$ rpki-client -vvf repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft File: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft (raw, json) Hash identifier: pYRYTAVMtyl544cnnE5eNU8uS8QxNCv5Fn+PMD6Gfcg= Subject key identifier: 00:66:80:50:08:E0:45:AF:5B:5C:1E:FA:83:BE:72:AF:54:40:70:4E Authority key identifier: B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E Certificate issuer: /CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Certificate serial: 01FAD5FAA6D28D58FD18155E7FEBA4ECB6575A3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft Manifest number: 04EF Signing time: Sun 20 Jul 2025 18:20:42 +0000 Manifest this update: Sun 20 Jul 2025 18:15:42 +0000 Manifest next update: Thu 24 Jul 2025 03:25:42 +0000 Files and hashes: 1: 34332e3234322e3133332e302f32342d3234203d3e203538343736.roa (hash: 2NAEElgvlB7IhQMwd1Atvpj3R7riVOfOU9AzMjYnGF0=) 2: 3130332e37322e3131312e302f32342d3234203d3e203538343736.roa (hash: lw8CjbCa9nau6CgaK9qo3W7fJOYahpzK8W9j4IBI5bo=) 3: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl (hash: 94pQjY5Zs0y8gExG4xZ27brTjDQTtFnFterlx4t+UZ4=) 4: 3130332e32382e3130362e302f32342d3234203d3e203538343736.roa (hash: 3CwSzY5tw6Zm4h624sLhttPd8ZN8CiHTGKhVehN+hWE=) 5: 3130332e37322e3131302e302f32342d3234203d3e203538343736.roa (hash: voekDMYuoDNmVswZr7/xsWsJnvx7lZSdUg+Aq+ToSP0=) 6: 34332e3234322e3133322e302f32342d3234203d3e203538343736.roa (hash: ut8mKe181e+GL8gZVd8D9lpxfAhurYa657vG8sPaVZU=) 7: 323030313a6466303a3236663a3a2f34382d3438203d3e203538343736.roa (hash: 19ABnycRhti98EG6MJ/6S6W4a31omV6sktXNN7fCeRE=) 8: 3130332e32382e3130372e302f32342d3234203d3e203538343736.roa (hash: 1UalLxKn41/lSLgzHwYn+86cGRYM0p3PY4M21eZtrAo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:fa:d5:fa:a6:d2:8d:58:fd:18:15:5e:7f:eb:a4:ec:b6:57:5a:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Validity Not Before: Jul 20 18:15:42 2025 GMT Not After : Jul 24 03:25:42 2025 GMT Subject: CN=0066805008E045AF5B5C1EFA83BE72AF5440704E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:15:2b:55:bb:88:d4:78:60:19:9e:5c:57:ea: 7a:a9:65:50:4b:79:a0:94:05:98:06:ed:ff:63:72: fc:6e:44:7c:fb:02:b1:11:51:dd:75:e9:80:22:9f: e9:b9:4a:9c:35:4e:69:1a:68:3a:b0:37:54:18:04: ba:cd:22:4d:af:14:93:00:d6:74:9b:17:36:aa:8e: 8a:ee:8e:70:0a:f9:78:c6:39:72:43:ee:a2:03:85: 90:73:54:da:84:fe:b5:50:59:30:ad:b5:3a:c0:9a: 7f:e9:0e:bd:91:dd:31:15:70:5f:94:55:fe:be:9d: de:f7:4e:4d:de:3a:55:0e:86:9e:40:9b:8c:6b:f0: db:d8:41:a7:d6:83:83:4b:79:9b:22:c1:43:35:c7: 95:70:84:87:7a:21:4d:02:56:08:cd:1f:9c:74:5b: 01:67:b4:b9:25:9b:af:e9:32:f5:d6:e7:3d:6a:40: d5:3c:2f:c9:06:55:ab:81:87:ae:a2:20:64:0e:67: b4:fa:e5:5c:32:38:90:a9:e7:4f:6e:c1:7d:be:f8: be:c5:fc:4b:38:ec:82:79:19:f3:32:90:7a:23:33: 