$ rpki-client -vvf repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft File: 882209E37356E0512FBE4E81B00E4F2481865087.mft (raw, json) Hash identifier: hr0PzSKWDRsQqw9ol7VH7nzDaj9O6IFY8mARBpp0K/c= Subject key identifier: D9:35:BC:1B:49:30:A2:10:0B:A7:57:C4:C5:F8:3A:0D:C3:47:D7:26 Authority key identifier: 88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87 Certificate issuer: /CN=882209E37356E0512FBE4E81B00E4F2481865087 Certificate serial: 070878DFCE1E73CA4D3E8D4FCF4B6EAC3A6FBE94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft Manifest number: 04FC Signing time: Thu 21 Aug 2025 13:52:02 +0000 Manifest this update: Thu 21 Aug 2025 13:47:02 +0000 Manifest next update: Sun 24 Aug 2025 17:50:02 +0000 Files and hashes: 1: 882209E37356E0512FBE4E81B00E4F2481865087.crl (hash: y0khP6vspS6Xk1LU6dYfRM7gmyYi6+c55LFGco3BKI8=) 2: 323430313a313063303a3a2f33342d3334203d3e20313331373137.roa (hash: njg/qVMnSFnXNm23LFJOAC9Brxk9FM9096rC9yQ0CXk=) 3: 34352e3131382e3131322e302f32332d3233203d3e20313331373137.roa (hash: GNr97+CgZOUFbCIDGfnRBjjUL8CMyp0MB4VIgO96YwM=) 4: 34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa (hash: fWpUZJchVDwudRJxgK1oYcEU6iSSZ9RgPdltpwuInA8=) 5: 323430313a313063303a383030303a3a2f33342d3334203d3e20313331373137.roa (hash: s/GWk0rnx1fQe+9N5/NiE2vZ64ixoUOqYZCvVVS5fa4=) 6: 323430313a313063303a3a2f33322d3332203d3e20313331373137.roa (hash: UtJFn8cjB9oRRuew5QEOrcUcIRIAJ+KfKoJMwxwZf1I=) 7: 3130332e32352e3136362e302f32342d3234203d3e20313331373137.roa (hash: ae/dG+5qLBYT7KzQliS37oy8tODqNSMPLH4vHatbgLA=) 8: 3130332e31342e32302e302f32342d3234203d3e20313331373137.roa (hash: 4YSDNpw3vRi1ZpYELRMW9RHjucU5y6DLjYnJw7lk5Lw=) 9: 3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa (hash: ILfqmoxfXPHlh8GmZbUT7jZa6GPfE6TlAFjcXTufWHY=) 10: 34352e3131382e3131322e302f32322d3232203d3e20313331373137.roa (hash: 4exgwdcQ1exTycgJCK/gqBNOkO+g3t+MeUPzY4BXBs4=) 11: 323430313a313063303a633030303a3a2f33342d3334203d3e20313331373137.roa (hash: upfq/Ll023pCAPQGTeGs2hbSXasfCV07dRWvMTFoCJY=) 12: 3130332e31342e32302e302f32332d3233203d3e20313331373137.roa (hash: RohtMVPp7ZjWT76AR25hywvAjC+yVkxy154FLnUsdBk=) 13: 3130332e31342e32312e302f32342d3234203d3e20313331373137.roa (hash: 5In45d5yPgAgu4EKrWednA3s/tNDYrqkLBEAtmGlKjI=) 14: 