$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft File: 8469874AE268E2CD4E9A137EDD5599C748530E9E.mft (raw, json) Hash identifier: dlKBkwD53nVaaWlcaHLYiur7wBcCF6oFORZErgQ3hSQ= Subject key identifier: 21:FA:58:98:C8:70:67:DA:47:D1:79:76:88:47:6F:82:FB:55:37:76 Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E Certificate issuer: /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E Certificate serial: 1B1F6E178C7AF8617CBCF4E810B85AEB4BEAF2A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft Manifest number: 051B Signing time: Sat 23 Aug 2025 05:12:07 +0000 Manifest this update: Sat 23 Aug 2025 05:07:07 +0000 Manifest next update: Tue 26 Aug 2025 16:18:07 +0000 Files and hashes: 1: 3133372e35392e3136302e302f32322d3234203d3e203539323831.roa (hash: t5dSILf0M9LETh0ONTCtPeHbE5Gq+eulQJzX449lTa8=) 2: 8469874AE268E2CD4E9A137EDD5599C748530E9E.crl (hash: 9CUSDCSWL/zSoKDkn//fOqml7gF7xmHYXjz2NW3o8pQ=) 3: 3130332e3232382e3131382e302f32332d3233203d3e203536323432.roa (hash: 1wEjJgzGmGFQx1qLaHwF1vXvoQd7g22cQT5tuVMpCSs=) 4: 3133372e35392e3136322e302f32342d3234203d3e203536323432.roa (hash: q6gnQ689gbyPRWkFyTqwu7clrVFZi6YA0qntQoU052Y=) 5: 3133372e35392e3136312e302f32342d3234203d3e203536323432.roa (hash: 8kcmZ4RG24jB44cBv71IJKv0c+Dtp9Ygk9nrjPzZQxo=) 6: 3130332e3232382e3131362e302f32322d3234203d3e203539323831.roa (hash: 0on0Zr09JZO2uwExsn4al/aKrzhro4Rbk1hM7yfdFaI=) 7: 3133372e35392e3136322e302f32332d3233203d3e203536323432.roa (hash: zqqM4+D0YvV3kzADDLg9UoTtA+fv3LSZ59niExdp6h4=) 8: 3130332e3232382e3131362e302f32332d3233203d3e203536323432.roa (hash: 6BZFe33/a07P77heVgE/RRa/s7Eo4pTfBbM0ftWFlFs=) 9: 3133372e35392e3136332e302f32342d3234203d3e203536323432.roa (hash: nBHgJ9scpxnDLh4WsmH3WPakx6Rx02RsuPBuZbUxKAs=) 10: 3130332e3232382e3131362e302f32322d3232203d3e203536323432.roa (hash: LN+YrVCzUblkTbFghEN9RcfZWB+oIkio+9woygN18Nk=) 11: 323430303a636438303a3a2f33322d3438203d3e203536323432.roa (hash: lejxupJB/ypozilIjk9IOKEOtlHup4PnPlCfI+BqLVI=) 12: 323430303a636438303a3a2f33322d3438203d3e203539323831.roa (hash: w3mgpqsf+QCQ0IESSJ7u/cpRjR0jksdX+ZR9wNYh8rI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 16:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:1f:6e:17:8c:7a:f8:61:7c:bc:f4:e8:10:b8:5a:eb:4b:ea:f2:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E Validity Not Before: Aug 23 05:07:07 2025 GMT Not After : Aug 26 16:18:07 2025 GMT Subject: CN=21FA5898C87067DA47D1797688476F82FB553776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c9:0a:3a:43:e8:2f:b4:77:4c:ee:80:54:cb: ad:e2:4b:d2:8b:ef:46:48:a6:3e:5c:e0:38:a5:84: 4a:f5:12:c7:10:42:99:09:64:db:cd:16:37:7f:96: b6:e1:54:79:b2:8e:f6:fc:9e:db:92:3c:22:cf:78: 94:40:da:4f:61:ad:ce:05:4b:79:cf:e6:df:02:b9: e2:a0:70:4d:35:b5:91:0e:40:99:a2:d6:97:4e:42: d8:34:13:17:09:8d:05:60:28:dd:ae:a7:0f:e5:b0: 5c:60:ea:40:2a:9b:38:07:f4:f5:e1:11:ef:e0:b1: 0f:93:4e:79:1b:a7:38:de:6e:49:2f:81:41:69:14: a3:ac:63:7c:dd:80:80:be:03:a2:90:64:ba:c1:fe: df:8c:b9:1c:05:13:ea:ce:0a:5a:f6:c9:91:f5:65: b4:38:32:51:9d:90:7e:96:a5:79:95:65:4e:54:d3: 49:38:86:48:fb:80:49:d0:c3:16:86:f4:7a:56:3c: be:9b:ab:54:c3:92:86:4e:05:9c:3a:14:fc:52:fe: 35:cf:7d:68:71:ac:9c:77:bc:e2:04:f1:cd:93:d7: 2d:c7:39:47:cf:00:09:28:b1:dd:fb:f1:27:c6:c1: b5:48:2c:b8:aa:80:9d:63:eb:e6:1d:78:71:29:23: e1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FA:58:98:C8:70:67:DA:47:D1:79:76:88:47:6F:82:FB:55:37:76 X509v3 Authority Key Identifier: keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:45:15:3c:cd:28:4c:86:bf:27:ed:b2:c5:53:23:8a:63:e0: b5:71:ed:a0:5b:17:07:67:6f:6e:61:db:78:14:02:3c:2d:74: 00:7a:30:cc:40:4b:df:ab:e6:76:30:a0:79:b4:97:b3:25:ff: 1b:06:7e:28:06:50:07:f9:71:6c:6a:0d:a3:a5:19:ae:e6:e4: 78:08:ee:c5:34:df:aa:5f:96:53:6a:87:7d:97:9c:20:04:21: 36:22:3c:b2:1e:6c:19:06:bb:67:94:ea:ea:d3:b2:7c:aa:cf: 2b:ac:12:32:39:b4:60:15:88:39:ff:e9:5c:d7:ae:73:ed:3c: a9:80:5e:f7:2a:18:28:c2:c5:50:2b:00:ea:85:49:73:ac:40: 61:40:a5:b0:77:86:01:ad:f6:5d:c3:77:64:41:6d:bd:78:63: 4d:40:45:71:b7:c5:4b:30:3e:8e:23:99:35:65:14:4b:1d:44: c2:1b:f9:47:6e:d1:e5:e8:25:65:f3:92:ac:c2:ba:5a:d9:a8: c2:1b:33:71:b2:18:7c:84:b9:77:cf:c2:2c:11:d6:cc:5f:26: 6a:d7:c6:e3:5d:a3:c6:86:36:7a:d1:a6:bc:9c:0d:23:7e:18: f8:00:c0:0e:c8:f7:37:55:0e:46:51:dc:45:73:3f:1b:ce:35: ff:a9:4e:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGx9uF4x6+GF8vPToELha60vq8qQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0 ODUzMEU5RTAeFw0yNTA4MjMwNTA3MDdaFw0yNTA4MjYxNjE4MDdaMDMxMTAvBgNV BAMTKDIxRkE1ODk4Qzg3MDY3REE0N0QxNzk3Njg4NDc2RjgyRkI1NTM3NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdyQo6Q+gvtHdM7oBUy63iS9KL 70ZIpj5c4DilhEr1EscQQpkJZNvNFjd/lrbhVHmyjvb8ntuSPCLPeJRA2k9hrc4F S3nP5t8CueKgcE01tZEOQJmi1pdOQtg0ExcJjQVgKN2upw/lsFxg6kAqmzgH9PXh Ee/gsQ+TTnkbpzjebkkvgUFpFKOsY3zdgIC+A6KQZLrB/t+MuRwFE+rOClr2yZH1 ZbQ4MlGdkH6WpXmVZU5U00k4hkj7gEnQwxaG9HpWPL6bq1TDkoZOBZw6FPxS/jXP fWhxrJx3vOIE8c2T1y3HOUfPAAkosd378SfGwbVILLiqgJ1j6+YdeHEpI+GhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIfpYmMhwZ9pH0Xl2iEdvgvtVN3YwHwYDVR0j BBgwFoAUhGmHSuJo4s1OmhN+3VWZx0hTDp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2EyZDI1Yi1jYjE4LTQ1YmUtOWZhMS0xNTRjYTE1NzkyMjMvMC84NDY5ODc0QUUy NjhFMkNENEU5QTEzN0VERDU1OTlDNzQ4NTMwRTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0ODUz MEU5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdhMmQyNWItY2IxOC00NWJlLTlm YTEtMTU0Y2ExNTc5MjIzLzAvODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5 Qzc0ODUzMEU5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1FFTzNKEyGvyftssVTI4pj4LVx7aBbFwdn b25h23gUAjwtdAB6MMxAS9+r5nYwoHm0l7Ml/xsGfigGUAf5cWxqDaOlGa7m5HgI 7sU036pfllNqh32XnCAEITYiPLIebBkGu2eU6urTsnyqzyusEjI5tGAViDn/6VzX rnPtPKmAXvcqGCjCxVArAOqFSXOsQGFApbB3hgGt9l3Dd2RBbb14Y01ARXG3xUsw Po4jmTVlFEsdRMIb+Udu0eXoJWXzkqzCulrZqMIbM3GyGHyEuXfPwiwR1sxfJmrX xuNdo8aGNnrRprycDSN+GPgAwA7I9zdVDkZR3EVzPxvONf+pTqM= -----END CERTIFICATE-----Generated at Sat Aug 23 19:55:53 2025 by rpki-client