$ rpki-client -vvf repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft File: 08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft (raw, json) Hash identifier: BBdK7W5jw9M+UlopGhCmfIDDm0Wq4okYhAAWV9BERv8= Subject key identifier: 40:6E:BA:B7:E7:E4:4A:29:CF:B3:94:80:7A:69:60:DD:05:C5:4B:27 Authority key identifier: 08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25 Certificate issuer: /CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25 Certificate serial: 29E7C74856E5BC9082A4AE4F784D78989200C72E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft Manifest number: 0511 Signing time: Fri 22 Aug 2025 10:41:39 +0000 Manifest this update: Fri 22 Aug 2025 10:36:39 +0000 Manifest next update: Mon 25 Aug 2025 20:19:39 +0000 Files and hashes: 1: 3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa (hash: VX2tVKkS7LzPxrLmOsssh+r2zJ3zeiGSJ2bMTYWz5Q8=) 2: 323430313a646234303a3a2f33322d3332203d3e20313336383635.roa (hash: KGUF32Kc9eR09Ep+PLSsXC9//4a1BdJ7Q2PE9xYrp/A=) 3: 3130332e3130322e31352e302f32342d3234203d3e20313337333331.roa (hash: MQx/O8O2uQJVqHYOSxfo/Q2KG9J3bcLTiM4IdvIIF+I=) 4: 3130332e3130322e31342e302f32342d3234203d3e20313336383635.roa (hash: dUXFtPIF61cMsxlijUdeGn+XAjJGBrV/EpzRTuOKE9M=) 5: 08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl (hash: mj8gQ3pVRbECERSM2Ld5W50wMyJqjEODFqtBZ494gB8=) 6: 3130332e3130322e31322e302f32342d3234203d3e20313336383635.roa (hash: 3P9Pl6Hs5uriFWxnAGmotMmA1+l8H3Rlr0SXz2N0yKQ=) 7: 3130332e3130322e31332e302f32342d3234203d3e20313336383635.roa (hash: w8KhQhAE9qtOeUsIYiL4lko66TpmJ+xch/XP9e9vq2Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 20:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:e7:c7:48:56:e5:bc:90:82:a4:ae:4f:78:4d:78:98:92:00:c7:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25 Validity Not Before: Aug 22 10:36:39 2025 GMT Not After : Aug 25 20:19:39 2025 GMT Subject: CN=406EBAB7E7E44A29CFB394807A6960DD05C54B27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:63:eb:17:c1:3a:7c:a8:14:37:e8:1e:92:08: bc:47:2e:20:9f:79:c8:23:b7:94:5c:6b:6d:ba:14: 4a:75:6c:02:cf:a5:aa:29:6e:1d:0b:f1:5e:6a:6f: 59:12:69:03:1e:14:d8:7a:52:63:0a:cc:6e:ee:e8: c1:49:a3:47:d7:8b:ad:f1:46:03:5c:0b:80:e5:a9: 42:04:94:eb:fd:40:62:84:7c:94:b5:e8:e4:92:31: a4:f3:8a:b9:20:af:cb:12:5e:9e:a1:94:0f:b9:66: b6:4e:e4:d1:90:e5:08:7b:3f:ef:34:2b:fa:14:5b: 17:49:8f:55:a1:8a:58:31:25:10:3b:9e:30:5b:ae: b4:c6:4e:aa:69:f0:c9:7f:9b:c0:96:7a:59:9c:b5: ae:2b:ac:4a:03:84:d5:53:af:2c:d6:cf:47:9f:c8: 2b:a8:a6:00:60:dd:80:f0:a4:e8:28:2e:bb:68:5a: 46:6e:c6:5b:b5:4f:28:80:fa:b2:e7:3e:90:ad:44: 38:0e:34:27:25:6b:bc:2c:9d:1f:10:b7:bf:00:23: c1:e8:5a:82:af:24:3c:9d:4c:a5:f6:bc:89:64:8f: 16:82:af:7f:3a:d7:f8:ed:1c:61:31:c3:a4:05:61: