$ rpki-client -vvf repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft File: B605E2C01C5BDC6CEE49545C80501360234DC910.mft (raw, json) Hash identifier: jPds/J3mJXIpc3256BVP9B0Mrs6SWSi01g979budH6E= Subject key identifier: D4:EC:D8:E6:37:BE:8F:5B:F2:0E:BB:D7:68:27:51:C7:4E:6F:15:68 Authority key identifier: B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10 Certificate issuer: /CN=B605E2C01C5BDC6CEE49545C80501360234DC910 Certificate serial: 7CAFD355C3815CFFE1C78A0A6DC3A089C9BCDA74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer Subject info access: rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft Manifest number: 0507 Signing time: Fri 22 Aug 2025 23:00:04 +0000 Manifest this update: Fri 22 Aug 2025 22:55:04 +0000 Manifest next update: Tue 26 Aug 2025 07:56:04 +0000 Files and hashes: 1: 3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (hash: /bgLX80Id13xkunC59CvIZtu8KOfj3mxVa1lG5ZXF/0=) 2: B605E2C01C5BDC6CEE49545C80501360234DC910.crl (hash: RX0r0zxqu8xjJciMC5d8olMV30kVHIl6Qo7fjImU64o=) 3: 3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (hash: AVHUuCu/pWOfGEGbs7pgdGUZzNAVfi/HDMj4JakhRSI=) 4: 3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa (hash: tZJdaYJ4K7yW2v2tBg39Lb9tz4r7Kf6sn+VE2gvdsHw=) 5: 3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (hash: L3ZzIiAydRdMLY3ej77+q1So7IkWU5tA3zvtMa14wvQ=) 6: 3131352e3137382e35332e302f32342d3234203d3e20313331373137.roa (hash: 5Br8jzUfiBL0O6Kopm71gWMUaniCVXm/uXqyIID9rs0=) 7: 3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (hash: NtqkwrlUwIEQ1zhmOPelG6/o7YZq6aMqPrp+f2CJ/tw=) 8: 3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (hash: isINXQLKIC1dEiiAoWDEseWdjl997XY6+RtHzF8UKMk=) 9: 3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa (hash: 4R3cIWzWFlBnUOjDtKgjITkNYaOCw4Tx4+7Vb5ietQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:56:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:af:d3:55:c3:81:5c:ff:e1:c7:8a:0a:6d:c3:a0:89:c9:bc:da:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B605E2C01C5BDC6CEE49545C80501360234DC910 Validity Not Before: Aug 22 22:55:04 2025 GMT Not After : Aug 26 07:56:04 2025 GMT Subject: CN=D4ECD8E637BE8F5BF20EBBD7682751C74E6F1568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e1:d5:de:d1:2a:4c:fa:17:b5:b8:4e:d3:5e: 95:87:9f:81:0f:9a:86:57:05:cb:54:0f:d3:a8:38: ce:1e:bf:65:a8:fa:8c:e0:d1:af:72:bc:b7:dc:66: 27:8b:87:53:1d:7f:82:58:9a:5d:e0:29:f8:2b:93: 92:bf:ef:ff:d9:c8:92:a8:03:6e:ff:f8:12:08:b8: 4d:06:c6:9b:fd:e1:58:94:70:f3:e8:56:62:fe:53: 57:80:8d:38:dc:0b:a4:42:42:0b:af:b1:0b:89:20: 42:86:0d:cd:05:a3:aa:ae:c1:c6:24:64:65:64:4c: 1f:fe:8b:d6:9e:ad:17:f7:5c:6d:57:31:2a:52:dd: 6a:64:c1:a7:d6:09:18:c7:61:f1:05:2f:da:e4:7f: 54:a2:09:59:09:d5:4e:5c:a0:ef:68:05:9f:3c:99: 9a:82:db:5e:d7:b3:06:9f:bd:1e:76:ee:d8:b0:3c: 33:f9:28:43:78:80:0e:e4:97:25:56:df:15:2c:70: 