$ rpki-client -vvf repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft File: 439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft (raw, json) Hash identifier: 6mndJioljS/K2rNSV2UGnN9UpVPwq0N7PZvTlmbHeok= Subject key identifier: 5B:B2:2D:47:42:DA:60:CA:F4:0F:93:D8:7D:CB:CF:7C:A9:A7:36:FB Authority key identifier: 43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E Certificate issuer: /CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E Certificate serial: 5DA9CA4DB7E61813FA831DFB6D2B8C7A2EE02067 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft Manifest number: 0432 Signing time: Sat 28 Jun 2025 22:10:42 +0000 Manifest this update: Sat 28 Jun 2025 22:05:42 +0000 Manifest next update: Wed 02 Jul 2025 08:07:42 +0000 Files and hashes: 1: 3130332e3233332e3130322e302f32332d3234203d3e20313336313037.roa (hash: JI3pjhPmyInlzEtZ8PXbjRWk78z+cy0q6o/inypVTws=) 2: 3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa (hash: QOFHoPuY9NpdPQj6xa7cBpnTsr+iASD85o3lNcYlh68=) 3: 439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl (hash: Eb5TKVcg7/pYRmgeF7EUI4Vpbv/x0iSemLows7sh8r8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:a9:ca:4d:b7:e6:18:13:fa:83:1d:fb:6d:2b:8c:7a:2e:e0:20:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E Validity Not Before: Jun 28 22:05:42 2025 GMT Not After : Jul 2 08:07:42 2025 GMT Subject: CN=5BB22D4742DA60CAF40F93D87DCBCF7CA9A736FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:af:49:2b:f0:41:cc:ce:fc:2e:87:62:b7:4f: 8a:7c:a2:86:fa:6a:f7:9a:df:93:2c:10:6b:45:38: 73:0d:e7:00:28:af:06:fe:41:51:70:13:f2:2d:f8: f9:b4:4f:01:51:32:8a:2f:e1:e3:30:8c:5f:7d:0c: c6:7d:19:8c:4a:42:93:98:c0:ee:bc:d7:e1:c3:08: 0b:03:8f:44:9c:a2:ce:ad:b2:86:bd:bd:33:92:2f: 28:4d:50:f9:2d:f7:2c:bd:5c:38:7a:4f:a8:69:68: 80:72:b9:b5:a8:21:ac:1b:e5:b0:5b:40:73:b1:74: f1:7b:79:e5:ef:1f:88:9d:48:dc:20:21:34:06:ad: a2:8c:21:1c:1d:b5:15:1a:7f:57:50:ef:50:16:c4: c0:ac:2c:b5:a3:0f:0e:b6:1e:5b:68:b2:ca:c4:db: 63:c9:b4:50:e4:95:4c:85:b2:fd:d3:76:58:f0:1b: 9e:f2:a0:e0:45:42:b2:dc:76:b6:53:51:da:bb:f0: 76:90:f4:f2:c2:18:ba:5f:9f:b8:bc:be:97:0a:93: 99:35:de:07:df:46:33:cc:26:c6:d1:e2:69:ba:2b: 01:21:5b:b2:d7:3b:fd:7e:3e:07:de:7f:0c:2e:fa: 6c:23:7c:7f:37:bd:47:09:e4:f9:c0:85:54:d6:ba: b9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B2:2D:47:42:DA:60:CA:F4:0F:93:D8:7D:CB:CF:7C:A9:A7:36:FB X509v3 Authority Key Identifier: keyid:43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:ff:32:28:32:08:7e:8b:62:07:d4:f6:f5:a1:35:da:16:27: 