$ rpki-client -vvf repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft File: 07043FF6B66099F2CBFBBB64672822F3014937E8.mft (raw, json) Hash identifier: sdtIvsqgPTIkMY/1rJrPHIHSj4GSkaFRVQu36nGlg40= Subject key identifier: EB:21:18:7B:BD:05:CA:D2:0D:1A:A8:25:DF:DC:BE:EE:9B:47:EB:7D Authority key identifier: 07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8 Certificate issuer: /CN=07043FF6B66099F2CBFBBB64672822F3014937E8 Certificate serial: 3B3D3D2A370367CC866D104FC4E014F28DB37C3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft Manifest number: 01E3 Signing time: Thu 21 Aug 2025 18:31:39 +0000 Manifest this update: Thu 21 Aug 2025 18:26:39 +0000 Manifest next update: Mon 25 Aug 2025 05:31:39 +0000 Files and hashes: 1: 3130332e3132352e31332e302f32342d3234203d3e20313335363336.roa (hash: 9YIt3S9f2TckOIHLJingGQoR7QpEu3PnRMAwc6NgmOA=) 2: 3130332e3132352e31322e302f32342d3234203d3e20313533333137.roa (hash: b6fruH9Pkg0tQtl5YFYqPR73UwekDQbIDYYtyH1Ta2c=) 3: 07043FF6B66099F2CBFBBB64672822F3014937E8.crl (hash: iPO2ZSgmaEAvYCUJMTr8q7jg+f+xyFOpxH3E3vMUWu4=) 4: 3130332e3132352e31342e302f32342d3234203d3e20313335363336.roa (hash: LDE8MHvWr7ClJaD2b6MGzIMO0HFW7Xb1cGyTVwE6YBs=) 5: 3130332e3132352e31352e302f32342d3234203d3e20313335363336.roa (hash: jfBPikwcOXfyCAw2T4LtcRftqdJoZDQGQR3Ub10AvuI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.crl rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 05:31:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:3d:3d:2a:37:03:67:cc:86:6d:10:4f:c4:e0:14:f2:8d:b3:7c:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07043FF6B66099F2CBFBBB64672822F3014937E8 Validity Not Before: Aug 21 18:26:39 2025 GMT Not After : Aug 25 05:31:39 2025 GMT Subject: CN=EB21187BBD05CAD20D1AA825DFDCBEEE9B47EB7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a7:aa:db:bc:94:9e:74:dc:b1:4d:1c:a2:69: 3b:63:aa:fd:f1:77:00:a5:d7:72:c2:d0:e3:e5:92: 33:cb:41:03:9e:8a:fa:70:42:5f:7f:82:73:b2:98: 37:5e:7b:1c:af:27:3a:13:0a:ca:28:b1:5b:43:fb: d3:0e:7c:56:f1:c1:bd:be:b1:17:1f:2e:cb:03:af: 90:09:73:ae:dd:91:e7:3c:fa:83:d5:57:0e:95:92: 6e:8e:38:5e:a8:6a:c8:75:57:c6:66:f9:85:06:fd: e5:f7:01:6c:c1:c7:c3:c0:20:01:33:5b:9b:db:d2: 79:05:99:7c:88:5c:fc:9f:ff:f3:f7:e0:38:1f:2f: e4:00:bf:92:c4:e3:a8:ba:ba:37:95:e4:4f:4c:22: cc:40:3f:98:ea:3a:a9:07:1f:e3:ad:54:7f:47:79: df:89:4e:3c:f9:44:7f:a7:f6:35:4f:8b:23:0b:b0: 75:b4:20:17:d3:21:64:8c:32:18:5d:aa:cd:a5:10: 7e:c0:8b:fd:e1:e5:b5:f9:45:35:48:91:13:49:da: fd:d6:b0:60:94:aa:b1:21:3c:53:07:4a:40:ec:f3: a1:83:ed:a6:b6:7d:b3:f3:f8:db:56:52:51:11:b2: e9:1f:1f:df:6e:50:aa:da:65:d5:d3:1b:5c:24:e8: 