$ rpki-client -vvf repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft File: 284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft (raw, json) Hash identifier: Irr5tJMByiGYVV0sHpsIHdbO2Xv0E0KUwTbM/ZwSkmw= Subject key identifier: 12:CA:A7:82:FF:1D:68:66:42:36:62:EF:13:BD:F0:6C:75:D2:42:B2 Authority key identifier: 28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA Certificate issuer: /CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA Certificate serial: 209F7C9648AE6F1F5BACBBBC4EB419C9426F016D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft Manifest number: 0246 Signing time: Fri 22 Aug 2025 06:21:43 +0000 Manifest this update: Fri 22 Aug 2025 06:16:43 +0000 Manifest next update: Mon 25 Aug 2025 13:57:43 +0000 Files and hashes: 1: 3130332e3133342e35312e302f32342d3234203d3e20313338353938.roa (hash: rzmqH60uJRn3sGzkNJLLdHpbEepRCB0kAM+v2dcsYmc=) 2: 323430343a356434303a3a2f34382d3438203d3e20313338353938.roa (hash: XQn6RBqlg6RuaEoPTX1Jp1jRKOhAgtTrK3uAW566Uwk=) 3: 323430343a356434303a323a3a2f34382d3438203d3e20313338353938.roa (hash: vUuh6v5PPRzVvuwUZOwe6R6chuRFULbcu3aLCW2qA2Y=) 4: 3130332e3133342e34382e302f32342d3234203d3e20313338353938.roa (hash: vdRaqu+ifEWqE1r8nytgBjN36IR5VUDio5Qen7pybes=) 5: 323430343a356434303a313a3a2f34382d3438203d3e20313338353938.roa (hash: 7Ra3Fe83WVldtrwmBn6CcKZZT+lK+aCd/JbT64/wrRw=) 6: 323430343a356434303a343a3a2f34382d3438203d3e20313338353938.roa (hash: /selJRjYRY2RXdacberK6RXbNBqDD4h8KJuD+6tSmiM=) 7: 323430343a356434303a373a3a2f34382d3438203d3e20313338353938.roa (hash: 2JoT7M7m37m0xJyrGZ0XzlMJ4mVcLTVKVu699zp/2U0=) 8: 323430343a356434303a353a3a2f34382d3438203d3e20313338353938.roa (hash: Lbx56bi7U9t4V4gIX7m4fulkNS6DqtlvmzQW0U2Yss4=) 9: 3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa (hash: Q3P+SORmjSYUFWgFOxdx+KlxGjY858iSOT5wN8UZTKY=) 10: 323430343a356434303a333a3a2f34382d3438203d3e20313338353938.roa (hash: xTc48z78x2hTWAz50fsj2u48rca6GyIeaspfgC6Ied0=) 11: 284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl (hash: 18Bv+NEco+SpIy2oiRrfvCGLB1fnZmD6FsiSAzC7QJE=) 12: 323430343a356434303a383a3a2f34382d3438203d3e20313338353938.roa (hash: LCHOag0uJb1cjVFsg2v6UKKoMu1dXnSpGeS35y1AH+w=) 13: 3130332e3133342e35302e302f32342d3234203d3e20313332383239.roa (hash: 7HCsscFWHwPhWZMbOcuZYtCZgWu1kaGruUGGQu1z3Bg=) 14: 323430343a356434303a393a3a2f34382d3438203d3e20313338353938.roa (hash: s7BQD7yLxj5kSwHPL3ObyjKROEx8KemxAu+k28dACKE=) 15: 323430343a356434303a363a3a2f34382d3438203d3e20313338353938.roa (hash: BMaPZKd4S9fQAuwU5kc5O93/vGGp5sulKN1fvWKFFuE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 13:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:9f:7c:96:48:ae:6f:1f:5b:ac:bb:bc:4e:b4:19:c9:42:6f:01:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA Validity Not Before: Aug 22 06:16:43 2025 GMT Not After : Aug 25 13:57:43 2025 GMT Subject: CN=12CAA782FF1D6866423662EF13BDF06C75D242B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2f:a8:56:62:0b:de:21:69:b7:0a:57:6f:b1: aa:1e:5d:c5:51:7e:06:e9:d1:db:d8:0b:62:3d:d6: 21:25:07:c9:f7:84:10:4d:86:2e:1a:f1:aa:6e:13: 36:c4:49:3c:3d:6a:66:32:ed:6d:86:4c:e5:fb:24: 85:76:5e:ad:8d:70:85:69:c2:f6:e3:6b:0d:b2:3e: c6:71:97:bf:c1:85:ed:42:f2:30:95:27:ae:d9:fe: 82:e5:ef:32:6b:22:c8:0d:a6:4e:0f:41:a3:a5:13: 04:12:11:bc:3d:46:c4:e6:c3:56:f8:42:e7:86:7d: 66:9e:be:81:d6:2a:5f:ce:dc:aa:8b:10:00:9d:8b: 3a:1e:e1:7f:52:4b:07:cc:39:a7:4c:50:76:85:e1: 18:e4:b9:25:4d:e6:09:a4:11:15:6c:54:d7:36:a3: 91:56:b2:31:c3:d2:8e:ce:d9:0b:bf:ae:98:b0:99: c3:00:9c:1b:45:61:87:db:ff:c1:f5:d8:f4:c4:bf: 37:3e:ac:d7:e6:00:6b:7f:21:b5:84:78:68:d8:4e: 4a:65:f4:3a:38:7b:2e:15:84:63:58:74:e9:73:05: e7:89:4e:6b:66:24:71:da:d1:0f:34:ac:64:52:b1: 94:22:58:cf:02:e7:18:c8:0b:96:d5:f8:68:83:d2: f5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:CA:A7:82:FF:1D:68:66:42:36:62:EF:13:BD:F0:6C:75:D2:42:B2 X509v3 Authority Key Identifier: keyid:28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:8d:96:fc:83:2b:1b:e6:54:82:1b:8a:74:39:50:90:97:83: 1d:c4:fd:e4:a0:9f:a9:0c:40:b2:86:63:a3:ee:32:36:71:52: 66:e6:ef:4d:c8:eb:69:86:c8:18:08:fa:11:09:1b:72:ca:0a: 96:10:c3:fd:88:cd:de:b7:c5:d4:fd:43:28:e5:32:41:c4:51: bc:2f:2e:89:92:88:9e:f4:71:83:ea:65:4e:64:26:06:b9:4c: 21:b5:1b:59:6d:2e:8b:f9:60:da:b4:28:19:8f:68:a0:a4:88: 7c:f2:7b:f3:d7:e1:5f:58:70:11:be:a8:f9:bd:b7:49:fd:af: 91:0a:03:00:9b:99:5a:0f:72:9d:5d:72:a3:54:e3:2c:a4:e4: 7c:04:7e:94:4b:8a:e8:3a:93:96:1c:84:84:67:b6:88:30:d2: ff:38:1a:83:c9:cd:4b:fd:a1:23:c3:90:13:16:89:f5:ee:a2: 59:d3:fe:87:39:f4:7b:8c:1d:fe:81:03:14:ae:e0:9b:d8:8e: 6d:93:c4:8b:91:43:6d:fe:18:0d:7f:47:14:bb:f8:95:b9:79: a7:f9:42:1b:d8:9f:f8:53:58:15:3a:55:43:a0:3b:2f:84:46: 6f:ed:a2:bc:bd:8d:40:4b:74:dc:19:85:77:5b:d7:dd:39:f0: f1:01:00:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIJ98lkiubx9brLu8TrQZyUJvAW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVGQTY0 NDRERjJFQTAeFw0yNTA4MjIwNjE2NDNaFw0yNTA4MjUxMzU3NDNaMDMxMTAvBgNV BAMTKDEyQ0FBNzgyRkYxRDY4NjY0MjM2NjJFRjEzQkRGMDZDNzVEMjQyQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFL6hWYgveIWm3CldvsaoeXcVR fgbp0dvYC2I91iElB8n3hBBNhi4a8apuEzbESTw9amYy7W2GTOX7JIV2Xq2NcIVp wvbjaw2yPsZxl7/Bhe1C8jCVJ67Z/oLl7zJrIsgNpk4PQaOlEwQSEbw9RsTmw1b4 QueGfWaevoHWKl/O3KqLEACdizoe4X9SSwfMOadMUHaF4RjkuSVN5gmkERVsVNc2 o5FWsjHD0o7O2Qu/rpiwmcMAnBtFYYfb/8H12PTEvzc+rNfmAGt/IbWEeGjYTkpl 9Do4ey4VhGNYdOlzBeeJTmtmJHHa0Q80rGRSsZQiWM8C5xjIC5bV+GiD0vWVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEsqngv8daGZCNmLvE73wbHXSQrIwHwYDVR0j BBgwFoAUKEuK2tPgmOm/vqxqkSnvpkRN8uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Yzg1YzZiOS0zNGY5LTRhODUtOWNlYS1jMTZlOThhOGI1ZTAvMC8yODRCOEFEQUQz RTA5OEU5QkZCRUFDNkE5MTI5RUZBNjQ0NERGMkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVGQTY0NDRE RjJFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM4NWM2YjktMzRmOS00YTg1LTlj ZWEtYzE2ZTk4YThiNWUwLzAvMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVG QTY0NDRERjJFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6NlvyDKxvmVIIbinQ5UJCXgx3E/eSgn6kM QLKGY6PuMjZxUmbm703I62mGyBgI+hEJG3LKCpYQw/2Izd63xdT9QyjlMkHEUbwv LomSiJ70cYPqZU5kJga5TCG1G1ltLov5YNq0KBmPaKCkiHzye/PX4V9YcBG+qPm9 t0n9r5EKAwCbmVoPcp1dcqNU4yyk5HwEfpRLiug6k5YchIRntogw0v84GoPJzUv9 oSPDkBMWifXuolnT/oc59HuMHf6BAxSu4JvYjm2TxIuRQ23+GA1/RxS7+JW5eaf5 QhvYn/hTWBU6VUOgOy+ERm/tory9jUBLdNwZhXdb19058PEBALU= -----END CERTIFICATE-----Generated at Sat Aug 23 12:01:30 2025 by rpki-client