dfmBQ1CTluDq9Ag2C4y2XaMKO9TEE9Nm7zlXSl3JyhvJykNPuPXxzWfoEG+lYaDN KI/lSbu1ZMZpzT6s8tdE/cgBVpA8xa8HyfveKRDxokhx9Z6mkIHb06LYbCxRcSIZ BU8EAZo2iieQL7wH3bBVNRLR3Fle6IcxiMcl2YZz6zVuMmghOinPc0IgG6uQWt6U 7A9/++RBFAXYSnkRWWfyU9CXCpqlx5a4LbtnQnJoFMl2rMX8f4AwekSgPW7FQp6J frl4a5cxLxarhQl4G4bf7rN7XZK2RlR4KgTvaPNfSqop97i518g= -----END CERTIFICATE-----Generated at Wed Jul 2 21:30:10 2025 by rpki-client