$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft File: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft (raw, json) Hash identifier: vSxwdh/2oAwdM/NOpNPvef+64JdR5b5NCWZEF9Y8jRE= Subject key identifier: AC:8B:3A:12:EB:40:7D:A7:16:E7:EA:B9:AE:69:76:3B:9D:7C:D4:45 Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Certificate serial: 233DCD29F330D76F1CCE04C2AC1B8AFADE364474 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft Manifest number: D0 Signing time: Sat 23 Aug 2025 10:01:25 +0000 Manifest this update: Sat 23 Aug 2025 09:56:25 +0000 Manifest next update: Tue 26 Aug 2025 20:43:25 +0000 Files and hashes: 1: 323430343a393763303a393763303a3a2f34342d3434203d3e20313533303837.roa (hash: Rd+MYgkYtI8Em6b7VkPxEFn2gv60uz4eRZ5jfkklOME=) 2: 323430343a393763303a3a2f34302d3430203d3e20313533303837.roa (hash: IUWcIIvw/5B79/1vlmhpjp2xq/bxBr1gvBDlm1MJkEE=) 3: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl (hash: NkUptAr9L9q6XZevG7M91dL5E1GKB2FEVW3uHBymo3M=) 4: 323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa (hash: 6h5ukYFuCno4f7DUxvLhYVLFCjOWP5SiTwkMYTzIF/4=) 5: 323430343a393763303a3232333a3a2f34382d3438203d3e20313533303837.roa (hash: CoVHqDze9/9Ad7yystdU0IkQDdi+UUE5paHmjRb7ddU=) 6: 323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa (hash: 62idZGQxlSWM3llZuSqKAdjwW6hLve0VhfHgcV849wU=) 7: 323430343a393763303a3a2f33362d3336203d3e20313533303837.roa (hash: bZomEerwTckK0uovhCRCPeCKuhMrW+Qy9Lz5ot1+QLM=) 8: 323430343a393763303a613030303a3a2f33362d3336203d3e20313533303837.roa (hash: cFUzi273SYArAUsUFdIqNgQFTFMOnTlJq02/dC40bZE=) 9: 323430343a393763303a333130303a3a2f34302d3430203d3e20313533303837.roa (hash: GtLJlyIT44yOE5pTxubbE+JVbv879K3iwKIQBgBcJ2I=) 10: 323430343a393763303a393763303a3a2f34382d3438203d3e20313533303837.roa (hash: UH1OeEapN00xpdN52GP23gFWyVB860/o2X8O7dKpC+0=) 11: 323430343a393763303a333030303a3a2f33362d3336203d3e20313533303837.roa (hash: 9hl66Fb3ZZtaq9RTVyzyMYKvn9CeIA27uiDhLsoWI3A=) 12: 323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa (hash: Lk2DgYj+QODfg+053uFba0kcIHOb5Vr+/MafHCR41Bo=) 13: 323430343a393763303a393030303a3a2f33362d3336203d3e20313533303837.roa (hash: vJHjXSNbN+nrHshiQZVlbnAzNovBDlJVOtnmhWeep78=) 14: 323430343a393763303a3232323a3a2f34382d3438203d3e20313533303837.roa (hash: wzrRIRPSPMpZXs/6SqbPwUgiCefzNUlDE+HufEdbYVA=) 15: 323430343a393763303a633030303a3a2f33362d3336203d3e20313533303837.roa (hash: CExyw62yhaULfuFNwHgJQzvOaDneumlJpO9PSL24k5c=) 16: 323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa (hash: /RbGQNrG5f2b5xUZmbLZIUIJCT8zlW48+GUxpa/P1BY=) 17: 323430343a393763303a373030303a3a2f33362d3336203d3e20313533303837.roa (hash: lc21YQEjyBtBR3cEzA2MpTAYh2Z++8zZog+Taujf5EA=) 18: 323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa (hash: xoql0u4cJ/KRzzlhzdPt4uyRXe/QNmDlgTST+s7tLx0=) 19: 323430343a393763303a393730303a3a2f34302d3430203d3e20313533303837.roa (hash: 2kWw72G7y9+iu7Oj2LdzHrFFqPrgZYlByeJlEDz3xGE=) 20: 323430343a393763303a3130333a3a2f34382d3438203d3e20313533303837.roa (hash: sjFkPQRbAFB+/y9Sh73guddwprpnyTSYhc+NK3cVMUk=) 21: 323430343a393763303a323230303a3a2f34302d3430203d3e20313533303837.roa (hash: Wdn8WLm/z70TbHCfvi7cPeFpinXRYOP3acHf9F2yoZI=) 22: 323430343a393763303a313630303a3a2f34302d3430203d3e20313533303837.roa (hash: mdadZ+r3nk3ljg8TD8Qk3FJTWop4VzOG0q1+8q98qdQ=) 23: 323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa (hash: BcmLy7eGAXxwcAZfEvgQEqwzVahjl/LS8t/7DNQb3O0=) 24: 323430343a393763303a343030303a3a2f33362d3336203d3e20313533303837.roa (hash: CswFvDupWqQkmZpyiNQV19oxsV8YOajNmUapEbDiz6Q=) 25: 323430343a393763303a323030303a3a2f33362d3336203d3e20313533303837.roa (hash: 2dvpZD7SkLIO8Bb1a+NTuA+XOzdWGBmc4e1hLBWS+aY=) 26: 323430343a393763303a3232303a3a2f34342d3434203d3e20313533303837.roa (hash: f+QA2MdOH3pD5wnFB0dGm2Zrsg4T8gtTfRmGOdNWdhQ=) 27: 323430343a393763303a3136333a3a2f34382d3438203d3e20313533303837.roa (hash: 1NH1eG3Zfl97MOtxtfrsqqGCWGbmYZJJ7WvL5sj1ARU=) 28: 323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa (hash: opmintFf7rKX4t8MJAAA/SPs3kIqRtIjgx+RStmQ20g=) 29: 323430343a393763303a3a2f33322d3332203d3e20313533303837.roa (hash: RbbbhN7gQjhRmlONdMhkhAU8C3rOa0UopxhZkN4y+0U=) 30: 323430343a393763303a323330303a3a2f34302d3430203d3e20313533303837.roa (hash: hfVgYmT+s3T/gP2ZWIlWtZU/K6JQ3MvR1bPnXxp9XLc=) 31: 323430343a393763303a3937303a3a2f34342d3434203d3e20313533303837.roa (hash: FCPjRuILimc1y3AzWysntAW1lv6bPjvpNuCAb/4Y8KY=) 32: 323430343a393763303a623030303a3a2f33362d3336203d3e20313533303837.roa (hash: htvHw1UId6QYt8Zem0GwkkJ79UHzGuY9MeNMUAYecR4=) 33: 323430343a393763303a313030303a3a2f33362d3336203d3e20313533303837.roa (hash: DUx1uGcFaMxSBQpP1ITofuirpaclZNzBSNRp/I11LcM=) 34: 323430343a393763303a353030303a3a2f33362d3336203d3e20313533303837.roa (hash: jSQKKM5t1FotHl9IvmmOV1bpO2Bm+Ktc/PrlSfNtDhw=) 35: 323430343a393763303a643030303a3a2f33362d3336203d3e20313533303837.roa (hash: NVdbP46U9HcnF9BcVuhppXenoJ+oGsK6bpcGbNkhYrY=) 36: 323430343a393763303a323232303a3a2f34342d3434203d3e20313533303837.roa (hash: /Nnh6j9dQCYcuoIKmMpFeUVi7V4lhYfyFAMUQ8KcTyY=) 37: 323430343a393763303a383030303a3a2f33362d3336203d3e20313533303837.roa (hash: VrqEqcYe4ew7uni6W9u41N7qHk2GgBXWkfjAlNiKflw=) 38: 323430343a393763303a333132363a3a2f34382d3438203d3e20313533303837.roa (hash: Z2kUGl4d2/nWr+hivZqHD1txvHpg/IJVAL0dy1bjHtc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 20:43:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:3d:cd:29:f3:30:d7:6f:1c:ce:04:c2:ac:1b:8a:fa:de:36:44:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Validity Not Before: Aug 23 09:56:25 2025 GMT Not After : Aug 26 20:43:25 2025 GMT Subject: CN=AC8B3A12EB407DA716E7EAB9AE69763B9D7CD445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d3:99:85:3e:15:e9:ba:f0:56:88:8c:99:63: fb:3a:2d:9e:36:53:13:22:97:0e:45:f0:79:12:2b: 74:30:f6:f3:ac:af:a4:dc:0f:63:a1:32:9b:e2:e9: 25:1e:39:d0:ed:98:e3:b2:18:25:45:eb:4e:fa:b5: 55:ab:08:39:f9:56:5e:fb:6c:03:70:23:3c:58:b4: e6:3c:30:f3:09:a1:10:dd:12:2c:73:f2:c4:a3:c4: ab:36:3f:d0:21:c9:f7:a4:3c:2a:c4:85:2e:6c:8b: ac:82:f0:f6:f7:17:c9:75:31:08:8a:9b:8f:10:89: a4:3e:90:47:e5:11:10:72:74:6a:ba:fc:01:9f:39: dc:47:a2:a0:9a:1a:53:6d:ea:f1:9a:c5:e1:46:81: 8c:e9:e7:c0:ba:5c:23:cd:98:c8:c3:d8:f3:27:24: c4:7c:11:7d:5e:70:95:96:61:54:71:d3:4a:de:16: 44:3e:c6:84:b3:35:6b:6a:21:64:37:a9:f2:12:f2: 15:0f:7c:cb:ec:9f:ad:aa:fc:63:cf:36:10:52:77: c6:34:b0:bb:05:e5:24:8c:25:97:1e:ae:aa:a2:76: e6:8e:a2:4e:b8:5a:a7:9e:d2:f2:b2:f7:a9:cc:11: 17:2e:9b:14:e9:43:88:a3:93:5b:b5:ff:59:78:0b: a0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8B:3A:12:EB:40:7D:A7:16:E7:EA:B9:AE:69:76:3B:9D:7C:D4:45 X509v3 Authority Key Identifier: keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:bf:2e:49:42:56:eb:db:c1:14:17:fa:c1:1a:23:3e:85:03: f7:45:80:63:92:25:7a:fe:33:47:93:6c:8b:4a:03:69:6e:f7: 46:07:08:03:55:c1:b5:2c:ae:c0:d4:c5:dc:eb:1f:ad:8a:76: f0:9a:13:a5:7b:a8:f3:b2:b7:24:f1:b2:cf:75:39:23:8d:09: 32:a4:c6:14:f1:3e:d7:eb:93:00:ed:eb:95:9d:e9:61:9a:cf: 94:84:64:ad:0e:e0:c0:92:2f:7e:84:14:e9:cf:e2:51:1a:bc: 8e:44:e4:fe:4e:ef:74:95:4f:07:84:4d:80:4c:2b:c8:16:6f: cb:0c:d6:c2:86:c2:ee:64:a7:c1:5a:f0:35:af:22:0d:da:22: 7c:4e:86:e3:a5:bd:69:17:c2:30:b0:25:f9:b2:e1:23:5b:18: 26:1a:44:52:7c:31:62:ec:99:61:6d:41:31:52:fa:73:6b:e6: e3:f6:20:5d:5e:d7:04:a3:e6:41:85:1a:d1:31:4b:4e:82:20: cd:7d:06:64:9f:d6:e9:26:fc:cb:ea:ae:f4:e0:75:1f:81:f3: 2b:ba:8d:b5:0d:74:a8:e3:1c:b5:70:88:62:58:bc:40:d0:7c: 53:cc:83:6d:a3:ec:a4:b4:98:9a:d6:93:f1:3e:60:1f:c4:da: c3:e6:c6:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIz3NKfMw128czgTCrBuK+t42RHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4 QzFENTE1ODAeFw0yNTA4MjMwOTU2MjVaFw0yNTA4MjYyMDQzMjVaMDMxMTAvBgNV BAMTKEFDOEIzQTEyRUI0MDdEQTcxNkU3RUFCOUFFNjk3NjNCOUQ3Q0Q0NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd05mFPhXpuvBWiIyZY/s6LZ42 UxMilw5F8HkSK3Qw9vOsr6TcD2OhMpvi6SUeOdDtmOOyGCVF6076tVWrCDn5Vl77 bANwIzxYtOY8MPMJoRDdEixz8sSjxKs2P9AhyfekPCrEhS5si6yC8Pb3F8l1MQiK m48QiaQ+kEflERBydGq6/AGfOdxHoqCaGlNt6vGaxeFGgYzp58C6XCPNmMjD2PMn JMR8EX1ecJWWYVRx00reFkQ+xoSzNWtqIWQ3qfIS8hUPfMvsn62q/GPPNhBSd8Y0 sLsF5SSMJZcerqqiduaOok64Wqee0vKy96nMERcumxTpQ4ijk1u1/1l4C6DpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrIs6EutAfacW5+q5rml2O5181EUwHwYDVR0j BBgwFoAUTfPbPaIdACIgITBzbkzLBIwdUVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMS80REYzREIzREEy MUQwMDIyMjAyMTMwNzM2RTRDQ0IwNDhDMUQ1MTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4QzFE NTE1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRlZDU4MTEtYmU1MC00Y2FhLTlm OTYtNjNkMzcyMDMxMWRlLzEvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NC MDQ4QzFENTE1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKW/LklCVuvbwRQX+sEaIz6FA/dFgGOSJXr+ M0eTbItKA2lu90YHCANVwbUsrsDUxdzrH62KdvCaE6V7qPOytyTxss91OSONCTKk xhTxPtfrkwDt65Wd6WGaz5SEZK0O4MCSL36EFOnP4lEavI5E5P5O73SVTweETYBM K8gWb8sM1sKGwu5kp8Fa8DWvIg3aInxOhuOlvWkXwjCwJfmy4SNbGCYaRFJ8MWLs mWFtQTFS+nNr5uP2IF1e1wSj5kGFGtExS06CIM19BmSf1ukm/MvqrvTgdR+B8yu6 jbUNdKjjHLVwiGJYvEDQfFPMg22j7KS0mJrWk/E+YB/E2sPmxmU= -----END CERTIFICATE-----Generated at Sat Aug 23 18:51:59 2025 by rpki-client