$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft File: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft (raw, json) Hash identifier: /pHFbEujwsV6j942ngfeT/93uxuPy6ojwYzHRO+YOCE= Subject key identifier: 9C:FC:98:5F:2B:87:40:97:B5:AB:21:35:34:D9:4B:10:17:18:13:39 Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 178DA53C9ED1D8A013550311990F8020401C9F50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft Manifest number: 04E6 Signing time: Mon 30 Jun 2025 11:02:21 +0000 Manifest this update: Mon 30 Jun 2025 10:57:21 +0000 Manifest next update: Thu 03 Jul 2025 14:58:21 +0000 Files and hashes: 1: 323430323a616134303a373a3a2f34382d3438203d3e20313337333330.roa (hash: Z1axM0kuScQ1wsgtnc4QX9GvMZLuIsV8v/ScHLgFtiU=) 2: 3130332e3131322e3133362e302f32342d3234203d3e20313337333330.roa (hash: IXEq/FTTwZnYZt7GCampKc/lJCDCJ9/yHr0Rlg6De2I=) 3: 323430323a616134303a3a2f33322d3332203d3e20313337333330.roa (hash: vtCuldzUtylI5t9/fCW+s++nz3SUBB8oSaeAOGcN8rI=) 4: 323430323a616134303a353a3a2f34382d3438203d3e20313337333330.roa (hash: Pt4kHivj/+/IoSa7PGPfSPyAlm/DgqrXfAGO9WlCDqE=) 5: 323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa (hash: EtS1eZLUTwWRZJ7Ml0izUQhw9pv4Am/WahNfvxjKTrc=) 6: 3130332e3131322e3133382e302f32342d3234203d3e20313431383932.roa (hash: 7d6L1YnpzkSH3cjd/bratlHXMkaO39mRUgOEKpnPFL4=) 7: 323430323a616134303a31333a3a2f34382d3438203d3e20313337333330.roa (hash: w4rnLSoK9Ogry5Be/7bEeNtK/st8upmlmof3uHLSQS4=) 8: 323430323a616134303a323a3a2f34382d3438203d3e20313337333330.roa (hash: vTpYTNK2Iedt3x6MQB/Xrh13AhkarFJV4HWTUjcGM/Y=) 9: 323430323a616134303a31303a3a2f34382d3438203d3e20313337333330.roa (hash: JdwC9cZZayLXOr62V5QKdUDNIE+2Jw/cXMDWMiK/ID0=) 10: 323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa (hash: tQTDeuCAhgIHqT4JvN+SYFcrP542mVZbW7Uy9er1rk4=) 11: 323430323a616134303a31313a3a2f34382d3438203d3e20313337333330.roa (hash: BBYTiuzRjYx15TfoXkETOVppXlE7UGzNaI5UpnCSg40=) 12: 3130332e3131322e3133362e302f32332d3233203d3e20313337333330.roa (hash: JdFXANFgLvROw3ALiHcjcCNg37qYIzNVyiUs7U7urj0=) 13: 323430323a616134303a31343a3a2f34382d3438203d3e20313337333330.roa (hash: ra0Qf+ys3TjTOOjzu7G6xBCVp6PgE8NBjiFHNgjZfy0=) 14: 323430323a616134303a31353a3a2f34382d3438203d3e20313337333330.roa (hash: cplcGCMTKNbyST3IWkDxcP/n/AeMzarnQF1LNyGc5EY=) 15: 323430323a616134303a31323a3a2f34382d3438203d3e20313337333330.roa (hash: QFubIhbbL6UEYuVrgh+b+Oy9CvlVLee6F9ADT2A6kec=) 16: 3130332e3131322e3133372e302f32342d3234203d3e20313337333330.roa (hash: Ynfng1Lfq3pWIuf4W3EiHa7RUB04RaxJZyHC4wkM2pw=) 17: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl (hash: UUAWX05/qNCfHiND37lY/tIwbX2ix00DIr3XSoy6ndA=) 18: 323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa (hash: SFCF3eZAfaB4k234A4Mal+M9wtz6OMi0W08cO5CL2c4=) 19: 323430323a616134303a383a3a2f34382d3438203d3e20313337333330.roa (hash: vAnV4g431JCqkwtUthm0ie5OhAW6+m/w0zGsqm8XSOo=) 20: 323430323a616134303a313a3a2f34382d3438203d3e20313337333330.roa (hash: sfX//sKOJiEuG3MX815fs00hBV5qvYrVSNOlry6c+5c=) 21: 323430323a616134303a343a3a2f34382d3438203d3e20313337333330.roa (hash: 1oWczp9RZm7lezuDVU+ofnA0tfj2lVP+IvFgjT0dOg4=) 22: 3130332e3131322e3133392e302f32342d3234203d3e203535373031.roa (hash: Tg3uHiws3586UtP8/6LlH5rBTeR3eoDlr7oeiwMOjQA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 