4c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:21:18:7B:BD:05:CA:D2:0D:1A:A8:25:DF:DC:BE:EE:9B:47:EB:7D X509v3 Authority Key Identifier: keyid:07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:46:ed:b1:f0:0a:6a:47:be:35:86:fe:3a:12:9a:20:f9:6e: 4d:73:c1:ea:77:f8:77:12:e8:b1:5d:78:71:ae:a2:f2:55:de: ae:ec:17:02:ec:0a:70:23:59:2d:a1:a1:58:a1:3f:6a:af:e3: 13:76:61:4e:ce:7b:bb:d1:23:87:ed:35:7c:38:97:4c:a6:ab: 83:44:9e:ac:01:4c:11:d9:e1:ef:c7:98:41:eb:12:83:af:e8: 12:19:e5:77:9d:87:c4:ae:9d:46:17:08:88:f6:8c:6f:30:94: 6d:cc:73:5c:b9:80:27:72:78:6b:fd:8a:12:35:41:ca:76:06: e6:c4:4f:11:72:ff:b3:0b:23:9c:68:bc:b1:c8:15:d2:3e:14: 4a:c6:d9:b6:f3:18:bd:bb:18:85:ac:e8:72:0b:a2:6e:ee:a9: 0d:8d:f3:c4:72:37:77:41:29:18:d8:b5:d0:bc:0c:0e:43:58: 7f:9b:fa:8b:a5:7a:fb:13:c7:af:72:96:cd:14:18:fe:64:17: f8:32:00:09:35:df:6e:d1:d4:92:ba:47:0c:ae:64:b2:48:55: dd:41:db:e0:1c:4c:b8:9f:39:a4:df:a6:5d:4f:61:fc:9a:11: cd:34:4f:f1:df:c0:86:5e:44:22:97:e5:b5:d3:3d:e4:c4:97: fb:01:b3:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOz09KjcDZ8yGbRBPxOAU8o2zfDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIyRjMw MTQ5MzdFODAeFw0yNTA4MjExODI2MzlaFw0yNTA4MjUwNTMxMzlaMDMxMTAvBgNV BAMTKEVCMjExODdCQkQwNUNBRDIwRDFBQTgyNURGRENCRUVFOUI0N0VCN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgp6rbvJSedNyxTRyiaTtjqv3x dwCl13LC0OPlkjPLQQOeivpwQl9/gnOymDdeexyvJzoTCsoosVtD+9MOfFbxwb2+ sRcfLssDr5AJc67dkec8+oPVVw6Vkm6OOF6oash1V8Zm+YUG/eX3AWzBx8PAIAEz W5vb0nkFmXyIXPyf//P34DgfL+QAv5LE46i6ujeV5E9MIsxAP5jqOqkHH+OtVH9H ed+JTjz5RH+n9jVPiyMLsHW0IBfTIWSMMhhdqs2lEH7Ai/3h5bX5RTVIkRNJ2v3W sGCUqrEhPFMHSkDs86GD7aa2fbPz+NtWUlERsukfH99uUKraZdXTG1wk6EyjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6yEYe70FytINGqgl39y+7ptH630wHwYDVR0j BBgwFoAUBwQ/9rZgmfLL+7tkZygi8wFJN+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzU0YmU5YS05YjVkLTRjNjQtYjRlOC02MWM3NGU5ZWNlZGMvMC8wNzA0M0ZGNkI2 NjA5OUYyQ0JGQkJCNjQ2NzI4MjJGMzAxNDkzN0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIyRjMwMTQ5 MzdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGM1NGJlOWEtOWI1ZC00YzY0LWI0 ZTgtNjFjNzRlOWVjZWRjLzAvMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIy RjMwMTQ5MzdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZG7bHwCmpHvjWG/joSmiD5bk1zwep3+HcS 6LFdeHGuovJV3q7sFwLsCnAjWS2hoVihP2qv4xN2YU7Oe7vRI4ftNXw4l0ymq4NE nqwBTBHZ4e/HmEHrEoOv6BIZ5Xedh8SunUYXCIj2jG8wlG3Mc1y5gCdyeGv9ihI1 Qcp2BubETxFy/7MLI5xovLHIFdI+FErG2bbzGL27GIWs6HILom7uqQ2N88RyN3dB KRjYtdC8DA5DWH+b+oulevsTx69yls0UGP5kF/gyAAk1327R1JK6RwyuZLJIVd1B 2+AcTLifOaTfpl1PYfyaEc00T/HfwIZeRCKX5bXTPeTEl/sBsyg= -----END CERTIFICATE-----Generated at Sat Aug 23 12:12:35 2025 by rpki-client