$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft File: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft (raw, json) Hash identifier: dDdkR2uYGwvU2TVd4ql/cSgVGOgkQb00XPyCsFujBFw= Subject key identifier: F6:E6:10:63:FA:D7:B8:82:29:73:55:93:73:90:87:5D:E7:64:19:4E Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 0399713341003330A7644AE90D4A410C47654374 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft Manifest number: 0515 Signing time: Wed 06 Aug 2025 23:01:14 +0000 Manifest this update: Wed 06 Aug 2025 22:56:14 +0000 Manifest next update: Sun 10 Aug 2025 09:45:14 +0000 Files and hashes: 1: 3137352e3130332e33332e302f32342d3234203d3e203338333230.roa (hash: Y3N/pOr0hqk+rgEWsHTxDUxkckXwK8BwQRc3Oa99toQ=) 2: 3230332e3137332e38382e302f32342d3234203d3e20313339343630.roa (hash: haQraVSry86Exch9h906IOyEPpafpeXC5ih1PxjR4d4=) 3: 3230332e3137332e39312e302f32342d3234203d3e20313339343630.roa (hash: nnj0KLDw9ngWzorUbdMHyDWYfETgXpzXO3uTEwZi24Q=) 4: 3132322e3134342e302e302f32322d3234203d3e203338333230.roa (hash: 7667q65z5ALRHOPz7ZlyjDc7iiTkR7i4e2iT+KR7k3I=) 5: 3137352e3130332e35372e302f32342d3234203d3e203338333230.roa (hash: QS/GUZ+NIoj800cmERiNyPU2Mys6n5EswZVGgcYBu4o=) 6: 323430343a333930303a313a3a2f34382d3438203d3e203338333230.roa (hash: jyHfiZ6i7aZCFxYleJN7o61t2gr/9pVuDKWy33Zgxrk=) 7: 3132322e3134342e342e302f32322d3234203d3e203338333230.roa (hash: yOFSHNJ7/tBSXur8DRCWTGrdUQ9S5IWN+tn279DD4tU=) 8: 323430343a333930303a6139323a3a2f34382d3438203d3e203338333230.roa (hash: Ketrz/J8f8AAk0/U1Pdx/6YBxlFbuGP5tM7vrclBTuI=) 9: 3130332e32392e3136342e302f32322d3234203d3e203338333230.roa (hash: bwSFGiowGIWFw0Xqwv4OlEcc83VdK0o2KzJnJCZ2DT0=) 10: 3137352e3130332e35332e302f32342d3234203d3e203338333230.roa (hash: Q22OsVQGNiQHv7rsWq7HdXb5YFdsKjAZXlHpHoKvOag=) 11: 34332e3234372e31322e302f32322d3234203d3e203338333230.roa (hash: 2g+NXNHiM0B7rPdW5gGiKA7VbkoVsAcew6mjSoTkRN4=) 12: 3137352e3130332e33322e302f32342d3234203d3e203338333230.roa (hash: SKzoUE6GJjGbrRoLBDSg0MJXDhRPXJNlIyQMu/0QWEw=) 13: 3131392e3131302e37322e302f32322d3234203d3e203338333230.roa (hash: EaI6/Dsx2ZEnLc96pWiD/aogqQZmiIKOu7YhzjemiyQ=) 14: 3137352e3130332e33342e302f32342d3234203d3e203338333230.roa (hash: mJ+S52vU66RNY0f8EN8g3gvOa1pNNig2fMcG1fH79DY=) 15: 3131392e3131302e36342e302f32322d3234203d3e203338333230.roa (hash: xet50Y1T2RaCmjZyVilwT++Qk9zQxszZ374/545MhhM=) 16: 323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa (hash: gOJdZEtA6e6fwm7lb/MvZbjgtOf6sLlu0HNuBmiaEZM=) 17: 3230332e3137332e39302e302f32332d3234203d3e20313339343630.roa (hash: 23+gG2DOC+ur5eVWAZvoHWGDnxOhWjXAjjErKhmGrS4=) 18: 3137352e3130332e34352e302f32342d3234203d3e203338333230.roa (hash: dsLjT0RvHwdlA2P0hS8Ta/QvI/7GUPU2p577iDafIJk=) 19: 3230332e3137332e38392e302f32342d3234203d3e203338333230.roa (hash: 5A8+p1O/f/o7MKvT/iojY154TSW6xBkoOLtIqG2w4iU=) 20: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl (hash: RGMvW6TJwbknbJobtrgoVQZkIg4vXVw6XgAB8w8K53g=) 21: 3131392e3131302e36382e302f32322d3234203d3e203338333230.roa (hash: hd2StT+jTnjUGpfUQ62nAy49x8ecNllIMBX9uxJvBO8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 09:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:99:71:33:41:00:33:30:a7:64:4a:e9:0d:4a:41:0c:47:65:43:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Aug 