$ rpki-client -vvf repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft File: 284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft (raw, json) Hash identifier: D1VMcl7WrKtmAcOfoU/jIGyd+vzIWT6rJgUx2//zoN4= Subject key identifier: F4:3A:A4:E9:69:99:39:C8:49:04:76:65:BA:E2:1C:4B:0B:91:0E:7B Authority key identifier: 28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA Certificate issuer: /CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA Certificate serial: 0858A94413D7819BC2DCE55CB5F9D5B36DBD40E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft Manifest number: 0236 Signing time: Fri 18 Jul 2025 23:51:37 +0000 Manifest this update: Fri 18 Jul 2025 23:46:37 +0000 Manifest next update: Tue 22 Jul 2025 02:25:37 +0000 Files and hashes: 1: 323430343a356434303a363a3a2f34382d3438203d3e20313338353938.roa (hash: BMaPZKd4S9fQAuwU5kc5O93/vGGp5sulKN1fvWKFFuE=) 2: 323430343a356434303a373a3a2f34382d3438203d3e20313338353938.roa (hash: 2JoT7M7m37m0xJyrGZ0XzlMJ4mVcLTVKVu699zp/2U0=) 3: 284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl (hash: Kat+I2nShZgS5zuuqWyG84aBcVLI30Do5ETxajMRCvk=) 4: 323430343a356434303a353a3a2f34382d3438203d3e20313338353938.roa (hash: Lbx56bi7U9t4V4gIX7m4fulkNS6DqtlvmzQW0U2Yss4=) 5: 3130332e3133342e34382e302f32342d3234203d3e20313338353938.roa (hash: Aybn7R6DKZgLNsyzOnIC5OzvxsaaE/Jkwzj5+uIo0ZA=) 6: 3130332e3133342e35312e302f32342d3234203d3e20313338353938.roa (hash: 01GhR87m6uISdoaVmw5/Uom42dMtA6W3HSfDP759MWE=) 7: 323430343a356434303a343a3a2f34382d3438203d3e20313338353938.roa (hash: /selJRjYRY2RXdacberK6RXbNBqDD4h8KJuD+6tSmiM=) 8: 3130332e3133342e35302e302f32342d3234203d3e20313332383239.roa (hash: 7HCsscFWHwPhWZMbOcuZYtCZgWu1kaGruUGGQu1z3Bg=) 9: 323430343a356434303a333a3a2f34382d3438203d3e20313338353938.roa (hash: xTc48z78x2hTWAz50fsj2u48rca6GyIeaspfgC6Ied0=) 10: 3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa (hash: Q3P+SORmjSYUFWgFOxdx+KlxGjY858iSOT5wN8UZTKY=) 11: 323430343a356434303a393a3a2f34382d3438203d3e20313338353938.roa (hash: s7BQD7yLxj5kSwHPL3ObyjKROEx8KemxAu+k28dACKE=) 12: 323430343a356434303a313a3a2f34382d3438203d3e20313338353938.roa (hash: 7Ra3Fe83WVldtrwmBn6CcKZZT+lK+aCd/JbT64/wrRw=) 13: 323430343a356434303a323a3a2f34382d3438203d3e20313338353938.roa (hash: vUuh6v5PPRzVvuwUZOwe6R6chuRFULbcu3aLCW2qA2Y=) 14: 323430343a356434303a383a3a2f34382d3438203d3e20313338353938.roa (hash: LCHOag0uJb1cjVFsg2v6UKKoMu1dXnSpGeS35y1AH+w=) 15: 323430343a356434303a3a2f34382d3438203d3e20313338353938.roa (hash: XQn6RBqlg6RuaEoPTX1Jp1jRKOhAgtTrK3uAW566Uwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 02:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:58:a9:44:13:d7:81:9b:c2:dc:e5:5c:b5:f9:d5:b3:6d:bd:40:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA Validity Not Before: Jul 18 23:46:37 2025 GMT Not After : Jul 22 02:25:37 2025 GMT Subject: CN=F43AA4E9699939C849047665BAE21C4B0B910E7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:13:34:95:13:23:4e:68:11:2f:16:fb:b7:3a: a3:8a:ad:cf:20:b8:47:82:68:11:7b:78:ac:2b:55: 1d:04:1a:91:2d:ef:e2:1d:2a:5e:0a:46:b1:91:91: d0:9f:07:0b:8d:61:00:d1:02:53:1c:7d:8c:ec:52: c9:72:ff:22:02:44:47:d4:21:4e:52:cb:97:4f:e4: 