$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft File: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft (raw, json) Hash identifier: CnF0Z9ILt8bgVi+nBgvTrVUuQOyY73W+V3FHnoHQ44I= Subject key identifier: DE:9A:CC:92:B8:8B:EA:53:58:D7:01:18:C2:CB:9D:C0:53:54:1C:87 Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 4B445DC6A62FCFC9401FF76D8D0A88F1C606D51C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft Manifest number: 04F6 Signing time: Tue 05 Aug 2025 15:32:14 +0000 Manifest this update: Tue 05 Aug 2025 15:27:14 +0000 Manifest next update: Fri 08 Aug 2025 23:03:14 +0000 Files and hashes: 1: 323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa (hash: tQTDeuCAhgIHqT4JvN+SYFcrP542mVZbW7Uy9er1rk4=) 2: 3130332e3131322e3133362e302f32332d3233203d3e20313337333330.roa (hash: JdFXANFgLvROw3ALiHcjcCNg37qYIzNVyiUs7U7urj0=) 3: 323430323a616134303a31343a3a2f34382d3438203d3e20313337333330.roa (hash: ra0Qf+ys3TjTOOjzu7G6xBCVp6PgE8NBjiFHNgjZfy0=) 4: 323430323a616134303a31303a3a2f34382d3438203d3e20313337333330.roa (hash: JdwC9cZZayLXOr62V5QKdUDNIE+2Jw/cXMDWMiK/ID0=) 5: 3130332e3131322e3133372e302f32342d3234203d3e20313337333330.roa (hash: Ynfng1Lfq3pWIuf4W3EiHa7RUB04RaxJZyHC4wkM2pw=) 6: 3130332e3131322e3133392e302f32342d3234203d3e203535373031.roa (hash: Tg3uHiws3586UtP8/6LlH5rBTeR3eoDlr7oeiwMOjQA=) 7: 3130332e3131322e3133362e302f32342d3234203d3e20313337333330.roa (hash: IXEq/FTTwZnYZt7GCampKc/lJCDCJ9/yHr0Rlg6De2I=) 8: 3130332e3131322e3133382e302f32342d3234203d3e20313431383932.roa (hash: 7d6L1YnpzkSH3cjd/bratlHXMkaO39mRUgOEKpnPFL4=) 9: 323430323a616134303a313a3a2f34382d3438203d3e20313337333330.roa (hash: sfX//sKOJiEuG3MX815fs00hBV5qvYrVSNOlry6c+5c=) 10: 323430323a616134303a31353a3a2f34382d3438203d3e20313337333330.roa (hash: cplcGCMTKNbyST3IWkDxcP/n/AeMzarnQF1LNyGc5EY=) 11: 323430323a616134303a31333a3a2f34382d3438203d3e20313337333330.roa (hash: w4rnLSoK9Ogry5Be/7bEeNtK/st8upmlmof3uHLSQS4=) 12: 323430323a616134303a343a3a2f34382d3438203d3e20313337333330.roa (hash: 1oWczp9RZm7lezuDVU+ofnA0tfj2lVP+IvFgjT0dOg4=) 13: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl (hash: 0uJx8iXMvvusnPu56n4UdmXCYbF6FxW3Ak6r4KU0oBE=) 14: 323430323a616134303a31313a3a2f34382d3438203d3e20313337333330.roa (hash: BBYTiuzRjYx15TfoXkETOVppXlE7UGzNaI5UpnCSg40=) 15: 323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa (hash: SFCF3eZAfaB4k234A4Mal+M9wtz6OMi0W08cO5CL2c4=) 16: 323430323a616134303a383a3a2f34382d3438203d3e20313337333330.roa (hash: vAnV4g431JCqkwtUthm0ie5OhAW6+m/w0zGsqm8XSOo=) 17: 323430323a616134303a353a3a2f34382d3438203d3e20313337333330.roa (hash: Pt4kHivj/+/IoSa7PGPfSPyAlm/DgqrXfAGO9WlCDqE=) 18: 323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa (hash: EtS1eZLUTwWRZJ7Ml0izUQhw9pv4Am/WahNfvxjKTrc=) 19: 323430323a616134303a323a3a2f34382d3438203d3e20313337333330.roa (hash: vTpYTNK2Iedt3x6MQB/Xrh13AhkarFJV4HWTUjcGM/Y=) 20: 323430323a616134303a373a3a2f34382d3438203d3e20313337333330.roa (hash: Z1axM0kuScQ1wsgtnc4QX9GvMZLuIsV8v/ScHLgFtiU=) 21: 323430323a616134303a3a2f33322d3332203d3e20313337333330.roa (hash: vtCuldzUtylI5t9/fCW+s++nz3SUBB8oSaeAOGcN8rI=) 22: 323430323a616134303a31323a3a2f34382d3438203d3e20313337333330.roa (hash: QFubIhbbL6UEYuVrgh+b+Oy9CvlVLee6F9ADT2A6kec=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 23:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:44:5d:c6:a6:2f:cf:c9:40:1f:f7:6d:8d:0a:88:f1:c6:06:d5:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Aug 5 15:27:14 2025 GMT Not After : Aug 8 23:03:14 2025 GMT Subject: CN=DE9ACC92B88BEA5358D70118C2CB9DC053541C87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:23:a6:30:69:9e:99:03:86:6c:cc:44:f1:0e: 29:2f:9a:e7:72:26:24:e0:17:b9:45:6b:3b:51:93: 3a:d9:c1:38:98:ce:52:f1:d5:08:e6:64:df:b2:fc: d3:3f:49:39:7b:44:cc:54:6a:9f:10:d5:8c:5e:1f: 33:55:05:1f:07:9a:53:a9:04:d6:6b:14:9f:a7:b9: 99:fd:ad:fc:a8:f8:7c:04:1d:46:1b:08:d3:2d:99: c6:ec:93:22:bf:cb:4a:9e:48:9a:62:3f:9b:c9:c2: f0:c3:27:ce:85:7f:07:20:02:36:f0:6b:82:ca:46: b7:05:a5:29:d2:39:f5:e9:74:89:93:56:d4:dc:9b: d6:8d:c6:9a:72:bb:dd:11:d8:4e:11:b7:8e:91:92: b6:f1:aa:a2:c4:dc:49:f1:e6:e0:9a:80:63:11:7a: a0:c1:4b:b0:2c:e4:6a:c3:cd:90:35:92:8a:69:c9: 0c:0a:a5:12:9d:73:fb:c1:37:cf:a7:21:ce:0c:e7: 1a:80:b0:eb:8c:d4:10:3e:2e:2a:01:c9:fb:b4:7c: 34:31:7c:92:7a:63:b3:2d:9d:1a:f5:bc:79:33:65: e7:5b:42:58:55:06:92:8c:c7:68:fd:5f:b5:48:03: 65:0e:15:f1:a6:a0:37:28:38:8c:9c:65:c8:91:56: 62:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9A:CC:92:B8:8B:EA:53:58:D7:01:18:C2:CB:9D:C0:53:54:1C:87 X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:00:55:02:77:91:fb:6c:1d:e3:2d:8d:61:6c:48:fe:a6:6e: 9a:4c:81:0b:96:97:d2:ef:05:a2:c3:94:95:b6:89:33:bd:85: 78:e4:7c:d4:1c:5e:cc:3a:b0:39:f8:e2:61:47:05:ad:f4:ab: 4e:6d:56:82:f2:b0:9a:8e:82:ba:e0:22:be:39:77:05:f9:48: e1:10:8e:8f:1d:5e:3b:01:f9:ab:b7:d7:f3:68:cd:f0:d9:91: c8:0b:aa:e8:ed:ac:13:0b:3d:50:6a:a6:a6:42:cd:d5:af:33: e0:75:4e:12:45:49:ee:52:ca:32:56:5e:b1:49:11:dc:e5:74: 76:64:2b:aa:65:53:2e:32:da:78:48:26:cb:e8:5c:82:bd:41: 60:d3:f4:1d:4f:d9:b9:0d:a6:dd:30:c4:8a:2d:cc:55:7b:84: c8:e0:73:86:9e:ea:86:3a:4d:0d:08:3c:29:79:48:0a:e3:de: 5b:c4:a1:e1:9d:ce:80:1b:26:37:31:42:dc:86:4a:c2:7f:76: 72:79:9e:c8:2e:52:64:03:83:60:01:34:1a:0d:96:aa:2b:73: b6:cd:f2:5d:c9:cb:a7:a9:dd:f1:e8:92:67:40:3c:2c:41:63: 5e:3e:39:f6:ab:2f:47:f0:fa:e7:50:31:be:fb:0b:38:f2:e4: 3d:82:f8:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS0RdxqYvz8lAH/dtjQqI8cYG1RwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNTA4MDUxNTI3MTRaFw0yNTA4MDgyMzAzMTRaMDMxMTAvBgNV BAMTKERFOUFDQzkyQjg4QkVBNTM1OEQ3MDExOEMyQ0I5REMwNTM1NDFDODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8I6YwaZ6ZA4ZszETxDikvmudy JiTgF7lFaztRkzrZwTiYzlLx1QjmZN+y/NM/STl7RMxUap8Q1YxeHzNVBR8HmlOp BNZrFJ+nuZn9rfyo+HwEHUYbCNMtmcbskyK/y0qeSJpiP5vJwvDDJ86FfwcgAjbw a4LKRrcFpSnSOfXpdImTVtTcm9aNxppyu90R2E4Rt46RkrbxqqLE3Enx5uCagGMR eqDBS7As5GrDzZA1koppyQwKpRKdc/vBN8+nIc4M5xqAsOuM1BA+LioByfu0fDQx fJJ6Y7MtnRr1vHkzZedbQlhVBpKMx2j9X7VIA2UOFfGmoDcoOIycZciRVmLpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3prMkriL6lNY1wEYwsudwFNUHIcwHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGMzNGZmMDgtZDIxZi00MjBiLTg3 ZGYtNTMxMDNiNmRjMjUzLzAvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUx MkZFNEMxRDAwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQAVQJ3kftsHeMtjWFsSP6mbppMgQuWl9Lv BaLDlJW2iTO9hXjkfNQcXsw6sDn44mFHBa30q05tVoLysJqOgrrgIr45dwX5SOEQ jo8dXjsB+au31/NozfDZkcgLqujtrBMLPVBqpqZCzdWvM+B1ThJFSe5SyjJWXrFJ EdzldHZkK6plUy4y2nhIJsvoXIK9QWDT9B1P2bkNpt0wxIotzFV7hMjgc4ae6oY6 TQ0IPCl5SArj3lvEoeGdzoAbJjcxQtyGSsJ/dnJ5nsguUmQDg2ABNBoNlqorc7bN 8l3Jy6ep3fHokmdAPCxBY14+OfarL0fw+udQMb77Czjy5D2C+Mw= -----END CERTIFICATE-----Generated at Thu Aug 7 04:24:05 2025 by rpki-client