$ rpki-client -vvf repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft File: 523EE8D6F461B8FD4106F482C46C1029B1013145.mft (raw, json) Hash identifier: ZMdy5vyYbkeV5GOqAfzN/xpr9vSlT61LsvtMpRhwE5c= Subject key identifier: 43:E1:47:D2:F0:EB:51:C4:53:74:F8:4C:56:22:59:8A:4B:10:B0:A5 Authority key identifier: 52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45 Certificate issuer: /CN=523EE8D6F461B8FD4106F482C46C1029B1013145 Certificate serial: 19E8485BAA0BC2181CF97EA1EBB3F56FD25A55D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft Manifest number: AE Signing time: Mon 04 Aug 2025 23:20:36 +0000 Manifest this update: Mon 04 Aug 2025 23:15:36 +0000 Manifest next update: Fri 08 Aug 2025 06:16:36 +0000 Files and hashes: 1: 3130332e31392e38302e302f32332d3234203d3e20313332363339.roa (hash: z0HZjcHieRuZ5HHeSmTqSUrJvHMtgbLp6o8sJVRupVI=) 2: 523EE8D6F461B8FD4106F482C46C1029B1013145.crl (hash: gu3RWXCT1sRY6uWrlh71hyBbKqk1PdQFqis02ZuXFPY=) 3: 3130332e31392e38302e302f32342d3234203d3e20313332363339.roa (hash: YEDjMiqzXqQQzIDtWpx+jx5Bn+2TYkAiFHsRj0775yM=) 4: 3130332e3132392e3233312e302f32342d3234203d3e20313332363339.roa (hash: jWc0sz86L+eDtr+nDMgQgH+2S7uRf5Y8Wu7u8v4zz0Q=) 5: 3130332e3132392e3233302e302f32332d3234203d3e20313332363339.roa (hash: H0hxzRE1P/k0NGsIoy/0kaAKznrWHPdRQxgiRW4T5Qo=) 6: 3130332e3132392e3233302e302f32342d3234203d3e20313332363339.roa (hash: zP2/XdcDOhp440RXruEyN+zWviJE7i53kBfkBKlQJ0I=) 7: 3130332e31392e38312e302f32342d3234203d3e20313332363339.roa (hash: jKwlGthiQpzXwnHyIqfnx5NGkz2sE+y3uVu40s6f6sc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.crl rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 06:16:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e8:48:5b:aa:0b:c2:18:1c:f9:7e:a1:eb:b3:f5:6f:d2:5a:55:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=523EE8D6F461B8FD4106F482C46C1029B1013145 Validity Not Before: Aug 4 23:15:36 2025 GMT Not After : Aug 8 06:16:36 2025 GMT Subject: CN=43E147D2F0EB51C45374F84C5622598A4B10B0A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:93:47:4b:27:09:d4:20:a1:d6:09:41:6f:9d: 6d:ec:dc:44:89:90:28:31:66:08:2a:d5:26:62:31: 24:a4:df:23:63:c8:62:b6:bb:40:1a:b6:44:04:43: 42:91:2b:ef:7c:9b:d8:d2:9b:6a:70:8a:4e:e4:4d: 49:0a:4d:0c:97:c4:44:57:5a:da:46:c2:35:05:60: b8:7c:1b:9e:7f:a9:5a:4f:7d:30:9f:a7:59:ba:aa: a7:22:d0:90:8b:a6:51:26:08:7f:4a:3f:c9:e9:05: be:9a:12:dc:fa:7e:ac:8f:83:ee:8b:12:05:32:f8: e9:13:7c:03:e5:be:70:1d:13:4e:1e:84:d1:25:3f: 7a:12:77:34:fe:d1:21:4f:0d:e0:78:c0:4b:f0:35: b3:29:19:fd:15:ba:8f:f8:9b:aa:d9:49:bf:15:12: ae:02:dd:a8:49:4c:80:19:e7:97:c2:83:ab:c2:ff: fb:f5:fa:f4:31:7d:69:1f:ba:ef:72:b4:c3:96:74: 9f:b9:3d:e8:55:4d:d3:ba:91:86:d6:f9:0b:22:42: 07:04:8f:a1:4c:a8:91:c3:f4:c1:4e:78:c2:35:ab: 