$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft File: 639473CD2054A78B39F9AC7A83232462F00E71AA.mft (raw, json) Hash identifier: JdMll1nrZKpSk0JbWdZzGYcl6Pv/X14zoXv2b9ja6ns= Subject key identifier: BB:90:82:E5:84:53:9D:6D:DB:A6:72:C6:2C:77:E7:E7:AA:BD:51:31 Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA Certificate serial: 29A6B2500454CF86FF34FFC0F3F8C3D7F8C5DFCD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft Manifest number: 0D3A Signing time: Tue 05 Aug 2025 23:51:51 +0000 Manifest this update: Tue 05 Aug 2025 23:46:51 +0000 Manifest next update: Sat 09 Aug 2025 00:06:51 +0000 Files and hashes: 1: 323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa (hash: 5B7v2ShhK5C4wbhQiHatQFgCi8oUxqkoPlhjyp+Rnaw=) 2: 3130332e3232382e3234342e302f32322d3234203d3e203539323832.roa (hash: kkZ5080z9oUs+jW8iHX1Tzr1MG5R0/keiimPL4Y7DMk=) 3: 3130332e3232382e3234362e302f32342d3234203d3e203539323832.roa (hash: XZ4OJKWgYbKu4ak8HWaN9bEJfkYQKh79GGoEWm0kS2Q=) 4: 3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa (hash: 7JHZWmtz01hYjYbLRHq9pCZCM42A/jGx+qscoYZR+8M=) 5: 3130332e3232382e3234372e302f32342d3234203d3e203539323832.roa (hash: 4gtV8ZXJhBLgP6alnZmazQL9Du+oKvqI/MvatS0Bbyw=) 6: 3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa (hash: /sujTtwH0ddwmWj6UyMseljhgpcNLVkP8+vtS5y3rGg=) 7: 323430303a643638303a666163653a3a2f34382d3438203d3e203539323832.roa (hash: u5dDjhuBvBzcqNjKEeW7vizdTx58v6wY4rfkMiHiI5I=) 8: 323430303a643638303a323a3a2f34382d3438203d3e203539323832.roa (hash: qLkIroWnbqSVivBGqvgi5oF8E8eNhXgrJocCdlawdNk=) 9: 3131362e3230362e3231342e302f32342d3234203d3e203539323832.roa (hash: mgdd33inbho0w/YafQxmlb4mn2645LWgbd4GjzvqC5g=) 10: 323430303a643638303a353a3a2f34382d3438203d3e203539323832.roa (hash: /8HKOKl3PxMMPopAmXJsDfZHfFoo7wkQ81V5TqWB1uE=) 11: 3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa (hash: QsDPs2mlZqyMZXfjf6Zh+NWMXGWy1j4R+YaYRxdbecQ=) 12: 323430303a643638303a35393a3a2f34382d3438203d3e203539323832.roa (hash: 0AzZnlQLCCzpiwYH8VB91hQfBqmdrJ+ok40Qb8sCeko=) 13: 3130332e3232382e3234342e302f32342d3234203d3e203539323832.roa (hash: esxHqUt3Xq6PKKXsfFgfUEYi1fJUgVnC6F8M6sDPUJM=) 14: 3131362e3230362e3231332e302f32342d3234203d3e203539323832.roa (hash: JPYapDBTyTePbdwtE88+heXxGhufXE50JBbJ2fq7FKo=) 15: 323430303a643638303a3a2f33322d3438203d3e203539323832.roa (hash: SgqLAGcMTNBEKnSS7cpl5WafnRLBI8WCT5GxxXyN0zA=) 16: 639473CD2054A78B39F9AC7A83232462F00E71AA.crl (hash: H083JkyoQznDxvBWYreCLv0/P4eSwvlo9nhixLMZ2mk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 00:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:a6:b2:50:04:54:cf:86:ff:34:ff:c0:f3:f8:c3:d7:f8:c5:df:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA Validity Not Before: Aug 5 23:46:51 2025 GMT Not After : Aug 9 00:06:51 2025 GMT Subject: CN=BB9082E584539D6DDBA672C62C77E7E7AABD5131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3a:7c:e1:78:89:63:af:54:24:8e:18:e0:ae: 98:96:a1:89:0d:d1:10:92:06:a5:e4:0f:d7:08:97: 44:ae:ce:9d:7f:d5:9f:d0:21:57:e1:34:cb:bd:e2: ce:e6:ac:e4:b6:2e:1c:f2:5c:27:c3:9e:08:ab:f2: 