$ rpki-client -vvf repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft File: 1CA9E40710262DA751A67E932477D6E12B4B2DED.mft (raw, json) Hash identifier: rR6M5uhm468dif0LOGY04trBc0o1RIO/nobf+N94LHo= Subject key identifier: 57:1C:3F:31:3E:97:F5:DB:A1:EE:79:B4:D8:91:68:C5:EF:A3:60:6C Authority key identifier: 1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED Certificate issuer: /CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Certificate serial: 12A7D7ACDF6FA88EE7F84875913A491E40A1C2EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft Manifest number: 04EB Signing time: Sat 28 Jun 2025 22:20:02 +0000 Manifest this update: Sat 28 Jun 2025 22:15:02 +0000 Manifest next update: Wed 02 Jul 2025 01:39:02 +0000 Files and hashes: 1: 3130332e3132332e3130342e302f32342d3234203d3e20313338303730.roa (hash: yHCpL2jeoTRdKkL9PeW/BmTUh9ZLAObQa8uLRwAc8Ww=) 2: 323430333a396663303a3a2f33322d3438203d3e20313338303730.roa (hash: g2I091o7xGYF01O50CUZMPsQctw2lflU2v4s2FAorWY=) 3: 3130332e3132332e3130352e302f32342d3234203d3e20313338303730.roa (hash: BfFCh7Vfs8z+WKVbxTTngHawwEIYaKlayBm3t+ZFnyU=) 4: 3130332e3132332e3130342e302f32322d3234203d3e20313338303730.roa (hash: Yh/X3wf3xgSBLANEs82b75GugxHKann/OAKH3YrZy2U=) 5: 1CA9E40710262DA751A67E932477D6E12B4B2DED.crl (hash: kvSurZw102wSD5+bb7jKTHGKPLq+vvsN6vhG+0fDx+Y=) 6: 3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa (hash: cke05Fz1pU7ph5quQU6BQAXvAK/qW0tlFEcIja5SVaM=) 7: 3130332e3132332e3130362e302f32342d3234203d3e20313338303730.roa (hash: 1Qj+0yJlnyRAkhJQW7JxleOTtApsG7fPmAlVCQ6z7p8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 01:39:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a7:d7:ac:df:6f:a8:8e:e7:f8:48:75:91:3a:49:1e:40:a1:c2:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Validity Not Before: Jun 28 22:15:02 2025 GMT Not After : Jul 2 01:39:02 2025 GMT Subject: CN=571C3F313E97F5DBA1EE79B4D89168C5EFA3606C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:fe:52:7b:09:9a:fe:f8:35:c5:9c:17:24:d3: 44:ea:38:96:0e:05:01:5a:70:ca:49:6c:8f:f5:0b: d6:fe:2f:0c:f2:32:3b:25:ae:8e:cd:16:54:51:1a: ca:bf:cd:e3:26:13:45:32:7f:f4:2c:ed:7d:19:dc: 94:66:e1:c8:1f:df:b6:f5:8a:df:85:a9:8a:db:0f: 12:23:a6:17:6a:e5:62:38:51:12:9a:cb:ba:4b:2f: 71:16:70:85:e2:27:84:87:f1:02:28:a0:70:dd:13: 36:f4:25:02:f7:05:aa:11:aa:af:6e:34:4b:46:8f: 0a:08:01:d8:ef:66:c1:d4:b0:b2:f9:a5:83:b8:be: 2c:d4:84:d9:59:d5:53:93:8e:a6:3c:b6:24:aa:ee: f3:e5:f5:4c:ae:93:a1:8e:db:6e:62:22:a4:a2:d5: 90:c3:d8:7f:6c:22:79:18:19:b0:18:33:5c:40:ad: 6a:96:7e:b0:70:2b:5a:e7:16:3c:e8:da:7d:3e:91: 60:b3:f0:c7:60:7a:db:e0:fe:6e:23:8f:98:2f:2a: c3:bf:5a:e1:c6:1b:d8:31:89:13:ce:8f:1b:57:6f: c6:f8:d3:2d:3c:69:ff:b0:9c:2b:dc:b1:bf:3a:aa: b2:58:52:da:16:39:f6:12:92:11:92:ba:da:c8:32: 86:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1C:3F:31:3E:97:F5:DB:A1:EE:79:B4:D8:91:68:C5:EF:A3:60:6C X509v3 Authority Key Identifier: keyid:1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:e0:9c:7d:fb:5b:5f:5d:4d:bd:e2:bd:62:f5:60:be:86:31: 5f:49:2b:bb:b3:0b:bd:89:da:46:ec:32:e6:ec:e5:87:50:eb: e0:cb:d5:13:0e:eb:6a:8f:09:75:cf:e6:34:8e:7c:d7:bf:4f: a6:ef:77:6b:34:d2:8c:2b:e0:7b:e9:dd:55:24:ff:b6:f6:b4: d9:7e:4d:4b:4b:01:bb:32:45:da:61:d1:2d:e8:a3:d1:07:c4: b4:cf:6d:f6:33:e9:79:74:8d:b2:0f:da:d9:e1:34:0f:6b:8c: 9f:bf:5e:2f:1e:ad:86:1c:36:9e:4b:2b:87:ba:92:d8:7f:ac: cc:7b:13:eb:8b:7c:81:3a:76:c9:01:dd:f1:b8:da:ea:cf:3c: c5:5a:9a:fb:1f:49:40:37:ca:1a:44:41:c3:cd:2a:e1:3e:e6: b7:8d:54:83:38:50:4f:79:3a:43:8d:e4:30:56:a7:64:d9:39: 3c:5f:82:8d:b4:e3:90:f3:bc:bf:3f:01:bc:40:52:c1:ec:bd: a2:48:07:f1:7a:05:b0:64:71:53:6b:a2:8e:4c:97:6b:1f:7c: 68:aa:33:b1:92:d4:57:ea:07:f4:ff:48:b0:41:01:02:37:f9: ec:16:b0:cb:db:2a:4b:f6:f8:f0:57:e6:b9:2e:75:c2:8f:51: d9:af:0f:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEqfXrN9vqI7n+Eh1kTpJHkChwuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEy QjRCMkRFRDAeFw0yNTA2MjgyMjE1MDJaFw0yNTA3MDIwMTM5MDJaMDMxMTAvBgNV BAMTKDU3MUMzRjMxM0U5N0Y1REJBMUVFNzlCNEQ4OTE2OEM1RUZBMzYwNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj/lJ7CZr++DXFnBck00TqOJYO BQFacMpJbI/1C9b+LwzyMjslro7NFlRRGsq/zeMmE0Uyf/Qs7X0Z3JRm4cgf37b1 it+FqYrbDxIjphdq5WI4URKay7pLL3EWcIXiJ4SH8QIooHDdEzb0JQL3BaoRqq9u NEtGjwoIAdjvZsHUsLL5pYO4vizUhNlZ1VOTjqY8tiSq7vPl9Uyuk6GO225iIqSi 1ZDD2H9sInkYGbAYM1xArWqWfrBwK1rnFjzo2n0+kWCz8Mdgetvg/m4jj5gvKsO/ WuHGG9gxiRPOjxtXb8b40y08af+wnCvcsb86qrJYUtoWOfYSkhGSutrIMoaVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVxw/MT6X9duh7nm02JFoxe+jYGwwHwYDVR0j BBgwFoAUHKnkBxAmLadRpn6TJHfW4StLLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWQ2N2Q1Zi01NzEzLTQxNTMtODcxYi0xYjAwOGY3ZmZkZDIvMC8xQ0E5RTQwNzEw MjYyREE3NTFBNjdFOTMyNDc3RDZFMTJCNEIyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEyQjRC MkRFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFkNjdkNWYtNTcxMy00MTUzLTg3 MWItMWIwMDhmN2ZmZGQyLzAvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2 RTEyQjRCMkRFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADgnH37W19dTb3ivWL1YL6GMV9JK7uzC72J 2kbsMubs5YdQ6+DL1RMO62qPCXXP5jSOfNe/T6bvd2s00owr4Hvp3VUk/7b2tNl+ TUtLAbsyRdph0S3oo9EHxLTPbfYz6Xl0jbIP2tnhNA9rjJ+/Xi8erYYcNp5LK4e6 kth/rMx7E+uLfIE6dskB3fG42urPPMVamvsfSUA3yhpEQcPNKuE+5reNVIM4UE95 OkON5DBWp2TZOTxfgo2045DzvL8/AbxAUsHsvaJIB/F6BbBkcVNroo5Ml2sffGiq M7GS1FfqB/T/SLBBAQI3+ewWsMvbKkv2+PBX5rkudcKPUdmvD70= -----END CERTIFICATE-----Generated at Tue Jul 1 01:50:30 2025 by rpki-client