72:72:dd:c0:30:b3:62:2c:a2:29:bb:05:66:e0:0c: c4:2a:59:f9:f4:bf:fd:96:91:49:05:c3:70:f0:8f: 9d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E1:47:D2:F0:EB:51:C4:53:74:F8:4C:56:22:59:8A:4B:10:B0:A5 X509v3 Authority Key Identifier: keyid:52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:af:1f:56:09:f4:4a:52:b7:4d:14:fd:c6:55:28:f5:6a:d0: 0f:c0:1f:04:26:e4:98:65:b1:f8:7f:11:c8:15:7b:99:5d:04: 88:cf:8f:ac:c3:bd:cc:27:d2:86:f4:35:9f:ad:4d:d5:c4:c5: 2d:5e:f8:6f:2b:da:b3:c1:93:89:22:8d:0a:36:86:f4:4e:fd: 03:f5:2d:59:44:b8:34:be:82:45:ab:61:b2:4b:74:1b:e7:48: 91:c0:67:a6:ad:c5:d7:49:05:0c:79:03:db:91:27:5a:ac:17: 6e:03:55:35:33:0f:a9:da:40:16:48:43:9e:41:40:89:30:ca: 5c:2b:b7:a4:d9:79:57:ab:42:a5:0c:68:9e:c5:e8:50:76:5f: 3d:76:39:5f:74:76:53:98:b5:09:b6:ba:fc:00:a4:ec:d0:e5: 83:11:52:85:76:65:d7:f5:15:28:6b:bf:57:93:51:f2:33:61: 6f:4c:c0:e0:c6:d1:88:06:0a:9a:57:90:ed:15:30:47:6c:0d: 31:04:ea:a7:0a:b7:d5:94:8a:da:c5:29:1b:52:ac:7a:65:3e: 50:92:dc:fe:86:e5:b7:64:33:34:84:d6:0d:58:56:9c:92:78: 58:58:6d:12:a2:9f:d6:9a:5f:06:c3:82:4a:1c:5e:fd:db:8f: f7:b0:99:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGehIW6oLwhgc+X6h67P1b9JaVdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEwMjlC MTAxMzE0NTAeFw0yNTA4MDQyMzE1MzZaFw0yNTA4MDgwNjE2MzZaMDMxMTAvBgNV BAMTKDQzRTE0N0QyRjBFQjUxQzQ1Mzc0Rjg0QzU2MjI1OThBNEIxMEIwQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVk0dLJwnUIKHWCUFvnW3s3ESJ kCgxZggq1SZiMSSk3yNjyGK2u0AatkQEQ0KRK+98m9jSm2pwik7kTUkKTQyXxERX WtpGwjUFYLh8G55/qVpPfTCfp1m6qqci0JCLplEmCH9KP8npBb6aEtz6fqyPg+6L EgUy+OkTfAPlvnAdE04ehNElP3oSdzT+0SFPDeB4wEvwNbMpGf0Vuo/4m6rZSb8V Eq4C3ahJTIAZ55fCg6vC//v1+vQxfWkfuu9ytMOWdJ+5PehVTdO6kYbW+QsiQgcE j6FMqJHD9MFOeMI1q3Jy3cAws2Isoim7BWbgDMQqWfn0v/2WkUkFw3Dwj515AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ+FH0vDrUcRTdPhMViJZiksQsKUwHwYDVR0j BBgwFoAUUj7o1vRhuP1BBvSCxGwQKbEBMUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWE0Mjc0Mi04OWQyLTQ5YmItOGEzZS0yOTRjMzY4OTcxZjUvMC81MjNFRThENkY0 NjFCOEZENDEwNkY0ODJDNDZDMTAyOUIxMDEzMTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEwMjlCMTAx MzE0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhNDI3NDItODlkMi00OWJiLThh M2UtMjk0YzM2ODk3MWY1LzAvNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEw MjlCMTAxMzE0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESvH1YJ9EpSt00U/cZVKPVq0A/AHwQm5Jhl sfh/EcgVe5ldBIjPj6zDvcwn0ob0NZ+tTdXExS1e+G8r2rPBk4kijQo2hvRO/QP1 LVlEuDS+gkWrYbJLdBvnSJHAZ6atxddJBQx5A9uRJ1qsF24DVTUzD6naQBZIQ55B QIkwylwrt6TZeVerQqUMaJ7F6FB2Xz12OV90dlOYtQm2uvwApOzQ5YMRUoV2Zdf1 FShrv1eTUfIzYW9MwODG0YgGCppXkO0VMEdsDTEE6qcKt9WUitrFKRtSrHplPlCS 3P6G5bdkMzSE1g1YVpySeFhYbRKin9aaXwbDgkocXv3bj/ewmZ4= -----END CERTIFICATE-----Generated at Thu Aug 7 00:38:30 2025 by rpki-client