$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft File: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft (raw, json) Hash identifier: TkbKnDuybN4ZMf6idAmODp/Ui+R/WKe+1IDIvOHeP+c= Subject key identifier: 37:80:87:F3:CC:E2:E3:31:1C:B4:48:D4:DB:71:BD:48:92:DE:8E:BD Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 742E1EC09001D06D0C1C71CC9C8253A1ABAAABD1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft Manifest number: 0509 Signing time: Wed 17 Sep 2025 16:32:11 +0000 Manifest this update: Wed 17 Sep 2025 16:27:11 +0000 Manifest next update: Sat 20 Sep 2025 21:05:11 +0000 Files and hashes: 1: 323430323a616134303a31323a3a2f34382d3438203d3e20313337333330.roa (hash: QFubIhbbL6UEYuVrgh+b+Oy9CvlVLee6F9ADT2A6kec=) 2: 323430323a616134303a31313a3a2f34382d3438203d3e20313337333330.roa (hash: BBYTiuzRjYx15TfoXkETOVppXlE7UGzNaI5UpnCSg40=) 3: 323430323a616134303a31343a3a2f34382d3438203d3e20313337333330.roa (hash: ra0Qf+ys3TjTOOjzu7G6xBCVp6PgE8NBjiFHNgjZfy0=) 4: 323430323a616134303a353a3a2f34382d3438203d3e20313337333330.roa (hash: Pt4kHivj/+/IoSa7PGPfSPyAlm/DgqrXfAGO9WlCDqE=) 5: 3130332e3131322e3133382e302f32342d3234203d3e20313431383932.roa (hash: 7d6L1YnpzkSH3cjd/bratlHXMkaO39mRUgOEKpnPFL4=) 6: 323430323a616134303a31353a3a2f34382d3438203d3e20313337333330.roa (hash: cplcGCMTKNbyST3IWkDxcP/n/AeMzarnQF1LNyGc5EY=) 7: 3130332e3131322e3133392e302f32342d3234203d3e203535373031.roa (hash: Tg3uHiws3586UtP8/6LlH5rBTeR3eoDlr7oeiwMOjQA=) 8: 323430323a616134303a383a3a2f34382d3438203d3e20313337333330.roa (hash: vAnV4g431JCqkwtUthm0ie5OhAW6+m/w0zGsqm8XSOo=) 9: 3130332e3131322e3133372e302f32342d3234203d3e20313337333330.roa (hash: Ynfng1Lfq3pWIuf4W3EiHa7RUB04RaxJZyHC4wkM2pw=) 10: 323430323a616134303a31303a3a2f34382d3438203d3e20313337333330.roa (hash: JdwC9cZZayLXOr62V5QKdUDNIE+2Jw/cXMDWMiK/ID0=) 11: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl (hash: okFl+k6kG5r123475bfVntQRzuN9lxBcW7EwWsNEMI8=) 12: 323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa (hash: EtS1eZLUTwWRZJ7Ml0izUQhw9pv4Am/WahNfvxjKTrc=) 13: 323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa (hash: tQTDeuCAhgIHqT4JvN+SYFcrP542mVZbW7Uy9er1rk4=) 14: 323430323a616134303a3a2f33322d3332203d3e20313337333330.roa (hash: vtCuldzUtylI5t9/fCW+s++nz3SUBB8oSaeAOGcN8rI=) 15: 323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa (hash: SFCF3eZAfaB4k234A4Mal+M9wtz6OMi0W08cO5CL2c4=) 16: 323430323a616134303a373a3a2f34382d3438203d3e20313337333330.roa (hash: Z1axM0kuScQ1wsgtnc4QX9GvMZLuIsV8v/ScHLgFtiU=) 17: 323430323a616134303a323a3a2f34382d3438203d3e20313337333330.roa (hash: vTpYTNK2Iedt3x6MQB/Xrh13AhkarFJV4HWTUjcGM/Y=) 18: 323430323a616134303a31333a3a2f34382d3438203d3e20313337333330.roa (hash: w4rnLSoK9Ogry5Be/7bEeNtK/st8upmlmof3uHLSQS4=) 19: 3130332e3131322e3133362e302f32332d3233203d3e20313337333330.roa (hash: JdFXANFgLvROw3ALiHcjcCNg37qYIzNVyiUs7U7urj0=) 20: 323430323a616134303a313a3a2f34382d3438203d3e20313337333330.roa (hash: sfX//sKOJiEuG3MX815fs00hBV5qvYrVSNOlry6c+5c=) 21: 3130332e3131322e3133362e302f32342d3234203d3e20313337333330.roa (hash: IXEq/FTTwZnYZt7GCampKc/lJCDCJ9/yHr0Rlg6De2I=) 22: 323430323a616134303a343a3a2f34382d3438203d3e20313337333330.roa (hash: 1oWczp9RZm7lezuDVU+ofnA0tfj2lVP+IvFgjT0dOg4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Sep 2025 21:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:2e:1e:c0:90:01:d0:6d:0c:1c:71:cc:9c:82:53:a1:ab:aa:ab:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Sep 17 16:27:11 2025 GMT Not After : Sep 20 21:05:11 2025 GMT Subject: CN=378087F3CCE2E3311CB448D4DB71BD4892DE8EBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2e:67:a1:c4:83:4f:a2:3f:c7:d2:a1:3c:b3: 72:da:b6:ce:41:b4:4d:f6:f1:74:03:2a:23:e5:05: 2b:fb:40:6f:d3:bc:56:9e:92:2d:c5:4a:c4:56:2c: 1d:b6:a7:24:94:82:2c:d9:08:e7:47:b3:c7:d0:ad: ee:f7:dd:47:b2:c9:4d:b6:02:93:cb:96:66:d1:a5: 67:49:92:a0:be:f8:8d:f3:60:bc:2b:96:ee:e8:d6: 54:15:60:31:18:d3:79:1b:9d:68:56:05:86:a9:9d: 04:24:e6:86:20:71:87:e8:60:00:95:01:e2:5b:55: 4b:61:18:f1:8c:9d:a4:06:6d:4c:d2:0b:10:ca:f8: 23:85:52:c2:0a:79:52:94:98:00:4f:26:85:15:e0: 9f:23:85:da:bd:9c:dd:5b:79:62:ed:ba:61:9b:cb: 61:58:e8:1c:d3:3e:cf:bb:70:6e:f0:4a:81:c4:bf: f3:71:13:65:dd:c0:ed:d6:cb:db:5f:00:11:e3:02: 7f:d2:62:f6:0e:d3:9b:a7:08:7d:b9:73:20:86:18: cc:81:29:f2:44:1a:f1:72:6a:b3:0f:8e:01:67:7e: 45:c5:1d:ff:61:63:7d:29:cb:43:3c:5b:65:95:92: 9a:29:b5:02:3c:61:07:87:99:8d:d7:0e:1d:5a:94: a8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:80:87:F3:CC:E2:E3:31:1C:B4:48:D4:DB:71:BD:48:92:DE:8E:BD X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:a1:92:f9:5e:fc:ad:51:90:91:29:28:27:77:58:55:62:28: 53:4f:2a:6d:61:b1:ff:0c:aa:7e:6d:8b:99:f5:c0:c7:8b:25: f8:e9:65:8d:d3:c3:4d:ad:00:17:85:ba:9c:b5:41:88:7e:0d: 41:ac:b4:42:41:0f:0d:dd:fb:01:c4:ae:8d:ca:35:7e:6a:6b: bb:5c:68:fb:75:41:59:6b:3c:83:54:07:38:45:57:05:e2:b9: 2f:8a:62:b4:23:3e:32:22:62:9e:dd:65:1a:81:83:59:30:b3: a2:c7:0e:4c:c5:f0:57:f4:5c:1c:df:0a:8d:81:4e:d2:16:31: 2c:7e:21:4c:35:7d:1d:84:0e:2a:16:1a:51:84:f3:4f:e9:ca: 2d:c7:2d:55:01:af:2f:39:cd:04:41:aa:9b:32:c8:7d:5f:98: 01:7a:0c:2a:e3:ed:22:06:8e:d2:bc:84:12:75:7c:09:2d:ba: c4:80:41:9b:2c:33:6f:f2:3c:49:35:94:8c:3f:16:1b:5d:07: ec:57:fd:f0:4e:e1:35:cf:41:4a:7c:62:7b:4e:53:6f:8b:f9: e9:18:f8:a7:2f:66:88:9a:e4:c4:88:24:78:8e:dd:d0:7a:80: 33:18:4e:1b:d3:47:c2:d1:41:98:7e:b9:d7:94:32:a6:50:6d: a6:ae:e3:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdC4ewJAB0G0MHHHMnIJToauqq9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNTA5MTcxNjI3MTFaFw0yNTA5MjAyMTA1MTFaMDMxMTAvBgNV BAMTKDM3ODA4N0YzQ0NFMkUzMzExQ0I0NDhENERCNzFCRDQ4OTJERThFQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0LmehxINPoj/H0qE8s3Lats5B tE328XQDKiPlBSv7QG/TvFaeki3FSsRWLB22pySUgizZCOdHs8fQre733UeyyU22 ApPLlmbRpWdJkqC++I3zYLwrlu7o1lQVYDEY03kbnWhWBYapnQQk5oYgcYfoYACV AeJbVUthGPGMnaQGbUzSCxDK+COFUsIKeVKUmABPJoUV4J8jhdq9nN1beWLtumGb y2FY6BzTPs+7cG7wSoHEv/NxE2XdwO3Wy9tfABHjAn/SYvYO05unCH25cyCGGMyB KfJEGvFyarMPjgFnfkXFHf9hY30py0M8W2WVkpoptQI8YQeHmY3XDh1alKhDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN4CH88zi4zEctEjU23G9SJLejr0wHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGMzNGZmMDgtZDIxZi00MjBiLTg3 ZGYtNTMxMDNiNmRjMjUzLzAvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUx MkZFNEMxRDAwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKShkvle/K1RkJEpKCd3WFViKFNPKm1hsf8M qn5ti5n1wMeLJfjpZY3Tw02tABeFupy1QYh+DUGstEJBDw3d+wHEro3KNX5qa7tc aPt1QVlrPINUBzhFVwXiuS+KYrQjPjIiYp7dZRqBg1kws6LHDkzF8Ff0XBzfCo2B TtIWMSx+IUw1fR2EDioWGlGE80/pyi3HLVUBry85zQRBqpsyyH1fmAF6DCrj7SIG jtK8hBJ1fAktusSAQZssM2/yPEk1lIw/FhtdB+xX/fBO4TXPQUp8YntOU2+L+ekY +KcvZoia5MSIJHiO3dB6gDMYThvTR8LRQZh+udeUMqZQbaau4z8= -----END CERTIFICATE-----Generated at Wed Sep 17 22:17:39 2025 by rpki-client