$ rpki-client -vvf repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft File: 115880D133393FF2D96A5861679B5166AFDB1248.mft (raw, json) Hash identifier: 2Z6zz4lGx2myrDAiSx0mIVzZiLba3fdJZkyadq6NXaI= Subject key identifier: E6:FB:E9:0A:F3:FF:83:75:0D:76:ED:2C:DC:0E:FA:EC:AE:68:EB:1A Authority key identifier: 11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48 Certificate issuer: /CN=115880D133393FF2D96A5861679B5166AFDB1248 Certificate serial: 7DAA4CA7EE43B460E71A367C111BB1B71A27AF84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft Manifest number: 0199 Signing time: Sun 29 Jun 2025 07:52:08 +0000 Manifest this update: Sun 29 Jun 2025 07:47:08 +0000 Manifest next update: Wed 02 Jul 2025 09:01:08 +0000 Files and hashes: 1: 3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa (hash: dsbjoyKjKxL4iwUB8V3WadTuSmVRqe7mRaojqe/cx6g=) 2: 3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa (hash: mM1uMrTnIIOB9qV95bnMry0CA1H0myomJNfLWIW9li4=) 3: 3130332e3136312e3133342e302f32342d3234203d3e20313530343635.roa (hash: +z4cRvyNT4QtWwPTkT8yZCGmj9VTYSFEsOdsS2JDhX8=) 4: 3130332e3136312e3133352e302f32342d3234203d3e20313530343635.roa (hash: Jn9654uE1MAkhxHMr7LmE5+YeOZ6sz4Pa6nAFO5Kq+Q=) 5: 3130332e3136312e3133342e302f32332d3233203d3e20313530343635.roa (hash: MPl5ELQ+jnWnL8LJsxoYECXhQIy/2gQtSqxW1SRND58=) 6: 3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa (hash: ovzcVNQEy/mX6iGBONz7ezsyibr0pRiafYk0E6VSJek=) 7: 3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa (hash: PUB3O8b9f0V9upxUQ1vz/Akmef3nw9nhl+zmK2wYTN8=) 8: 115880D133393FF2D96A5861679B5166AFDB1248.crl (hash: UR877cNsvcB9+I+eyHFykH+h1SocKeYY3zMGIo+vyJY=) 9: 3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa (hash: qOgMs8L+7L6hzGSgXrwuDdjZMuQgbmzasXiAjPj9OOI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:aa:4c:a7:ee:43:b4:60:e7:1a:36:7c:11:1b:b1:b7:1a:27:af:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115880D133393FF2D96A5861679B5166AFDB1248 Validity Not Before: Jun 29 07:47:08 2025 GMT Not After : Jul 2 09:01:08 2025 GMT Subject: CN=E6FBE90AF3FF83750D76ED2CDC0EFAECAE68EB1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:e9:85:57:d6:f6:c7:b1:51:80:97:a4:2a:44: 23:90:b6:f4:69:c9:f7:f2:f5:44:2f:22:41:08:0e: 02:23:6c:82:c8:8a:6f:02:b2:b8:ff:d0:11:72:d8: 05:ff:4a:d6:5b:3f:99:f9:9f:19:e6:97:8f:1a:05: 45:b2:d0:a8:e4:ba:8c:15:e7:19:21:ad:73:a4:04: 70:ae:b0:16:2c:77:ee:da:bd:b3:a9:d5:da:f5:7a: 00:f6:2f:6c:c0:1c:55:59:22:05:9d:a2:9c:5b:06: 57:0f:11:f8:a6:19:56:be:c0:4a:c6:df:49:30:88: 39:dc:e0:7c:85:8b:57:ed:3d:aa:71:27:da:9d:cc: f2:19:1b:8e:f3:5e:7e:bc:6c:66:b6:23:e2:99:d8: ee:05:e5:b8:b3:f9:1d:38:a0:e0:14:9a:66:fd:39: ea:9d:42:c0:38:13:7d:1b:26:4b:4d:04:d5:4d:d5: ac:e0:53:39:5c:cf:18:a2:9a:e1:2c:23:6b:fc:c2: 60:f0:3e:39:8e:fe:8f:8e:8f:ae:0b:08:00:ea:88: f4:71:08:ee:0f:7f:36:b8:f8:55:b8:57:e9:4b:60: ea:4e:58:df:95:30:47:02:42:d1:ca:21:99:1f:1e: 29:79:e7:86:76:52:e0:5d:d7:d4:5f:98:5e:d7:74: 10:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FB:E9:0A:F3:FF:83:75:0D:76:ED:2C:DC:0E:FA:EC:AE:68:EB:1A X509v3 Authority Key Identifier: keyid:11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:33:de:0d:25:76:3b:07:a0:59:bb:09:c3:be:9a:09:77:5d: fe:0e:eb:3f:af:9e:b3:3d:67:86:ef:16:af:89:d2:62:17:b2: f0:0c:20:4c:2a:cf:42:51:ad:0e:91:7a:ec:22:71:0e:78:08: 72:cb:27:96:cf:19:35:ed:43:cc:ce:42:49:1f:7a:45:b8:71: ef:4f:db:55:41:00:12:cc:27:2b:08:8e:96:eb:24:c4:23:9c: a7:7a:77:4b:ea:06:e2:c7:e8:c4:c6:f6:88:79:2a:9d:fb:0d: d4:3f:d0:be:e7:e1:22:be:b6:b3:37:12:72:4a:ac:b3:93:7c: fd:f9:af:0f:0c:0b:6a:c3:cc:ce:80:e9:a4:93:87:4c:a0:af: fb:47:f0:c4:b3:cf:a8:53:27:7e:03:fc:ff:3f:1d:f1:fe:87: 51:81:b8:bd:46:a1:8c:c5:21:07:43:39:48:29:80:cc:cd:d4: 5c:51:2f:b8:0a:71:da:d2:9f:18:79:a8:4e:d1:37:82:f6:f8: d2:bb:e8:d0:2e:34:ab:dc:c8:0b:fb:07:07:8a:7e:25:c8:f2: 23:22:30:84:19:db:92:0a:f7:a3:f2:33:8e:88:bb:d7:af:72: 73:fe:72:09:56:df:76:c6:ae:82:12:06:96:bf:f6:b6:1a:c2: 4f:38:ff:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfapMp+5DtGDnGjZ8ERuxtxonr4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUxNjZB RkRCMTI0ODAeFw0yNTA2MjkwNzQ3MDhaFw0yNTA3MDIwOTAxMDhaMDMxMTAvBgNV BAMTKEU2RkJFOTBBRjNGRjgzNzUwRDc2RUQyQ0RDMEVGQUVDQUU2OEVCMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy6YVX1vbHsVGAl6QqRCOQtvRp yffy9UQvIkEIDgIjbILIim8Csrj/0BFy2AX/StZbP5n5nxnml48aBUWy0KjkuowV 5xkhrXOkBHCusBYsd+7avbOp1dr1egD2L2zAHFVZIgWdopxbBlcPEfimGVa+wErG 30kwiDnc4HyFi1ftPapxJ9qdzPIZG47zXn68bGa2I+KZ2O4F5biz+R04oOAUmmb9 OeqdQsA4E30bJktNBNVN1azgUzlczxiimuEsI2v8wmDwPjmO/o+Oj64LCADqiPRx CO4Pfza4+FW4V+lLYOpOWN+VMEcCQtHKIZkfHil554Z2UuBd19RfmF7XdBDHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5vvpCvP/g3UNdu0s3A767K5o6xowHwYDVR0j BBgwFoAUEViA0TM5P/LZalhhZ5tRZq/bEkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTU2ODAxZi1hNjdiLTQzZGQtOGY2Mi1iN2IwZDYwMzE3YWYvMC8xMTU4ODBEMTMz MzkzRkYyRDk2QTU4NjE2NzlCNTE2NkFGREIxMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUxNjZBRkRC MTI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE1NjgwMWYtYTY3Yi00M2RkLThm NjItYjdiMGQ2MDMxN2FmLzAvMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUx NjZBRkRCMTI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEz3g0ldjsHoFm7CcO+mgl3Xf4O6z+vnrM9 Z4bvFq+J0mIXsvAMIEwqz0JRrQ6ReuwicQ54CHLLJ5bPGTXtQ8zOQkkfekW4ce9P 21VBABLMJysIjpbrJMQjnKd6d0vqBuLH6MTG9oh5Kp37DdQ/0L7n4SK+trM3EnJK rLOTfP35rw8MC2rDzM6A6aSTh0ygr/tH8MSzz6hTJ34D/P8/HfH+h1GBuL1GoYzF IQdDOUgpgMzN1FxRL7gKcdrSnxh5qE7RN4L2+NK76NAuNKvcyAv7BweKfiXI8iMi MIQZ25IK96PyM46Iu9evcnP+cglW33bGroISBpa/9rYawk84/28= -----END CERTIFICATE-----Generated at Sun Jun 29 19:50:30 2025 by rpki-client