8f:28:03:8e:40:60:11:73:c2:32:42:23:19:c0:05: 63:64:8a:5e:af:08:91:a0:7d:67:c2:d4:5e:a9:ad: 20:7e:15:a5:a2:69:cb:27:01:93:3f:c4:1d:cd:15: 1e:f3:45:09:39:c7:bf:9c:ef:df:49:c4:95:ba:70: 4e:16:4e:f7:5f:e6:f9:49:be:14:19:76:6f:b1:5d: 9f:71:60:6c:0b:f5:06:5b:8f:4b:8b:43:78:84:67: 72:ce:73:41:62:d4:00:0b:60:e1:04:eb:8a:6d:9f: 46:36:20:12:39:c8:fc:a4:15:2e:89:12:fb:20:c1: 7d:08:fc:40:56:7a:72:09:9f:3c:36:ad:7f:73:2e: cc:5b:2a:ec:4d:37:a2:90:9e:6a:5d:0d:85:11:c3: a2:63:96:62:fc:74:ad:c2:2a:a4:c3:b6:60:3a:0c: 90:45:2a:2d:f5:3c:cb:0b:40:c8:da:f9:f9:c2:20: 3c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:3A:A4:E9:69:99:39:C8:49:04:76:65:BA:E2:1C:4B:0B:91:0E:7B X509v3 Authority Key Identifier: keyid:28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:a9:d7:ad:8b:87:58:3b:f7:51:97:d9:e1:7e:ee:dc:34:56: 00:83:34:31:a4:03:f0:a7:ee:1c:7d:fb:25:7d:75:40:04:bb: 2b:86:d7:35:1d:74:59:73:04:4f:16:e9:6f:9e:12:c5:0e:14: 8e:58:f6:30:32:a8:63:ac:ec:3b:73:a9:0d:bb:da:4f:a3:53: 1f:7a:6b:5e:e9:26:2c:e2:31:67:53:55:e1:05:4c:37:bd:cd: de:63:5e:25:52:09:1d:be:31:55:8c:00:bd:66:a8:15:22:0d: 40:dc:64:fe:79:05:93:1e:f0:28:44:21:bd:cc:14:3d:ef:32: c3:86:93:3d:b5:23:a9:b1:df:49:a8:a1:a7:fd:8a:8e:d6:07: 86:1b:04:e8:7b:92:70:80:b1:2b:44:8f:8c:6e:72:3a:71:f7: 01:55:dd:5b:da:55:8e:90:35:5d:af:85:b2:3f:a7:d9:5d:8e: 11:3c:8c:d8:4d:aa:e9:29:cb:b3:65:3d:0b:2b:3f:9d:ea:c8: cc:1d:95:b2:a5:7a:e3:ef:32:93:b4:0e:eb:4e:cc:08:f1:b1: 92:d2:91:4b:9b:de:28:64:ab:6e:1c:92:cd:25:d1:01:7c:e0: 47:65:a5:f0:85:99:6f:0a:86:c5:d3:50:a7:1b:a5:9c:71:a1: 3f:d3:12:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCFipRBPXgZvC3OVctfnVs229QOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVGQTY0 NDRERjJFQTAeFw0yNTA3MTgyMzQ2MzdaFw0yNTA3MjIwMjI1MzdaMDMxMTAvBgNV BAMTKEY0M0FBNEU5Njk5OTM5Qzg0OTA0NzY2NUJBRTIxQzRCMEI5MTBFN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuEzSVEyNOaBEvFvu3OqOKrc8g uEeCaBF7eKwrVR0EGpEt7+IdKl4KRrGRkdCfBwuNYQDRAlMcfYzsUsly/yICREfU IU5Sy5dP5I8oA45AYBFzwjJCIxnABWNkil6vCJGgfWfC1F6prSB+FaWiacsnAZM/ xB3NFR7zRQk5x7+c799JxJW6cE4WTvdf5vlJvhQZdm+xXZ9xYGwL9QZbj0uLQ3iE Z3LOc0Fi1AALYOEE64ptn0Y2IBI5yPykFS6JEvsgwX0I/EBWenIJnzw2rX9zLsxb KuxNN6KQnmpdDYURw6JjlmL8dK3CKqTDtmA6DJBFKi31PMsLQMja+fnCIDxBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9Dqk6WmZOchJBHZluuIcSwuRDnswHwYDVR0j BBgwFoAUKEuK2tPgmOm/vqxqkSnvpkRN8uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Yzg1YzZiOS0zNGY5LTRhODUtOWNlYS1jMTZlOThhOGI1ZTAvMC8yODRCOEFEQUQz RTA5OEU5QkZCRUFDNkE5MTI5RUZBNjQ0NERGMkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVGQTY0NDRE RjJFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM4NWM2YjktMzRmOS00YTg1LTlj ZWEtYzE2ZTk4YThiNWUwLzAvMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVG QTY0NDRERjJFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOp162Lh1g791GX2eF+7tw0VgCDNDGkA/Cn 7hx9+yV9dUAEuyuG1zUddFlzBE8W6W+eEsUOFI5Y9jAyqGOs7DtzqQ272k+jUx96 a17pJiziMWdTVeEFTDe9zd5jXiVSCR2+MVWMAL1mqBUiDUDcZP55BZMe8ChEIb3M FD3vMsOGkz21I6mx30mooaf9io7WB4YbBOh7knCAsStEj4xucjpx9wFV3VvaVY6Q NV2vhbI/p9ldjhE8jNhNqukpy7NlPQsrP53qyMwdlbKleuPvMpO0DutOzAjxsZLS kUub3ihkq24cks0l0QF84EdlpfCFmW8KhsXTUKcbpZxxoT/TEls= -----END CERTIFICATE-----Generated at Sun Jul 20 21:55:25 2025 by rpki-client