e1:0e:b6:ca:13:f5:86:05:aa:85:80:e9:1f:b8:a9: ec:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6E:BA:B7:E7:E4:4A:29:CF:B3:94:80:7A:69:60:DD:05:C5:4B:27 X509v3 Authority Key Identifier: keyid:08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:53:c1:fc:57:99:88:87:06:9c:4f:61:8e:14:b1:99:5f:66: 28:1d:2d:4a:34:ae:73:3c:06:64:2a:43:5a:7e:05:ee:67:24: 6e:4c:f6:43:8c:7d:1b:3f:9c:58:83:b3:1c:a2:69:87:bd:46: 03:5a:f7:fa:08:3f:eb:8b:b5:6d:40:80:19:8a:b6:01:5d:ac: 88:35:62:c7:59:9e:fe:92:08:7d:9f:89:b9:9b:21:6b:5c:61: a0:60:64:32:80:5c:4f:6b:5c:d4:c4:88:72:1b:2b:b4:55:16: d0:04:23:26:ed:60:21:95:c0:e8:e7:5d:38:1c:a0:6a:29:d9: 27:c7:92:81:51:c2:e1:4a:83:d1:71:8f:fd:ba:40:da:ff:b1: 7f:30:79:68:83:1f:d0:72:8f:6f:13:a9:11:2c:89:c4:78:d2: 41:37:2a:a1:b0:22:61:19:d0:04:2d:d6:2d:9a:a2:ab:2e:d1: 0a:12:4f:6d:cc:cc:1c:29:b8:4d:d5:2f:1e:81:15:3f:42:a8: d8:30:e4:ca:14:ae:47:07:57:b4:49:4a:8e:ae:ec:e0:54:81: 9d:35:68:45:8f:83:db:1a:6b:4e:c5:50:87:91:42:8b:89:cb: a6:8f:62:20:07:89:7f:96:ad:e4:d3:11:c6:15:85:3d:a5:86: 1a:61:84:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKefHSFblvJCCpK5PeE14mJIAxy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFDQjE4 N0Y2M0MyNTAeFw0yNTA4MjIxMDM2MzlaFw0yNTA4MjUyMDE5MzlaMDMxMTAvBgNV BAMTKDQwNkVCQUI3RTdFNDRBMjlDRkIzOTQ4MDdBNjk2MEREMDVDNTRCMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHY+sXwTp8qBQ36B6SCLxHLiCf ecgjt5Rca226FEp1bALPpaopbh0L8V5qb1kSaQMeFNh6UmMKzG7u6MFJo0fXi63x RgNcC4DlqUIElOv9QGKEfJS16OSSMaTzirkgr8sSXp6hlA+5ZrZO5NGQ5Qh7P+80 K/oUWxdJj1WhilgxJRA7njBbrrTGTqpp8Ml/m8CWelmcta4rrEoDhNVTryzWz0ef yCuopgBg3YDwpOgoLrtoWkZuxlu1TyiA+rLnPpCtRDgONCcla7wsnR8Qt78AI8Ho WoKvJDydTKX2vIlkjxaCr3861/jtHGExw6QFYeEOtsoT9YYFqoWA6R+4qey/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQG66t+fkSinPs5SAemlg3QXFSycwHwYDVR0j BBgwFoAUCHcxkfv8IaPIYVo+NqKssYf2PCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Zjg2YjEyZS1lNTc0LTQyNmItYWE2Yi00OTM5ZTNiMDMwYmEvMC8wODc3MzE5MUZC RkMyMUEzQzg2MTVBM0UzNkEyQUNCMTg3RjYzQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFDQjE4N0Y2 M0MyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY4NmIxMmUtZTU3NC00MjZiLWFh NmItNDkzOWUzYjAzMGJhLzAvMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFD QjE4N0Y2M0MyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJTwfxXmYiHBpxPYY4UsZlfZigdLUo0rnM8 BmQqQ1p+Be5nJG5M9kOMfRs/nFiDsxyiaYe9RgNa9/oIP+uLtW1AgBmKtgFdrIg1 YsdZnv6SCH2fibmbIWtcYaBgZDKAXE9rXNTEiHIbK7RVFtAEIybtYCGVwOjnXTgc oGop2SfHkoFRwuFKg9Fxj/26QNr/sX8weWiDH9Byj28TqREsicR40kE3KqGwImEZ 0AQt1i2aoqsu0QoST23MzBwpuE3VLx6BFT9CqNgw5MoUrkcHV7RJSo6u7OBUgZ01 aEWPg9saa07FUIeRQouJy6aPYiAHiX+WreTTEcYVhT2lhhphhJI= -----END CERTIFICATE-----Generated at Sat Aug 23 10:34:24 2025 by rpki-client