$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft File: 012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft (raw, json) Hash identifier: 2Brsq8uG7EvD4BNGlE90RnG7qrKToZrhAC/vAVOZeaQ= Subject key identifier: A1:19:3E:89:DB:10:49:B1:34:67:93:D2:DA:44:B6:B5:C1:09:A4:19 Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C Certificate issuer: /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C Certificate serial: 5113B6688FA194A3D8AC3DCB341B6BD8D3F3FB2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft Manifest number: 04F2 Signing time: Mon 21 Jul 2025 04:12:13 +0000 Manifest this update: Mon 21 Jul 2025 04:07:13 +0000 Manifest next update: Thu 24 Jul 2025 14:21:13 +0000 Files and hashes: 1: 3130332e3234362e3131382e302f32342d3234203d3e203536323433.roa (hash: /w7eKmK7IgjbUT0N0MS/xY50UMcyTaRIoyZfbv+wX+Q=) 2: 3230322e39332e3134302e302f32342d3234203d3e2034333832.roa (hash: tyd06R+4HHVBIJKdI6hJNZndkBBBI3S4VRSvra/Gtys=) 3: 3230322e39332e3133352e302f32342d3234203d3e2034333832.roa (hash: rB0iPDe1IvoHV8TArDppc7ofeTkq1pWYD7pulqib69A=) 4: 3230322e39332e3133302e302f32342d3234203d3e2034333832.roa (hash: 8dppdnbd7qFucEL/ieNhiadT+mtJaudRUbFkfMc503w=) 5: 3230322e39332e3133322e302f32342d3234203d3e2034333832.roa (hash: EDt2aPDzQFEG5KclRhLjIsIWiGlwsRkkJBmyyV8BkKI=) 6: 3230322e39332e3133332e302f32342d3234203d3e2034333832.roa (hash: jpzCHaIdGXtjfUd7/tHrnDNIalNtrrhQPvzQekSGQc4=) 7: 3130332e3234362e3131362e302f32342d3234203d3e203536323433.roa (hash: sFm39yL/wE3VY7beJqFDG9gTkKfaNeEukDIdxaa9zRE=) 8: 3230322e39332e3134312e302f32342d3234203d3e2034333832.roa (hash: rI2/L1eIM/6o9Wtv0mGoXYzNLEeYDHU7gSVlVFeRHkI=) 9: 3230322e39332e3132382e302f32342d3234203d3e2034333832.roa (hash: m9iOqMoACzlAn35g6EUCvluYXuxglYNjIwIiaEOC/AM=) 10: 3230322e39332e3133392e302f32342d3234203d3e2034333832.roa (hash: ndgkYRqkUb1Ua/CNSd6RHtwIAdt+1wL8PAPjL4e5Dv8=) 11: 3230322e39332e3133312e302f32342d3234203d3e2034333832.roa (hash: jN3kG+rl4wLpy4q57ZRbTY93zXu5+vZBbSPdfoMFQTQ=) 12: 3230322e39332e3132392e302f32342d3234203d3e2034333832.roa (hash: tUNFCxpYtc4eTU5kPePMilP/21VrmkZEWCurwapgHKE=) 13: 323430333a623930303a3a2f33322d3332203d3e2034333832.roa (hash: yqhluq19vYY9MvoE8j8zv32qcH2CnwUH88Ac8pAGx1Q=) 14: 3130332e3234362e3131392e302f32342d3234203d3e203536323433.roa (hash: iVB5CfMmFrw/1sxkrTtiTl8LrYbLbK8j8toSYOpEOdI=) 15: 3230322e39332e3133372e302f32342d3234203d3e2034333832.roa (hash: 0ryTl1E+hG4VrMvtiBcFjm1rvNGAfZu/R72I7pIXWbw=) 16: 3230322e39332e3134322e302f32342d3234203d3e2034333832.roa (hash: 0i45Q97/D6G84IEDWcqQodmvLXxH/OKEx3btmEhLrxU=) 17: 3230322e39332e3133342e302f32342d3234203d3e2034333832.roa (hash: TBXtS1xzjSC3kwLGqaOfy37h09GiHBH30s0U9pgLaqQ=) 18: 3130332e3234362e3131372e302f32342d3234203d3e203536323433.roa (hash: qkkJ54NZ40Um3ciYsl/FGUnS4rYZSGlzZD4dWlUI5hM=) 19: 3230322e39332e3133362e302f32342d3234203d3e2034333832.roa (hash: Hv+9iV6JRwD2KdeBNp3e/Z0RYUsiD3ECKpjYMRUbkN4=) 20: 3230322e39332e3133382e302f32342d3234203d3e2034333832.roa (hash: i7ui1WtpmLliCaq4bvCoJG4OxY2CxEoaQJ7HvITmLDA=) 21: 012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl (hash: GUEFZ1F+vwanAUuYgivjiMY4wS5P7RmcW/SKyXoDuZU=) 22: 3230322e39332e3134332e302f32342d3234203d3e2034333832.roa (hash: SX/KD3zZIHB/GkEQrLuvEp85L2Kw21wNoG1FaG7ZGZg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 14:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:13:b6:68:8f:a1:94:a3:d8:ac:3d:cb:34:1b:6b:d8:d3:f3:fb:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C Validity Not Before: Jul 21 04:07:13 2025 GMT Not After : Jul 24 14:21:13 2025 GMT Subject: CN=A1193E89DB1049B1346793D2DA44B6B5C109A419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5f:19:e8:10:54:a5:35:ad:28:53:ad:6f:43: bc:6a:0d:ef:fb:74:e5:1e:01:ee:47:45:a0:04:f3: be:4c:b1:4e:53:16:3a:d9:9d:52:fc:e4:b1:61:b6: d4:41:a7:21:86:9e:b5:7e:c4:18:c1:cb:7c:28:1f: 4a:82:c9:13:e0:52:82:c1:4d:4c:de:a0:82:97:d0: e1:cc:21:aa:15:17:99:d9:48:8b:9e:9d:48:7c:c9: e3:5b:a1:07:eb:49:99:6f:9e:d8:72:4b:a1:3c:4e: 4c:7f:a0:f6:0d:ed:8e:8d:b2:61:45:d2:52:56:ce: 6f:7c:c6:74:6d:cd:ad:b0:a2:dc:ff:6d:0a:99:73: 25:5c:9e:03:60:64:e5:8e:6e:af:83:fe:21:ae:d4: e4:5c:14:80:42:9d:78:46:e0:48:02:35:61:ab:da: 37:cd:ed:ca:da:35:09:05:6b:c1:a1:cf:32:58:6b: e9:b0:60:9b:18:64:78:2a:00:f8:5e:b0:68:65:38: b8:7f:16:25:95:ee:4b:0a:c4:de:ff:23:7d:a5:9c: 43:07:98:48:9d:14:0b:4c:72:a3:a6:61:d6:5d:d2: 70:73:07:6f:db:33:88:8d:1a:06:99:1a:81:c0:65: 7d:c1:86:2a:07:e6:95:b2:f6:19:7b:4d:f5:75:dd: dc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:19:3E:89:DB:10:49:B1:34:67:93:D2:DA:44:B6:B5:C1:09:A4:19 X509v3 Authority Key Identifier: keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:dc:bf:11:52:ca:3d:45:21:32:dd:87:e9:40:0f:c1:af:de: 73:1c:57:25:51:4e:d5:ad:3c:73:b7:45:de:41:09:2f:99:58: d5:ad:16:57:c9:2a:0f:71:18:1c:c8:01:b3:4e:68:f7:b0:ac: aa:d1:19:dc:37:b3:76:07:1f:b6:09:77:42:ac:d4:d2:c6:4e: d2:d5:02:2b:54:7e:b1:b3:96:00:08:f9:c2:a9:e8:f7:1e:b3: 05:41:82:af:a8:b2:70:00:dc:63:62:ed:bf:a0:91:3f:13:70: 93:c8:2b:00:c7:68:09:ce:b8:c0:9c:39:85:16:6f:5e:99:53: fb:6e:66:63:45:86:81:d6:05:41:3e:02:cd:fb:c6:31:f4:3b: 25:b7:eb:41:bf:cb:f8:7e:d9:b5:aa:c6:73:44:3e:46:d7:20: d5:4b:4b:70:2f:ba:bf:0d:70:1b:e5:df:80:d0:db:0d:0f:3e: 74:27:34:fe:55:14:0e:89:bf:a1:02:a6:04:f4:2d:39:0e:3d: df:a5:bc:50:2e:7e:09:85:91:03:b7:2d:ff:44:3f:fa:88:2d: 5f:44:aa:42:de:44:23:5b:1d:f2:07:54:f0:a7:7a:2e:4a:ef: 71:13:dd:28:a4:12:b6:e4:8f:32:26:4f:52:b8:b4:86:69:4c: e0:96:8b:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUURO2aI+hlKPYrD3LNBtr2NPz+yowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMx RUZEQTkzQzAeFw0yNTA3MjEwNDA3MTNaFw0yNTA3MjQxNDIxMTNaMDMxMTAvBgNV BAMTKEExMTkzRTg5REIxMDQ5QjEzNDY3OTNEMkRBNDRCNkI1QzEwOUE0MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAXxnoEFSlNa0oU61vQ7xqDe/7 dOUeAe5HRaAE875MsU5TFjrZnVL85LFhttRBpyGGnrV+xBjBy3woH0qCyRPgUoLB TUzeoIKX0OHMIaoVF5nZSIuenUh8yeNboQfrSZlvnthyS6E8Tkx/oPYN7Y6NsmFF 0lJWzm98xnRtza2wotz/bQqZcyVcngNgZOWObq+D/iGu1ORcFIBCnXhG4EgCNWGr 2jfN7craNQkFa8GhzzJYa+mwYJsYZHgqAPhesGhlOLh/FiWV7ksKxN7/I32lnEMH mEidFAtMcqOmYdZd0nBzB2/bM4iNGgaZGoHAZX3BhioH5pWy9hl7TfV13dzlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoRk+idsQSbE0Z5PS2kS2tcEJpBkwHwYDVR0j BBgwFoAUAS0vWZN/2+ZQlbnrSXHZ0x79qTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODZiMzg4OS02OTY2LTQ1ZWYtOTA3My1hZDE0MDExYWMzYjIvMC8wMTJEMkY1OTkz N0ZEQkU2NTA5NUI5RUI0OTcxRDlEMzFFRkRBOTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMxRUZE QTkzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg2YjM4ODktNjk2Ni00NWVmLTkw NzMtYWQxNDAxMWFjM2IyLzAvMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5 RDMxRUZEQTkzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3cvxFSyj1FITLdh+lAD8Gv3nMcVyVRTtWt PHO3Rd5BCS+ZWNWtFlfJKg9xGBzIAbNOaPewrKrRGdw3s3YHH7YJd0Ks1NLGTtLV AitUfrGzlgAI+cKp6PceswVBgq+osnAA3GNi7b+gkT8TcJPIKwDHaAnOuMCcOYUW b16ZU/tuZmNFhoHWBUE+As37xjH0OyW360G/y/h+2bWqxnNEPkbXINVLS3Avur8N cBvl34DQ2w0PPnQnNP5VFA6Jv6ECpgT0LTkOPd+lvFAufgmFkQO3Lf9EP/qILV9E qkLeRCNbHfIHVPCnei5K73ET3SikErbkjzImT1K4tIZpTOCWi5U= -----END CERTIFICATE-----Generated at Mon Jul 21 12:23:27 2025 by rpki-client