$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft File: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft (raw, json) Hash identifier: xG1phzEjBBZMV2pUIB+YXL5XIAeqlt3/nnFNIkbDL1c= Subject key identifier: 1D:06:20:E0:95:9B:F0:54:29:CD:AA:5F:AD:DF:8E:2C:2F:08:F2:BB Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 5DA6EF57C0CB90EFFF8FFB5C50DEC2A1C4BDE31D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft Manifest number: 04DF Signing time: Wed 18 Jun 2025 00:02:12 +0000 Manifest this update: Tue 17 Jun 2025 23:57:12 +0000 Manifest next update: Sat 21 Jun 2025 05:55:12 +0000 Files and hashes: 1: 323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa (hash: SFCF3eZAfaB4k234A4Mal+M9wtz6OMi0W08cO5CL2c4=) 2: 3130332e3131322e3133392e302f32342d3234203d3e203535373031.roa (hash: CpzM+132Mdd3sT2ikka6T6ZIOzo9cPs9M0vsLY9AeJk=) 3: 323430323a616134303a31343a3a2f34382d3438203d3e20313337333330.roa (hash: ra0Qf+ys3TjTOOjzu7G6xBCVp6PgE8NBjiFHNgjZfy0=) 4: 323430323a616134303a31353a3a2f34382d3438203d3e20313337333330.roa (hash: cplcGCMTKNbyST3IWkDxcP/n/AeMzarnQF1LNyGc5EY=) 5: 323430323a616134303a313a3a2f34382d3438203d3e20313337333330.roa (hash: sfX//sKOJiEuG3MX815fs00hBV5qvYrVSNOlry6c+5c=) 6: 323430323a616134303a31323a3a2f34382d3438203d3e20313337333330.roa (hash: QFubIhbbL6UEYuVrgh+b+Oy9CvlVLee6F9ADT2A6kec=) 7: 323430323a616134303a353a3a2f34382d3438203d3e20313337333330.roa (hash: Pt4kHivj/+/IoSa7PGPfSPyAlm/DgqrXfAGO9WlCDqE=) 8: 323430323a616134303a373a3a2f34382d3438203d3e20313337333330.roa (hash: Z1axM0kuScQ1wsgtnc4QX9GvMZLuIsV8v/ScHLgFtiU=) 9: 3130332e3131322e3133362e302f32332d3233203d3e20313337333330.roa (hash: Hs35c6RHToYi6qvTeTc31yFLqwStwmhd6QBjMnOffHI=) 10: 3130332e3131322e3133372e302f32342d3234203d3e20313337333330.roa (hash: F4/KJVXNTNm34izb7glpnGYFHc3KADsusKQ08aViHLM=) 11: 323430323a616134303a383a3a2f34382d3438203d3e20313337333330.roa (hash: vAnV4g431JCqkwtUthm0ie5OhAW6+m/w0zGsqm8XSOo=) 12: 323430323a616134303a31333a3a2f34382d3438203d3e20313337333330.roa (hash: w4rnLSoK9Ogry5Be/7bEeNtK/st8upmlmof3uHLSQS4=) 13: 3130332e3131322e3133382e302f32342d3234203d3e20313431383932.roa (hash: 7d6L1YnpzkSH3cjd/bratlHXMkaO39mRUgOEKpnPFL4=) 14: 323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa (hash: tQTDeuCAhgIHqT4JvN+SYFcrP542mVZbW7Uy9er1rk4=) 15: 323430323a616134303a31303a3a2f34382d3438203d3e20313337333330.roa (hash: JdwC9cZZayLXOr62V5QKdUDNIE+2Jw/cXMDWMiK/ID0=) 16: 323430323a616134303a323a3a2f34382d3438203d3e20313337333330.roa (hash: vTpYTNK2Iedt3x6MQB/Xrh13AhkarFJV4HWTUjcGM/Y=) 17: 323430323a616134303a343a3a2f34382d3438203d3e20313337333330.roa (hash: 1oWczp9RZm7lezuDVU+ofnA0tfj2lVP+IvFgjT0dOg4=) 18: 323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa (hash: EtS1eZLUTwWRZJ7Ml0izUQhw9pv4Am/WahNfvxjKTrc=) 19: 323430323a616134303a31313a3a2f34382d3438203d3e20313337333330.roa (hash: BBYTiuzRjYx15TfoXkETOVppXlE7UGzNaI5UpnCSg40=) 20: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl (hash: yjLoYqtL2Cw6Ni7A3hTw457mp3SX22Aexa8O9JMv45w=) 21: 3130332e3131322e3133362e302f32342d3234203d3e20313337333330.roa (hash: u1lfWy0MDbubQseV6f0yVaeg4S5wTkc4cbrHCMmY4Yw=) 22: 323430323a616134303a3a2f33322d3332203d3e20313337333330.roa (hash: e/yjVod/7lR4uj/RENV7JfH5TX+LSB9hPgqV7eSiKp4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 05:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:a6:ef:57:c0:cb:90:ef:ff:8f:fb:5c:50:de:c2:a1:c4:bd:e3:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Jun 17 23:57:12 2025 GMT Not After : Jun 21 05:55:12 2025 GMT Subject: CN=1D0620E0959BF05429CDAA5FADDF8E2C2F08F2BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f1:ab:f1:03:c4:b0:a0:ad:bf:ee:37:5f:ba: f4:47:a5:e0:39:fb:6f:db:91:d9:70:f7:a9:cc:29: f4:50:c6:68:26:f0:e1:28:07:ee:29:07:12:44:08: 46:eb:a0:06:be:1a:ab:11:95:5c:4e:6c:57:5e:2b: 1f:dc:6c:0d:5b:ce:71:2b:3a:79:fa:c6:b7:f2:99: 24:ca:b5:cf:dc:27:5b:7f:b5:9e:d3:6d:a6:f7:a2: c2:3e:9c:ca:83:63:76:ee:ba:5b:31:7f:18:d1:fc: 87:01:fc:2c:4d:62:72:b0:e8:9e:05:1e:5c:08:26: 98:94:f7:45:19:05:5a:74:c9:a5:12:4e:23:92:45: 6c:55:63:29:6c:33:75:f2:c3:e8:31:93:98:ed:8e: ce:f9:34:2b:03:16:6d:f5:8b:f5:1f:43:00:ad:c4: ae:5b:86:05:97:5d:db:80:17:1f:d1:31:de:93:79: 02:84:09:7e:27:01:5b:e3:1e:dd:b0:90:24:13:59: c0:48:1d:cf:38:1c:49:ad:51:65:b8:f8:ec:01:12: 54:b8:55:43:75:f6:f8:73:4a:13:7c:4b:4a:f0:5c: fe:4c:84:3c:5b:05:85:80:fd:9b:6b:aa:90:e6:37: d0:e2:3a:88:36:93:dd:27:66:c7:60:eb:6d:51:1d: 82:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:06:20:E0:95:9B:F0:54:29:CD:AA:5F:AD:DF:8E:2C:2F:08:F2:BB X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:db:af:e9:46:75:21:c1:98:55:d3:96:35:1f:1d:74:bf:a5: 88:e0:b8:26:36:5e:3c:3e:9b:b6:16:62:ae:80:d2:20:67:c8: 01:47:27:1e:80:5b:08:e8:d6:36:20:54:82:7f:bc:ac:79:ce: 26:17:95:df:e0:f1:f7:de:f1:0d:2b:87:72:87:90:c7:c1:cf: ed:f6:8e:d4:02:1e:54:7f:15:e7:21:52:88:60:af:34:8d:7f: e0:06:f2:2d:4c:62:a7:ba:44:84:db:4d:08:78:2b:f6:81:f9: 21:a8:08:8b:f1:77:b5:9e:56:59:14:7d:e1:52:4e:51:d6:07: e6:54:3f:8d:31:f0:2c:7a:93:6e:79:46:1c:46:b3:12:59:ed: dd:e6:de:e1:49:08:c9:10:b8:9b:df:64:92:23:ec:4b:2e:71: 15:ca:04:60:f4:9d:77:8d:37:6b:3c:8c:16:a7:19:fd:6f:f8: b2:9f:bc:d4:5b:1a:73:f7:20:e1:99:93:00:85:86:62:4a:95: f6:43:e5:81:82:ef:76:39:5f:0b:e9:9e:2a:ec:23:81:82:fb: 33:d2:96:7a:2d:98:de:61:4a:72:47:b0:61:2f:1a:8e:50:d4: ba:38:2e:45:df:82:54:50:dd:c7:68:23:a9:ba:6e:b5:ef:8b: 15:f7:53:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXabvV8DLkO//j/tcUN7CocS94x0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNTA2MTcyMzU3MTJaFw0yNTA2MjEwNTU1MTJaMDMxMTAvBgNV BAMTKDFEMDYyMEUwOTU5QkYwNTQyOUNEQUE1RkFEREY4RTJDMkYwOEYyQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC48avxA8SwoK2/7jdfuvRHpeA5 +2/bkdlw96nMKfRQxmgm8OEoB+4pBxJECEbroAa+GqsRlVxObFdeKx/cbA1bznEr Onn6xrfymSTKtc/cJ1t/tZ7Tbab3osI+nMqDY3buulsxfxjR/IcB/CxNYnKw6J4F HlwIJpiU90UZBVp0yaUSTiOSRWxVYylsM3Xyw+gxk5jtjs75NCsDFm31i/UfQwCt xK5bhgWXXduAFx/RMd6TeQKECX4nAVvjHt2wkCQTWcBIHc84HEmtUWW4+OwBElS4 VUN19vhzShN8S0rwXP5MhDxbBYWA/ZtrqpDmN9DiOog2k90nZsdg621RHYJxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHQYg4JWb8FQpzapfrd+OLC8I8rswHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGMzNGZmMDgtZDIxZi00MjBiLTg3 ZGYtNTMxMDNiNmRjMjUzLzAvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUx MkZFNEMxRDAwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTbr+lGdSHBmFXTljUfHXS/pYjguCY2Xjw+ m7YWYq6A0iBnyAFHJx6AWwjo1jYgVIJ/vKx5ziYXld/g8ffe8Q0rh3KHkMfBz+32 jtQCHlR/FechUohgrzSNf+AG8i1MYqe6RITbTQh4K/aB+SGoCIvxd7WeVlkUfeFS TlHWB+ZUP40x8Cx6k255RhxGsxJZ7d3m3uFJCMkQuJvfZJIj7EsucRXKBGD0nXeN N2s8jBanGf1v+LKfvNRbGnP3IOGZkwCFhmJKlfZD5YGC73Y5XwvpnirsI4GC+zPS lnotmN5hSnJHsGEvGo5Q1Lo4LkXfglRQ3cdoI6m6brXvixX3U4E= -----END CERTIFICATE-----Generated at Wed Jun 18 09:08:01 2025 by rpki-client