$ rpki-client -vvf repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft File: 08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft (raw, json) Hash identifier: bsBb1C5+QVai/0wwivvoHprrGC03V/Qkh8lhvhnZfM8= Subject key identifier: 20:7B:85:58:08:8D:9E:39:B9:FE:38:56:8C:6C:7F:76:FA:D9:CD:2D Authority key identifier: 08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25 Certificate issuer: /CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25 Certificate serial: 610EAA605D700CD9C154D7A09CEE74072FC646C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft Manifest number: 050A Signing time: Wed 06 Aug 2025 14:21:35 +0000 Manifest this update: Wed 06 Aug 2025 14:16:35 +0000 Manifest next update: Sat 09 Aug 2025 21:52:35 +0000 Files and hashes: 1: 3130332e3130322e31352e302f32342d3234203d3e20313337333331.roa (hash: MQx/O8O2uQJVqHYOSxfo/Q2KG9J3bcLTiM4IdvIIF+I=) 2: 3130332e3130322e31332e302f32342d3234203d3e20313336383635.roa (hash: w8KhQhAE9qtOeUsIYiL4lko66TpmJ+xch/XP9e9vq2Y=) 3: 3130332e3130322e31342e302f32342d3234203d3e20313336383635.roa (hash: dUXFtPIF61cMsxlijUdeGn+XAjJGBrV/EpzRTuOKE9M=) 4: 323430313a646234303a3a2f33322d3332203d3e20313336383635.roa (hash: KGUF32Kc9eR09Ep+PLSsXC9//4a1BdJ7Q2PE9xYrp/A=) 5: 3130332e3130322e31322e302f32342d3234203d3e20313336383635.roa (hash: 3P9Pl6Hs5uriFWxnAGmotMmA1+l8H3Rlr0SXz2N0yKQ=) 6: 08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl (hash: hpZBNKJDxjxSOAlDfv7ZBR0NQZkDSsVdBnVZaUoqJvI=) 7: 3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa (hash: VX2tVKkS7LzPxrLmOsssh+r2zJ3zeiGSJ2bMTYWz5Q8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 21:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:0e:aa:60:5d:70:0c:d9:c1:54:d7:a0:9c:ee:74:07:2f:c6:46:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25 Validity Not Before: Aug 6 14:16:35 2025 GMT Not After : Aug 9 21:52:35 2025 GMT Subject: CN=207B8558088D9E39B9FE38568C6C7F76FAD9CD2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:68:c6:31:b5:9c:21:68:9f:0e:ad:d7:3e:5f: 30:5a:39:76:3d:24:e0:7a:7f:68:9c:39:c8:0c:1f: 8f:43:86:4a:b0:61:67:d2:9d:0e:ea:e7:77:1a:6b: fd:36:f0:66:1c:14:9b:61:6f:99:6f:9c:b2:9f:12: d1:45:85:72:b2:25:e3:08:30:10:4e:1d:26:98:e5: 54:d0:8c:34:e9:75:dd:9f:a6:22:7d:12:62:ed:5b: a3:9f:c1:a2:91:f1:32:c8:4e:b0:b4:ec:81:7a:83: 22:e4:d1:eb:4b:27:09:a9:ad:95:84:e6:a8:c9:f4: b9:cc:b1:8d:d7:c5:ea:60:a5:f8:b2:6b:59:bc:72: 26:67:d6:07:23:2a:4e:5f:8b:42:12:fa:8c:04:ce: e7:cb:4c:bc:89:19:4f:65:09:ec:01:13:59:5a:e1: 9e:fd:b9:31:3f:c8:63:68:90:e9:5e:c1:bd:d8:09: ad:f6:11:07:9d:86:f9:4f:55:20:b9:32:80:d6:8a: df:90:cb:12:7d:19:c3:ab:38:66:6c:bc:7b:7f:ad: 06:04:1e:5e:1e:92:7f:67:f2:8d:26:ea:5b:e4:af: 9c:ee:42:0a:b8:e3:66:60:c7:d9:96:9a:e2:dc:56: ee:bb:a8:4c:15:39:7a:3c:f0:15:3c:37:cb:34:86: 12:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7B:85:58:08:8D:9E:39:B9:FE:38:56:8C:6C:7F:76:FA:D9:CD:2D X509v3 Authority Key Identifier: keyid:08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c5:66:40:e3:e0:f8:24:50:0c:55:c2:3a:bb:ee:8f:5e:7d: 4d:ec:83:31:85:f7:bc:15:aa:75:49:ef:81:e3:11:c7:6b:1b: 4f:e1:af:4b:a8:4d:3b:f5:b0:50:39:f6:8f:f7:bf:f9:67:0b: c0:23:47:43:db:d6:8d:d6:fd:36:30:d6:d5:dc:f8:91:63:f3: 33:c5:98:3a:3c:04:88:06:0c:6f:d6:f3:54:7a:f0:44:66:e0: 57:7f:98:92:15:84:14:9d:5a:02:f7:24:1f:73:13:6b:0f:ff: 64:64:7e:1c:bb:5c:5b:df:b2:a3:c5:14:0f:d3:9e:6a:40:8d: c6:eb:0a:c8:95:5d:15:a9:a7:dc:81:d8:b4:b1:ce:7d:b9:a4: 1f:2e:63:7c:77:dd:2e:d8:dd:b6:bd:9c:f7:a7:f4:88:20:6f: 34:f9:65:03:ba:b3:c8:c2:60:39:9b:a2:84:f5:90:5c:03:4d: af:3e:1a:aa:42:4d:bd:fd:a6:04:3a:79:c5:47:6d:0c:c1:0c: f0:a1:55:0b:6e:90:b3:a5:7d:21:3f:27:86:98:36:dd:90:fe: 17:e8:c3:ea:72:74:50:48:eb:55:f9:51:f7:02:bc:ee:20:08: 36:c5:9e:e5:1d:9f:bc:47:f0:bb:89:33:c6:72:6a:a9:96:56: df:ba:4a:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYQ6qYF1wDNnBVNegnO50By/GRsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFDQjE4 N0Y2M0MyNTAeFw0yNTA4MDYxNDE2MzVaFw0yNTA4MDkyMTUyMzVaMDMxMTAvBgNV BAMTKDIwN0I4NTU4MDg4RDlFMzlCOUZFMzg1NjhDNkM3Rjc2RkFEOUNEMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZaMYxtZwhaJ8Ordc+XzBaOXY9 JOB6f2icOcgMH49DhkqwYWfSnQ7q53caa/028GYcFJthb5lvnLKfEtFFhXKyJeMI MBBOHSaY5VTQjDTpdd2fpiJ9EmLtW6OfwaKR8TLITrC07IF6gyLk0etLJwmprZWE 5qjJ9LnMsY3Xxepgpfiya1m8ciZn1gcjKk5fi0IS+owEzufLTLyJGU9lCewBE1la 4Z79uTE/yGNokOlewb3YCa32EQedhvlPVSC5MoDWit+QyxJ9GcOrOGZsvHt/rQYE Hl4ekn9n8o0m6lvkr5zuQgq442Zgx9mWmuLcVu67qEwVOXo88BU8N8s0hhJDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIHuFWAiNnjm5/jhWjGx/dvrZzS0wHwYDVR0j BBgwFoAUCHcxkfv8IaPIYVo+NqKssYf2PCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Zjg2YjEyZS1lNTc0LTQyNmItYWE2Yi00OTM5ZTNiMDMwYmEvMC8wODc3MzE5MUZC RkMyMUEzQzg2MTVBM0UzNkEyQUNCMTg3RjYzQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFDQjE4N0Y2 M0MyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY4NmIxMmUtZTU3NC00MjZiLWFh NmItNDkzOWUzYjAzMGJhLzAvMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFD QjE4N0Y2M0MyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3FZkDj4PgkUAxVwjq77o9efU3sgzGF97wV qnVJ74HjEcdrG0/hr0uoTTv1sFA59o/3v/lnC8AjR0Pb1o3W/TYw1tXc+JFj8zPF mDo8BIgGDG/W81R68ERm4Fd/mJIVhBSdWgL3JB9zE2sP/2Rkfhy7XFvfsqPFFA/T nmpAjcbrCsiVXRWpp9yB2LSxzn25pB8uY3x33S7Y3ba9nPen9IggbzT5ZQO6s8jC YDmbooT1kFwDTa8+GqpCTb39pgQ6ecVHbQzBDPChVQtukLOlfSE/J4aYNt2Q/hfo w+pydFBI61X5UfcCvO4gCDbFnuUdn7xH8LuJM8ZyaqmWVt+6Sjg= -----END CERTIFICATE-----Generated at Thu Aug 7 04:03:42 2025 by rpki-client