$ rpki-client -vvf repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft File: B605E2C01C5BDC6CEE49545C80501360234DC910.mft (raw, json) Hash identifier: vwJFnLEBJgRDIQJ5EGaybXcQ0Ib8bYX6H93/I9mXtpQ= Subject key identifier: 4F:C4:49:84:E4:9E:BF:6D:F7:92:C4:54:33:B5:11:FF:54:8F:3A:08 Authority key identifier: B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10 Certificate issuer: /CN=B605E2C01C5BDC6CEE49545C80501360234DC910 Certificate serial: 33BF47E98499312EBA3F176BDBE99C4C0D7A261A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer Subject info access: rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft Manifest number: 0500 Signing time: Thu 07 Aug 2025 05:02:55 +0000 Manifest this update: Thu 07 Aug 2025 04:57:55 +0000 Manifest next update: Sun 10 Aug 2025 10:46:55 +0000 Files and hashes: 1: 3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (hash: NtqkwrlUwIEQ1zhmOPelG6/o7YZq6aMqPrp+f2CJ/tw=) 2: 3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (hash: L3ZzIiAydRdMLY3ej77+q1So7IkWU5tA3zvtMa14wvQ=) 3: 3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (hash: /bgLX80Id13xkunC59CvIZtu8KOfj3mxVa1lG5ZXF/0=) 4: 3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (hash: isINXQLKIC1dEiiAoWDEseWdjl997XY6+RtHzF8UKMk=) 5: B605E2C01C5BDC6CEE49545C80501360234DC910.crl (hash: Zjp8Pvb4ngSl1xgPA/PZXCIO8eGth2qS/BGq8xNp4pY=) 6: 3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (hash: AVHUuCu/pWOfGEGbs7pgdGUZzNAVfi/HDMj4JakhRSI=) 7: 3131352e3137382e35332e302f32342d3234203d3e20313331373137.roa (hash: 5Br8jzUfiBL0O6Kopm71gWMUaniCVXm/uXqyIID9rs0=) 8: 3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa (hash: tZJdaYJ4K7yW2v2tBg39Lb9tz4r7Kf6sn+VE2gvdsHw=) 9: 3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa (hash: 4R3cIWzWFlBnUOjDtKgjITkNYaOCw4Tx4+7Vb5ietQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 10:46:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:bf:47:e9:84:99:31:2e:ba:3f:17:6b:db:e9:9c:4c:0d:7a:26:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B605E2C01C5BDC6CEE49545C80501360234DC910 Validity Not Before: Aug 7 04:57:55 2025 GMT Not After : Aug 10 10:46:55 2025 GMT Subject: CN=4FC44984E49EBF6DF792C45433B511FF548F3A08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:09:f0:c3:96:54:06:4b:22:10:25:2a:c1:0c: 5f:ea:2b:1d:35:42:7b:f6:56:c3:b8:5b:8e:1d:e8: d1:00:78:56:81:dc:6c:fc:71:08:9a:66:0c:ac:fb: 5a:d8:b6:69:63:45:e6:98:61:dc:80:43:d9:be:ed: d7:9a:d8:de:f3:5e:01:32:f5:22:6a:2c:f3:e5:86: ca:01:65:91:f1:c3:df:45:a1:b3:ea:5e:f1:3a:76: 87:41:31:63:59:b3:7a:9d:bc:51:cc:f5:c3:e1:c6: 15:47:65:6d:d5:0e:2b:a2:89:ea:2f:c2:77:90:aa: c9:9d:c7:34:1c:07:0a:88:10:33:63:e9:09:ca:0c: 77:69:61:ed:ae:24:1f:d6:fd:69:00:20:f2:23:b6: 2a:a6:00:ae:4d:10:06:bb:d0:c6:0e:57:a5:6b:51: c3:cd:e1:95:62:9d:5e:13:ac:79:08:75:81:d2:c1: ca:59:c1:70:0c:42:20:a8:a1:07:fb:7f:89:13:68: 