$ rpki-client -vvf repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft File: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft (raw, json) Hash identifier: RDXl4Ug06DGtlTliQpPeW2q04Zaz7V+jgUNIH1lj6z0= Subject key identifier: 1D:50:7F:6D:D9:EF:47:3B:3A:B4:D1:EF:21:88:A0:CC:D0:FC:FB:B3 Authority key identifier: B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E Certificate issuer: /CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Certificate serial: 5A18C8AEF261CE80BB3ACB452D3F046A82060143 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft Manifest number: 04E5 Signing time: Sat 28 Jun 2025 18:00:43 +0000 Manifest this update: Sat 28 Jun 2025 17:55:43 +0000 Manifest next update: Tue 01 Jul 2025 21:05:43 +0000 Files and hashes: 1: 3130332e37322e3131302e302f32342d3234203d3e203538343736.roa (hash: voekDMYuoDNmVswZr7/xsWsJnvx7lZSdUg+Aq+ToSP0=) 2: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl (hash: SDRTxRWYeEZr613Vfk00im4QNIVeKqeb6x9fIWMIsvQ=) 3: 3130332e32382e3130362e302f32342d3234203d3e203538343736.roa (hash: 3CwSzY5tw6Zm4h624sLhttPd8ZN8CiHTGKhVehN+hWE=) 4: 34332e3234322e3133322e302f32342d3234203d3e203538343736.roa (hash: ut8mKe181e+GL8gZVd8D9lpxfAhurYa657vG8sPaVZU=) 5: 34332e3234322e3133332e302f32342d3234203d3e203538343736.roa (hash: 2NAEElgvlB7IhQMwd1Atvpj3R7riVOfOU9AzMjYnGF0=) 6: 3130332e37322e3131312e302f32342d3234203d3e203538343736.roa (hash: lw8CjbCa9nau6CgaK9qo3W7fJOYahpzK8W9j4IBI5bo=) 7: 323030313a6466303a3236663a3a2f34382d3438203d3e203538343736.roa (hash: 19ABnycRhti98EG6MJ/6S6W4a31omV6sktXNN7fCeRE=) 8: 3130332e32382e3130372e302f32342d3234203d3e203538343736.roa (hash: 1UalLxKn41/lSLgzHwYn+86cGRYM0p3PY4M21eZtrAo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 21:05:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:18:c8:ae:f2:61:ce:80:bb:3a:cb:45:2d:3f:04:6a:82:06:01:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Validity Not Before: Jun 28 17:55:43 2025 GMT Not After : Jul 1 21:05:43 2025 GMT Subject: CN=1D507F6DD9EF473B3AB4D1EF2188A0CCD0FCFBB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:29:06:70:8a:fc:91:6d:34:2d:fd:d9:79:df: 17:6a:19:98:b5:5a:7d:2a:1e:23:ae:b3:76:b2:31: d5:69:d3:a9:f9:98:57:31:a1:e9:67:56:e7:57:bd: 34:5f:7c:e4:c1:bf:69:83:39:f8:3e:92:d0:c4:bd: ab:d8:bf:69:fc:13:b9:c3:73:ac:9f:53:94:49:29: 91:bc:cc:56:74:3b:69:0e:c8:33:ce:a9:8c:ca:26: 81:7c:a8:ad:b9:f0:20:b5:9d:51:56:67:bf:07:48: 96:b9:b1:d7:51:75:51:c6:58:c9:b5:99:29:6b:92: 2d:7c:5f:f1:03:4e:e0:f4:96:ac:9f:bd:d4:c3:58: b6:c4:5e:03:d5:d6:e3:5f:55:ce:46:a7:26:9b:56: df:0a:1f:02:8d:39:69:a4:a6:52:dd:cb:06:55:cb: 61:3b:8e:51:d4:04:85:f2:17:de:01:63:46:13:15: f2:ad:08:1b:ab:3c:b1:a2:f2:00:b4:ae:2c:bf:ce: 3b:8d:f8:d2:91:83:23:1b:ad:63:b4:10:dc:55:db: 3e:e6:92:e9:69:39:34:71:bf:b3:95:cf:2b:9d:47: a7:24:1c:c5:59:2f:d7:ec:a7:86:a0:3d:96:81:c7: 1c:d9:0a:d7:8f:1a:97:72:f0:db:94:de:cf:e0:ce: 02:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:50:7F:6D:D9:EF:47:3B:3A:B4:D1:EF:21:88:A0:CC:D0:FC:FB:B3 X509v3 Authority Key Identifier: keyid:B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:0e:3e:a4:81:f0:10:a5:d3:64:d1:08:b0:88:86:bb:72:5d: 5b:5f:a0:17:c7:22:c5:1e:06:44:21:34:ec:b3:e9:cd:77:a0: 02:d3:aa:0c:a9:30:34:b6:c8:94:c9:45:26:1a:df:69:c0:17: 5e:9f:24:57:d1:ea:d8:f0:e5:33:70:10:f9:b5:24:15:08:f3: e6:5f:51:1c:34:fe:49:a0:ef:ec:c0:d2:39:32:f6:21:6a:38: 4e:ce:7f:4d:c7:7e:c2:63:f4:d3:86:e5:c5:f5:b9:46:6c:03: 1c:36:34:69:2f:e0:4b:45:65:af:90:83:57:0a:f5:56:2b:95: e3:9d:19:0c:67:66:75:46:08:89:5a:f8:92:10:f9:dd:63:6d: 68:38:69:32:a6:cf:52:12:1b:29:28:a4:77:00:14:7c:05:3a: 85:d6:53:96:d4:fc:01:33:fa:8d:b1:7d:be:81:d8:6b:59:c9: 41:af:ce:c3:76:cd:f0:7b:36:34:47:69:b6:fb:83:96:6e:d0: 5c:e9:4b:b6:58:18:a5:47:2d:93:4e:2c:95:ad:20:4e:56:30: fe:1f:23:a3:32:a6:0d:39:51:5d:fc:f7:6a:f8:9e:41:ee:82: 39:ed:67:a1:f8:3c:8c:a6:e4:80:53:ab:0d:fb:0c:fc:4e:48: e4:6b:5e:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWhjIrvJhzoC7OstFLT8EaoIGAUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VD NTAzRUYzRTAeFw0yNTA2MjgxNzU1NDNaFw0yNTA3MDEyMTA1NDNaMDMxMTAvBgNV BAMTKDFENTA3RjZERDlFRjQ3M0IzQUI0RDFFRjIxODhBMENDRDBGQ0ZCQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRKQZwivyRbTQt/dl53xdqGZi1 Wn0qHiOus3ayMdVp06n5mFcxoelnVudXvTRffOTBv2mDOfg+ktDEvavYv2n8E7nD c6yfU5RJKZG8zFZ0O2kOyDPOqYzKJoF8qK258CC1nVFWZ78HSJa5sddRdVHGWMm1 mSlrki18X/EDTuD0lqyfvdTDWLbEXgPV1uNfVc5GpyabVt8KHwKNOWmkplLdywZV y2E7jlHUBIXyF94BY0YTFfKtCBurPLGi8gC0riy/zjuN+NKRgyMbrWO0ENxV2z7m kulpOTRxv7OVzyudR6ckHMVZL9fsp4agPZaBxxzZCtePGpdy8NuU3s/gzgK/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHVB/bdnvRzs6tNHvIYigzND8+7MwHwYDVR0j BBgwFoAUsUTk6yj2nZt2wMJJm/17PsUD7z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2Y0OTA2OC1jMGNhLTRhMjEtOWE4YS1lZWQyNmZjZGQxYWEvMC9CMTQ0RTRFQjI4 RjY5RDlCNzZDMEMyNDk5QkZEN0IzRUM1MDNFRjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VDNTAz RUYzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdmNDkwNjgtYzBjYS00YTIxLTlh OGEtZWVkMjZmY2RkMWFhLzAvQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdC M0VDNTAzRUYzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQOPqSB8BCl02TRCLCIhrtyXVtfoBfHIsUe BkQhNOyz6c13oALTqgypMDS2yJTJRSYa32nAF16fJFfR6tjw5TNwEPm1JBUI8+Zf URw0/kmg7+zA0jky9iFqOE7Of03HfsJj9NOG5cX1uUZsAxw2NGkv4EtFZa+Qg1cK 9VYrleOdGQxnZnVGCIla+JIQ+d1jbWg4aTKmz1ISGykopHcAFHwFOoXWU5bU/AEz +o2xfb6B2GtZyUGvzsN2zfB7NjRHabb7g5Zu0FzpS7ZYGKVHLZNOLJWtIE5WMP4f I6Mypg05UV3892r4nkHugjntZ6H4PIym5IBTqw37DPxOSORrXgs= -----END CERTIFICATE-----Generated at Sun Jun 29 18:44:51 2025 by rpki-client