$ rpki-client -vvf repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft File: 1F969EE9B0838D22156118A888B81BF27B859BD5.mft (raw, json) Hash identifier: bqbugeEEqFQEkPSnnW3zKGLeWlLAr8mMJuDftc2XX+Y= Subject key identifier: 7E:8A:13:1E:A1:E1:12:EB:EC:A9:8A:6F:EB:DE:AC:6F:FD:EB:E0:64 Authority key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5 Certificate issuer: /CN=1F969EE9B0838D22156118A888B81BF27B859BD5 Certificate serial: 7439FA5877EACD5F217A827351B8FE1DAC275B36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft Manifest number: 0249 Signing time: Tue 22 Jul 2025 04:11:51 +0000 Manifest this update: Tue 22 Jul 2025 04:06:51 +0000 Manifest next update: Fri 25 Jul 2025 13:06:51 +0000 Files and hashes: 1: 3230322e35372e32362e302f32342d3234203d3e20313430343639.roa (hash: Q0qOJ/lZFg5h7UgexbzOBngIpLcaN5DOfBR3Xnw+miE=) 2: 3230322e35372e32302e302f32342d3234203d3e20313431363733.roa (hash: RIaxQt2BdMly6jZqFEt6v4+R9ZCRoPt0bRRhz87aHRQ=) 3: 3230322e35372e31392e302f32342d3234203d3e20313339393831.roa (hash: zszkuvV/DGJtyi38SwI+iyz6P0zwyMAcKOGOc8uu7vs=) 4: 1F969EE9B0838D22156118A888B81BF27B859BD5.crl (hash: ak7UjzrzJAE9stZua+GFChZHgYpw89GjHN6l32atJ1E=) 5: 3230322e35372e32372e302f32342d3234203d3e20313430343639.roa (hash: 1LTZq4OamLGaIEc7s8hORwOna9UqTifBlZPqeEuXpEA=) 6: 3230322e35372e32342e302f32332d3233203d3e20313430343639.roa (hash: qx0GKHW1FS5tHrsvUCVWgH7+ott04Nq/cKPKtOYX9sQ=) 7: 3230322e35372e32362e302f32332d3233203d3e20313430343639.roa (hash: I2GxvF+hElG1yAh007aM/yMEViDm+JYfJmwRWj1ftM0=) 8: 3230322e35372e32312e302f32342d3234203d3e20313431363733.roa (hash: KyjP36QU2B5WmwOGj/w2MpttC7+1bk2GysORLqVSxsM=) 9: 3230322e35372e32342e302f32342d3234203d3e20313430343639.roa (hash: m+iFf6x78xMNG3cgj5SBa8woS/ACjDi5PHEdG0OXJdQ=) 10: 3230322e35372e32302e302f32332d3233203d3e20313431363733.roa (hash: qNzsGiJwf7XGjGP4j+CDhg7oJnuuTy/kX7unl+wQ3hg=) 11: 3230322e35372e32352e302f32342d3234203d3e20313430343639.roa (hash: s5VhGyqquShG7gVjj17riZ/dr+Nk1vl6gg38DZ33Yns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 13:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:39:fa:58:77:ea:cd:5f:21:7a:82:73:51:b8:fe:1d:ac:27:5b:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F969EE9B0838D22156118A888B81BF27B859BD5 Validity Not Before: Jul 22 04:06:51 2025 GMT Not After : Jul 25 13:06:51 2025 GMT Subject: CN=7E8A131EA1E112EBECA98A6FEBDEAC6FFDEBE064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4a:9b:0a:c9:db:c2:d2:dd:bf:d8:0c:4a:49: bf:4b:38:6a:aa:e6:d1:17:99:a5:e6:99:f0:ca:ec: 6d:ed:ec:14:a5:eb:b5:36:22:a9:7a:a9:ae:2b:76: ac:fa:fa:1a:1b:c4:98:65:b7:ca:bc:c6:a7:13:46: 10:bd:e2:0b:91:11:bb:b8:41:41:5b:ab:b2:0a:5d: b8:34:c4:4e:11:b4:74:8d:3c:89:d2:24:6f:36:af: 47:90:a0:db:d3:a3:a0:02:94:81:53:27:99:68:33: 3e:68:bd:d4:88:95:87:0e:5f:34:f8:ab:fb:0c:ce: 36:a6:86:7c:05:90:49:f0:84:71:23:19:67:f4:73: 7b:92:e1:5e:20:60:c9:3e:4c:22:6f:06:82:ac:7a: 5f:d8:ea:dd:a1:e8:b6:6d:37:1c:ca:22:08:cf:24: 97:4b:c6:8e:b2:3f:f1:53:db:8f:bd:24:1d:7a:48: 