$ rpki-client -vvf repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft File: C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft (raw, json) Hash identifier: i2Q5k+4JwKzT5+rrBrh59sbs82hvW+om7MrRF4Jzyj4= Subject key identifier: 12:FE:0F:BA:4C:4A:9E:55:FF:FA:9C:52:54:19:F7:96:F3:A8:48:28 Authority key identifier: C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E Certificate issuer: /CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E Certificate serial: 0A545921EFEE95673D7EFB692478F82202DF910A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft Manifest number: 04FE Signing time: Thu 07 Aug 2025 20:22:08 +0000 Manifest this update: Thu 07 Aug 2025 20:17:08 +0000 Manifest next update: Mon 11 Aug 2025 03:04:08 +0000 Files and hashes: 1: 323430333a626130303a3630303a3a2f34302d3438203d3e203234353231.roa (hash: Cpr5xYTkNb6GEJUfrbLB6Ih2u86v1ZHFmVVPR6riK70=) 2: 3131322e3130392e31362e302f32312d3234203d3e203234353231.roa (hash: okeDaf7d0Xuvp8xnTxJzUWPegOkeMCYHPs8G9yAmQ6Y=) 3: 3131392e38322e3234302e302f32312d3234203d3e203234353231.roa (hash: UQj5o2r9jrF7gwD6zEDeivAaIC1EoryECU1Z4pufDeg=) 4: C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl (hash: ABac2NHDg76Yw3RvB/mQd8t1iIrzSRh7pi4mTYiNa/4=) 5: 323430333a626130303a3a2f33322d3438203d3e203234353231.roa (hash: B9qLkdqrOWwVF5tA2jsrqX21V3LrtEAcPvXr3jC/ETM=) 6: 3137352e3138342e3232342e302f32312d3234203d3e203234353231.roa (hash: trFC+pX4oMn7rw9va8+zapompho+fZFvfIyOd+ou6p0=) 7: 3132332e3235352e3230302e302f32312d3234203d3e203234353231.roa (hash: 6LyyJJeV4MUKQUmSmy0p8Z51yI1Vj4eAExDWuf2DxM8=) 8: 3230332e38392e32342e302f32312d3234203d3e203234353231.roa (hash: 25bjKMZwqQbYi5jKvGEGUrT2NIQ4GwrYcOU6Y3FnIcI=) 9: 3137352e3138342e3233382e302f32332d3234203d3e20313334363534.roa (hash: U4Kz+JMqmBXXJWJ51q9GFdWYnPA1z7UpadwESZtmyoA=) 10: 3137352e3138342e3233322e302f32322d3234203d3e2039333431.roa (hash: /NJYIz5c5OxCtCzAI9eMSZnnK2DRsoEPFpGekXPN3/Y=) 11: 3130332e3231352e32342e302f32322d3234203d3e2039333431.roa (hash: XTblwJ4OpupQKVM3L+0VPdo1vzAlW+UZ6yrctqElG0s=) 12: 323430333a626130303a3730303a3a2f34302d3438203d3e203234353231.roa (hash: oediRSUfrbiKHZ+4lfJc75ZOQTevxDBy4CNqy2qW3Ec=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 03:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:54:59:21:ef:ee:95:67:3d:7e:fb:69:24:78:f8:22:02:df:91:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E Validity Not Before: Aug 7 20:17:08 2025 GMT Not After : Aug 11 03:04:08 2025 GMT Subject: CN=12FE0FBA4C4A9E55FFFA9C525419F796F3A84828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:31:2b:de:89:05:64:e4:b4:f4:16:ce:6a:34: 54:6f:bc:92:fb:83:42:e4:0a:09:19:c1:1d:f5:e1: af:c5:f5:69:d2:ef:09:cd:5b:22:1b:c4:35:7c:89: 7d:63:dc:91:97:79:b4:10:25:3a:ec:56:5c:59:b3: 97:ed:58:50:e6:bd:e2:f6:e8:1c:4a:ba:20:83:0a: 76:db:dc:3b:1a:75:84:2d:36:06:bf:8e:72:0f:66: 3d:1f:fa:a3:09:94:fb:dc:48:5e:d4:79:0c:bc:3a: 09:27:31:e7:67:30:7c:d9:4b:70:6d:9b:b1:fa:99: 8f:4d:9b:43:25:0d:20:df:ac:0e:95:9e:77:79:03: 