5b:8c:84:77:b6:97:3b:5d:51:85:df:ca:c7:c2:bf: be:20:c5:02:1a:14:e8:de:4b:58:ea:a8:79:d8:2d: 12:73:99:b7:39:cc:52:ed:e3:3f:27:43:08:f8:27: 68:d4:aa:40:6f:f7:a7:1a:ff:52:7e:f1:9a:7a:d0: 9a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:EC:D8:E6:37:BE:8F:5B:F2:0E:BB:D7:68:27:51:C7:4E:6F:15:68 X509v3 Authority Key Identifier: keyid:B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:6c:37:8b:16:cc:8d:12:74:c7:fc:00:0b:6b:9d:93:ed:a9: 66:e8:d6:dd:66:ee:5b:f6:55:a6:67:1f:88:69:11:f7:77:0c: d6:08:ae:e5:8f:00:ef:8d:47:ee:e7:2e:70:6e:53:a7:24:69: 75:ec:45:76:3b:de:1d:b1:e5:c2:ac:1f:4d:ff:df:3e:f3:de: 7c:34:1a:03:7e:8e:d6:81:8d:b6:31:0d:86:38:ab:1f:74:63: 04:56:7a:2f:ac:9c:bc:dc:68:9d:fb:20:b5:ae:bd:c8:7f:71: 28:79:6b:31:53:b9:63:3f:a5:22:59:46:85:71:45:8e:35:a2: 9e:f7:4e:cf:52:50:d4:12:12:a2:7f:41:9a:3d:34:12:dc:32: b9:d9:19:57:57:13:2e:7f:db:fd:6a:f6:ec:6d:b3:1d:55:94: 06:37:3b:2e:38:0e:4c:b2:09:63:50:46:93:55:25:db:96:03: 13:cf:36:45:78:28:c4:2e:06:72:a1:29:39:79:50:b5:79:6e: 40:e5:5b:d9:e2:15:22:5a:0f:d1:9b:42:a1:aa:fb:61:4b:6d: 6b:69:f5:c6:05:97:ce:f8:37:b8:47:56:39:38:e2:0a:24:ce: d0:eb:a5:de:2e:b1:8f:14:b6:f0:be:76:3f:77:da:27:7f:bd: 7b:20:40:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfK/TVcOBXP/hx4oKbcOgicm82nQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEzNjAy MzREQzkxMDAeFw0yNTA4MjIyMjU1MDRaFw0yNTA4MjYwNzU2MDRaMDMxMTAvBgNV BAMTKEQ0RUNEOEU2MzdCRThGNUJGMjBFQkJENzY4Mjc1MUM3NEU2RjE1NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ4dXe0SpM+he1uE7TXpWHn4EP moZXBctUD9OoOM4ev2Wo+ozg0a9yvLfcZieLh1Mdf4JYml3gKfgrk5K/7//ZyJKo A27/+BIIuE0Gxpv94ViUcPPoVmL+U1eAjTjcC6RCQguvsQuJIEKGDc0Fo6quwcYk ZGVkTB/+i9aerRf3XG1XMSpS3WpkwafWCRjHYfEFL9rkf1SiCVkJ1U5coO9oBZ88 mZqC217XswafvR527tiwPDP5KEN4gA7klyVW3xUscFuMhHe2lztdUYXfysfCv74g xQIaFOjeS1jqqHnYLRJzmbc5zFLt4z8nQwj4J2jUqkBv96ca/1J+8Zp60Jo9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1OzY5je+j1vyDrvXaCdRx05vFWgwHwYDVR0j BBgwFoAUtgXiwBxb3GzuSVRcgFATYCNNyRAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWZlOGY5Yi04YzM0LTQzNDItYTBmZS1jYTEwNzVmYmE1ZmYvMC9CNjA1RTJDMDFD NUJEQzZDRUU0OTU0NUM4MDUwMTM2MDIzNERDOTEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEzNjAyMzRE QzkxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVmZThmOWItOGMzNC00MzQyLWEw ZmUtY2ExMDc1ZmJhNWZmLzAvQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEz NjAyMzREQzkxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJhsN4sWzI0SdMf8AAtrnZPtqWbo1t1m7lv2 VaZnH4hpEfd3DNYIruWPAO+NR+7nLnBuU6ckaXXsRXY73h2x5cKsH03/3z7z3nw0 GgN+jtaBjbYxDYY4qx90YwRWei+snLzcaJ37ILWuvch/cSh5azFTuWM/pSJZRoVx RY41op73Ts9SUNQSEqJ/QZo9NBLcMrnZGVdXEy5/2/1q9uxtsx1VlAY3Oy44Dkyy CWNQRpNVJduWAxPPNkV4KMQuBnKhKTl5ULV5bkDlW9niFSJaD9GbQqGq+2FLbWtp 9cYFl874N7hHVjk44gokztDrpd4usY8UtvC+dj932id/vXsgQMU= -----END CERTIFICATE-----Generated at Sat Aug 23 12:18:53 2025 by rpki-client