$ rpki-client -vvf repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft File: 930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft (raw, json) Hash identifier: AFP7eMDjd0/y4VfhoRpf/VmvQUpAF58rOI1HF+iI2eE= Subject key identifier: C3:21:04:BE:09:A5:04:37:2C:54:DD:ED:3E:EA:68:96:FD:D9:F3:FF Authority key identifier: 93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46 Certificate issuer: /CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46 Certificate serial: 74C3BDB1CCBC71A878026FDFB170F139BA1C4B84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft Manifest number: 01CF Signing time: Wed 06 Aug 2025 16:31:15 +0000 Manifest this update: Wed 06 Aug 2025 16:26:15 +0000 Manifest next update: Sat 09 Aug 2025 21:02:15 +0000 Files and hashes: 1: 32372e3132312e38362e302f32342d3234203d3e203535363532.roa (hash: 1kY5e/tIJX114u746CW39QHTp2rzxidBD7y122Pd6Ew=) 2: 32372e3132312e38342e302f32342d3234203d3e203535363532.roa (hash: bA5Fx/rOlnkAyIC1kdWrOaLkxDABB/Vvu2ebi0eEf0Q=) 3: 32372e3132312e38302e302f32342d3234203d3e203535363532.roa (hash: 0LRxbu/86kZstCrhrFM+xHSikcX960D6ea8IptSkGsE=) 4: 32372e3132312e38372e302f32342d3234203d3e203535363532.roa (hash: XOQFKUfDG7J0fbl+DTtQtPxTl6ii3+vzoE5o4zQO4bo=) 5: 32372e3132312e38352e302f32342d3234203d3e203535363532.roa (hash: 3Mqc4bpW2MlccFa1Ubf+/4bclFJ21AcG0i5KBo4oD48=) 6: 32372e3132312e38322e302f32342d3234203d3e203535363532.roa (hash: QtiPgOKAP2zdJvR5FPFABfx4iIby7ldINKqgYGzNT04=) 7: 32372e3132312e38332e302f32342d3234203d3e203535363532.roa (hash: 1Ap1USzQtzqwgDtQDrhH77MKkzf62RSPe2jHuhWF7VY=) 8: 930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl (hash: 6t7BGO8CVBA8oz1WiKOnScoAJBHMFqzg4j/yNIRe0IY=) 9: 32372e3132312e38312e302f32342d3234203d3e203535363532.roa (hash: KPO8Dur+z9GVaz2KZy/0xQJy9l93ayQwCwTcViUocP0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 21:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:c3:bd:b1:cc:bc:71:a8:78:02:6f:df:b1:70:f1:39:ba:1c:4b:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46 Validity Not Before: Aug 6 16:26:15 2025 GMT Not After : Aug 9 21:02:15 2025 GMT Subject: CN=C32104BE09A504372C54DDED3EEA6896FDD9F3FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:af:1d:8d:91:9c:d6:ff:0b:47:16:aa:46:3a: ea:01:2a:e2:62:8d:04:4f:65:0f:21:12:23:8e:52: 69:90:e3:aa:5a:b4:cf:25:91:27:72:b9:cf:f9:11: 3a:49:fb:5e:85:71:be:9a:cb:40:b3:5a:ed:98:89: f0:85:0e:f3:b2:05:27:ec:01:d2:f9:9d:12:39:5b: de:1c:9e:d5:1f:62:72:34:a7:5c:93:ef:97:15:17: f8:62:d1:01:8c:cc:ab:b0:6e:c0:77:0e:5c:ce:2e: 5a:7d:ea:c0:31:13:a3:71:94:a4:d7:a1:65:61:29: a8:3c:33:5f:93:e1:f9:4e:08:89:3c:64:d6:8c:1e: ba:23:b5:7e:a9:5d:9b:b7:b8:16:32:d7:da:90:eb: cd:eb:3c:77:8e:b7:e6:7c:80:e0:c8:7e:11:af:a1: 5e:9b:c5:e3:4a:9c:85:d1:09:09:6c:72:60:af:6c: a8:36:8a:e5:02:fd:1f:b3:0a:b7:77:4e:0e:d4:22: 8e:1e:97:c8:1c:3e:8f:85:94:8b:0e:e3:24:e9:b0: 