32:f5:e1:d3:7f:c0:ef:7c:6b:b9:06:5f:37:cd:0f: 80:b7:b2:ae:fc:0f:c8:7f:bc:fd:b4:72:5c:2e:19: 0b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:66:80:50:08:E0:45:AF:5B:5C:1E:FA:83:BE:72:AF:54:40:70:4E X509v3 Authority Key Identifier: keyid:B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:cf:be:1e:b1:ea:b2:33:84:4c:af:93:39:a7:b6:bb:1c:15: b0:99:b0:10:51:d5:2c:c3:6d:38:e5:80:9b:46:50:c5:d4:e2: 0e:6f:d7:89:7f:23:d9:87:67:7a:a8:29:da:58:64:f2:be:42: 9c:55:69:7f:ea:d3:81:f7:47:36:30:9f:10:b9:2b:52:22:8d: 19:ee:15:ff:46:7b:e3:13:64:e4:60:c4:39:5c:e4:08:4b:57: 2c:d0:5e:aa:ae:95:bc:f1:18:c1:2a:7b:4c:2c:69:eb:a0:a8: e2:15:68:c2:2e:43:17:7e:14:a5:96:08:08:9b:3f:31:d5:11: 74:1e:81:de:52:93:e5:2c:4b:2b:0f:3a:ea:d5:dc:d6:6d:59: 77:c4:9e:18:e4:ae:d5:de:dc:3c:94:be:b5:82:65:ae:c6:ef: 19:17:98:6b:4e:ff:44:ab:51:e3:f3:86:60:ce:fa:b2:c7:46: 9f:32:19:ce:0d:99:19:fb:ff:27:8e:21:a8:13:10:93:66:a9: 61:f9:b3:3a:21:14:8f:42:ee:ac:b3:5d:2f:df:9b:e9:fb:e9: ba:af:90:c1:09:bb:5f:aa:ba:c0:8c:84:b5:f0:54:aa:74:f3: 24:06:b0:e1:f3:40:d4:e1:e1:c1:5f:09:a0:39:ec:de:d5:cc: 8e:5d:19:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAfrV+qbSjVj9GBVef+uk7LZXWjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VD NTAzRUYzRTAeFw0yNTA3MjAxODE1NDJaFw0yNTA3MjQwMzI1NDJaMDMxMTAvBgNV BAMTKDAwNjY4MDUwMDhFMDQ1QUY1QjVDMUVGQTgzQkU3MkFGNTQ0MDcwNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyFStVu4jUeGAZnlxX6nqpZVBL eaCUBZgG7f9jcvxuRHz7ArERUd116YAin+m5Spw1TmkaaDqwN1QYBLrNIk2vFJMA 1nSbFzaqjorujnAK+XjGOXJD7qIDhZBzVNqE/rVQWTCttTrAmn/pDr2R3TEVcF+U Vf6+nd73Tk3eOlUOhp5Am4xr8NvYQafWg4NLeZsiwUM1x5VwhId6IU0CVgjNH5x0 WwFntLklm6/pMvXW5z1qQNU8L8kGVauBh66iIGQOZ7T65VwyOJCp509uwX2++L7F /Es47IJ5GfMykHojMzL14dN/wO98a7kGXzfND4C3sq78D8h/vP20clwuGQuBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAGaAUAjgRa9bXB76g75yr1RAcE4wHwYDVR0j BBgwFoAUsUTk6yj2nZt2wMJJm/17PsUD7z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2Y0OTA2OC1jMGNhLTRhMjEtOWE4YS1lZWQyNmZjZGQxYWEvMC9CMTQ0RTRFQjI4 RjY5RDlCNzZDMEMyNDk5QkZEN0IzRUM1MDNFRjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VDNTAz RUYzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdmNDkwNjgtYzBjYS00YTIxLTlh OGEtZWVkMjZmY2RkMWFhLzAvQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdC M0VDNTAzRUYzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbPvh6x6rIzhEyvkzmntrscFbCZsBBR1SzD bTjlgJtGUMXU4g5v14l/I9mHZ3qoKdpYZPK+QpxVaX/q04H3RzYwnxC5K1IijRnu Ff9Ge+MTZORgxDlc5AhLVyzQXqqulbzxGMEqe0wsaeugqOIVaMIuQxd+FKWWCAib PzHVEXQegd5Sk+UsSysPOurV3NZtWXfEnhjkrtXe3DyUvrWCZa7G7xkXmGtO/0Sr UePzhmDO+rLHRp8yGc4NmRn7/yeOIagTEJNmqWH5szohFI9C7qyzXS/fm+n76bqv kMEJu1+qusCMhLXwVKp08yQGsOHzQNTh4cFfCaA57N7VzI5dGcU= -----END CERTIFICATE-----Generated at Mon Jul 21 10:34:11 2025 by rpki-client