$ rpki-client -vvf repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft File: 0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft (raw, json) Hash identifier: z1bNNlNlUgZ4YMjNFFNWEbO7ogWm5geDQUyj3fAAq4E= Subject key identifier: 6E:D2:99:63:C9:D4:1F:C2:D8:C8:AE:15:86:2C:D1:DA:52:EA:F9:BF Authority key identifier: 09:12:BC:2A:8D:2E:8B:F2:55:3D:71:06:FF:6E:62:22:8E:03:C1:E4 Certificate issuer: /CN=0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4 Certificate serial: 1F3A22E72BDA95697DA2E1E789FAEC0AFC3BB627 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft Manifest number: 0505 Signing time: Thu 04 Sep 2025 11:41:15 +0000 Manifest this update: Thu 04 Sep 2025 11:36:15 +0000 Manifest next update: Sun 07 Sep 2025 17:07:15 +0000 Files and hashes: 1: 3130332e3133302e3138322e302f32332d3233203d3e20313338303833.roa (hash: /xZYFYyOB1e+pblVdjFbZfEDRpifvi0rioH8bq15tlY=) 2: 0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl (hash: 8xIX/zRFj/Ktk6aS3fEXEKxD72INnv8mlw+S7zGuDls=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 17:07:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:3a:22:e7:2b:da:95:69:7d:a2:e1:e7:89:fa:ec:0a:fc:3b:b6:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4 Validity Not Before: Sep 4 11:36:15 2025 GMT Not After : Sep 7 17:07:15 2025 GMT Subject: CN=6ED29963C9D41FC2D8C8AE15862CD1DA52EAF9BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:45:64:57:49:ae:47:e7:9e:65:97:e3:e1:10: 25:88:f3:01:07:79:6e:d1:a0:8e:69:90:15:f7:66: 35:7c:42:fe:7e:fd:94:87:24:e2:75:1b:9b:75:aa: b7:52:86:09:a1:d2:29:78:c3:96:e1:4b:10:3b:ae: 09:50:ae:b6:45:af:6c:b2:99:9a:44:bd:58:92:6a: 79:41:b6:46:78:8f:2f:dd:99:84:36:47:b2:06:33: 71:07:2d:c4:90:55:3b:ed:8f:c2:a2:43:35:7a:62: c3:20:86:21:9e:6e:0f:2f:48:bd:8a:9c:11:0f:5b: fe:6e:14:9c:c8:e2:9e:24:67:7b:69:74:44:56:e7: 07:37:47:2e:0d:0e:21:0c:21:ef:52:24:25:dc:92: 6f:ab:f1:d3:ce:03:13:4a:a1:0c:f0:86:3d:61:19: 7b:35:ee:1e:37:3e:c1:84:01:78:3c:88:02:99:83: 3a:8c:f3:8d:6d:02:cc:37:ec:51:92:e5:76:7c:5b: 0d:b4:9d:aa:41:13:f2:48:0f:b7:77:d9:19:96:94: 22:bc:a4:d3:6b:3d:97:d6:93:9a:fd:e2:ed:f5:d8: bb:4f:ff:68:7d:04:eb:0a:ed:42:c8:37:42:fd:7d: 4f:1b:ac:e0:c2:4a:22:ca:ae:f6:52:64:ac:f9:68: 4e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D2:99:63:C9:D4:1F:C2:D8:C8:AE:15:86:2C:D1:DA:52:EA:F9:BF X509v3 Authority Key Identifier: keyid:09:12:BC:2A:8D:2E:8B:F2:55:3D:71:06:FF:6E:62:22:8E:03:C1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:8e:2e:dd:47:1a:4f:89:fb:79:1f:8c:5f:bc:84:1d:52:c7: 