$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft File: 2042008AEC80152F373D2A04DFD3893EE2F92166.mft (raw, json) Hash identifier: Pun6Exaxta5wZQfeqmtAo3mJmgDsPR6fTM0KaW+S5UA= Subject key identifier: 7C:8D:84:10:1F:90:9E:61:57:C4:0A:74:04:FE:1E:92:BC:92:D0:67 Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66 Certificate issuer: /CN=2042008AEC80152F373D2A04DFD3893EE2F92166 Certificate serial: 196D17562013B1B73E7AD920D9F4ED6FEB08128B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft Manifest number: 0195 Signing time: Sun 20 Jul 2025 04:41:27 +0000 Manifest this update: Sun 20 Jul 2025 04:36:27 +0000 Manifest next update: Wed 23 Jul 2025 09:47:27 +0000 Files and hashes: 1: 3230322e37332e31372e302f32342d3234203d3e203538383136.roa (hash: kRRcaFc2J9dVlk1FFSz0s3hPY1eoKnszPg9ucUh3LNQ=) 2: 2042008AEC80152F373D2A04DFD3893EE2F92166.crl (hash: Q3WgOdbuW2+n2bzOt7HXoqWgdDtlHJX29dtzpdkng5M=) 3: 3230322e37332e32302e302f32342d3234203d3e203538383136.roa (hash: oxNl3kL7pfOEMCZna82D8P/b9qkWwOtKEU4nTRdcl3U=) 4: 3130332e3234382e35382e302f32332d3233203d3e203538383136.roa (hash: CV4aj5c0qTtoAuk2gjVJIigxTtOqOHVk941GV0y4c2o=) 5: 3130332e3234382e35362e302f32342d3234203d3e203538383136.roa (hash: Fp3TdqFb3PCcEDYFQYYU/EXsl8Z+niV/5Guw5uw0Pl4=) 6: 3130332e3234382e35372e302f32342d3234203d3e203538383136.roa (hash: KnUhOivFyTwSLl1lFtmGPDtu87HmW4jCAVjkx4JXtuo=) 7: 3230322e37332e31362e302f32342d3234203d3e203538383136.roa (hash: 7u4efn7bHYzED6nyNb+Hqw9a6DQWqirinCujiYt23iE=) 8: 3230322e37332e32312e302f32342d3234203d3e203538383136.roa (hash: +UYTL16FoJzljt1WcPKnLkea4mRmhRtr/yGtN5BCt4Y=) 9: 34332e3235322e3138352e302f32342d3234203d3e203538383136.roa (hash: hamVtzyWWFgDoUv3GhJNoDFMf/gHi6nIkoDk9iZqkLo=) 10: 3130332e3234382e35392e302f32342d3234203d3e203538383136.roa (hash: ItE1oa3zcA/J6v7neMwAUFSJuwJHlB5fYUCcNJ52lrY=) 11: 3230322e37332e31362e302f32312d3231203d3e203538383136.roa (hash: Og2Q3pkFZ4RS1IltvMh5+zdPdJjL3PWI9O/DVgS24lg=) 12: 34332e3235322e3138342e302f32322d3232203d3e203538383136.roa (hash: 1qIDwmf6H3mEaUgvN2oFExXVVv8QpKj00JvdsYifsuk=) 13: 3230322e37332e31382e302f32342d3234203d3e203538383136.roa (hash: 2KzZDAzCYvLDGmuyMQTwS12UkngL2r4uYLx3E6PowDU=) 14: 3230322e37332e31392e302f32342d3234203d3e203538383136.roa (hash: 5m5TlKYtb1BvkeOY5L0iLxzd9TDfvf4dSOsCxsnrroA=) 15: 