$ rpki-client -vvf repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft File: B605E2C01C5BDC6CEE49545C80501360234DC910.mft (raw, json) Hash identifier: 9XCPuELeV6d1pbCFqB+soMOhWKc5K0iuVoKHMgWRD54= Subject key identifier: 01:30:31:91:2B:C8:91:7D:FD:76:B9:12:92:90:4C:69:C2:74:61:AB Authority key identifier: B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10 Certificate issuer: /CN=B605E2C01C5BDC6CEE49545C80501360234DC910 Certificate serial: 37BE2D3FE6CE7F950DF2EF7981825B5A5D207BE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer Subject info access: rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft Manifest number: 04F7 Signing time: Sun 20 Jul 2025 02:30:04 +0000 Manifest this update: Sun 20 Jul 2025 02:25:04 +0000 Manifest next update: Wed 23 Jul 2025 06:43:04 +0000 Files and hashes: 1: 3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (hash: AVHUuCu/pWOfGEGbs7pgdGUZzNAVfi/HDMj4JakhRSI=) 2: B605E2C01C5BDC6CEE49545C80501360234DC910.crl (hash: v75GfJm+OgHTF0YuTDoeR02ovEtFCL7JP466GW3Vny8=) 3: 3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (hash: isINXQLKIC1dEiiAoWDEseWdjl997XY6+RtHzF8UKMk=) 4: 3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (hash: QNOScV9kvLXfJ4ZvrZSU6WwTkajrzvaS7q6+eyoaI+A=) 5: 3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa (hash: 4R3cIWzWFlBnUOjDtKgjITkNYaOCw4Tx4+7Vb5ietQo=) 6: 3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (hash: L3ZzIiAydRdMLY3ej77+q1So7IkWU5tA3zvtMa14wvQ=) 7: 3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa (hash: FpCRPN3/sh87yKc8VhdJ2zd+tYzqklLo+UKit0tTGBI=) 8: 3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (hash: /bgLX80Id13xkunC59CvIZtu8KOfj3mxVa1lG5ZXF/0=) 9: 3131352e3137382e35332e302f32342d3234203d3e20313331373137.roa (hash: 5Br8jzUfiBL0O6Kopm71gWMUaniCVXm/uXqyIID9rs0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 06:43:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:be:2d:3f:e6:ce:7f:95:0d:f2:ef:79:81:82:5b:5a:5d:20:7b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B605E2C01C5BDC6CEE49545C80501360234DC910 Validity Not Before: Jul 20 02:25:04 2025 GMT Not After : Jul 23 06:43:04 2025 GMT Subject: CN=013031912BC8917DFD76B91292904C69C27461AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e7:43:b6:67:8e:f1:40:81:ee:a7:ff:d5:d8: 70:1e:99:c3:f9:4a:4a:14:2d:48:68:b2:a6:bb:82: 37:27:85:3c:00:6f:79:e4:63:c6:5d:02:ff:a5:96: cf:39:48:e8:14:7e:d9:22:9f:78:bd:e0:9b:38:0f: 69:38:01:85:4e:31:5f:f8:f4:67:d0:bc:09:bb:b3: 76:66:ec:29:74:be:0b:b3:cb:7b:08:54:cd:a1:1d: f7:18:01:5c:0b:8f:3e:4a:81:cc:0f:59:08:a6:68: 8f:e2:4d:78:46:4b:9a:0d:e2:c4:48:fe:58:71:a6: e3:c4:87:16:fd:db:18:3a:20:8e:f1:c2:d7:d1:cd: 9d:3d:07:38:60:bd:b4:e4:b5:74:65:ca:1d:1f:d0: 5c:0e:1a:20:04:b3:71:4b:70:40:30:0f:24:ac:22: b1:39:3d:bf:43:79:bf:b2:ac:5b:2d:35:d7:44:6f: 0b:4b:38:bf:e0:7b:d2:b6:9d:d0:58:b9:67:e5:83: 