17:f3:7f:48:61:9e:7d:49:93:cd:d1:3d:53:a4:80:a0:31:8a: 55:25:6d:a7:5d:6f:fb:c8:2e:7f:03:37:65:df:b5:ea:b7:02: ff:aa:c5:04:b6:2f:14:b0:e9:7f:5d:e4:75:21:8c:5e:d4:be: 3f:3d:3b:2e:08:77:b7:c6:46:6b:4a:f2:d8:19:32:c9:03:92: f6:70:05:aa:b5:ae:b6:02:39:a2:2e:1d:05:97:a0:c8:18:f8: 7e:fa:e0:25:d1:8e:74:55:37:1f:40:e7:8e:74:19:3a:36:63: 23:63:de:ad:4a:f5:a2:ca:13:bc:4f:bb:99:b3:1d:0f:58:fb: db:fb:d5:9c:a2:66:e0:50:eb:4c:67:50:a8:d6:95:e0:10:6d: 3f:6a:0d:f9:95:32:0a:fe:01:7e:0c:c3:f0:0f:95:d1:7e:88: a7:a6:8f:1a:41:c0:71:54:33:0e:4f:65:4c:b2:37:9f:d5:0b: a6:e0:a1:6e:a9:28:0c:63:04:6a:8b:b7:f8:5b:0a:b2:5d:8b: eb:81:d2:21:95:94:d6:c9:3a:ef:79:4a:37:9e:ef:0b:6d:f2: 1d:ca:9a:62:28:bd:a1:ea:e5:7f:c3:28:0a:54:2c:31:c4:0a: 3b:5a:0c:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHzoi5yvalWl9ouHnifrsCvw7ticwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYyMjI4 RTAzQzFFNDAeFw0yNTA5MDQxMTM2MTVaFw0yNTA5MDcxNzA3MTVaMDMxMTAvBgNV BAMTKDZFRDI5OTYzQzlENDFGQzJEOEM4QUUxNTg2MkNEMURBNTJFQUY5QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6RWRXSa5H555ll+PhECWI8wEH eW7RoI5pkBX3ZjV8Qv5+/ZSHJOJ1G5t1qrdShgmh0il4w5bhSxA7rglQrrZFr2yy mZpEvViSanlBtkZ4jy/dmYQ2R7IGM3EHLcSQVTvtj8KiQzV6YsMghiGebg8vSL2K nBEPW/5uFJzI4p4kZ3tpdERW5wc3Ry4NDiEMIe9SJCXckm+r8dPOAxNKoQzwhj1h GXs17h43PsGEAXg8iAKZgzqM841tAsw37FGS5XZ8Ww20napBE/JID7d32RmWlCK8 pNNrPZfWk5r94u312LtP/2h9BOsK7ULIN0L9fU8brODCSiLKrvZSZKz5aE7HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbtKZY8nUH8LYyK4VhizR2lLq+b8wHwYDVR0j BBgwFoAUCRK8Ko0ui/JVPXEG/25iIo4DweQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTY2OTgwNy0wNTBlLTQzYWUtODcwOC1iNDZiODgxNzg0MmMvMC8wOTEyQkMyQThE MkU4QkYyNTUzRDcxMDZGRjZFNjIyMjhFMDNDMUU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYyMjI4RTAz QzFFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU2Njk4MDctMDUwZS00M2FlLTg3 MDgtYjQ2Yjg4MTc4NDJjLzAvMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYy MjI4RTAzQzFFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADuOLt1HGk+J+3kfjF+8hB1Sxxfzf0hhnn1J k83RPVOkgKAxilUlbaddb/vILn8DN2Xfteq3Av+qxQS2LxSw6X9d5HUhjF7Uvj89 Oy4Id7fGRmtK8tgZMskDkvZwBaq1rrYCOaIuHQWXoMgY+H764CXRjnRVNx9A5450 GTo2YyNj3q1K9aLKE7xPu5mzHQ9Y+9v71ZyiZuBQ60xnUKjWleAQbT9qDfmVMgr+ AX4Mw/APldF+iKemjxpBwHFUMw5PZUyyN5/VC6bgoW6pKAxjBGqLt/hbCrJdi+uB 0iGVlNbJOu95Sjee7wtt8h3KmmIovaHq5X/DKApULDHECjtaDMY= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:43 2025 by rpki-client