$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft File: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft (raw, json) Hash identifier: n3wyydey4MmtRg8ZOMzmXymXmVRN7iWgnqXGsoUY+IA= Subject key identifier: AB:5C:55:90:08:1E:8C:AE:A9:8F:8E:47:81:FE:CD:37:DA:35:51:63 Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 074D7141E4E9C4312A22D0E2DDF5A8DB43BC9A9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft Manifest number: 04D9 Signing time: Wed 04 Jun 2025 08:02:12 +0000 Manifest this update: Wed 04 Jun 2025 07:57:12 +0000 Manifest next update: Sat 07 Jun 2025 09:28:12 +0000 Files and hashes: 1: 323430323a616134303a31343a3a2f34382d3438203d3e20313337333330.roa (hash: ra0Qf+ys3TjTOOjzu7G6xBCVp6PgE8NBjiFHNgjZfy0=) 2: 323430323a616134303a3a2f33322d3332203d3e20313337333330.roa (hash: e/yjVod/7lR4uj/RENV7JfH5TX+LSB9hPgqV7eSiKp4=) 3: 3130332e3131322e3133372e302f32342d3234203d3e20313337333330.roa (hash: F4/KJVXNTNm34izb7glpnGYFHc3KADsusKQ08aViHLM=) 4: 323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa (hash: EtS1eZLUTwWRZJ7Ml0izUQhw9pv4Am/WahNfvxjKTrc=) 5: 323430323a616134303a353a3a2f34382d3438203d3e20313337333330.roa (hash: Pt4kHivj/+/IoSa7PGPfSPyAlm/DgqrXfAGO9WlCDqE=) 6: 323430323a616134303a343a3a2f34382d3438203d3e20313337333330.roa (hash: 1oWczp9RZm7lezuDVU+ofnA0tfj2lVP+IvFgjT0dOg4=) 7: 323430323a616134303a31323a3a2f34382d3438203d3e20313337333330.roa (hash: QFubIhbbL6UEYuVrgh+b+Oy9CvlVLee6F9ADT2A6kec=) 8: 323430323a616134303a31353a3a2f34382d3438203d3e20313337333330.roa (hash: cplcGCMTKNbyST3IWkDxcP/n/AeMzarnQF1LNyGc5EY=) 9: 323430323a616134303a31303a3a2f34382d3438203d3e20313337333330.roa (hash: JdwC9cZZayLXOr62V5QKdUDNIE+2Jw/cXMDWMiK/ID0=) 10: 323430323a616134303a383a3a2f34382d3438203d3e20313337333330.roa (hash: vAnV4g431JCqkwtUthm0ie5OhAW6+m/w0zGsqm8XSOo=) 11: 323430323a616134303a31333a3a2f34382d3438203d3e20313337333330.roa (hash: w4rnLSoK9Ogry5Be/7bEeNtK/st8upmlmof3uHLSQS4=) 12: 323430323a616134303a31313a3a2f34382d3438203d3e20313337333330.roa (hash: BBYTiuzRjYx15TfoXkETOVppXlE7UGzNaI5UpnCSg40=) 13: 323430323a616134303a313a3a2f34382d3438203d3e20313337333330.roa (hash: sfX//sKOJiEuG3MX815fs00hBV5qvYrVSNOlry6c+5c=) 14: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl (hash: EMVAT99gfCV9vycup/TjpMuw1Zt5cZPvq9/jU4UDOvY=) 15: 3130332e3131322e3133382e302f32342d3234203d3e20313431383932.roa (hash: 7d6L1YnpzkSH3cjd/bratlHXMkaO39mRUgOEKpnPFL4=) 16: 323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa (hash: tQTDeuCAhgIHqT4JvN+SYFcrP542mVZbW7Uy9er1rk4=) 17: 3130332e3131322e3133362e302f32332d3233203d3e20313337333330.roa (hash: Hs35c6RHToYi6qvTeTc31yFLqwStwmhd6QBjMnOffHI=) 18: 3130332e3131322e3133362e302f32342d3234203d3e20313337333330.roa (hash: u1lfWy0MDbubQseV6f0yVaeg4S5wTkc4cbrHCMmY4Yw=) 19: 3130332e3131322e3133392e302f32342d3234203d3e203535373031.roa (hash: CpzM+132Mdd3sT2ikka6T6ZIOzo9cPs9M0vsLY9AeJk=) 20: 323430323a616134303a373a3a2f34382d3438203d3e20313337333330.roa (hash: Z1axM0kuScQ1wsgtnc4QX9GvMZLuIsV8v/ScHLgFtiU=) 21: 323430323a616134303a323a3a2f34382d3438203d3e20313337333330.roa (hash: vTpYTNK2Iedt3x6MQB/Xrh13AhkarFJV4HWTUjcGM/Y=) 22: 323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa (hash: SFCF3eZAfaB4k234A4Mal+M9wtz6OMi0W08cO5CL2c4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 