14:58:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:8d:a5:3c:9e:d1:d8:a0:13:55:03:11:99:0f:80:20:40:1c:9f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Jun 30 10:57:21 2025 GMT Not After : Jul 3 14:58:21 2025 GMT Subject: CN=9CFC985F2B874097B5AB213534D94B1017181339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:35:a2:0b:44:be:8f:63:e1:fd:e0:6c:c0:2e: d6:62:00:97:58:93:8e:a3:c4:92:5b:63:5d:16:a5: 7a:99:97:60:4f:e1:8c:d6:f9:29:79:0a:ff:35:54: be:f9:8f:f6:27:6c:6e:27:61:f3:31:97:7e:f2:53: 24:55:f6:44:f9:26:00:0b:0c:e3:50:b6:d6:33:8c: 67:65:ae:43:90:6a:3f:a5:da:b7:c4:83:8c:55:f0: ca:8d:1c:7f:0f:a0:c0:e6:35:b4:94:9c:e0:32:0e: a2:3c:16:97:f3:2e:c8:0e:f8:00:7e:56:9c:4e:e5: 79:0b:3f:1a:36:33:bc:bd:77:5d:18:a7:c9:39:92: b5:68:64:1d:ed:70:da:88:24:7d:b6:d6:8c:e4:85: 4b:02:23:be:ae:b0:fd:4e:60:34:6c:53:58:36:be: 85:2b:df:48:1b:66:2f:88:72:ad:0c:7d:96:e9:76: ba:38:73:57:6e:f4:7c:c6:8a:b6:7f:21:86:2e:4b: 10:fb:e4:07:c8:67:d6:4b:1c:2a:cc:60:03:6e:f1: e1:ba:75:c0:13:d8:51:fe:95:9c:5a:a4:15:de:af: de:c0:04:ac:99:19:f3:01:9f:6c:9a:3f:d6:a4:da: 05:aa:9b:e5:57:b1:ac:24:2c:a5:32:4b:b3:ab:85: ca:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FC:98:5F:2B:87:40:97:B5:AB:21:35:34:D9:4B:10:17:18:13:39 X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:1c:29:c0:4b:dd:5d:3f:3a:5a:52:ea:31:90:c7:8b:31:f8: 85:e1:87:70:ca:eb:e0:fd:b5:f4:e1:c6:d0:2d:97:d0:4a:34: 72:d8:41:e0:21:d9:be:f7:20:34:7d:1d:32:b9:ec:35:81:75: 43:f0:67:5f:5e:c4:6a:2c:1c:15:b5:7f:c8:01:d3:02:2b:f2: 06:93:f0:41:ea:30:eb:9a:7a:be:fb:53:83:f3:1a:44:67:bd: 38:6c:df:87:fc:85:f5:94:19:02:21:71:b0:29:4d:ee:c7:75: 8c:1d:59:a5:3d:16:bc:e1:ed:d3:b1:4d:0c:94:ec:82:ca:d9: f1:bc:df:d2:d7:b0:62:29:be:2a:03:cb:c8:7d:68:2b:18:9f: 12:49:9d:15:c0:67:f0:cd:44:5f:7d:3c:cb:91:77:9c:5a:83: ce:46:9a:36:00:a2:84:20:fa:51:c2:98:a9:f0:dc:f1:bc:27: 27:bb:2f:24:ef:64:ac:29:f2:72:66:44:13:c2:06:8a:c3:50: 7f:90:8b:c8:57:59:2e:14:89:75:21:47:70:d7:57:50:1b:cc: 3a:93:6d:a5:b1:69:b7:4a:ce:ab:72:c8:d6:06:19:f4:38:8d: 02:e3:18:57:43:25:ce:54:af:bb:23:e0:98:da:f0:b0:d2:a2: d6:88:7f:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF42lPJ7R2KATVQMRmQ+AIEAcn1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNTA2MzAxMDU3MjFaFw0yNTA3MDMxNDU4MjFaMDMxMTAvBgNV BAMTKDlDRkM5ODVGMkI4NzQwOTdCNUFCMjEzNTM0RDk0QjEwMTcxODEzMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGNaILRL6PY+H94GzALtZiAJdY k46jxJJbY10WpXqZl2BP4YzW+Sl5Cv81VL75j/YnbG4nYfMxl37yUyRV9kT5JgAL DONQttYzjGdlrkOQaj+l2rfEg4xV8MqNHH8PoMDmNbSUnOAyDqI8FpfzLsgO+AB+ VpxO5XkLPxo2M7y9d10Yp8k5krVoZB3tcNqIJH221ozkhUsCI76usP1OYDRsU1g2 voUr30gbZi+Icq0MfZbpdro4c1du9HzGirZ/IYYuSxD75AfIZ9ZLHCrMYANu8eG6 dcAT2FH+lZxapBXer97ABKyZGfMBn2yaP9ak2gWqm+VXsawkLKUyS7OrhcoHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnPyYXyuHQJe1qyE1NNlLEBcYEzkwHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGMzNGZmMDgtZDIxZi00MjBiLTg3 ZGYtNTMxMDNiNmRjMjUzLzAvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUx MkZFNEMxRDAwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkcKcBL3V0/OlpS6jGQx4sx+IXhh3DK6+D9 tfThxtAtl9BKNHLYQeAh2b73IDR9HTK57DWBdUPwZ19exGosHBW1f8gB0wIr8gaT 8EHqMOuaer77U4PzGkRnvThs34f8hfWUGQIhcbApTe7HdYwdWaU9Frzh7dOxTQyU 7ILK2fG839LXsGIpvioDy8h9aCsYnxJJnRXAZ/DNRF99PMuRd5xag85GmjYAooQg +lHCmKnw3PG8Jye7LyTvZKwp8nJmRBPCBorDUH+Qi8hXWS4UiXUhR3DXV1AbzDqT baWxabdKzqtyyNYGGfQ4jQLjGFdDJc5Ur7sj4Jja8LDSotaIf7Y= -----END CERTIFICATE-----Generated at Mon Jun 30 14:16:03 2025 by rpki-client