$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft File: 9A52B6405ED406A7B17C4478D516DF3E37282980.mft (raw, json) Hash identifier: eSu+LSJbVRLpflBdDRToVWF3FeO3xAMWXKbdArO8lgk= Subject key identifier: 2B:EF:35:7E:08:54:76:EB:BA:71:59:0A:98:28:FA:AF:8D:9B:F7:80 Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Certificate serial: 30507C0314F54B28D538C24F2094CF3B61230858 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft Manifest number: 028F Signing time: Sun 20 Jul 2025 05:40:58 +0000 Manifest this update: Sun 20 Jul 2025 05:35:58 +0000 Manifest next update: Wed 23 Jul 2025 07:26:58 +0000 Files and hashes: 1: 323430303a343661303a32383a3a2f34382d3438203d3e20313437313337.roa (hash: BASa57B0aeCvQjUkpH58uhcpVnA7zhpchwSCS5nsYmM=) 2: 323430303a343661303a31313a3a2f34382d3438203d3e20313437313337.roa (hash: ShZcfvOuL7hhFcin6d6C9YZIwo2zOBT3B5csjg2tV64=) 3: 9A52B6405ED406A7B17C4478D516DF3E37282980.crl (hash: U3EotxBDpkCBNWwN+s6vfBT9l0kdpUNf1Oqrqr6b7B0=) 4: 3130332e3137372e382e302f32342d3234203d3e20313437313337.roa (hash: /fMbrSKhQJ8LJwxoq43vmw9q1iP6KJa0WtA6bwl4KhM=) 5: 323430303a343661303a393a3a2f34382d3438203d3e20313437313337.roa (hash: UbfbQp2UJcWdUXOg3yUdX64d8tTRpxRLmsAiq/gQPtk=) 6: 323430303a343661303a353a3a2f34382d3438203d3e20313437313337.roa (hash: kS9+afwSiaTp9TelPiQ0ILiNOqNp/k8Ib68mizaidfE=) 7: 323430303a343661303a383a3a2f34382d3438203d3e20313437313337.roa (hash: xUscykaPjchZwH98C+3nSOKZLZaGqcecZKinfhX00i4=) 8: 323430303a343661303a31343a3a2f34382d3438203d3e20313437313337.roa (hash: ZlLb/8ABoTMshaPAOuB5oc8hOwpCTBM9+ckE++m8QHc=) 9: 323430303a343661303a313a3a2f34382d3438203d3e20313437313337.roa (hash: a4kar+hZC31dN5bmEcyjGudCJwDbez0xQdLphlBrsp8=) 10: 323430303a343661303a333a3a2f34382d3438203d3e20313437313337.roa (hash: YdSsGr4BjFrFET1Pgec0CyVOY3w0mCvZYunx96T/HRk=) 11: 3130332e3137372e382e302f32332d3233203d3e20313437313337.roa (hash: uHzq3FI/OUse3guEAZ2X3n26c+18IEz5AqEGOSkyu60=) 12: 323430303a343661303a323a3a2f34382d3438203d3e20313437313337.roa (hash: 23/idCqUx8EPa7QGFdtUC3If9YW7mCjrP46bOrSKS5Q=) 13: 323430303a343661303a32343a3a2f34382d3438203d3e20313437313337.roa (hash: eELtUE44s8kWXW53efaOQB87hQvYKnu+4QWMOO/ldiE=) 14: 323430303a343661303a33343a3a2f34382d3438203d3e20313437313337.roa (hash: WrWbmsZZrPD4tCYkM+PlD88T9/eqy1PkC98c/wYNVkI=) 15: 323430303a343661303a343a3a2f34382d3438203d3e20313437313337.roa (hash: iK23Ih7KgC4OjnO9UHJglzhRasd3vRLpYeuOhNGE5hk=) 16: 323430303a343661303a31323a3a2f34382d3438203d3e20313437313337.roa (hash: bH0QRBT1yTn/wCvKxau4plk6nMYBKS98USNjhSr5VTI=) 17: 323430303a343661303a3a2f33322d3438203d3e20313437313337.roa (hash: 9D15ranZ4YwNSLaXFD5FAq+pNZxj9EjBiBFXk+HdqAc=) 18: 323430303a343661303a31333a3a2f34382d3438203d3e20313437313337.roa (hash: INC+aAdBEWi58gMud2WYkmc5AYB/cZKH3D/b7vcKvsA=) 19: 323430303a343661303a31303a3a2f34382d3438203d3e20313437313337.roa (hash: h0oH/3iLu1unRW/jZRg6pYTlxoghvh0aIr1dQ6X1C3o=) 20: 323430303a343661303a373a3a2f34382d3438203d3e20313437313337.roa (hash: Cwh07TkFHSVxFptsS9+W0W6emaGKqX4GCK/GVTdPowA=) 21: 323430303a343661303a32313a3a2f34382d3438203d3e20313437313337.roa (hash: +gPgp8QYiU/daLpgrvM/5BELV5q0+mYrJuLKheezSV0=) 22: 323430303a343661303a363a3a2f34382d3438203d3e20313437313337.roa (hash: 0k545OOwyj9NvbehxX+QV0g5xQmQQnbTNP95f97h71M=) 23: 323430303a343661303a33313a3a2f34382d3438203d3e20313437313337.roa (hash: 9MFeAvNjxRA9vbUf2UgXcthdxQ5XENOLt4Ao9GHoHp4=) 24: 323430303a343661303a32333a3a2f34382d3438203d3e20313437313337.roa (hash: UeQqi6ZVFgPrGYMster+xne64h585Ow3H0IaK3UC2WM=) 25: 323430303a343661303a32393a3a2f34382d3438203d3e20313437313337.roa (hash: IEucjhXv8bAa5eR/7We292E0AjQSxt/nxsHzEY0hsao=) 26: 323430303a343661303a32323a3a2f34382d3438203d3e20313437313337.roa (hash: KAxv+bcTcqGpScOTMbFMveWIpWOPxpJEwT7ajRyz6mM=) 27: 323430303a343661303a31363a3a2f34382d3438203d3e20313437313337.roa (hash: OgrUIPRU4hlKsLPwGuGpe/ivo5VWBIS7QYpm7Sxho2I=) 28: 323430303a343661303a32373a3a2f34382d3438203d3e20313437313337.roa (hash: omGcwmDsT8BYpBScz5Bq8p8wjIAMhQE4SKahvN0WhGg=) 29: 323430303a343661303a31373a3a2f34382d3438203d3e20313437313337.roa (hash: MQTEtT0TR1f+0V0bndDRXrcOI9gxT90XmU11iLCfrjk=) 30: 323430303a343661303a31353a3a2f34382d3438203d3e20313437313337.roa (hash: 6i3UMACzodtWNujjB7HjZ1wIY9Wkv8kYqdabcGyF3UA=) 31: 323430303a343661303a33353a3a2f34382d3438203d3e20313437313337.roa (hash: Y3XYf27QnurhdV1CW67C5UxWbak1ZDu532ZjKsBxVtw=) 32: 323430303a343661303a33303a3a2f34382d3438203d3e20313437313337.roa (hash: kEXHj9pv5MWefZu6lpGXP15sPBFvi6JY6eKJO5xEqB4=) 33: 323430303a343661303a33333a3a2f34382d3438203d3e20313437313337.roa (hash: s3Xjjbohn1CufgneBaEZY/bwLMOk5+UIxmZaor+mssg=) 34: 323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa (hash: r39b6mOH1IwysZ4h0sWe8of8Eqz81JxpSEnLBmKsOQg=) 35: 3130332e3137372e392e302f32342d3234203d3e20313437313337.roa (hash: kbuURMx081wdwMkjcRHHCXRBMB09bh+YCCGTym9STe8=) 36: 323430303a343661303a32363a3a2f34382d3438203d3e20313437313337.roa (hash: z2k28a+6ZI3VAF075Ex5TSmy7XYBAGjTmBdcFap9YJg=) 37: 323430303a343661303a33323a3a2f34382d3438203d3e20313437313337.roa (hash: pifjJjTcE6PeDdv2QBGHsCyyOypnfnj2TzyiuJpYoi0=) 38: 323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa (hash: EvUm4cJBa4C1BImp9thQZ8BX3+SY4YqvKOUkSPQljL0=) 39: 323430303a343661303a31393a3a2f34382d3438203d3e20313437313337.roa (hash: 5FcZQWvOh6pLwsoaD4YTIG17OJilGjN+93omVyyFOZM=) 40: 323430303a343661303a32353a3a2f34382d3438203d3e20313437313337.roa (hash: LHnVdcZ5/YfYWNz9EwzLlVaYYhGPyvyomANm7mqWzO0=) 41: 323430303a343661303a3a2f34382d3438203d3e20313437313337.roa (hash: uA6xDa7IvgkDp22R6G6BTJTUnQ6z5ZPc+c5h8RXJlMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 07:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:50:7c:03:14:f5:4b:28:d5:38:c2:4f:20:94:cf:3b:61:23:08:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Validity Not Before: Jul 20 05:35:58 2025 GMT Not After : Jul 23 07:26:58 2025 GMT Subject: CN=2BEF357E085476EBBA71590A9828FAAF8D9BF780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:98:a3:95:b6:6f:b0:62:aa:40:a7:f4:9b:0a: ad:1a:e4:9c:89:17:c0:a0:e0:a1:3d:da:aa:4a:d8: ae:0f:c7:19:52:34:b9:a0:b5:c4:f5:6f:16:16:de: 9d:6c:38:a1:e4:4d:db:bd:67:db:fc:77:73:ac:9b: 