09:28:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:4d:71:41:e4:e9:c4:31:2a:22:d0:e2:dd:f5:a8:db:43:bc:9a:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Jun 4 07:57:12 2025 GMT Not After : Jun 7 09:28:12 2025 GMT Subject: CN=AB5C5590081E8CAEA98F8E4781FECD37DA355163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9c:9e:04:02:4f:11:ce:c6:7f:bc:75:90:75: 23:88:b6:e7:e1:68:0a:b0:ba:0e:a5:21:46:e1:16: 5e:46:c0:89:08:4e:69:3f:5c:ac:1a:12:da:94:82: b3:e8:68:c7:4b:4d:fc:d4:da:13:f5:45:c3:e4:f7: 1f:5f:e9:22:46:0f:35:c4:f4:8a:12:08:8e:fc:59: df:32:e9:b5:08:46:58:10:05:a8:3b:66:02:32:48: a5:fb:e0:4a:75:72:7f:b7:62:90:43:dd:22:6b:2b: 8d:c4:d1:8d:16:13:b1:5e:ae:64:39:6c:e2:74:68: ee:1c:27:1f:ae:65:c4:ea:56:8e:fc:ea:fb:4c:3e: c1:f7:6c:fb:35:c3:70:d7:46:4b:50:7c:bd:46:72: 7e:e4:78:2e:4b:0c:c5:91:a3:c8:51:3c:65:94:cc: 62:54:e5:0b:02:ca:02:c3:b8:f9:a1:fe:34:33:fe: 1b:76:b7:44:f4:60:47:7a:f9:a1:b7:40:50:f5:3a: bf:87:87:ec:7a:e9:bd:2e:e1:c8:21:50:52:f5:40: 3f:4d:22:4b:c5:cd:c4:27:e0:a7:56:bc:52:a0:02: 81:46:fc:fe:2f:7e:e7:4c:cf:d2:d7:82:8e:a0:39: 79:da:19:c3:ff:88:71:20:c0:0a:20:0e:cb:99:0b: 78:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5C:55:90:08:1E:8C:AE:A9:8F:8E:47:81:FE:CD:37:DA:35:51:63 X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:2d:b6:3a:35:84:a2:89:8b:d8:58:55:08:9b:2c:a5:7e:5b: b8:3d:97:79:96:2f:81:fd:8e:1e:54:a3:a9:88:e8:d5:c6:c0: 4f:b2:5a:db:19:97:c5:21:d8:8a:56:3a:e2:28:cc:51:83:c0: e7:ee:48:07:92:ea:d0:b6:2c:08:dc:37:43:7a:21:f7:67:d3: 17:4d:cb:22:2d:53:b4:a3:20:8d:b5:e8:e8:41:c2:2e:3e:a8: 80:98:d7:fd:2d:d2:54:eb:19:ce:f5:1e:fc:46:bf:e5:50:e9: bf:cd:b8:5b:03:0c:d6:27:24:fb:3b:a6:0d:5c:6d:d3:02:dc: 82:18:40:e7:8f:22:59:bf:52:d7:0c:21:71:cf:ee:cf:4c:ce: 7d:1a:b6:bb:8c:94:18:82:b5:4c:9b:d4:eb:60:a0:84:4a:5c: 5c:63:32:82:8d:fa:21:9a:35:2e:53:5b:35:e6:54:08:84:d8: 9b:47:ba:4b:ad:fe:c8:31:c0:3c:17:70:80:2d:1f:34:c5:34: a6:79:ea:c8:5d:57:e8:42:9d:b0:8e:8f:c1:b2:0c:f5:d2:56: 88:83:a6:e5:5e:35:01:6b:95:98:0c:db:35:36:68:b8:8a:72: 5e:7b:43:35:59:04:05:e6:51:09:59:70:f6:cc:f5:24:2f:16: 5f:38:3a:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB01xQeTpxDEqItDi3fWo20O8mp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNTA2MDQwNzU3MTJaFw0yNTA2MDcwOTI4MTJaMDMxMTAvBgNV BAMTKEFCNUM1NTkwMDgxRThDQUVBOThGOEU0NzgxRkVDRDM3REEzNTUxNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCnJ4EAk8RzsZ/vHWQdSOItufh aAqwug6lIUbhFl5GwIkITmk/XKwaEtqUgrPoaMdLTfzU2hP1RcPk9x9f6SJGDzXE 9IoSCI78Wd8y6bUIRlgQBag7ZgIySKX74Ep1cn+3YpBD3SJrK43E0Y0WE7FermQ5 bOJ0aO4cJx+uZcTqVo786vtMPsH3bPs1w3DXRktQfL1Gcn7keC5LDMWRo8hRPGWU zGJU5QsCygLDuPmh/jQz/ht2t0T0YEd6+aG3QFD1Or+Hh+x66b0u4cghUFL1QD9N IkvFzcQn4KdWvFKgAoFG/P4vfudMz9LXgo6gOXnaGcP/iHEgwAogDsuZC3jpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq1xVkAgejK6pj45Hgf7NN9o1UWMwHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGMzNGZmMDgtZDIxZi00MjBiLTg3 ZGYtNTMxMDNiNmRjMjUzLzAvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUx MkZFNEMxRDAwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4ttjo1hKKJi9hYVQibLKV+W7g9l3mWL4H9 jh5Uo6mI6NXGwE+yWtsZl8Uh2IpWOuIozFGDwOfuSAeS6tC2LAjcN0N6Ifdn0xdN yyItU7SjII216OhBwi4+qICY1/0t0lTrGc71HvxGv+VQ6b/NuFsDDNYnJPs7pg1c bdMC3IIYQOePIlm/UtcMIXHP7s9Mzn0atruMlBiCtUyb1OtgoIRKXFxjMoKN+iGa NS5TWzXmVAiE2JtHukut/sgxwDwXcIAtHzTFNKZ56shdV+hCnbCOj8GyDPXSVoiD puVeNQFrlZgM2zU2aLiKcl57QzVZBAXmUQlZcPbM9SQvFl84Ohg= -----END CERTIFICATE-----Generated at Thu Jun 5 18:42:36 2025 by rpki-client