323430313a313063303a343030303a3a2f33342d3334203d3e20313331373137.roa (hash: sH9AL8idt6oa1DBw1y1K2NRJOkrnep4hXxdB09oly/A=) 15: 34352e3131382e3131342e302f32342d3234203d3e20313331373137.roa (hash: yQorJw+u2n8BFPvZbej71Ji8nM/16g2mSwkEj1PF54g=) 16: 3130332e32352e3136362e302f32332d3233203d3e20313331373137.roa (hash: GuM7P7x/u39aCvmJkxVuMlpYCmbP89xnoCs5WogcWI4=) 17: 34352e3131382e3131342e302f32332d3233203d3e20313331373137.roa (hash: MdJ8RxR8ZYDVXBT9P8fF751Cc4xL7JgxekzcB9xdKx0=) 18: 34352e3131382e3131352e302f32342d3234203d3e20313331373137.roa (hash: sxL8WI3UrWSTsLdgL4krtb4YzuPS2/H7rwpNl9kG2s8=) 19: 34352e3131382e3131322e302f32342d3234203d3e20313331373137.roa (hash: TUhhdvGp1LOiLtnysRzIGChLZFMNnT5PF4OEU6rQz1g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:08:78:df:ce:1e:73:ca:4d:3e:8d:4f:cf:4b:6e:ac:3a:6f:be:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=882209E37356E0512FBE4E81B00E4F2481865087 Validity Not Before: Aug 21 13:47:02 2025 GMT Not After : Aug 24 17:50:02 2025 GMT Subject: CN=D935BC1B4930A2100BA757C4C5F83A0DC347D726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:60:a2:52:de:a7:da:33:29:20:29:d9:92:dc: aa:5a:a8:59:72:f3:65:f8:76:41:36:1e:75:8b:07: 2c:43:db:7a:dd:58:7c:42:d6:9f:dd:f2:9d:79:3e: 1a:28:bf:63:a6:2d:5e:74:ca:8f:f4:13:53:80:7c: f3:39:0d:10:7a:a1:7e:ec:a5:e0:cd:85:fb:a9:af: 65:48:d7:a9:78:74:3e:f0:8a:ed:4f:c2:cc:73:ae: d9:53:d5:f4:04:79:a2:62:eb:c3:89:4a:7a:0f:e0: ba:39:fd:77:1b:4e:1c:66:1b:73:dc:c8:f2:7f:30: ec:88:5a:8e:e2:8d:0c:e4:01:e6:9d:d4:86:22:7d: 58:6a:ae:59:30:96:61:b3:8c:82:4b:55:b7:3e:a7: 06:bc:93:d0:26:04:f5:e7:91:34:b4:4d:4e:98:02: c6:b8:fa:7f:22:31:b0:d2:db:b5:c4:32:06:53:57: 7e:2a:6d:25:86:5f:1e:0e:cc:d3:5b:fa:ae:3a:af: 3f:32:94:8d:5c:21:a4:88:81:9b:e9:7f:8b:d5:d5: 66:40:67:83:71:fd:6d:0d:53:06:41:36:61:1e:57: ac:db:83:94:a1:26:65:40:58:fb:a8:18:9c:ad:a9: 98:5d:86:5b:b9:f4:75:65:31:ca:d3:f2:13:91:21: 8d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:35:BC:1B:49:30:A2:10:0B:A7:57:C4:C5:F8:3A:0D:C3:47:D7:26 X509v3 Authority Key Identifier: keyid:88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:91:a7:54:35:86:84:46:bb:c1:2d:74:09:f2:41:be:67:57: 8c:a5:a7:2c:0c:54:ab:a2:5e:c8:db:a3:8f:49:0e:dd:76:bf: bb:9c:46:01:83:b8:95:23:a5:47:b2:02:5a:ee:eb:24:e5:a8: c6:fc:45:85:b4:6b:1f:77:1e:a4:88:72:69:30:a7:d8:f2:bf: d1:dd:05:2d:f4:fb:96:45:73:21:9a:48:b7:6a:ea:4b:53:64: ef:cd:ff:b6:70:dc:a6:a1:a8:7a:b2:b9:53:1d:f5:29:04:be: 14:34:5c:84:71:a0:fb:6d:c0:bd:01:05:e2:f2:75:da:3f:ff: 4e:ee:3f:8f:78:d0:0b:ba:74:7f:64:dc:c4:5b:bf:06:36:9a: 6a:6f:37:e3:6f:cd:97:87:bf:6b:1a:1a:3b:6a:f2:e1:57:37: e9:84:9f:9b:7d:bc:11:72:01:5c:b7:ac:2b:de:57:d1:f3:10: 1d:a4:b5:22:8a:d9:48:36:07:ba:5e:a2:4d:d9:46:12:55:8a: d4:0c:7b:79:6b:01:3e:d2:ec:f9:30:d3:42:7d:94:e3:ad:85: ef:56:7f:b4:0f:8a:b3:1d:0d:ad:ad:1b:d3:c6:47:7a:74:77: 86:09:9e:a4:e0:85:ff:2c:1f:2d:96:9f:6c:75:8f:5c:18:53: 8f:41:3c:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBwh4384ec8pNPo1Pz0turDpvvpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgyMjA5RTM3MzU2RTA1MTJGQkU0RTgxQjAwRTRGMjQ4 MTg2NTA4NzAeFw0yNTA4MjExMzQ3MDJaFw0yNTA4MjQxNzUwMDJaMDMxMTAvBgNV BAMTKEQ5MzVCQzFCNDkzMEEyMTAwQkE3NTdDNEM1RjgzQTBEQzM0N0Q3MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbYKJS3qfaMykgKdmS3KpaqFly 82X4dkE2HnWLByxD23rdWHxC1p/d8p15Phoov2OmLV50yo/0E1OAfPM5DRB6oX7s peDNhfupr2VI16l4dD7wiu1PwsxzrtlT1fQEeaJi68OJSnoP4Lo5/XcbThxmG3Pc yPJ/MOyIWo7ijQzkAead1IYifVhqrlkwlmGzjIJLVbc+pwa8k9AmBPXnkTS0TU6Y Asa4+n8iMbDS27XEMgZTV34qbSWGXx4OzNNb+q46rz8ylI1cIaSIgZvpf4vV1WZA Z4Nx/W0NUwZBNmEeV6zbg5ShJmVAWPuoGJytqZhdhlu59HVlMcrT8hORIY2lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2TW8G0kwohALp1fExfg6DcNH1yYwHwYDVR0j BBgwFoAUiCIJ43NW4FEvvk6BsA5PJIGGUIcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDc0NzFhMy1lZTUzLTQ5OWMtOWYyZC1jZjE2YjFlNGEzNTMvMC84ODIyMDlFMzcz NTZFMDUxMkZCRTRFODFCMDBFNEYyNDgxODY1MDg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODgyMjA5RTM3MzU2RTA1MTJGQkU0RTgxQjAwRTRGMjQ4MTg2 NTA4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA3NDcxYTMtZWU1My00OTljLTlm MmQtY2YxNmIxZTRhMzUzLzAvODgyMjA5RTM3MzU2RTA1MTJGQkU0RTgxQjAwRTRG MjQ4MTg2NTA4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmRp1Q1hoRGu8EtdAnyQb5nV4ylpywMVKui Xsjbo49JDt12v7ucRgGDuJUjpUeyAlru6yTlqMb8RYW0ax93HqSIcmkwp9jyv9Hd BS30+5ZFcyGaSLdq6ktTZO/N/7Zw3KahqHqyuVMd9SkEvhQ0XIRxoPttwL0BBeLy ddo//07uP4940Au6dH9k3MRbvwY2mmpvN+NvzZeHv2saGjtq8uFXN+mEn5t9vBFy AVy3rCveV9HzEB2ktSKK2Ug2B7peok3ZRhJVitQMe3lrAT7S7Pkw00J9lOOthe9W f7QPirMdDa2tG9PGR3p0d4YJnqTghf8sHy2Wn2x1j1wYU49BPMo= -----END CERTIFICATE-----Generated at Sat Aug 23 15:04:09 2025 by rpki-client