$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft File: 639473CD2054A78B39F9AC7A83232462F00E71AA.mft (raw, json) Hash identifier: SqvZk7VNG0C/ucCmGzj95aF1WVDe5Mqb6YU8cMjVNb0= Subject key identifier: 99:F7:50:F8:8A:5C:69:A3:34:98:C0:E5:A4:F1:22:E0:84:18:C3:41 Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA Certificate serial: 1621F78DF04B7667D5D55569479834ADCB25CE3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft Manifest number: 0D41 Signing time: Thu 21 Aug 2025 08:11:50 +0000 Manifest this update: Thu 21 Aug 2025 08:06:50 +0000 Manifest next update: Sun 24 Aug 2025 18:09:50 +0000 Files and hashes: 1: 323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa (hash: 5B7v2ShhK5C4wbhQiHatQFgCi8oUxqkoPlhjyp+Rnaw=) 2: 3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa (hash: /sujTtwH0ddwmWj6UyMseljhgpcNLVkP8+vtS5y3rGg=) 3: 3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa (hash: 7JHZWmtz01hYjYbLRHq9pCZCM42A/jGx+qscoYZR+8M=) 4: 323430303a643638303a323a3a2f34382d3438203d3e203539323832.roa (hash: qLkIroWnbqSVivBGqvgi5oF8E8eNhXgrJocCdlawdNk=) 5: 323430303a643638303a666163653a3a2f34382d3438203d3e203539323832.roa (hash: u5dDjhuBvBzcqNjKEeW7vizdTx58v6wY4rfkMiHiI5I=) 6: 3130332e3232382e3234372e302f32342d3234203d3e203539323832.roa (hash: 4gtV8ZXJhBLgP6alnZmazQL9Du+oKvqI/MvatS0Bbyw=) 7: 3130332e3232382e3234342e302f32322d3234203d3e203539323832.roa (hash: kkZ5080z9oUs+jW8iHX1Tzr1MG5R0/keiimPL4Y7DMk=) 8: 3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa (hash: QsDPs2mlZqyMZXfjf6Zh+NWMXGWy1j4R+YaYRxdbecQ=) 9: 639473CD2054A78B39F9AC7A83232462F00E71AA.crl (hash: wkqkVoP6wdW4ewrxH5FeXQ/v75uIPVeUJPaWrb6wsIw=) 10: 3130332e3232382e3234342e302f32342d3234203d3e203539323832.roa (hash: esxHqUt3Xq6PKKXsfFgfUEYi1fJUgVnC6F8M6sDPUJM=) 11: 3130332e3232382e3234362e302f32342d3234203d3e203539323832.roa (hash: XZ4OJKWgYbKu4ak8HWaN9bEJfkYQKh79GGoEWm0kS2Q=) 12: 3131362e3230362e3231332e302f32342d3234203d3e203539323832.roa (hash: JPYapDBTyTePbdwtE88+heXxGhufXE50JBbJ2fq7FKo=) 13: 323430303a643638303a353a3a2f34382d3438203d3e203539323832.roa (hash: /8HKOKl3PxMMPopAmXJsDfZHfFoo7wkQ81V5TqWB1uE=) 14: 3131362e3230362e3231342e302f32342d3234203d3e203539323832.roa (hash: mgdd33inbho0w/YafQxmlb4mn2645LWgbd4GjzvqC5g=) 15: 323430303a643638303a35393a3a2f34382d3438203d3e203539323832.roa (hash: 0AzZnlQLCCzpiwYH8VB91hQfBqmdrJ+ok40Qb8sCeko=) 16: 323430303a643638303a3a2f33322d3438203d3e203539323832.roa (hash: SgqLAGcMTNBEKnSS7cpl5WafnRLBI8WCT5GxxXyN0zA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 18:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:21:f7:8d:f0:4b:76:67:d5:d5:55:69:47:98:34:ad:cb:25:ce:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA Validity Not Before: Aug 21 08:06:50 2025 GMT Not After : Aug 24 18:09:50 2025 GMT Subject: CN=99F750F88A5C69A33498C0E5A4F122E08418C341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c8:14:32:0e:d0:ea:ff:d3:c1:6d:88:1e:50: df:20:6a:8b:e4:c0:fe:58:10:26:c8:9c:79:2f:39: b5:95:8b:43:57:ee:86:bc:e4:c7:bf:c0:61:3a:eb: d7:be:6e:1f:8f:2f:45:5b:e1:b1:4a:c8:67:bc:22: f8:dc:3d:a3:3f:7b:85:75:e9:71:17:78:94:e6:77: ae:c0:7c:e3:ff:b2:74:0f:f6:54:21:6a:34:a7:6f: 1d:28:ef:e4:cb:96:28:ce:43:c8:ee:9e:39:2f:4f: ee:f3:0f:7c:2f:73:76:48:a9:5c:38:d4:8e:5c:64: 19:ab:76:8a:bc:e9:26:d3:28:02:01:f7:bd:a9:61: be:5f:5b:a9:66:b9:10:e4:53:85:63:dd:4a:3a:f2: b7:34:7c:ca:a3:ea:33:8b:1c:d2:37:53:aa:c8:c3: ab:b0:d3:39:ce:e2:63:a7:63:ff:06:88:c3:41:96: c5:b1:a6:4b:4c:6d:7d:21:33:ea:c8:6a:06:1b:e2: d4:b3:5a:50:05:2e:74:d6:96:66:53:60:d9:27:c0: 85:3f:fd:fb:e1:62:57:cb:e1:80:0b:d5:d9:38:35: 9a:9e:f5:c0:d4:d1:1d:49:74:dd:40:36:ec:27:f9: 1c:2e:d2:47:7a:30:d8:1e:33:43:0c:94:fb:01:50: 55:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F7:50:F8:8A:5C:69:A3:34:98:C0:E5:A4:F1:22:E0:84:18:C3:41 X509v3 Authority Key Identifier: keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:40:ba:7a:e3:0f:f7:8b:8c:5e:14:c2:eb:30:1f:5d:e7:ee: a0:81:e6:f7:f3:61:d9:a2:a5:7f:c3:0a:e2:ea:00:be:60:f5: e3:72:4d:20:8c:35:db:df:5f:c6:fb:79:9a:9f:84:66:20:d1: 10:4a:5d:3e:b6:ee:97:69:f4:ec:d5:24:5b:5f:ec:88:10:f9: 18:e5:7b:5e:31:87:1b:ec:9b:09:ae:f3:37:2e:65:40:a5:a2: f0:d3:74:33:54:48:37:08:0f:50:61:f4:6f:ff:d7:92:17:64: 80:c0:46:df:7e:e4:6d:c3:f4:52:54:43:23:39:9d:ac:e7:80: 3c:ea:fa:f3:13:71:6a:c0:59:0c:c4:b5:34:67:8d:6a:29:3c: e0:0c:44:13:9d:f6:8b:88:e9:9f:19:e7:bc:21:bd:15:fe:f4: 6b:36:ce:29:2a:30:5e:ce:f6:4d:ab:33:21:b6:64:15:84:3c: 29:3d:50:a3:c0:55:75:eb:bf:4d:7e:1c:92:8f:bc:cf:d2:95: 92:1a:34:82:36:75:7c:fe:5f:fa:a3:95:f9:61:de:e2:d5:72: 69:03:c2:e3:1b:30:13:af:e3:32:3b:d6:82:7f:34:3e:fc:57: b0:e5:29:56:ac:c7:33:00:51:9b:d0:31:09:08:07:05:44:8b: f8:37:57:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFiH3jfBLdmfV1VVpR5g0rcslzj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG MDBFNzFBQTAeFw0yNTA4MjEwODA2NTBaFw0yNTA4MjQxODA5NTBaMDMxMTAvBgNV BAMTKDk5Rjc1MEY4OEE1QzY5QTMzNDk4QzBFNUE0RjEyMkUwODQxOEMzNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfyBQyDtDq/9PBbYgeUN8gaovk wP5YECbInHkvObWVi0NX7oa85Me/wGE669e+bh+PL0Vb4bFKyGe8IvjcPaM/e4V1 6XEXeJTmd67AfOP/snQP9lQhajSnbx0o7+TLlijOQ8junjkvT+7zD3wvc3ZIqVw4 1I5cZBmrdoq86SbTKAIB972pYb5fW6lmuRDkU4Vj3Uo68rc0fMqj6jOLHNI3U6rI w6uw0znO4mOnY/8GiMNBlsWxpktMbX0hM+rIagYb4tSzWlAFLnTWlmZTYNknwIU/ /fvhYlfL4YAL1dk4NZqe9cDU0R1JdN1ANuwn+Rwu0kd6MNgeM0MMlPsBUFVBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmfdQ+IpcaaM0mMDlpPEi4IQYw0EwHwYDVR0j BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF NzFBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg0NjRhNWItMmZjZS00N2RhLTgw NDctNjhkMmJkNjNjOWMzLzAvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0 NjJGMDBFNzFBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNAunrjD/eLjF4UwuswH13n7qCB5vfzYdmi pX/DCuLqAL5g9eNyTSCMNdvfX8b7eZqfhGYg0RBKXT627pdp9OzVJFtf7IgQ+Rjl e14xhxvsmwmu8zcuZUClovDTdDNUSDcID1Bh9G//15IXZIDARt9+5G3D9FJUQyM5 nazngDzq+vMTcWrAWQzEtTRnjWopPOAMRBOd9ouI6Z8Z57whvRX+9Gs2zikqMF7O 9k2rMyG2ZBWEPCk9UKPAVXXrv01+HJKPvM/SlZIaNII2dXz+X/qjlflh3uLVcmkD wuMbMBOv4zI71oJ/ND78V7DlKVasxzMAUZvQMQkIBwVEi/g3V1E= -----END CERTIFICATE-----Generated at Sat Aug 23 15:41:29 2025 by rpki-client