3230322e37332e31362e302f32322d3232203d3e203538383136.roa (hash: b6WR2/tkj/TJmHf4T96jHhe4cr6ziz5DRZJiP/dYI8w=) 16: 34332e3235322e3138342e302f32342d3234203d3e203538383136.roa (hash: zkaOl3WDUKt7L8bc11OX90l50YOHPUCk7N8DGiMpczs=) 17: 3130332e3234382e35382e302f32342d3234203d3e203538383136.roa (hash: 5t1AVxnTVPWVliNjx4dePm/Uoa7VF9/XPOB2dVW7zIc=) 18: 34332e3235322e3138362e302f32342d3234203d3e203538383136.roa (hash: cEeTKWmwIc5D8VRx4Wjyqi25fM0+EqJrs6oXdMSObyg=) 19: 34332e3235322e3138372e302f32342d3234203d3e203538383136.roa (hash: Q14M8/H1GKD5N/6iQpjuxENjm1t2nAKNH5gzPjfdhGE=) 20: 3230322e37332e32322e302f32342d3234203d3e203538383136.roa (hash: 8OfgAbNQVhDJJTxQBxc34yWofgtcid4J/JQSeq4njCk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 09:47:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:6d:17:56:20:13:b1:b7:3e:7a:d9:20:d9:f4:ed:6f:eb:08:12:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166 Validity Not Before: Jul 20 04:36:27 2025 GMT Not After : Jul 23 09:47:27 2025 GMT Subject: CN=7C8D84101F909E6157C40A7404FE1E92BC92D067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5b:33:5a:c7:4d:4b:29:c4:da:86:65:14:14: ed:b3:ff:49:4b:e1:89:f6:bc:67:46:f8:5e:5d:ba: ba:38:71:89:92:f7:bc:79:39:93:d1:9f:2c:cf:c8: 7d:5c:dc:e4:48:ff:13:1c:23:d2:78:77:9a:8f:28: 03:45:26:93:e5:1d:c3:03:21:e6:14:64:73:2e:ad: 4a:da:0a:3e:21:11:4a:73:85:f9:93:9f:47:86:3a: f0:0d:e1:74:98:f3:fa:29:d1:79:e7:fb:b1:8b:54: f7:6d:17:b5:62:28:e4:8d:67:83:a8:19:74:53:5c: b2:41:c8:3c:eb:e8:c2:95:3b:ff:60:f4:92:5e:ec: 93:80:10:e4:15:42:10:9f:41:c8:51:2c:06:42:1b: df:b1:8a:ae:40:cd:b8:1a:38:02:24:48:85:65:4c: 37:28:45:da:d1:d2:d5:d6:34:72:79:f6:b4:9d:c0: b9:66:ee:23:04:b1:ce:f3:cc:2a:90:ae:2c:4f:88: c0:6f:0d:22:fd:39:33:a9:9a:04:18:d6:e2:44:12: 2f:78:21:fb:63:11:aa:cb:87:65:01:4e:d3:7d:39: 76:46:57:16:21:b7:8a:cc:c0:5a:8d:ca:75:8e:a0: 77:15:de:8c:85:4e:ac:d5:a2:a1:0f:b1:de:a0:d5: 1b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:8D:84:10:1F:90:9E:61:57:C4:0A:74:04:FE:1E:92:BC:92:D0:67 X509v3 Authority Key Identifier: keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:9e:6d:62:d6:11:a2:c0:8d:0d:93:b6:19:05:bd:1a:09:a3: 57:4b:4d:b8:22:2b:c3:02:23:a4:64:c3:bc:fd:d2:96:30:0f: 55:64:bd:ad:17:c5:00:be:fe:0e:e4:63:cb:1c:b1:a9:86:5b: ae:87:61:2b:92:20:eb:09:b1:30:95:9e:42:cf:5c:b5:d7:cb: c9:a6:72:66:b2:bd:f6:4c:6a:86:d8:94:e4:da:cb:4e:51:11: bf:c5:3d:46:04:9c:5f:13:5d:70:a9:0a:a5:9d:d1:07:43:1d: 38:db:9d:df:03:40:96:61:e5:75:02:3f:05:2e:98:c3:4d:7a: 04:28:63:2d:e0:1b:82:c8:54:dc:0b:9b:1d:44:ff:7f:51:98: bb:0e:61:c5:2c:a4:ce:73:50:87:68:03:32:fa:ff:cf:59:17: 81:70:9b:67:89:02:29:d2:d6:74:e0:d9:2d:e3:c0:aa:2e:d8: 84:b2:3e:a4:c1:5b:ce:9c:59:31:b7:f1:0e:2c:72:bc:4b:1e: 56:21:0f:a4:30:b2:ca:6d:9e:34:a8:c2:00:80:ca:69:71:fe: b8:83:1c:72:3f:3b:94:de:27:e3:19:c6:2f:5d:fe:fa:ac:8e: cc:a5:92:ff:30:ce:e3:78:88:52:97:d1:27:32:68:c2:37:fc: b1:92:7b:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGW0XViATsbc+etkg2fTtb+sIEoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA0MjAwOEFFQzgwMTUyRjM3M0QyQTA0REZEMzg5M0VF MkY5MjE2NjAeFw0yNTA3MjAwNDM2MjdaFw0yNTA3MjMwOTQ3MjdaMDMxMTAvBgNV BAMTKDdDOEQ4NDEwMUY5MDlFNjE1N0M0MEE3NDA0RkUxRTkyQkM5MkQwNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyWzNax01LKcTahmUUFO2z/0lL 4Yn2vGdG+F5duro4cYmS97x5OZPRnyzPyH1c3ORI/xMcI9J4d5qPKANFJpPlHcMD IeYUZHMurUraCj4hEUpzhfmTn0eGOvAN4XSY8/op0Xnn+7GLVPdtF7ViKOSNZ4Oo GXRTXLJByDzr6MKVO/9g9JJe7JOAEOQVQhCfQchRLAZCG9+xiq5AzbgaOAIkSIVl TDcoRdrR0tXWNHJ59rSdwLlm7iMEsc7zzCqQrixPiMBvDSL9OTOpmgQY1uJEEi94 IftjEarLh2UBTtN9OXZGVxYht4rMwFqNynWOoHcV3oyFTqzVoqEPsd6g1RuJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfI2EEB+QnmFXxAp0BP4ekryS0GcwHwYDVR0j BBgwFoAUIEIAiuyAFS83PSoE39OJPuL5IWYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmMzY2JjNC04ODgzLTQxMWMtODc2ZS1lOWUyM2E4ZDhhZDkvMC8yMDQyMDA4QUVD ODAxNTJGMzczRDJBMDRERkQzODkzRUUyRjkyMTY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjA0MjAwOEFFQzgwMTUyRjM3M0QyQTA0REZEMzg5M0VFMkY5 MjE2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZjM2NiYzQtODg4My00MTFjLTg3 NmUtZTllMjNhOGQ4YWQ5LzAvMjA0MjAwOEFFQzgwMTUyRjM3M0QyQTA0REZEMzg5 M0VFMkY5MjE2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK6ebWLWEaLAjQ2TthkFvRoJo1dLTbgiK8MC I6Rkw7z90pYwD1Vkva0XxQC+/g7kY8scsamGW66HYSuSIOsJsTCVnkLPXLXXy8mm cmayvfZMaobYlOTay05REb/FPUYEnF8TXXCpCqWd0QdDHTjbnd8DQJZh5XUCPwUu mMNNegQoYy3gG4LIVNwLmx1E/39RmLsOYcUspM5zUIdoAzL6/89ZF4Fwm2eJAinS 1nTg2S3jwKou2ISyPqTBW86cWTG38Q4scrxLHlYhD6QwssptnjSowgCAymlx/riD HHI/O5TeJ+MZxi9d/vqsjsylkv8wzuN4iFKX0ScyaMI3/LGSezk= -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:15 2025 by rpki-client