$ rpki-client -vvf repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft File: 1678828C849BDE3472FE846308767F54ED7F8232.mft (raw, json) Hash identifier: m9iWeeNV8nN3SaLCCNZVVDHcG9tEFmN2j+EICVZE35o= Subject key identifier: DB:CA:70:C7:B7:1B:98:B2:C7:B1:0E:59:11:92:1C:9C:EF:54:8B:A7 Authority key identifier: 16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 Certificate issuer: /CN=1678828C849BDE3472FE846308767F54ED7F8232 Certificate serial: 740B9EEF4C518320245D339886AC8809ED8DC09C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft Manifest number: 020B Signing time: Thu 21 Aug 2025 16:30:47 +0000 Manifest this update: Thu 21 Aug 2025 16:25:47 +0000 Manifest next update: Mon 25 Aug 2025 04:17:47 +0000 Files and hashes: 1: 3130332e3138342e3138312e302f32342d3234203d3e20313339333831.roa (hash: amwDD/Sw1ZMDPleCIfQ45Yvn4tCtR3QQCTma/8S3s6A=) 2: 3130332e3138342e3138302e302f32342d3234203d3e203435333035.roa (hash: bd57lftDDk/LNoDF2KUhmKXFCa0cbwtrVskfNqH8nl0=) 3: 1678828C849BDE3472FE846308767F54ED7F8232.crl (hash: /WtXS7NBwzfH766+ObNJIiu8PzJhoshkv7u+yRoERqk=) 4: 3130332e3138342e3138312e302f32342d3234203d3e203435333035.roa (hash: +6suBy02VBYIADpzrjVT+EfPKFC0O5f32zxYKkvXd28=) 5: 3130332e3138342e3138302e302f32342d3234203d3e20313339333831.roa (hash: oyydVMYyKXkpYDIFM7y9X8uh6d+LkiuOE6srFgEvka0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 04:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:0b:9e:ef:4c:51:83:20:24:5d:33:98:86:ac:88:09:ed:8d:c0:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678828C849BDE3472FE846308767F54ED7F8232 Validity Not Before: Aug 21 16:25:47 2025 GMT Not After : Aug 25 04:17:47 2025 GMT Subject: CN=DBCA70C7B71B98B2C7B10E5911921C9CEF548BA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a5:f1:df:5d:e8:68:6f:be:b9:e7:48:51:be: f3:fd:5f:77:52:d6:c7:0e:63:bd:c8:dc:5e:94:65: d1:db:ea:61:2a:6e:6f:12:b7:ef:ae:67:07:a8:fe: f4:98:16:83:b6:17:08:7a:57:5a:e4:c6:f1:46:ed: 05:33:c0:23:fa:2f:86:67:c7:1f:ba:16:96:a3:3a: 5e:79:64:4d:86:14:f3:5f:48:1d:31:9d:3f:ec:c2: 98:4c:8a:29:02:6f:e7:4e:09:80:28:94:72:bd:0f: 07:2e:08:2d:df:70:d6:39:aa:1e:dd:ed:f5:41:4e: 9b:0f:24:20:58:2f:5e:55:19:30:7a:3c:24:b3:61: 93:6e:8d:e5:21:f9:07:22:32:76:27:70:a6:90:cb: 85:45:bf:18:90:f7:fb:b9:ae:f0:32:1a:b6:b6:7a: 88:07:d1:93:73:ea:14:40:ce:0e:cd:d2:f3:9a:a9: 51:f2:66:06:5e:0b:30:95:45:89:4a:ec:64:3c:a2: be:75:3a:c8:21:69:8f:b4:cb:23:57:fe:8c:13:35: 75:ca:3d:8d:9f:4a:1e:2c:f2:ac:5d:9a:56:36:cc: ab:05:4d:90:62:b3:82:17:91:b7:16:de:9a:87:ae: 6e:40:4f:b0:f8:52:be:dd:d6:7b:9a:10:98:2a:49: 