6 22:56:14 2025 GMT Not After : Aug 10 09:45:14 2025 GMT Subject: CN=F6E61063FAD7B882297355937390875DE764194E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d6:c4:4b:99:21:72:d1:d5:b7:ac:06:15:9d: d0:53:d3:b8:d6:93:9f:11:1f:7a:b4:9f:79:05:72: 5a:17:4a:f3:1a:ac:26:e5:63:f3:c1:3b:2e:e4:fc: 8f:87:00:7d:f8:8e:8c:85:cb:17:89:3a:7a:71:ea: 2d:6e:45:21:0a:df:3e:59:df:17:cf:2b:e9:8c:4f: 70:0d:a2:d2:a8:fc:1b:98:4b:04:59:d4:93:cd:08: 14:99:5d:ef:b3:6d:20:53:ce:b8:ad:cc:85:d3:e1: d0:05:9b:29:45:29:ff:c3:6b:20:3f:45:9d:19:1e: c0:5b:a6:9a:5e:d1:4a:80:ba:a9:59:bb:ff:38:88: 42:d5:bb:1d:5b:d0:28:27:25:76:34:e4:72:b9:48: 70:e5:b3:37:ca:69:29:0e:14:12:8e:b0:70:28:bd: 52:04:8e:58:af:b6:3e:1e:92:e6:3c:b3:ce:8c:9c: 1f:4d:40:83:ce:5f:f0:63:3d:e1:fa:45:19:c1:08: df:2c:77:70:d4:1a:04:2e:64:3b:d5:11:53:69:ab: 55:69:80:1b:14:01:04:59:55:c5:57:3b:fc:27:6b: 90:e5:74:9e:ac:18:11:44:2b:4d:51:95:c5:b1:eb: 8f:2c:75:00:54:4d:17:f8:4c:d8:d9:24:d0:5d:47: be:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E6:10:63:FA:D7:B8:82:29:73:55:93:73:90:87:5D:E7:64:19:4E X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:8a:d6:52:d1:a1:15:84:4c:ab:55:ce:1f:00:49:c3:f1:da: 80:ae:ce:11:51:cc:f2:be:3b:54:d9:fd:89:5f:56:5e:16:ef: 3c:fc:41:38:39:7d:a8:82:06:9a:c9:56:8f:96:0a:46:04:e9: d5:13:38:16:54:44:cd:fe:ef:8d:7b:29:00:67:d5:65:bb:21: cf:22:36:d6:05:9d:73:33:2c:43:ec:90:fd:94:49:e7:e4:10: b4:78:1c:c2:5e:0c:b6:07:0f:29:21:ee:e6:9b:c2:30:2e:40: 43:df:b3:92:25:66:ec:88:3c:25:33:86:b4:58:4f:aa:31:38: a7:ed:73:26:77:0d:93:81:72:fe:85:39:40:3d:f8:14:66:1b: cf:48:cf:f1:cc:c8:17:13:94:46:d1:a4:13:e8:a2:6a:eb:76: ad:7a:57:9e:60:27:00:7e:d8:2e:58:bd:e4:a9:08:ce:93:75: c8:67:4a:54:d8:a0:50:c2:24:e8:67:c0:06:eb:6d:45:f0:8e: 41:2b:e1:c5:98:3f:2e:b7:ca:7e:e4:54:34:92:64:bf:59:89: 74:a9:9e:cf:f5:0b:d7:26:27:a6:7c:c0:48:0c:3b:db:d0:43: 69:c6:1b:f9:c4:07:d0:60:5a:35:f3:f0:23:44:49:ff:a0:21: b9:a1:4a:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA5lxM0EAMzCnZErpDUpBDEdlQ3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNTA4MDYyMjU2MTRaFw0yNTA4MTAwOTQ1MTRaMDMxMTAvBgNV BAMTKEY2RTYxMDYzRkFEN0I4ODIyOTczNTU5MzczOTA4NzVERTc2NDE5NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp1sRLmSFy0dW3rAYVndBT07jW k58RH3q0n3kFcloXSvMarCblY/PBOy7k/I+HAH34joyFyxeJOnpx6i1uRSEK3z5Z 3xfPK+mMT3ANotKo/BuYSwRZ1JPNCBSZXe+zbSBTzritzIXT4dAFmylFKf/DayA/ RZ0ZHsBbpppe0UqAuqlZu/84iELVux1b0CgnJXY05HK5SHDlszfKaSkOFBKOsHAo vVIEjlivtj4ekuY8s86MnB9NQIPOX/BjPeH6RRnBCN8sd3DUGgQuZDvVEVNpq1Vp gBsUAQRZVcVXO/wna5DldJ6sGBFEK01RlcWx648sdQBUTRf4TNjZJNBdR75DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9uYQY/rXuIIpc1WTc5CHXedkGU4wHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk0NWI4NmUtMDg5NS00NzU5LWE3 N2MtYTA2Y2UxNGUyNDNjLzAvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVB MjMzMUY4MDJFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuK1lLRoRWETKtVzh8AScPx2oCuzhFRzPK+ O1TZ/YlfVl4W7zz8QTg5faiCBprJVo+WCkYE6dUTOBZURM3+7417KQBn1WW7Ic8i NtYFnXMzLEPskP2USefkELR4HMJeDLYHDykh7uabwjAuQEPfs5IlZuyIPCUzhrRY T6oxOKftcyZ3DZOBcv6FOUA9+BRmG89Iz/HMyBcTlEbRpBPoomrrdq16V55gJwB+ 2C5YveSpCM6TdchnSlTYoFDCJOhnwAbrbUXwjkEr4cWYPy63yn7kVDSSZL9ZiXSp ns/1C9cmJ6Z8wEgMO9vQQ2nGG/nEB9BgWjXz8CNESf+gIbmhSgA= -----END CERTIFICATE-----Generated at Fri Aug 8 12:48:52 2025 by rpki-client