3d:26:13:0e:07:5f:0f:4e:78:50:0b:0d:25:d2:dc: 28:e6:03:ed:d0:6b:ea:01:9e:db:1c:09:ff:fc:3a: 96:1d:19:82:74:4c:20:54:1b:c6:fb:1f:1f:65:94: c7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:21:04:BE:09:A5:04:37:2C:54:DD:ED:3E:EA:68:96:FD:D9:F3:FF X509v3 Authority Key Identifier: keyid:93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:27:07:f4:68:0f:fc:9b:3d:23:17:d9:04:f1:4f:a6:37:35: f1:3d:69:87:59:ce:d7:36:83:f9:5e:50:f6:84:2c:38:df:0a: f5:d0:c6:fe:f7:ee:03:35:6a:9c:f5:ab:77:f1:06:3a:3f:3e: 54:ec:f5:ef:02:2f:c0:1a:c4:d3:de:a0:69:60:1d:55:cf:49: 9b:33:a0:fe:ab:d5:b5:fa:f9:5a:77:73:ea:ae:16:7a:6f:83: 4c:fe:6f:78:0c:23:2d:08:c2:94:63:28:1e:f8:ff:c2:c0:f0: 4f:b2:6e:a8:1b:d8:38:c2:d3:97:d4:89:0f:33:11:33:74:7e: 70:31:2a:fd:a6:e7:1e:a6:07:15:3c:89:d2:c6:4e:37:31:fb: c8:15:78:0f:16:45:00:e3:c5:0e:ab:57:0c:8b:d8:b5:55:ac: a7:e8:a7:c0:29:5c:8a:8f:c7:fe:11:90:e6:ab:0d:f9:1f:48: a8:b6:63:de:2e:42:0e:55:ee:d5:05:f6:ea:ea:b1:00:9b:0e: 1d:36:be:99:78:5a:49:ed:97:d0:5e:e9:c0:c6:a9:ae:ef:0a: cb:cb:08:4e:54:bd:66:94:c7:b0:5a:f7:0d:59:3c:79:a5:fa: 14:c2:5b:12:a2:67:35:fa:c7:08:18:c5:25:ac:c4:a0:85:2d: 96:77:1d:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdMO9scy8cah4Am/fsXDxObocS4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMwQTRFRDJCODVBQTlGRTc3RUQ5MEZBODUwNDRBOUM4 MEIzOEE0NjAeFw0yNTA4MDYxNjI2MTVaFw0yNTA4MDkyMTAyMTVaMDMxMTAvBgNV BAMTKEMzMjEwNEJFMDlBNTA0MzcyQzU0RERFRDNFRUE2ODk2RkREOUYzRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDirx2NkZzW/wtHFqpGOuoBKuJi jQRPZQ8hEiOOUmmQ46patM8lkSdyuc/5ETpJ+16Fcb6ay0CzWu2YifCFDvOyBSfs AdL5nRI5W94cntUfYnI0p1yT75cVF/hi0QGMzKuwbsB3DlzOLlp96sAxE6NxlKTX oWVhKag8M1+T4flOCIk8ZNaMHrojtX6pXZu3uBYy19qQ683rPHeOt+Z8gODIfhGv oV6bxeNKnIXRCQlscmCvbKg2iuUC/R+zCrd3Tg7UIo4el8gcPo+FlIsO4yTpsD0m Ew4HXw9OeFALDSXS3CjmA+3Qa+oBntscCf/8OpYdGYJ0TCBUG8b7Hx9llMezAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwyEEvgmlBDcsVN3tPupolv3Z8/8wHwYDVR0j BBgwFoAUkwpO0rhaqf537ZD6hQRKnICzikYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjYyODA5Yy1iZmI2LTRmZTctOGRkNi1jYTYwMjJjZGQ1NDAvMC85MzBBNEVEMkI4 NUFBOUZFNzdFRDkwRkE4NTA0NEE5QzgwQjM4QTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTMwQTRFRDJCODVBQTlGRTc3RUQ5MEZBODUwNDRBOUM4MEIz OEE0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY2MjgwOWMtYmZiNi00ZmU3LThk ZDYtY2E2MDIyY2RkNTQwLzAvOTMwQTRFRDJCODVBQTlGRTc3RUQ5MEZBODUwNDRB OUM4MEIzOEE0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKUnB/RoD/ybPSMX2QTxT6Y3NfE9aYdZztc2 g/leUPaELDjfCvXQxv737gM1apz1q3fxBjo/PlTs9e8CL8AaxNPeoGlgHVXPSZsz oP6r1bX6+Vp3c+quFnpvg0z+b3gMIy0IwpRjKB74/8LA8E+ybqgb2DjC05fUiQ8z ETN0fnAxKv2m5x6mBxU8idLGTjcx+8gVeA8WRQDjxQ6rVwyL2LVVrKfop8ApXIqP x/4RkOarDfkfSKi2Y94uQg5V7tUF9urqsQCbDh02vpl4Wkntl9Be6cDGqa7vCsvL CE5UvWaUx7Ba9w1ZPHml+hTCWxKiZzX6xwgYxSWsxKCFLZZ3HYY= -----END CERTIFICATE-----Generated at Thu Aug 7 11:11:38 2025 by rpki-client