$ rpki-client -vvf repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft File: 667078BDA093F84040F3016D179CABA67F68A647.mft (raw, json) Hash identifier: Th246N+av63J/G85O/aZSJ3I78+I+D1TMSXUOlVexGw= Subject key identifier: 5A:81:4C:89:D9:11:51:BC:BE:EC:8B:1C:32:08:D1:95:D1:97:E1:9E Authority key identifier: 66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47 Certificate issuer: /CN=667078BDA093F84040F3016D179CABA67F68A647 Certificate serial: 75264276202969C3F9399450A9333671F6507119 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft Manifest number: 02A7 Signing time: Sat 23 Aug 2025 07:21:24 +0000 Manifest this update: Sat 23 Aug 2025 07:16:24 +0000 Manifest next update: Tue 26 Aug 2025 15:04:24 +0000 Files and hashes: 1: 3230322e35322e3134302e302f32332d3233203d3e203436303631.roa (hash: KjBI4hI0AlEFbo2xU6Bm4rvZiTCH+24WsSGbJ4G6HvE=) 2: 3230322e35322e3134302e302f32342d3234203d3e203436303631.roa (hash: bxs7h997RIiZF6c39aYCG2w95CeY51sHbMaUnM9gLUg=) 3: 3130332e32342e37332e302f32342d3234203d3e203436303631.roa (hash: f1PpRxL3xmZAFFxFfzO5NNMp7lmH15xQgW21SceJnv4=) 4: 3130332e32342e37342e302f32332d3233203d3e203436303631.roa (hash: oIugf7SkpkLh2rA1SUGcdVhDVwaoCqTNTgMKOIhVMMI=) 5: 3130332e32342e37322e302f32322d3232203d3e203436303631.roa (hash: STQ8FWii/hKTuO2HgGm9t5vTCO9x73WQ7dbNQLgSBY8=) 6: 3130332e32342e37322e302f32332d3233203d3e203436303631.roa (hash: x4DDjlfJXD8JPTM+yjgeUkBoc/VsMYv5J2mqGIAVt3k=) 7: 3130332e32342e37352e302f32342d3234203d3e203436303631.roa (hash: gzAKun938h8MEEYn2Es4sjxOwM+BBzImFI8E5s6Tryg=) 8: 3130332e32342e37342e302f32342d3234203d3e203436303631.roa (hash: bikfKb1C7cQAEY1CyyouPcQSs6oSuCD6TbZ1wF/jE50=) 9: 667078BDA093F84040F3016D179CABA67F68A647.crl (hash: mx0lNyh3QbtEDAWUb23G7L5MF/wgNOWeFB1dfIQSbc4=) 10: 323430303a656134303a3a2f33322d3332203d3e203436303631.roa (hash: K7wbvP8VipTjZ61KDQJhbbGGoXz8zSKyn6wY7TPFZF8=) 11: 3130332e32342e37322e302f32342d3234203d3e203436303631.roa (hash: WznhULhoAr96hBAHamaaGBFJbGkn7dyLR/yoxDJeWgk=) 12: 3230322e35322e3134312e302f32342d3234203d3e203436303631.roa (hash: v5G7kmND4W3J/K5+mTTiIU5a1MXpKeI9ErNdzwXM+xc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 15:04:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:26:42:76:20:29:69:c3:f9:39:94:50:a9:33:36:71:f6:50:71:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=667078BDA093F84040F3016D179CABA67F68A647 Validity Not Before: Aug 23 07:16:24 2025 GMT Not After : Aug 26 15:04:24 2025 GMT Subject: CN=5A814C89D91151BCBEEC8B1C3208D195D197E19E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:35:e5:28:d0:e1:95:09:72:c9:f7:84:c1:f4: f5:24:c7:12:11:96:70:77:6c:3a:0e:0e:b2:85:ab: ea:b3:9a:53:65:b9:d2:62:15:7b:d8:00:5a:62:fd: 6a:41:6d:05:c6:f2:87:49:2e:e1:43:5b:fa:1b:fd: 9d:51:d8:4b:07:06:c6:20:be:cc:b6:ec:e9:77:20: 75:44:bb:d4:92:c0:68:30:ac:67:29:56:82:c4:46: 03:0d:12:51:43:94:95:f8:0e:9a:a0:6c:0c:e4:9f: 24:c1:40:a7:c9:4c:44:4c:e1:af:3c:4a:d0:1a:88: c0:d7:eb:5d:10:7a:09:54:e7:60:67:ee:6d:44:43: f6:1f:e7:7f:47:6f:2b:35:ae:86:5c:2c:ca:81:2d: f5:1c:f4:1c:f6:7e:58:27:10:d9:f0:71:33:56:fb: 6d:03:0c:d1:7d:6f:83:f0:32:9b:b5:14:59:e5:e1: 4e:87:9f:e2:2e:6e:fc:2f:8e:70:a7:0c:3b:e8:d6: c6:f2:3d:9d:e1:2b:66:24:78:6e:72:4e:e3:36:12: b5:c6:91:ea:23:a9:d4:05:e0:e0:c6:05:23:91:77: 86:9c:7e:ff:5d:5a:fe:8a:6c:16:0e:cb:6e:6d:81: 1b:8f:ff:3c:a4:f2:09:90:39:82:89:fc:c5:d3:06: d5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:81:4C:89:D9:11:51:BC:BE:EC:8B:1C:32:08:D1:95:D1:97:E1:9E X509v3 Authority Key Identifier: keyid:66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:0f:d2:71:1b:aa:5f:12:54:30:28:fd:c4:a3:8d:78:6d:22: ef:58:12:60:09:91:54:65:66:af:26:3d:bd:f4:83:01:f9:a1: bd:09:08:37:27:26:be:95:c2:f5:76:f0:d7:bd:2f:4a:aa:81: f8:bf:7f:81:14:8c:91:df:d0:d8:59:e4:a1:62:23:f7:7b:8b: 1c:44:bf:e1:77:68:85:e9:ec:03:df:15:19:73:5c:3c:47:a0: f0:53:ce:b5:86:3f:cc:81:d3:8e:6c:b5:58:09:73:3b:a5:14: 6c:05:a0:3c:dc:95:98:81:3c:09:e7:9d:f0:47:1e:d1:c8:63: 50:cc:33:c6:9f:1c:c3:8a:bb:e9:18:f6:bf:26:65:fd:0a:06: eb:8d:7a:cf:ab:28:33:0e:10:28:da:f0:57:b7:5a:88:53:e5: 57:8c:4d:6e:b4:86:03:11:25:9c:b8:2f:1a:7d:fe:22:14:a2: b9:5c:26:7e:77:22:fd:57:ff:3a:00:24:e3:b0:7f:77:f7:e4: 4b:b4:87:ed:a4:eb:36:64:57:03:76:e8:54:1c:92:ca:8b:f4: fd:44:e0:0f:3f:a9:ff:0b:c7:0c:52:10:ce:0e:d3:1a:8d:76: 26:ef:ed:c5:59:e5:cc:5d:1a:c4:d4:f8:d0:f9:8f:aa:7d:56: 9a:b5:fa:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdSZCdiApacP5OZRQqTM2cfZQcRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY3MDc4QkRBMDkzRjg0MDQwRjMwMTZEMTc5Q0FCQTY3 RjY4QTY0NzAeFw0yNTA4MjMwNzE2MjRaFw0yNTA4MjYxNTA0MjRaMDMxMTAvBgNV BAMTKDVBODE0Qzg5RDkxMTUxQkNCRUVDOEIxQzMyMDhEMTk1RDE5N0UxOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuNeUo0OGVCXLJ94TB9PUkxxIR lnB3bDoODrKFq+qzmlNludJiFXvYAFpi/WpBbQXG8odJLuFDW/ob/Z1R2EsHBsYg vsy27Ol3IHVEu9SSwGgwrGcpVoLERgMNElFDlJX4DpqgbAzknyTBQKfJTERM4a88 StAaiMDX610QeglU52Bn7m1EQ/Yf539Hbys1roZcLMqBLfUc9Bz2flgnENnwcTNW +20DDNF9b4PwMpu1FFnl4U6Hn+IubvwvjnCnDDvo1sbyPZ3hK2YkeG5yTuM2ErXG keojqdQF4ODGBSORd4acfv9dWv6KbBYOy25tgRuP/zyk8gmQOYKJ/MXTBtWJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWoFMidkRUby+7IscMgjRldGX4Z4wHwYDVR0j BBgwFoAUZnB4vaCT+EBA8wFtF5yrpn9opkcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzMyNmY0ZS02NjA1LTQ5NmEtYjlmOC1kNmU3N2IyOWJjYzYvMC82NjcwNzhCREEw OTNGODQwNDBGMzAxNkQxNzlDQUJBNjdGNjhBNjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY3MDc4QkRBMDkzRjg0MDQwRjMwMTZEMTc5Q0FCQTY3RjY4 QTY0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMzMjZmNGUtNjYwNS00OTZhLWI5 ZjgtZDZlNzdiMjliY2M2LzAvNjY3MDc4QkRBMDkzRjg0MDQwRjMwMTZEMTc5Q0FC QTY3RjY4QTY0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQP0nEbql8SVDAo/cSjjXhtIu9YEmAJkVRl Zq8mPb30gwH5ob0JCDcnJr6VwvV28Ne9L0qqgfi/f4EUjJHf0NhZ5KFiI/d7ixxE v+F3aIXp7APfFRlzXDxHoPBTzrWGP8yB045stVgJczulFGwFoDzclZiBPAnnnfBH HtHIY1DMM8afHMOKu+kY9r8mZf0KBuuNes+rKDMOECja8Fe3WohT5VeMTW60hgMR JZy4Lxp9/iIUorlcJn53Iv1X/zoAJOOwf3f35Eu0h+2k6zZkVwN26FQcksqL9P1E 4A8/qf8LxwxSEM4O0xqNdibv7cVZ5cxdGsTU+ND5j6p9Vpq1+l0= -----END CERTIFICATE-----Generated at Sat Aug 23 17:39:03 2025 by rpki-client