4b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:CA:70:C7:B7:1B:98:B2:C7:B1:0E:59:11:92:1C:9C:EF:54:8B:A7 X509v3 Authority Key Identifier: keyid:16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:c1:d8:4e:9d:64:5d:bc:22:dc:a5:34:bd:53:19:ba:d9:40: b1:d1:fa:13:0b:81:df:c8:28:30:9e:bd:d7:7b:81:e7:f6:e6: 67:21:49:5d:56:cc:ad:d9:da:26:1e:b2:f5:16:e9:96:95:e7: 4d:fe:b1:82:8a:b4:65:2f:f0:e1:16:6e:25:e3:d2:f2:9f:01: d3:a2:8b:73:72:18:47:06:dc:92:df:52:55:78:f7:27:a8:e2: 09:30:2c:01:68:de:ed:29:50:23:23:5f:a6:07:73:c0:76:17: db:8f:83:93:af:9e:10:75:18:9f:32:09:fa:ed:24:4f:41:3d: 2d:d9:3b:9a:85:ac:59:f1:c3:fe:f0:7d:30:05:a3:70:d0:bb: dc:a9:0c:ad:ef:f6:e9:7e:cb:04:1f:f8:bf:d2:05:d4:39:95: 49:85:f5:b6:2e:14:92:f9:f3:01:c8:9d:73:d2:aa:fe:95:03: b9:82:16:74:33:df:ed:58:0e:fe:70:c7:ac:80:e7:80:c5:85: c2:0a:ce:ef:e2:21:31:85:59:aa:a4:18:f1:a5:01:f3:8d:ef: bb:77:62:f3:44:76:ae:05:ef:e2:40:85:88:2f:21:d1:d4:fa: 01:ee:98:0c:00:bf:94:13:9c:04:ca:b0:a5:ec:dc:0b:bb:9c: 61:04:18:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdAue70xRgyAkXTOYhqyICe2NwJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRF RDdGODIzMjAeFw0yNTA4MjExNjI1NDdaFw0yNTA4MjUwNDE3NDdaMDMxMTAvBgNV BAMTKERCQ0E3MEM3QjcxQjk4QjJDN0IxMEU1OTExOTIxQzlDRUY1NDhCQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhpfHfXehob76550hRvvP9X3dS 1scOY73I3F6UZdHb6mEqbm8St++uZweo/vSYFoO2Fwh6V1rkxvFG7QUzwCP6L4Zn xx+6FpajOl55ZE2GFPNfSB0xnT/swphMiikCb+dOCYAolHK9DwcuCC3fcNY5qh7d 7fVBTpsPJCBYL15VGTB6PCSzYZNujeUh+QciMnYncKaQy4VFvxiQ9/u5rvAyGra2 eogH0ZNz6hRAzg7N0vOaqVHyZgZeCzCVRYlK7GQ8or51OsghaY+0yyNX/owTNXXK PY2fSh4s8qxdmlY2zKsFTZBis4IXkbcW3pqHrm5AT7D4Ur7d1nuaEJgqSUubAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU28pwx7cbmLLHsQ5ZEZIcnO9Ui6cwHwYDVR0j BBgwFoAUFniCjISb3jRy/oRjCHZ/VO1/gjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTU3OTkxYS0xNTZkLTRiNTUtOTBjYi03OWI4NzZjZjZhNGEvMC8xNjc4ODI4Qzg0 OUJERTM0NzJGRTg0NjMwODc2N0Y1NEVEN0Y4MjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRFRDdG ODIzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU1Nzk5MWEtMTU2ZC00YjU1LTkw Y2ItNzliODc2Y2Y2YTRhLzAvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdG NTRFRDdGODIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANPB2E6dZF28ItylNL1TGbrZQLHR+hMLgd/I KDCevdd7gef25mchSV1WzK3Z2iYesvUW6ZaV503+sYKKtGUv8OEWbiXj0vKfAdOi i3NyGEcG3JLfUlV49yeo4gkwLAFo3u0pUCMjX6YHc8B2F9uPg5OvnhB1GJ8yCfrt JE9BPS3ZO5qFrFnxw/7wfTAFo3DQu9ypDK3v9ul+ywQf+L/SBdQ5lUmF9bYuFJL5 8wHInXPSqv6VA7mCFnQz3+1YDv5wx6yA54DFhcIKzu/iITGFWaqkGPGlAfON77t3 YvNEdq4F7+JAhYgvIdHU+gHumAwAv5QTnATKsKXs3Au7nGEEGPc= -----END CERTIFICATE-----Generated at Sat Aug 23 12:35:25 2025 by rpki-client