$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft File: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft (raw, json) Hash identifier: SRfvOhIWsw1QG5Z6cIyr/tJXktG2CyC9hRSw0ZbU+ow= Subject key identifier: 6A:16:32:B3:BC:6B:E1:9E:88:49:61:5F:CC:7B:F6:39:30:FF:71:4B Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 4F128779CDE14D8350F2A2ECDFCFFDC65833E79F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft Manifest number: 04FD Signing time: Thu 21 Aug 2025 17:52:12 +0000 Manifest this update: Thu 21 Aug 2025 17:47:12 +0000 Manifest next update: Sun 24 Aug 2025 23:07:12 +0000 Files and hashes: 1: 323430323a616134303a313a3a2f34382d3438203d3e20313337333330.roa (hash: sfX//sKOJiEuG3MX815fs00hBV5qvYrVSNOlry6c+5c=) 2: 323430323a616134303a31313a3a2f34382d3438203d3e20313337333330.roa (hash: BBYTiuzRjYx15TfoXkETOVppXlE7UGzNaI5UpnCSg40=) 3: 323430323a616134303a31333a3a2f34382d3438203d3e20313337333330.roa (hash: w4rnLSoK9Ogry5Be/7bEeNtK/st8upmlmof3uHLSQS4=) 4: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl (hash: uO5cil5a4OEAvSLg9Wyoneyir0jfcXrN778fkHmvmKQ=) 5: 323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa (hash: EtS1eZLUTwWRZJ7Ml0izUQhw9pv4Am/WahNfvxjKTrc=) 6: 323430323a616134303a383a3a2f34382d3438203d3e20313337333330.roa (hash: vAnV4g431JCqkwtUthm0ie5OhAW6+m/w0zGsqm8XSOo=) 7: 3130332e3131322e3133362e302f32332d3233203d3e20313337333330.roa (hash: JdFXANFgLvROw3ALiHcjcCNg37qYIzNVyiUs7U7urj0=) 8: 3130332e3131322e3133392e302f32342d3234203d3e203535373031.roa (hash: Tg3uHiws3586UtP8/6LlH5rBTeR3eoDlr7oeiwMOjQA=) 9: 323430323a616134303a31343a3a2f34382d3438203d3e20313337333330.roa (hash: ra0Qf+ys3TjTOOjzu7G6xBCVp6PgE8NBjiFHNgjZfy0=) 10: 323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa (hash: SFCF3eZAfaB4k234A4Mal+M9wtz6OMi0W08cO5CL2c4=) 11: 3130332e3131322e3133372e302f32342d3234203d3e20313337333330.roa (hash: Ynfng1Lfq3pWIuf4W3EiHa7RUB04RaxJZyHC4wkM2pw=) 12: 323430323a616134303a3a2f33322d3332203d3e20313337333330.roa (hash: vtCuldzUtylI5t9/fCW+s++nz3SUBB8oSaeAOGcN8rI=) 13: 323430323a616134303a31353a3a2f34382d3438203d3e20313337333330.roa (hash: cplcGCMTKNbyST3IWkDxcP/n/AeMzarnQF1LNyGc5EY=) 14: 3130332e3131322e3133362e302f32342d3234203d3e20313337333330.roa (hash: IXEq/FTTwZnYZt7GCampKc/lJCDCJ9/yHr0Rlg6De2I=) 15: 323430323a616134303a343a3a2f34382d3438203d3e20313337333330.roa (hash: 1oWczp9RZm7lezuDVU+ofnA0tfj2lVP+IvFgjT0dOg4=) 16: 323430323a616134303a31303a3a2f34382d3438203d3e20313337333330.roa (hash: JdwC9cZZayLXOr62V5QKdUDNIE+2Jw/cXMDWMiK/ID0=) 17: 323430323a616134303a353a3a2f34382d3438203d3e20313337333330.roa (hash: Pt4kHivj/+/IoSa7PGPfSPyAlm/DgqrXfAGO9WlCDqE=) 18: 323430323a616134303a373a3a2f34382d3438203d3e20313337333330.roa (hash: Z1axM0kuScQ1wsgtnc4QX9GvMZLuIsV8v/ScHLgFtiU=) 19: 323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa (hash: tQTDeuCAhgIHqT4JvN+SYFcrP542mVZbW7Uy9er1rk4=) 20: 323430323a616134303a31323a3a2f34382d3438203d3e20313337333330.roa (hash: QFubIhbbL6UEYuVrgh+b+Oy9CvlVLee6F9ADT2A6kec=) 21: 323430323a616134303a323a3a2f34382d3438203d3e20313337333330.roa (hash: vTpYTNK2Iedt3x6MQB/Xrh13AhkarFJV4HWTUjcGM/Y=) 22: 3130332e3131322e3133382e302f32342d3234203d3e20313431383932.roa (hash: 7d6L1YnpzkSH3cjd/bratlHXMkaO39mRUgOEKpnPFL4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 23:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:12:87:79:cd:e1:4d:83:50:f2:a2:ec:df:cf:fd:c6:58:33:e7:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Aug 21 17:47:12 2025 GMT Not After : Aug 24 23:07:12 2025 GMT Subject: CN=6A1632B3BC6BE19E8849615FCC7BF63930FF714B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cf:89:38:a4:f0:30:39:87:23:35:e3:00:18: c5:25:a8:4f:92:5f:38:4a:2f:14:d4:ee:e9:02:e0: 57:93:1c:84:83:8f:a8:b5:e5:9d:51:84:56:c2:ee: b5:be:44:f9:61:88:ab:cd:c9:28:0e:52:09:d9:9a: 78:c6:db:ab:b0:11:13:91:cf:21:7c:22:48:c2:33: 9a:1e:04:a3:21:ae:f5:d8:25:46:fb:92:56:ae:49: 35:0a:32:71:9b:95:1e:b3:91:01:15:7e:82:7b:b2: b2:f1:3f:21:f3:ed:8f:ee:89:92:4f:74:87:aa:9e: 5f:89:0e:a8:d7:af:79:81:62:b2:25:d9:61:e8:22: 86:ac:30:84:c7:75:15:2a:6c:1d:e3:f1:53:af:c6: 8a:7f:0a:a1:2b:2d:43:c8:49:2f:10:91:0c:20:33: 3f:da:ff:a8:bf:7b:ab:28:35:0f:fa:3c:aa:a8:1e: a9:8e:ec:9d:b1:8f:2f:d2:11:e8:6d:f2:50:74:8c: ee:01:bc:71:76:45:75:ad:45:9e:27:84:b6:90:81: 17:1e:bd:14:aa:a3:ea:09:9f:9b:95:04:99:ee:40: a1:d4:eb:8f:21:ae:18:e2:ff:e4:95:db:f2:25:33: ab:96:c1:a8:b0:14:07:28:05:39:87:16:4f:55:4d: 2f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:16:32:B3:BC:6B:E1:9E:88:49:61:5F:CC:7B:F6:39:30:FF:71:4B X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:83:06:ac:eb:4b:94:23:b7:34:ea:e0:bf:1a:96:98:b8:da: e5:ea:d0:13:3b:7b:fd:53:cc:9e:ef:ef:19:7e:55:c6:ff:7a: 00:8b:85:b7:65:72:35:c3:a6:e9:d5:8f:d7:74:0e:4d:e0:b4: 8a:db:a4:a2:53:73:57:c0:12:3d:34:35:75:98:2d:43:dc:94: 41:35:0c:6f:0f:c4:b0:36:cd:06:eb:b5:81:41:b5:5d:4d:79: 73:4d:2c:cd:f5:16:1d:2c:eb:be:09:c1:52:7f:25:9f:7f:88: 86:ff:19:91:b1:ad:9d:b5:8e:ee:43:33:2a:51:aa:ea:ec:51: b4:9a:5f:9e:2a:c7:0d:43:0a:e0:21:a6:1c:96:74:a6:be:c8: c2:b8:f4:25:02:7a:96:ef:08:7f:48:aa:39:e4:bc:c5:8f:a6: cd:85:19:31:df:9a:a7:b5:57:7f:ac:01:ff:ce:be:64:70:b6: fd:a7:fc:af:11:7a:39:ea:83:98:ed:95:e3:59:4c:56:78:38: d3:a6:c8:a6:fa:2c:12:c5:ac:bd:ea:85:0c:24:85:13:a5:45: f1:91:d2:0b:39:e2:fe:90:82:83:8f:f3:3c:f0:09:f3:4c:b6: 5b:1e:62:c2:27:90:4d:b3:7a:95:45:b7:c2:32:78:c8:34:d4: 1a:27:3b:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTxKHec3hTYNQ8qLs38/9xlgz558wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNTA4MjExNzQ3MTJaFw0yNTA4MjQyMzA3MTJaMDMxMTAvBgNV BAMTKDZBMTYzMkIzQkM2QkUxOUU4ODQ5NjE1RkNDN0JGNjM5MzBGRjcxNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpz4k4pPAwOYcjNeMAGMUlqE+S XzhKLxTU7ukC4FeTHISDj6i15Z1RhFbC7rW+RPlhiKvNySgOUgnZmnjG26uwEROR zyF8IkjCM5oeBKMhrvXYJUb7klauSTUKMnGblR6zkQEVfoJ7srLxPyHz7Y/uiZJP dIeqnl+JDqjXr3mBYrIl2WHoIoasMITHdRUqbB3j8VOvxop/CqErLUPISS8QkQwg Mz/a/6i/e6soNQ/6PKqoHqmO7J2xjy/SEeht8lB0jO4BvHF2RXWtRZ4nhLaQgRce vRSqo+oJn5uVBJnuQKHU648hrhji/+SV2/IlM6uWwaiwFAcoBTmHFk9VTS91AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUahYys7xr4Z6ISWFfzHv2OTD/cUswHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGMzNGZmMDgtZDIxZi00MjBiLTg3 ZGYtNTMxMDNiNmRjMjUzLzAvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUx MkZFNEMxRDAwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHODBqzrS5QjtzTq4L8alpi42uXq0BM7e/1T zJ7v7xl+Vcb/egCLhbdlcjXDpunVj9d0Dk3gtIrbpKJTc1fAEj00NXWYLUPclEE1 DG8PxLA2zQbrtYFBtV1NeXNNLM31Fh0s674JwVJ/JZ9/iIb/GZGxrZ21ju5DMypR qursUbSaX54qxw1DCuAhphyWdKa+yMK49CUCepbvCH9IqjnkvMWPps2FGTHfmqe1 V3+sAf/OvmRwtv2n/K8Rejnqg5jtleNZTFZ4ONOmyKb6LBLFrL3qhQwkhROlRfGR 0gs54v6QgoOP8zzwCfNMtlseYsInkE2zepVFt8IyeMg01BonO/8= -----END CERTIFICATE-----Generated at Sat Aug 23 14:13:52 2025 by rpki-client