02:9b:fa:e0:b1:6f:ca:7c:60:4d:a4:db:30:45:0d: be:b7:32:79:8d:f2:52:20:e2:2d:d1:ee:8c:9a:58: c8:b4:d0:6b:74:b6:9b:9a:b4:9a:22:41:ed:10:ba: ee:55:7e:a5:f6:9f:61:1d:df:f0:82:75:8b:46:0e: ab:f6:5d:ef:4e:78:19:11:ee:36:40:2c:6a:62:96: 9b:a8:a0:84:90:73:35:d6:6a:ac:21:2c:1a:1a:ef: 57:b4:f1:05:fe:73:9b:90:93:d1:4c:72:7c:72:be: 8d:d3:32:f3:bb:e1:ac:b8:8c:11:d5:8e:7b:dc:c2: 06:f0:9c:08:96:df:92:e6:12:e7:0b:b2:0e:98:a6: 2b:94:66:f2:43:ff:e8:4c:bc:26:12:f1:60:ef:4c: 7f:1a:d3:92:9e:4f:d7:b6:ad:72:8f:8e:c2:87:33: 85:53:6a:7c:0b:c1:27:b2:44:b4:2d:69:15:37:50: 4e:69:95:0d:4a:45:e7:1d:64:d2:df:c2:ec:03:31: 3f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:EF:35:7E:08:54:76:EB:BA:71:59:0A:98:28:FA:AF:8D:9B:F7:80 X509v3 Authority Key Identifier: keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ee:e1:af:97:3e:31:da:0b:54:7f:48:67:76:c8:02:6f:ff: b6:63:30:a6:3c:7d:fc:72:97:ce:24:90:06:9b:be:78:ba:6b: 3f:3d:c3:68:34:17:d9:1e:ca:df:7a:2f:8c:ed:37:78:29:00: d7:4a:7a:40:05:67:c4:22:40:f3:80:f8:88:63:be:c6:0d:c8: bf:79:c4:02:4e:58:bd:77:4e:7d:27:f1:52:e0:d7:f4:5b:1d: 62:19:66:0a:02:73:08:3a:e5:59:3d:78:ef:cc:0d:58:d1:49: ad:b3:a7:a4:89:a3:68:26:4d:b3:34:33:9b:a9:33:58:bf:c0: 86:fd:d5:60:06:36:e0:49:da:2a:f2:c3:49:61:25:08:c2:14: 6e:ba:86:5f:5d:17:09:25:4c:c2:08:63:d7:28:2d:fa:34:95: 0f:d2:7c:d0:da:68:a6:dc:f6:dd:20:9a:c0:5a:e9:68:9a:9a: cd:08:1e:78:e0:60:67:b0:51:16:25:b1:72:86:c5:04:db:0e: d3:c8:dd:5b:7f:68:0a:eb:95:4e:29:f8:b3:5a:51:24:52:59: 55:25:c2:e1:62:b4:eb:24:d9:84:aa:44:c1:ff:1d:40:83:b3: 54:8f:d0:11:f6:50:74:39:52:c4:29:5a:3b:2b:a3:8e:b3:6a: c0:7e:82:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMFB8AxT1SyjVOMJPIJTPO2EjCFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz NzI4Mjk4MDAeFw0yNTA3MjAwNTM1NThaFw0yNTA3MjMwNzI2NThaMDMxMTAvBgNV BAMTKDJCRUYzNTdFMDg1NDc2RUJCQTcxNTkwQTk4MjhGQUFGOEQ5QkY3ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSmKOVtm+wYqpAp/SbCq0a5JyJ F8Cg4KE92qpK2K4PxxlSNLmgtcT1bxYW3p1sOKHkTdu9Z9v8d3OsmwKb+uCxb8p8 YE2k2zBFDb63MnmN8lIg4i3R7oyaWMi00Gt0tpuatJoiQe0Quu5VfqX2n2Ed3/CC dYtGDqv2Xe9OeBkR7jZALGpilpuooISQczXWaqwhLBoa71e08QX+c5uQk9FMcnxy vo3TMvO74ay4jBHVjnvcwgbwnAiW35LmEucLsg6YpiuUZvJD/+hMvCYS8WDvTH8a 05KeT9e2rXKPjsKHM4VTanwLwSeyRLQtaRU3UE5plQ1KRecdZNLfwuwDMT/vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK+81fghUduu6cVkKmCj6r42b94AwHwYDVR0j BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4 Mjk4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E2NjVjMzItNmRhZi00NzJiLWJj ZTYtMzE3ZDVkNmM3ODllLzAvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRG M0UzNzI4Mjk4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/u4a+XPjHaC1R/SGd2yAJv/7ZjMKY8ffxy l84kkAabvni6az89w2g0F9keyt96L4ztN3gpANdKekAFZ8QiQPOA+IhjvsYNyL95 xAJOWL13Tn0n8VLg1/RbHWIZZgoCcwg65Vk9eO/MDVjRSa2zp6SJo2gmTbM0M5up M1i/wIb91WAGNuBJ2iryw0lhJQjCFG66hl9dFwklTMIIY9coLfo0lQ/SfNDaaKbc 9t0gmsBa6Wiams0IHnjgYGewURYlsXKGxQTbDtPI3Vt/aArrlU4p+LNaUSRSWVUl wuFitOsk2YSqRMH/HUCDs1SP0BH2UHQ5UsQpWjsro46zasB+gn4= -----END CERTIFICATE-----Generated at Sun Jul 20 21:48:05 2025 by rpki-client