$ rpki-client -vvf repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft File: 1F969EE9B0838D22156118A888B81BF27B859BD5.mft (raw, json) Hash identifier: 3lmCLHiJjfS8qNh2Lif6aTu399xhXdSFT7QRTl8MvFY= Subject key identifier: 66:2B:C1:53:D2:55:BC:29:09:AE:50:90:0C:37:90:17:18:D8:01:04 Authority key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5 Certificate issuer: /CN=1F969EE9B0838D22156118A888B81BF27B859BD5 Certificate serial: 78DD36B1205EBEC01516E92A7E5DAF2755AA42DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft Manifest number: 025E Signing time: Mon 08 Sep 2025 09:41:53 +0000 Manifest this update: Mon 08 Sep 2025 09:36:53 +0000 Manifest next update: Thu 11 Sep 2025 21:10:53 +0000 Files and hashes: 1: 3230322e35372e32352e302f32342d3234203d3e20313430343639.roa (hash: s5VhGyqquShG7gVjj17riZ/dr+Nk1vl6gg38DZ33Yns=) 2: 3230322e35372e32302e302f32342d3234203d3e20313431363733.roa (hash: RIaxQt2BdMly6jZqFEt6v4+R9ZCRoPt0bRRhz87aHRQ=) 3: 3230322e35372e32312e302f32342d3234203d3e20313431363733.roa (hash: KyjP36QU2B5WmwOGj/w2MpttC7+1bk2GysORLqVSxsM=) 4: 3230322e35372e32302e302f32332d3233203d3e20313431363733.roa (hash: qNzsGiJwf7XGjGP4j+CDhg7oJnuuTy/kX7unl+wQ3hg=) 5: 3230322e35372e32362e302f32342d3234203d3e20313430343639.roa (hash: Q0qOJ/lZFg5h7UgexbzOBngIpLcaN5DOfBR3Xnw+miE=) 6: 3230322e35372e31392e302f32342d3234203d3e20313339393831.roa (hash: zszkuvV/DGJtyi38SwI+iyz6P0zwyMAcKOGOc8uu7vs=) 7: 1F969EE9B0838D22156118A888B81BF27B859BD5.crl (hash: FRJnBS2yXper3ktSrm51sCosliL+w9ArcCg/vuYasm8=) 8: 3230322e35372e32362e302f32332d3233203d3e20313430343639.roa (hash: I2GxvF+hElG1yAh007aM/yMEViDm+JYfJmwRWj1ftM0=) 9: 3230322e35372e32342e302f32342d3234203d3e20313430343639.roa (hash: m+iFf6x78xMNG3cgj5SBa8woS/ACjDi5PHEdG0OXJdQ=) 10: 3230322e35372e32342e302f32332d3233203d3e20313430343639.roa (hash: qx0GKHW1FS5tHrsvUCVWgH7+ott04Nq/cKPKtOYX9sQ=) 11: 3230322e35372e32372e302f32342d3234203d3e20313430343639.roa (hash: 1LTZq4OamLGaIEc7s8hORwOna9UqTifBlZPqeEuXpEA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 21:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:dd:36:b1:20:5e:be:c0:15:16:e9:2a:7e:5d:af:27:55:aa:42:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F969EE9B0838D22156118A888B81BF27B859BD5 Validity Not Before: Sep 8 09:36:53 2025 GMT Not After : Sep 11 21:10:53 2025 GMT Subject: CN=662BC153D255BC2909AE50900C37901718D80104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:de:19:bd:f8:e9:4d:6c:fd:52:95:2d:c3:26: cc:ff:0e:15:fe:bd:6f:8f:e5:b2:53:b3:27:6c:fd: d7:b4:b8:8c:b0:ee:d2:00:a0:99:b7:61:e2:88:02: f8:63:35:ef:c5:cf:f5:09:48:65:7e:0e:f4:c2:68: c3:4b:b3:f7:6a:b3:05:0a:7f:75:e0:23:0b:e2:b5: 9c:08:3b:ae:42:6b:15:c9:51:14:67:86:9c:ea:b6: 8d:f2:4f:7b:48:a3:1b:ca:27:2a:45:6d:85:cd:83: 