89:66:ef:89:84:47:b4:36:aa:de:51:89:ef:0f:3a: 7d:41:dd:84:29:cc:81:ce:dc:c1:af:e5:48:33:ad: d4:2f:8a:74:a3:17:32:5f:4b:34:81:16:c5:d5:c9: 97:e6:5d:af:6c:94:63:f3:88:03:d1:a8:f4:d0:29: 3c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:30:31:91:2B:C8:91:7D:FD:76:B9:12:92:90:4C:69:C2:74:61:AB X509v3 Authority Key Identifier: keyid:B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:fd:9e:51:f4:c4:be:73:aa:1a:aa:c0:40:89:25:70:59:d0: 86:54:00:f2:4c:11:b9:35:c8:18:b9:9d:d8:d8:72:9a:1c:cf: b0:6b:46:93:f4:54:0f:4d:64:1d:2a:2f:1a:6d:be:25:57:d6: 71:53:92:85:35:11:06:95:f7:d2:bc:43:48:fa:2d:64:e5:57: 52:00:96:ab:d3:17:21:3d:f0:7b:78:5a:1b:92:ce:1c:32:4b: b8:81:c6:10:3b:fe:51:b7:74:c6:60:0e:73:94:34:37:c5:af: c1:46:08:54:bf:f8:b0:d1:dd:89:f5:ec:94:0b:de:21:a8:08: f2:85:70:1e:b1:fd:ff:95:76:15:3a:e4:c7:fc:27:74:44:c7: bf:44:49:4c:83:1a:e7:74:e1:04:16:54:6c:cd:ec:69:2a:85: f7:f6:76:de:a4:99:c9:30:2f:a5:83:6e:cf:1f:41:fb:94:67: 5f:65:c0:75:b4:9f:3d:1d:5b:85:14:63:b7:d0:4b:ab:d9:1f: fb:e1:c1:88:57:ba:16:f9:f1:b9:4d:b3:72:50:b2:e5:64:13: 79:8a:d1:8f:53:87:32:a3:13:7e:cb:4c:87:e9:ce:13:75:ea: 78:83:1c:36:f3:70:0d:e6:e1:2e:08:24:86:99:64:c7:9d:17: 06:0e:ef:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN74tP+bOf5UN8u95gYJbWl0ge+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEzNjAy MzREQzkxMDAeFw0yNTA3MjAwMjI1MDRaFw0yNTA3MjMwNjQzMDRaMDMxMTAvBgNV BAMTKDAxMzAzMTkxMkJDODkxN0RGRDc2QjkxMjkyOTA0QzY5QzI3NDYxQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi50O2Z47xQIHup//V2HAemcP5 SkoULUhosqa7gjcnhTwAb3nkY8ZdAv+lls85SOgUftkin3i94Js4D2k4AYVOMV/4 9GfQvAm7s3Zm7Cl0vguzy3sIVM2hHfcYAVwLjz5KgcwPWQimaI/iTXhGS5oN4sRI /lhxpuPEhxb92xg6II7xwtfRzZ09BzhgvbTktXRlyh0f0FwOGiAEs3FLcEAwDySs IrE5Pb9Deb+yrFstNddEbwtLOL/ge9K2ndBYuWflg4lm74mER7Q2qt5Rie8POn1B 3YQpzIHO3MGv5UgzrdQvinSjFzJfSzSBFsXVyZfmXa9slGPziAPRqPTQKTy5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUATAxkSvIkX39drkSkpBMacJ0YaswHwYDVR0j BBgwFoAUtgXiwBxb3GzuSVRcgFATYCNNyRAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWZlOGY5Yi04YzM0LTQzNDItYTBmZS1jYTEwNzVmYmE1ZmYvMC9CNjA1RTJDMDFD NUJEQzZDRUU0OTU0NUM4MDUwMTM2MDIzNERDOTEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEzNjAyMzRE QzkxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVmZThmOWItOGMzNC00MzQyLWEw ZmUtY2ExMDc1ZmJhNWZmLzAvQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEz NjAyMzREQzkxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGX9nlH0xL5zqhqqwECJJXBZ0IZUAPJMEbk1 yBi5ndjYcpocz7BrRpP0VA9NZB0qLxptviVX1nFTkoU1EQaV99K8Q0j6LWTlV1IA lqvTFyE98Ht4WhuSzhwyS7iBxhA7/lG3dMZgDnOUNDfFr8FGCFS/+LDR3Yn17JQL 3iGoCPKFcB6x/f+VdhU65Mf8J3REx79ESUyDGud04QQWVGzN7Gkqhff2dt6kmckw L6WDbs8fQfuUZ19lwHW0nz0dW4UUY7fQS6vZH/vhwYhXuhb58blNs3JQsuVkE3mK 0Y9ThzKjE37LTIfpzhN16niDHDbzcA3m4S4IJIaZZMedFwYO74M= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:31 2025 by rpki-client