$ rpki-client -vvf repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft File: 8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft (raw, json) Hash identifier: gI0Qy2GfSUqURlfd2DoobhTaZZpHwDFqJBMLSf1f4EQ= Subject key identifier: 6A:C2:F1:D9:29:88:F8:1C:93:6B:D2:44:41:86:B1:91:10:4C:A6:34 Authority key identifier: 8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA Certificate issuer: /CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA Certificate serial: 0E3D41EAC6C980791D3711AAA3DAC81182017E07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft Manifest number: 04FA Signing time: Sun 20 Jul 2025 16:52:12 +0000 Manifest this update: Sun 20 Jul 2025 16:47:12 +0000 Manifest next update: Thu 24 Jul 2025 02:35:12 +0000 Files and hashes: 1: 3130332e372e302e302f32332d3233203d3e203338373838.roa (hash: eYJSZ6BNvJdcwOjXxyxNY4HDMCsMbaLoRNn+0CbiAds=) 2: 8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl (hash: 1OrIv4/LtRc3yz9oxic29thyLddwwvHzOGr+eBph8AI=) 3: 3130332e372e312e302f32342d3234203d3e203338373838.roa (hash: HfReQfR8KQgqYxrjCjLONRll8cJTpbYph9s5PnSext8=) 4: 3130332e3234322e3138312e302f32342d3234203d3e203338373838.roa (hash: i565en58aZkxitE/Cu7dj7vQtPe24rOc0XFo1zdj2pA=) 5: 34332e3233312e3132392e302f32342d3234203d3e203338373838.roa (hash: W5Zb76xYohKVMN4oDjg1HwPWp43mgnWE5orvLBb5SkM=) 6: 3130332e3234322e3138302e302f32342d3234203d3e203338373838.roa (hash: J6znwF/VIOIQq7nf+/cVdXFnP4yNGPdAl3m1qZHQzpE=) 7: 3130332e372e302e302f32342d3234203d3e203338373838.roa (hash: IvhePbxETJJ1An12hekeGcMrYJecR0U54GWOfDVzXpo=) 8: 34332e3233312e3132382e302f32332d3233203d3e203338373838.roa (hash: HFx27am61y/dC1xdTadXPgOw5A9a+PEjL0futSZShAU=) 9: 34332e3233302e372e302f32342d3234203d3e203338373838.roa (hash: i3HQaU7A5T+hugQmUCoVWplcF5RYtJ+OjDq/WGotyFM=) 10: 34332e3233302e342e302f32342d3234203d3e203338373838.roa (hash: Myo0yUY2zYBlmDu7ifkTtwfEDTywRzZJiBzIgMz4kyk=) 11: 3130332e3234322e3138302e302f32332d3233203d3e203338373838.roa (hash: Q4FCJx2xdQyXWuG/Mkdlbm+EYQuJWHSMRXEQhaDwxBc=) 12: 34332e3233312e3132382e302f32342d3234203d3e203338373838.roa (hash: lmYVrCn9BeJjLwZ83vYZIK3fLJEIHwntZ3WH1J4i7Cc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 02:35:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:3d:41:ea:c6:c9:80:79:1d:37:11:aa:a3:da:c8:11:82:01:7e:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA Validity Not Before: Jul 20 16:47:12 2025 GMT Not After : Jul 24 02:35:12 2025 GMT Subject: CN=6AC2F1D92988F81C936BD2444186B191104CA634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:7d:25:f8:e9:8e:de:f2:56:16:03:e3:a3:21: 6a:39:f9:63:fe:0c:d3:63:f1:2c:1a:1f:ca:35:97: fe:a4:b2:af:13:35:ab:23:03:2e:68:40:d0:56:6d: 14:58:6a:d4:ed:1e:84:de:ff:dc:6a:c1:8c:73:1f: 3f:ff:7c:bd:ac:9c:0e:1b:9f:1b:2e:1e:e6:bc:6f: 23:c7:01:67:5a:38:24:c0:de:c3:82:b2:99:fd:83: 87:a9:5c:59:7e:59:6a:40:4e:cf:b7:33:2f:de:4b: 6a:6a:cb:19:59:cc:81:03:89:86:80:48:8b:c5:69: e1:21:de:f1:ea:4f:4b:ea:2e:10:ce:57:df:99:b8: 15:80:25:ec:3b:a8:6a:95:6e:ce:b2:af:21:56:cb: 