$ rpki-client -vvf repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft File: 930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft (raw, json) Hash identifier: F0a6wAYGDyEeLdg0kDWtpv//sukUr23RNiFV2P2XrCA= Subject key identifier: 4B:59:97:07:37:D4:BD:CC:0E:CE:9C:AE:34:59:86:64:AF:BC:64:F1 Authority key identifier: 93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46 Certificate issuer: /CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46 Certificate serial: 3B9A72B65DCB1C89247E954B7B858E38550281D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft Manifest number: 01C5 Signing time: Sun 20 Jul 2025 19:31:14 +0000 Manifest this update: Sun 20 Jul 2025 19:26:14 +0000 Manifest next update: Wed 23 Jul 2025 20:01:14 +0000 Files and hashes: 1: 32372e3132312e38362e302f32342d3234203d3e203535363532.roa (hash: XIUZRQaq6Ar2nV3ZFHLpoCHXyLAUe42akQ2OknBSU7A=) 2: 32372e3132312e38332e302f32342d3234203d3e203535363532.roa (hash: MboJ9bNDWss1vJJcwVtBuaH8mT9pUZJ9JaBkaATFQrs=) 3: 32372e3132312e38322e302f32342d3234203d3e203535363532.roa (hash: g0Pf3ARHuUC7zmADQSDxhgj8ifkJ9K0BINMIl06Upvw=) 4: 32372e3132312e38342e302f32342d3234203d3e203535363532.roa (hash: 2kz4UnYhTEUhN29lc95KLdxE2aM+/O4QDh3Ih8iCdB4=) 5: 32372e3132312e38372e302f32342d3234203d3e203535363532.roa (hash: Xofen3Xcki3BFd0kBACnOhqZPk/1Iy4IfI/PQ+72xB8=) 6: 32372e3132312e38312e302f32342d3234203d3e203535363532.roa (hash: OPw2qIoiwwy7ASYHOGCX10NAN40v1tPJ0GZbmeP5o0Y=) 7: 32372e3132312e38352e302f32342d3234203d3e203535363532.roa (hash: Q86wnmZUd6Eh9prZNbHvOVX1KEczkIcKucRRsZzGyfQ=) 8: 930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl (hash: vyHNt7yRv09rdxvAjRYCGrx+lf6zpAM2Z8boYnlItQU=) 9: 32372e3132312e38302e302f32342d3234203d3e203535363532.roa (hash: yhslnPw/0kdUwo4Upa6wZ3S1y6iGaMJ+XsyQRvnqnpw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:9a:72:b6:5d:cb:1c:89:24:7e:95:4b:7b:85:8e:38:55:02:81:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46 Validity Not Before: Jul 20 19:26:14 2025 GMT Not After : Jul 23 20:01:14 2025 GMT Subject: CN=4B59970737D4BDCC0ECE9CAE34598664AFBC64F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b7:b8:46:c5:37:91:b4:4c:de:30:a8:dc:08: 2a:0d:2b:8d:32:a7:ca:32:dc:bd:0c:3b:11:a8:f2: 1c:d1:96:12:6f:b7:7a:84:f1:79:bf:8b:48:31:29: 9c:ef:fb:87:58:db:5b:22:22:3a:20:e6:b2:c6:0c: d5:ee:32:72:51:e9:7d:23:e5:b7:52:2d:ec:9c:10: db:f9:54:25:59:a1:c9:26:08:27:bb:c7:cd:2c:5c: 7e:37:e7:c9:e6:e5:28:7c:1c:81:84:6a:65:e7:82: 4b:a2:ad:c9:c8:b0:cc:f3:cf:fd:2c:ca:21:95:36: 1f:0b:ad:9b:2b:26:58:56:6b:ad:07:55:49:cb:64: d3:59:d8:f6:22:67:ed:bd:07:7a:dc:e9:71:ce:fe: db:fd:cd:fe:f0:16:b4:49:cf:ac:f6:2c:6f:13:6b: f3:26:fc:2a:91:10:fe:d3:96:93:d6:15:2e:f2:91: 3f:10:9d:67:e5:57:6e:fc:eb:14:b3:9b:4e:bb:77: 5b:40:03:0c:3e:65:63:ba:3b:a1:13:03:8b:73:42: 82:35:08:cb:63:77:02:23:dc:6c:aa:93:91:2a:a5: dd:e5:e7:4c:20:65:35:be:e6:ae:9f:6e:d8:30:f4: f4:b8:f3:5d:d3:3f:74:4e:6c:20:07:fc:ca:dd:77: 98:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:59:97:07:37:D4:BD:CC:0E:CE:9C:AE:34:59:86:64:AF:BC:64:F1 X509v3 Authority Key Identifier: keyid:93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:4a:b1:f4:d9:28:a7:23:a2:9c:c1:6c:50:30:96:52:f7:31: fa:32:17:6d:9b:3c:e5:c3:e1:6d:46:8d:69:33:64:c1:09:22: 5e:f6:f8:9e:0d:e2:09:fb:06:2f:95:c6:9f:13:2e:32:f0:d3: 7b:5f:fb:7e:bc:33:80:2b:2d:bf:17:68:9b:8e:8a:3a:d7:39: 69:64:c1:4f:68:c1:c0:13:56:4c:14:a3:a0:86:5e:34:ab:10: de:da:03:1e:57:4d:14:85:9d:a0:fa:fd:78:de:fe:7e:7f:cf: 85:4c:16:f3:ba:58:57:d9:d3:28:06:b5:b0:7f:07:f5:a1:80: 4b:c4:38:91:79:d6:7c:91:15:06:c0:97:cd:61:be:ce:cd:41: ef:35:05:3a:f0:84:46:fd:1a:60:1f:37:b7:b1:9c:e1:98:4f: 5f:24:59:fe:24:69:13:cf:cf:6d:a1:a1:bf:3e:e7:a4:c6:04: 2d:c0:96:b0:f3:ed:22:52:4b:72:a9:27:96:d9:a9:ea:95:04: f3:c6:ad:1d:64:27:c2:39:b7:86:5f:03:90:d9:fa:25:c4:12: de:0a:3e:63:a6:cd:b4:38:3b:97:fa:5f:db:66:c2:31:42:29: 10:d3:b5:65:e9:2c:d3:fd:25:08:2d:d6:dd:26:10:21:79:90: 9d:59:32:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO5pytl3LHIkkfpVLe4WOOFUCgdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMwQTRFRDJCODVBQTlGRTc3RUQ5MEZBODUwNDRBOUM4 MEIzOEE0NjAeFw0yNTA3MjAxOTI2MTRaFw0yNTA3MjMyMDAxMTRaMDMxMTAvBgNV BAMTKDRCNTk5NzA3MzdENEJEQ0MwRUNFOUNBRTM0NTk4NjY0QUZCQzY0RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSt7hGxTeRtEzeMKjcCCoNK40y p8oy3L0MOxGo8hzRlhJvt3qE8Xm/i0gxKZzv+4dY21siIjog5rLGDNXuMnJR6X0j 5bdSLeycENv5VCVZockmCCe7x80sXH4358nm5Sh8HIGEamXngkuircnIsMzzz/0s yiGVNh8LrZsrJlhWa60HVUnLZNNZ2PYiZ+29B3rc6XHO/tv9zf7wFrRJz6z2LG8T a/Mm/CqREP7TlpPWFS7ykT8QnWflV2786xSzm067d1tAAww+ZWO6O6ETA4tzQoI1 CMtjdwIj3Gyqk5Eqpd3l50wgZTW+5q6fbtgw9PS4813TP3RObCAH/Mrdd5ipAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS1mXBzfUvcwOzpyuNFmGZK+8ZPEwHwYDVR0j BBgwFoAUkwpO0rhaqf537ZD6hQRKnICzikYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjYyODA5Yy1iZmI2LTRmZTctOGRkNi1jYTYwMjJjZGQ1NDAvMC85MzBBNEVEMkI4 NUFBOUZFNzdFRDkwRkE4NTA0NEE5QzgwQjM4QTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTMwQTRFRDJCODVBQTlGRTc3RUQ5MEZBODUwNDRBOUM4MEIz OEE0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY2MjgwOWMtYmZiNi00ZmU3LThk ZDYtY2E2MDIyY2RkNTQwLzAvOTMwQTRFRDJCODVBQTlGRTc3RUQ5MEZBODUwNDRB OUM4MEIzOEE0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAElKsfTZKKcjopzBbFAwllL3MfoyF22bPOXD 4W1GjWkzZMEJIl72+J4N4gn7Bi+Vxp8TLjLw03tf+368M4ArLb8XaJuOijrXOWlk wU9owcATVkwUo6CGXjSrEN7aAx5XTRSFnaD6/Xje/n5/z4VMFvO6WFfZ0ygGtbB/ B/WhgEvEOJF51nyRFQbAl81hvs7NQe81BTrwhEb9GmAfN7exnOGYT18kWf4kaRPP z22hob8+56TGBC3AlrDz7SJSS3KpJ5bZqeqVBPPGrR1kJ8I5t4ZfA5DZ+iXEEt4K PmOmzbQ4O5f6X9tmwjFCKRDTtWXpLNP9JQgt1t0mECF5kJ1ZMqQ= -----END CERTIFICATE-----Generated at Mon Jul 21 08:33:54 2025 by rpki-client