1b:d8:cd:b4:d9:2d:0b:ec:2e:b6:29:bd:3b:70:ac: 4f:40:ad:bd:d3:83:32:b7:79:c1:3f:6f:92:1c:82: 6f:ec:c6:d3:e9:f0:7b:9e:49:d9:05:db:80:a3:1c: 24:37:bb:31:f9:24:cf:af:8a:88:ae:d2:de:c1:51: 32:7d:44:af:b1:71:f1:c0:d1:72:3b:bd:3b:35:87: 84:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:8A:13:1E:A1:E1:12:EB:EC:A9:8A:6F:EB:DE:AC:6F:FD:EB:E0:64 X509v3 Authority Key Identifier: keyid:1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:5f:7d:11:37:be:f2:fa:1e:b0:50:ff:73:1a:b2:35:13:0c: 8f:05:9c:30:90:b1:22:d6:46:11:72:31:43:36:15:59:4a:0a: 46:a2:82:f6:3d:a1:e6:cc:21:c1:37:89:b9:98:f4:25:09:3d: 79:38:45:32:b7:b1:a7:c2:d0:2e:61:4a:73:29:8f:1a:27:9e: e2:9b:27:30:f6:3b:b2:6a:8d:65:48:de:e1:4f:81:88:e6:aa: 73:88:ba:f7:4d:9a:c3:c3:e4:6d:df:92:86:ff:aa:ed:05:4c: c6:fd:cc:bf:88:21:6a:28:5d:25:ee:20:a1:8c:e2:2e:03:2b: 98:b8:65:38:06:8e:81:19:2f:f5:35:aa:2b:f0:09:7e:14:58: 1f:05:bf:56:a6:05:f0:af:cf:0d:b3:1f:95:c7:5b:c2:b8:56: 39:c7:c3:ec:f4:4d:9f:0c:81:54:62:4f:78:6f:04:b1:ad:8b: 39:63:10:a4:ff:5b:0d:18:f9:e1:75:26:29:49:ba:7e:06:4a: 4e:51:0c:c5:50:cc:b2:fb:73:22:b0:e5:dd:54:b7:9c:09:72: be:22:b7:94:9b:0b:0c:87:82:78:3e:60:86:04:72:6d:7f:46: 78:68:66:ec:05:ac:de:d1:7b:f1:66:bf:6d:6a:43:7a:95:6d: 1a:a8:aa:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdDn6WHfqzV8heoJzUbj+HawnWzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY5NjlFRTlCMDgzOEQyMjE1NjExOEE4ODhCODFCRjI3 Qjg1OUJENTAeFw0yNTA3MjIwNDA2NTFaFw0yNTA3MjUxMzA2NTFaMDMxMTAvBgNV BAMTKDdFOEExMzFFQTFFMTEyRUJFQ0E5OEE2RkVCREVBQzZGRkRFQkUwNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8SpsKydvC0t2/2AxKSb9LOGqq 5tEXmaXmmfDK7G3t7BSl67U2Iql6qa4rdqz6+hobxJhlt8q8xqcTRhC94guREbu4 QUFbq7IKXbg0xE4RtHSNPInSJG82r0eQoNvTo6AClIFTJ5loMz5ovdSIlYcOXzT4 q/sMzjamhnwFkEnwhHEjGWf0c3uS4V4gYMk+TCJvBoKsel/Y6t2h6LZtNxzKIgjP JJdLxo6yP/FT24+9JB16SBvYzbTZLQvsLrYpvTtwrE9Arb3TgzK3ecE/b5Icgm/s xtPp8HueSdkF24CjHCQ3uzH5JM+vioiu0t7BUTJ9RK+xcfHA0XI7vTs1h4TlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfooTHqHhEuvsqYpv696sb/3r4GQwHwYDVR0j BBgwFoAUH5ae6bCDjSIVYRioiLgb8nuFm9UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZDNmMDk1Yi03MTMwLTQxMjItYWYyNS03ZDJlN2ExMWIxYjEvMC8xRjk2OUVFOUIw ODM4RDIyMTU2MTE4QTg4OEI4MUJGMjdCODU5QkQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY5NjlFRTlCMDgzOEQyMjE1NjExOEE4ODhCODFCRjI3Qjg1 OUJENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGQzZjA5NWItNzEzMC00MTIyLWFm MjUtN2QyZTdhMTFiMWIxLzAvMUY5NjlFRTlCMDgzOEQyMjE1NjExOEE4ODhCODFC RjI3Qjg1OUJENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZffRE3vvL6HrBQ/3MasjUTDI8FnDCQsSLW RhFyMUM2FVlKCkaigvY9oebMIcE3ibmY9CUJPXk4RTK3safC0C5hSnMpjxonnuKb JzD2O7JqjWVI3uFPgYjmqnOIuvdNmsPD5G3fkob/qu0FTMb9zL+IIWooXSXuIKGM 4i4DK5i4ZTgGjoEZL/U1qivwCX4UWB8Fv1amBfCvzw2zH5XHW8K4VjnHw+z0TZ8M gVRiT3hvBLGtizljEKT/Ww0Y+eF1JilJun4GSk5RDMVQzLL7cyKw5d1Ut5wJcr4i t5SbCwyHgng+YIYEcm1/RnhoZuwFrN7Re/Fmv21qQ3qVbRqoqjg= -----END CERTIFICATE-----Generated at Wed Jul 23 01:59:57 2025 by rpki-client