$ rpki-client -vvf repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft File: 0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft (raw, json) Hash identifier: EzV2twnOE2jao0Qz0uNp548fZchSeMwzrgSr0o9mbIA= Subject key identifier: 93:7D:72:90:CF:3C:30:E8:1C:A1:F0:BA:E1:CA:2E:09:00:C5:85:1F Authority key identifier: 09:12:BC:2A:8D:2E:8B:F2:55:3D:71:06:FF:6E:62:22:8E:03:C1:E4 Certificate issuer: /CN=0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4 Certificate serial: 168F184C59676C8B261C78ADDC74492592514DF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft Manifest number: 04F1 Signing time: Sun 20 Jul 2025 22:41:14 +0000 Manifest this update: Sun 20 Jul 2025 22:36:14 +0000 Manifest next update: Thu 24 Jul 2025 07:36:14 +0000 Files and hashes: 1: 3130332e3133302e3138322e302f32332d3233203d3e20313338303833.roa (hash: /xZYFYyOB1e+pblVdjFbZfEDRpifvi0rioH8bq15tlY=) 2: 0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl (hash: 5+e09zNgAY/XNu5bENAafR65ZlxAi5Uob/wtoP4T5+E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 06:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:8f:18:4c:59:67:6c:8b:26:1c:78:ad:dc:74:49:25:92:51:4d:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4 Validity Not Before: Jul 20 22:36:14 2025 GMT Not After : Jul 24 07:36:14 2025 GMT Subject: CN=937D7290CF3C30E81CA1F0BAE1CA2E0900C5851F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:83:0d:30:51:8c:f3:f6:af:f7:2f:fd:1a:02: 4d:04:f4:15:a7:ec:0b:cd:3a:24:00:f6:74:83:9f: 41:34:83:cd:27:9e:fd:0f:ed:99:d7:4c:a0:d7:0d: 1b:fa:c3:df:8d:bb:39:2d:5e:49:3d:9a:5a:a1:b6: 61:4a:bd:7f:04:7a:97:01:0a:eb:27:3b:ee:32:9a: 37:57:05:b8:f1:2c:3b:37:c4:b4:38:a7:81:53:1c: 46:dc:f4:72:10:51:f0:fc:e1:da:e0:ed:dd:50:15: 4a:de:e4:64:11:7e:04:ce:f6:12:c8:a3:bc:68:39: 95:7c:1c:1a:b3:8d:4c:dd:3c:7c:94:f2:76:4b:44: f0:89:55:d4:2e:4a:0a:94:45:71:66:47:4d:cb:85: 84:7e:05:1c:2d:32:06:b1:39:2a:c7:0f:ac:fa:39: a4:ab:ff:96:c1:30:fc:44:44:1f:75:28:1c:f5:57: 1d:e3:c2:3d:c1:5b:dc:c8:b5:78:58:a0:68:d6:9b: e6:c5:c1:74:3f:fd:a6:46:1a:c9:18:15:16:e5:dd: 0f:f7:94:a6:8f:43:ea:73:3d:50:d5:83:90:f2:59: 12:be:de:8e:d6:46:ba:1e:28:c4:d3:89:c0:8b:01: db:2a:e6:70:13:a1:91:df:7b:81:c3:55:5b:41:8d: 8d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7D:72:90:CF:3C:30:E8:1C:A1:F0:BA:E1:CA:2E:09:00:C5:85:1F X509v3 Authority Key Identifier: keyid:09:12:BC:2A:8D:2E:8B:F2:55:3D:71:06:FF:6E:62:22:8E:03:C1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:48:f8:a9:04:83:9f:3c:7b:2d:73:2c:9a:03:8b:85:74:69: b9:9a:23:1d:f7:b7:aa:3d:e7:a3:f3:e9:de:fb:69:37:56:46: 00:2a:75:f9:81:94:b0:11:da:22:af:e2:47:90:a7:fc:8b:41: 7a:64:4c:ba:27:87:02:da:d2:e7:4b:18:0d:8e:ab:36:99:75: b5:fa:a4:1e:f0:73:ca:e1:5f:1f:ff:a2:c8:fd:59:f5:5e:14: b2:0c:b4:dc:ee:13:12:44:f0:6a:df:ac:f0:90:d4:ca:01:a3: df:83:00:68:81:a3:92:00:cb:dc:df:77:e7:41:ec:1a:20:06: 36:81:c6:4f:43:8d:47:c9:4b:d5:14:14:6d:e9:76:54:a7:a6: 24:8c:6e:d7:05:71:c1:18:86:11:f5:d1:0b:ce:65:ea:9a:1a: 48:5d:03:fe:17:b1:08:3a:3c:de:8a:fe:4b:3b:09:e6:56:f6: f4:83:07:e6:c9:c5:b2:fa:f8:7d:4d:89:04:eb:12:cd:21:1f: 5c:2e:b8:22:d7:a7:be:25:40:21:96:13:04:f0:54:6f:9b:03: 92:ab:1a:2d:dc:2f:80:28:9f:4e:74:54:d5:90:b1:b8:ab:cc: 14:fb:31:4e:10:b1:88:00:5d:64:b1:f4:76:d6:3f:fc:2d:08: 68:47:54:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFo8YTFlnbIsmHHit3HRJJZJRTfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYyMjI4 RTAzQzFFNDAeFw0yNTA3MjAyMjM2MTRaFw0yNTA3MjQwNzM2MTRaMDMxMTAvBgNV BAMTKDkzN0Q3MjkwQ0YzQzMwRTgxQ0ExRjBCQUUxQ0EyRTA5MDBDNTg1MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+gw0wUYzz9q/3L/0aAk0E9BWn 7AvNOiQA9nSDn0E0g80nnv0P7ZnXTKDXDRv6w9+NuzktXkk9mlqhtmFKvX8EepcB CusnO+4ymjdXBbjxLDs3xLQ4p4FTHEbc9HIQUfD84drg7d1QFUre5GQRfgTO9hLI o7xoOZV8HBqzjUzdPHyU8nZLRPCJVdQuSgqURXFmR03LhYR+BRwtMgaxOSrHD6z6 OaSr/5bBMPxERB91KBz1Vx3jwj3BW9zItXhYoGjWm+bFwXQ//aZGGskYFRbl3Q/3 lKaPQ+pzPVDVg5DyWRK+3o7WRroeKMTTicCLAdsq5nAToZHfe4HDVVtBjY3xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk31ykM88MOgcofC64couCQDFhR8wHwYDVR0j BBgwFoAUCRK8Ko0ui/JVPXEG/25iIo4DweQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTY2OTgwNy0wNTBlLTQzYWUtODcwOC1iNDZiODgxNzg0MmMvMC8wOTEyQkMyQThE MkU4QkYyNTUzRDcxMDZGRjZFNjIyMjhFMDNDMUU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYyMjI4RTAz QzFFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU2Njk4MDctMDUwZS00M2FlLTg3 MDgtYjQ2Yjg4MTc4NDJjLzAvMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYy MjI4RTAzQzFFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABNI+KkEg588ey1zLJoDi4V0abmaIx33t6o9 56Pz6d77aTdWRgAqdfmBlLAR2iKv4keQp/yLQXpkTLonhwLa0udLGA2OqzaZdbX6 pB7wc8rhXx//osj9WfVeFLIMtNzuExJE8GrfrPCQ1MoBo9+DAGiBo5IAy9zfd+dB 7BogBjaBxk9DjUfJS9UUFG3pdlSnpiSMbtcFccEYhhH10QvOZeqaGkhdA/4XsQg6 PN6K/ks7CeZW9vSDB+bJxbL6+H1NiQTrEs0hH1wuuCLXp74lQCGWEwTwVG+bA5Kr Gi3cL4Aon050VNWQsbirzBT7MU4QsYgAXWSx9HbWP/wtCGhHVNQ= -----END CERTIFICATE-----Generated at Mon Jul 21 07:28:13 2025 by rpki-client