7c:3d:84:c8:18:ab:9c:0e:6b:af:17:d4:c4:95:20:20:dc:aa: 72:7d:63:fb:18:15:77:75:0f:15:3f:c5:b7:e3:01:28:f7:b2: 3a:c5:97:34:c5:a8:52:2c:f2:62:5b:80:4c:91:5f:22:e1:64: 4d:9f:41:52:06:7f:de:0a:d9:48:bd:8c:07:45:57:5a:14:ea: ca:99:1c:f5:b8:ca:92:2a:74:f8:83:62:5b:76:fa:e2:66:0e: d9:7a:0d:4d:e7:3a:fa:d5:86:a9:c3:a5:19:43:c4:5c:de:6a: b5:9d:ec:f1:cf:72:a3:d4:3e:bb:14:b8:a7:1e:08:14:8f:e0: 59:43:66:69:4a:49:52:10:cd:04:db:50:ec:ac:13:a2:60:40: d3:a2:ec:4a:8e:74:cb:5a:76:17:1e:15:90:5b:31:59:ff:64: fb:9f:2f:db:1b:52:a1:d5:fa:7e:2b:8e:5a:12:a1:8a:bf:b9: 0b:fa:ad:9a:5e:73:62:03:2e:4b:3e:88:c4:1d:40:17:e8:46: 4f:37:a0:df:73:dd:1f:a0:6d:8a:3c:25:7f:4c:19:cb:68:5f: 26:41:11:62:e0:b5:d1:8b:db:be:f8:01:dd:9f:e6:08:b7:3d: 53:9a:f6:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXanKTbfmGBP6gx37bSuMei7gIGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhEMERC Rjk5QTgxRTAeFw0yNTA2MjgyMjA1NDJaFw0yNTA3MDIwODA3NDJaMDMxMTAvBgNV BAMTKDVCQjIyRDQ3NDJEQTYwQ0FGNDBGOTNEODdEQ0JDRjdDQTlBNzM2RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5r0kr8EHMzvwuh2K3T4p8oob6 avea35MsEGtFOHMN5wAorwb+QVFwE/It+Pm0TwFRMoov4eMwjF99DMZ9GYxKQpOY wO681+HDCAsDj0Scos6tsoa9vTOSLyhNUPkt9yy9XDh6T6hpaIByubWoIawb5bBb QHOxdPF7eeXvH4idSNwgITQGraKMIRwdtRUaf1dQ71AWxMCsLLWjDw62HltossrE 22PJtFDklUyFsv3TdljwG57yoOBFQrLcdrZTUdq78HaQ9PLCGLpfn7i8vpcKk5k1 3gffRjPMJsbR4mm6KwEhW7LXO/1+Pgfefwwu+mwjfH83vUcJ5PnAhVTWurn5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW7ItR0LaYMr0D5PYfcvPfKmnNvswHwYDVR0j BBgwFoAUQ5pJgVSauxUbEtbshfyNDb+ZqB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTQ3MjMxZi0wMmRkLTQ5ZTgtYWEyNS0yZDU0YzBhOTk5Y2EvMC80MzlBNDk4MTU0 OUFCQjE1MUIxMkQ2RUM4NUZDOEQwREJGOTlBODFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhEMERCRjk5 QTgxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0NzIzMWYtMDJkZC00OWU4LWFh MjUtMmQ1NGMwYTk5OWNhLzAvNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhE MERCRjk5QTgxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL3/MigyCH6LYgfU9vWhNdoWJ3w9hMgYq5wO a68X1MSVICDcqnJ9Y/sYFXd1DxU/xbfjASj3sjrFlzTFqFIs8mJbgEyRXyLhZE2f QVIGf94K2Ui9jAdFV1oU6sqZHPW4ypIqdPiDYlt2+uJmDtl6DU3nOvrVhqnDpRlD xFzearWd7PHPcqPUPrsUuKceCBSP4FlDZmlKSVIQzQTbUOysE6JgQNOi7EqOdMta dhceFZBbMVn/ZPufL9sbUqHV+n4rjloSoYq/uQv6rZpec2IDLks+iMQdQBfoRk83 oN9z3R+gbYo8JX9MGctoXyZBEWLgtdGL2774Ad2f5gi3PVOa9ik= -----END CERTIFICATE-----Generated at Sun Jun 29 23:27:52 2025 by rpki-client