3f:a9:48:30:48:8e:5d:29:d8:e9:8e:26:41:62:3f: e7:79:21:c6:cd:44:38:e3:e8:51:1b:4a:5c:14:cc: 4b:0e:67:7a:df:87:0b:80:e5:29:b8:30:5e:32:70: 6d:1b:3b:9a:66:45:00:03:db:da:96:55:91:2d:fe: 15:54:14:50:03:84:7d:f4:3d:d8:ad:f2:ea:7b:42: 2c:d3:37:14:cb:58:f7:92:f4:28:c5:1e:ff:af:77: f6:54:16:43:7b:ea:e8:b1:36:63:da:8f:b1:8c:e7: 34:f0:6a:be:d7:df:68:e0:6d:e8:b6:92:65:35:ec: 75:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FE:0F:BA:4C:4A:9E:55:FF:FA:9C:52:54:19:F7:96:F3:A8:48:28 X509v3 Authority Key Identifier: keyid:C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:80:8e:69:04:09:a6:ed:49:1c:73:83:f0:c1:d3:d1:91:63: 44:13:4e:29:2e:40:ed:90:b7:43:87:8e:a3:3f:86:28:fa:98: 37:2a:a6:1f:01:91:6a:e0:52:ad:e6:8c:ec:6c:42:e2:c9:9b: bf:af:f8:e5:b8:db:94:33:ea:64:41:ef:aa:70:26:64:39:75: 8a:5d:32:00:9e:9b:59:37:26:ed:94:b5:8b:b5:8d:ed:b4:1f: 7f:93:c6:e6:37:94:ac:49:18:b7:77:3a:df:c5:c2:1b:91:b9: cf:96:c9:86:3c:78:fb:c6:28:c5:33:fa:ba:52:57:6c:85:b2: 80:56:a8:b8:8e:a1:67:ae:dd:f5:a6:1d:ba:fa:8a:be:a8:70: c1:1f:da:00:73:2c:1d:0c:d3:02:e1:7e:51:ae:a0:88:09:67: 94:b7:f7:a1:f7:d3:4f:13:af:3a:13:92:f6:3f:d2:26:7a:63: c8:ae:2d:9a:45:02:e1:3f:fc:50:1c:1c:8e:8c:41:ad:f8:51: 60:e0:52:f8:fe:b4:95:f9:9b:6d:78:4a:d2:df:cd:59:f6:8b: c3:06:36:37:02:4f:57:3c:fb:c7:80:03:ee:1b:5c:8f:09:a1: f3:90:c4:02:81:5a:e5:bc:16:07:42:d4:b6:d7:30:a6:36:06: 1e:69:85:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUClRZIe/ulWc9fvtpJHj4IgLfkQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgz QjI3MUUzRTAeFw0yNTA4MDcyMDE3MDhaFw0yNTA4MTEwMzA0MDhaMDMxMTAvBgNV BAMTKDEyRkUwRkJBNEM0QTlFNTVGRkZBOUM1MjU0MTlGNzk2RjNBODQ4MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChMSveiQVk5LT0Fs5qNFRvvJL7 g0LkCgkZwR314a/F9WnS7wnNWyIbxDV8iX1j3JGXebQQJTrsVlxZs5ftWFDmveL2 6BxKuiCDCnbb3DsadYQtNga/jnIPZj0f+qMJlPvcSF7UeQy8OgknMednMHzZS3Bt m7H6mY9Nm0MlDSDfrA6Vnnd5Az+pSDBIjl0p2OmOJkFiP+d5IcbNRDjj6FEbSlwU zEsOZ3rfhwuA5Sm4MF4ycG0bO5pmRQAD29qWVZEt/hVUFFADhH30Pdit8up7QizT NxTLWPeS9CjFHv+vd/ZUFkN76uixNmPaj7GM5zTwar7X32jgbei2kmU17HUXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEv4PukxKnlX/+pxSVBn3lvOoSCgwHwYDVR0j BBgwFoAUw/dF7ef0wNjlZ0lltSCACDsnHj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDljMjJiMS0xYjdiLTQ2NzEtYWI5NC01YzVlNzQ4ODI1NDcvMC9DM0Y3NDVFREU3 RjRDMEQ4RTU2NzQ5NjVCNTIwODAwODNCMjcxRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgzQjI3 MUUzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA5YzIyYjEtMWI3Yi00NjcxLWFi OTQtNWM1ZTc0ODgyNTQ3LzAvQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgw MDgzQjI3MUUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyAjmkECabtSRxzg/DB09GRY0QTTikuQO2Q t0OHjqM/hij6mDcqph8BkWrgUq3mjOxsQuLJm7+v+OW425Qz6mRB76pwJmQ5dYpd MgCem1k3Ju2UtYu1je20H3+TxuY3lKxJGLd3Ot/FwhuRuc+WyYY8ePvGKMUz+rpS V2yFsoBWqLiOoWeu3fWmHbr6ir6ocMEf2gBzLB0M0wLhflGuoIgJZ5S396H3008T rzoTkvY/0iZ6Y8iuLZpFAuE//FAcHI6MQa34UWDgUvj+tJX5m214StLfzVn2i8MG NjcCT1c8+8eAA+4bXI8JofOQxAKBWuW8FgdC1LbXMKY2Bh5phaM= -----END CERTIFICATE-----Generated at Sat Aug 9 01:09:42 2025 by rpki-client