7f:d0:30:6a:55:65:e0:99:a1:26:d2:36:03:04:42: e6:3d:ca:ae:e7:60:b4:91:cc:47:82:da:10:69:1b: 0d:51:2c:d5:fd:99:96:d7:2d:a3:33:e0:0a:2f:65: 66:89:62:f4:db:15:52:6d:33:ee:37:7c:86:42:8b: 2b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C4:49:84:E4:9E:BF:6D:F7:92:C4:54:33:B5:11:FF:54:8F:3A:08 X509v3 Authority Key Identifier: keyid:B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:09:a3:3f:0b:c6:34:bd:03:27:4a:67:9d:92:2f:f6:0b:3f: ae:f5:28:5b:b4:23:b4:50:f4:ea:0d:e1:fc:bf:b7:63:49:64: 9f:19:72:db:59:0d:bc:aa:28:f7:c8:6d:ec:00:80:97:eb:9e: 90:65:76:ef:aa:79:72:75:c3:71:77:4f:61:7e:1a:8d:15:ea: 1b:f1:4e:29:46:71:a6:5b:37:2a:93:48:04:75:bb:cd:58:a6: f8:bf:54:0b:4c:df:77:e0:83:26:63:d4:bb:f8:46:9f:64:71: 16:a0:55:f1:e6:46:15:11:7e:80:09:57:c1:5d:75:cb:24:95: 97:df:4f:4e:98:2d:db:cf:99:66:90:b4:5c:79:41:21:b6:6d: 12:53:ec:9d:38:bb:ad:f6:11:99:61:36:ad:32:65:31:1e:14: 96:1d:7c:2d:cf:81:be:ba:d4:b5:20:99:56:41:2c:7b:11:cf: 6a:d1:c3:07:43:56:b1:d0:b0:54:c6:2b:62:d7:2f:70:44:6e: dc:f8:a0:f4:40:d3:18:32:90:e4:85:be:8f:e5:19:2e:78:2b: fb:ae:40:d9:7c:34:52:d7:bd:ab:28:42:e0:8d:79:85:a5:b8: 76:c2:c8:8a:62:26:08:24:b3:46:fe:fa:2e:ad:d3:34:b7:df: f7:e4:8d:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM79H6YSZMS66Pxdr2+mcTA16JhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEzNjAy MzREQzkxMDAeFw0yNTA4MDcwNDU3NTVaFw0yNTA4MTAxMDQ2NTVaMDMxMTAvBgNV BAMTKDRGQzQ0OTg0RTQ5RUJGNkRGNzkyQzQ1NDMzQjUxMUZGNTQ4RjNBMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuCfDDllQGSyIQJSrBDF/qKx01 Qnv2VsO4W44d6NEAeFaB3Gz8cQiaZgys+1rYtmljReaYYdyAQ9m+7dea2N7zXgEy 9SJqLPPlhsoBZZHxw99FobPqXvE6dodBMWNZs3qdvFHM9cPhxhVHZW3VDiuiieov wneQqsmdxzQcBwqIEDNj6QnKDHdpYe2uJB/W/WkAIPIjtiqmAK5NEAa70MYOV6Vr UcPN4ZVinV4TrHkIdYHSwcpZwXAMQiCooQf7f4kTaH/QMGpVZeCZoSbSNgMEQuY9 yq7nYLSRzEeC2hBpGw1RLNX9mZbXLaMz4AovZWaJYvTbFVJtM+43fIZCiyufAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT8RJhOSev233ksRUM7UR/1SPOggwHwYDVR0j BBgwFoAUtgXiwBxb3GzuSVRcgFATYCNNyRAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWZlOGY5Yi04YzM0LTQzNDItYTBmZS1jYTEwNzVmYmE1ZmYvMC9CNjA1RTJDMDFD NUJEQzZDRUU0OTU0NUM4MDUwMTM2MDIzNERDOTEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEzNjAyMzRE QzkxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVmZThmOWItOGMzNC00MzQyLWEw ZmUtY2ExMDc1ZmJhNWZmLzAvQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEz NjAyMzREQzkxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAJoz8LxjS9AydKZ52SL/YLP671KFu0I7RQ 9OoN4fy/t2NJZJ8ZcttZDbyqKPfIbewAgJfrnpBldu+qeXJ1w3F3T2F+Go0V6hvx TilGcaZbNyqTSAR1u81Ypvi/VAtM33fggyZj1Lv4Rp9kcRagVfHmRhURfoAJV8Fd dcsklZffT06YLdvPmWaQtFx5QSG2bRJT7J04u632EZlhNq0yZTEeFJYdfC3Pgb66 1LUgmVZBLHsRz2rRwwdDVrHQsFTGK2LXL3BEbtz4oPRA0xgykOSFvo/lGS54K/uu QNl8NFLXvasoQuCNeYWluHbCyIpiJggks0b++i6t0zS33/fkjcU= -----END CERTIFICATE-----Generated at Thu Aug 7 23:57:52 2025 by rpki-client