10:e1:b1:f2:a7:f2:0c:b8:fc:39:61:e6:bc:52:0c: 5c:7d:2d:71:ce:1f:2a:7b:47:b9:e6:e1:db:15:94: 57:9a:ee:39:25:d9:b5:6d:c6:6b:1b:3a:01:7d:58: a5:c6:ee:a4:0a:21:4b:96:33:d8:4c:f5:08:3e:5d: 4e:9a:e5:c0:3c:0f:ee:91:2f:4c:43:b5:9a:70:2a: 1b:d1:0e:aa:07:5d:dc:94:ab:3e:0c:3a:b8:64:34: 9e:43:cc:05:2a:b7:a9:4a:a9:06:ea:48:13:7d:67: 08:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C2:F1:D9:29:88:F8:1C:93:6B:D2:44:41:86:B1:91:10:4C:A6:34 X509v3 Authority Key Identifier: keyid:8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:24:4b:8f:3b:f9:b6:12:b5:bd:98:d9:04:3f:ed:31:42:78: ee:00:d0:8d:aa:36:13:bd:5e:45:8e:1a:1d:87:06:4e:e5:c9: 64:fd:ce:0b:97:6e:97:4b:fb:0f:eb:6d:de:e3:48:3e:26:3b: 32:e4:51:be:a6:66:a6:a2:a8:62:f0:ed:f9:77:3a:be:8f:6f: c4:8b:fc:82:80:db:3e:fc:29:a1:3f:4d:df:7a:ea:77:c5:b1: 76:cb:f9:f1:8b:cc:30:a7:35:c5:a8:92:c4:ad:8e:2e:53:17: 77:c0:12:db:c3:fb:1e:0f:63:08:d0:91:ac:31:f0:be:c7:66: 21:69:2c:93:8c:39:8a:bc:a8:f3:40:52:78:90:e8:1a:d0:77: 50:27:56:fa:d7:f9:5d:50:c3:48:c5:63:2e:86:6f:66:08:ea: a7:29:30:61:00:01:08:01:22:e4:f9:d1:e0:91:7a:1e:77:71: 81:78:9b:06:27:23:fd:c0:ec:ba:2f:94:32:b2:19:e8:93:a6: 1f:9a:87:41:2b:1b:6f:d9:bb:8d:2b:75:0e:45:b4:23:f8:45: 91:e3:63:10:57:81:4d:b7:e8:19:ea:fd:bd:72:df:76:f0:7b: 9a:46:14:c2:6c:cb:8b:1f:b9:6e:c1:25:23:e9:03:5a:06:8d: d3:d1:27:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDj1B6sbJgHkdNxGqo9rIEYIBfgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5MDAw MUZFRkVDQTAeFw0yNTA3MjAxNjQ3MTJaFw0yNTA3MjQwMjM1MTJaMDMxMTAvBgNV BAMTKDZBQzJGMUQ5Mjk4OEY4MUM5MzZCRDI0NDQxODZCMTkxMTA0Q0E2MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwfSX46Y7e8lYWA+OjIWo5+WP+ DNNj8SwaH8o1l/6ksq8TNasjAy5oQNBWbRRYatTtHoTe/9xqwYxzHz//fL2snA4b nxsuHua8byPHAWdaOCTA3sOCspn9g4epXFl+WWpATs+3My/eS2pqyxlZzIEDiYaA SIvFaeEh3vHqT0vqLhDOV9+ZuBWAJew7qGqVbs6yryFWyxDhsfKn8gy4/Dlh5rxS DFx9LXHOHyp7R7nm4dsVlFea7jkl2bVtxmsbOgF9WKXG7qQKIUuWM9hM9Qg+XU6a 5cA8D+6RL0xDtZpwKhvRDqoHXdyUqz4MOrhkNJ5DzAUqt6lKqQbqSBN9ZwiVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUasLx2SmI+ByTa9JEQYaxkRBMpjQwHwYDVR0j BBgwFoAUjD5EouK0ddXPSkjlLRcpAAH+/sowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGUyYmYwOS01ZjQyLTRiNjUtYTQyZC02M2QwNzk2ZDIwNmMvMC84QzNFNDRBMkUy QjQ3NUQ1Q0Y0QTQ4RTUyRDE3MjkwMDAxRkVGRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5MDAwMUZF RkVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRlMmJmMDktNWY0Mi00YjY1LWE0 MmQtNjNkMDc5NmQyMDZjLzAvOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5 MDAwMUZFRkVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMkS487+bYStb2Y2QQ/7TFCeO4A0I2qNhO9 XkWOGh2HBk7lyWT9zguXbpdL+w/rbd7jSD4mOzLkUb6mZqaiqGLw7fl3Or6Pb8SL /IKA2z78KaE/Td966nfFsXbL+fGLzDCnNcWoksStji5TF3fAEtvD+x4PYwjQkawx 8L7HZiFpLJOMOYq8qPNAUniQ6BrQd1AnVvrX+V1Qw0jFYy6Gb2YI6qcpMGEAAQgB IuT50eCReh53cYF4mwYnI/3A7LovlDKyGeiTph+ah0ErG2/Zu40rdQ5FtCP4RZHj YxBXgU236Bnq/b1y33bwe5pGFMJsy4sfuW7BJSPpA1oGjdPRJ6I= -----END CERTIFICATE-----Generated at Mon Jul 21 09:00:41 2025 by rpki-client