90:04:82:19:d3:8c:fc:29:3f:e0:fa:e2:74:ca:ee: 12:ab:a7:20:74:b4:4a:1b:07:ad:90:f1:2c:b3:a8: e9:de:1a:55:12:87:5d:5e:53:76:60:47:aa:e6:eb: 7c:0a:1b:de:ed:58:71:a1:ea:f5:68:16:eb:39:30: 6d:63:c8:db:41:fd:30:83:3e:57:36:88:b0:55:56: 8b:94:1f:6d:82:0c:ed:cc:56:dd:5f:1b:c1:ff:a5: 75:00:74:14:bb:dc:48:e4:4c:5d:13:3e:3b:38:42: 61:27:67:fa:7c:36:0c:e6:84:46:66:19:48:34:68: 7d:fb:35:ad:a5:80:5a:39:5e:58:cd:60:34:d8:b5: 1f:4c:de:d8:0e:83:34:3b:78:44:9a:23:56:40:01: ab:7c:04:b8:c4:cb:c6:26:b7:61:1c:c0:61:b5:a8: 21:5a:61:17:34:fd:81:db:93:6d:8c:2b:b3:f4:b8: 31:8f:9d:20:76:5e:92:ff:2c:3d:15:7c:9c:7b:ac: e0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:90:82:E5:84:53:9D:6D:DB:A6:72:C6:2C:77:E7:E7:AA:BD:51:31 X509v3 Authority Key Identifier: keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:cd:e0:fd:c3:d9:f1:c5:c7:34:72:63:86:4f:99:27:00:de: 53:cb:6b:9f:0a:3e:1f:96:5f:ec:7d:36:de:76:8c:b6:3f:b5: c0:f9:e3:23:d3:93:ed:88:77:da:d5:6b:80:d8:b8:08:61:97: 80:a3:d0:6b:59:e0:3c:76:28:38:72:32:a9:d9:c5:53:e8:73: 39:e5:66:36:7d:bb:a8:84:5d:46:b8:ae:4d:4f:8d:36:ce:ab: 10:cc:34:dd:ec:2f:d3:00:26:8c:00:e7:ef:d4:1b:29:c4:2c: dd:6f:1f:0f:12:12:2c:cf:a8:d3:10:35:8b:35:a5:73:a3:9a: 79:1a:3b:40:2f:a3:31:ef:f5:94:59:27:b5:36:16:10:d7:bb: f1:50:e2:be:4c:45:5d:29:00:92:50:66:2f:25:c7:46:99:00: 45:78:24:0f:a1:cb:39:93:5e:e7:a7:18:be:f3:cb:5a:0e:de: bb:31:a1:c1:05:a7:0f:41:2d:ac:57:e8:51:d2:ab:b4:47:22: 77:1f:72:63:c8:78:c8:d5:e6:6b:d6:a9:ee:60:d7:75:1b:64: 09:96:dd:ed:e3:09:56:4a:80:5c:4b:aa:fb:28:2a:01:7e:a1: 31:d2:64:6b:38:6d:9a:65:b3:bf:2e:3a:41:a1:93:23:e2:ae: 04:ce:82:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKaayUARUz4b/NP/A8/jD1/jF380wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG MDBFNzFBQTAeFw0yNTA4MDUyMzQ2NTFaFw0yNTA4MDkwMDA2NTFaMDMxMTAvBgNV BAMTKEJCOTA4MkU1ODQ1MzlENkREQkE2NzJDNjJDNzdFN0U3QUFCRDUxMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDROnzheIljr1QkjhjgrpiWoYkN 0RCSBqXkD9cIl0Suzp1/1Z/QIVfhNMu94s7mrOS2LhzyXCfDngir8pAEghnTjPwp P+D64nTK7hKrpyB0tEobB62Q8SyzqOneGlUSh11eU3ZgR6rm63wKG97tWHGh6vVo Fus5MG1jyNtB/TCDPlc2iLBVVouUH22CDO3MVt1fG8H/pXUAdBS73EjkTF0TPjs4 QmEnZ/p8NgzmhEZmGUg0aH37Na2lgFo5XljNYDTYtR9M3tgOgzQ7eESaI1ZAAat8 BLjEy8Ymt2EcwGG1qCFaYRc0/YHbk22MK7P0uDGPnSB2XpL/LD0VfJx7rOBhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu5CC5YRTnW3bpnLGLHfn56q9UTEwHwYDVR0j BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF NzFBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg0NjRhNWItMmZjZS00N2RhLTgw NDctNjhkMmJkNjNjOWMzLzAvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0 NjJGMDBFNzFBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAInN4P3D2fHFxzRyY4ZPmScA3lPLa58KPh+W X+x9Nt52jLY/tcD54yPTk+2Id9rVa4DYuAhhl4Cj0GtZ4Dx2KDhyMqnZxVPocznl ZjZ9u6iEXUa4rk1PjTbOqxDMNN3sL9MAJowA5+/UGynELN1vHw8SEizPqNMQNYs1 pXOjmnkaO0AvozHv9ZRZJ7U2FhDXu/FQ4r5MRV0pAJJQZi8lx0aZAEV4JA+hyzmT XuenGL7zy1oO3rsxocEFpw9BLaxX6FHSq7RHIncfcmPIeMjV5mvWqe5g13UbZAmW 3e3jCVZKgFxLqvsoKgF+oTHSZGs4bZpls78uOkGhkyPirgTOgmc= -----END CERTIFICATE-----Generated at Fri Aug 8 00:16:19 2025 by rpki-client