35:b3:7c:ed:22:91:86:66:64:76:1d:c4:1f:6d:36: be:6f:8c:ba:7c:35:46:29:af:54:31:5c:be:35:4f: 1a:41:23:ca:da:38:53:c9:ec:26:36:52:6f:37:dc: 6f:ed:1c:fd:77:da:e2:21:40:44:8f:85:bd:a0:90: 98:19:a8:09:87:7c:6e:14:21:55:d6:75:bb:76:9c: 52:82:bb:9e:7d:c5:82:a0:28:5c:95:86:01:6e:b4: 69:1c:0c:af:c3:45:8a:bf:c2:2d:49:65:72:49:01: fb:c1:93:d1:fb:42:c5:f0:47:ba:da:f0:32:6e:1c: a3:7a:5e:66:20:df:1e:55:e6:94:7b:53:97:9e:4e: 40:28:e5:42:d0:57:9d:39:28:2d:19:ce:2a:a6:de: 1a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2B:C1:53:D2:55:BC:29:09:AE:50:90:0C:37:90:17:18:D8:01:04 X509v3 Authority Key Identifier: keyid:1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:01:e7:5e:09:8c:7c:dc:ba:0d:25:5f:56:44:3e:2f:8f:d9: ed:c2:89:88:61:c0:93:04:3f:c7:43:91:ad:e5:c5:90:dc:d7: 7e:0e:60:f8:cf:a6:19:c5:9b:10:3a:ae:0f:2b:3c:a5:de:65: fc:f8:e0:f8:d2:67:08:76:88:89:8b:18:05:12:16:73:1b:79: d4:7b:db:1a:31:a2:94:4f:e5:80:57:c2:88:d7:e9:a2:36:9b: 29:fd:1c:c1:c3:4c:47:67:1a:08:77:79:c3:76:d4:c2:88:fe: c8:21:e9:07:0f:54:a4:ca:c5:1e:08:6b:7d:6a:f7:6b:8f:f1: 76:29:c8:68:10:70:2c:d8:ba:a7:4d:c1:a5:6b:51:d7:d8:39: f6:40:ca:07:65:c0:c8:0f:4e:0b:8d:de:f7:75:d3:b2:50:db: ae:52:c6:d9:71:dd:1b:2c:b7:16:4e:75:32:1f:8f:fd:3f:e3: 4b:9a:fd:54:f7:a7:10:17:08:ba:ad:85:40:bf:75:f8:33:4f: df:91:51:ab:10:39:97:72:02:1c:be:33:73:56:88:6c:b5:bc: e6:ff:38:23:63:49:d5:db:bb:d4:c2:f6:47:d8:11:df:c9:9b: ad:ce:f3:33:dd:3e:41:19:20:79:4b:6d:3e:0e:90:3f:e9:9f: 7f:2e:8e:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeN02sSBevsAVFukqfl2vJ1WqQtowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY5NjlFRTlCMDgzOEQyMjE1NjExOEE4ODhCODFCRjI3 Qjg1OUJENTAeFw0yNTA5MDgwOTM2NTNaFw0yNTA5MTEyMTEwNTNaMDMxMTAvBgNV BAMTKDY2MkJDMTUzRDI1NUJDMjkwOUFFNTA5MDBDMzc5MDE3MThEODAxMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp3hm9+OlNbP1SlS3DJsz/DhX+ vW+P5bJTsyds/de0uIyw7tIAoJm3YeKIAvhjNe/Fz/UJSGV+DvTCaMNLs/dqswUK f3XgIwvitZwIO65CaxXJURRnhpzqto3yT3tIoxvKJypFbYXNgzWzfO0ikYZmZHYd xB9tNr5vjLp8NUYpr1QxXL41TxpBI8raOFPJ7CY2Um833G/tHP132uIhQESPhb2g kJgZqAmHfG4UIVXWdbt2nFKCu559xYKgKFyVhgFutGkcDK/DRYq/wi1JZXJJAfvB k9H7QsXwR7ra8DJuHKN6XmYg3x5V5pR7U5eeTkAo5ULQV505KC0Zziqm3hoxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZivBU9JVvCkJrlCQDDeQFxjYAQQwHwYDVR0j BBgwFoAUH5ae6bCDjSIVYRioiLgb8nuFm9UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZDNmMDk1Yi03MTMwLTQxMjItYWYyNS03ZDJlN2ExMWIxYjEvMC8xRjk2OUVFOUIw ODM4RDIyMTU2MTE4QTg4OEI4MUJGMjdCODU5QkQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY5NjlFRTlCMDgzOEQyMjE1NjExOEE4ODhCODFCRjI3Qjg1 OUJENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGQzZjA5NWItNzEzMC00MTIyLWFm MjUtN2QyZTdhMTFiMWIxLzAvMUY5NjlFRTlCMDgzOEQyMjE1NjExOEE4ODhCODFC RjI3Qjg1OUJENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFoB514JjHzcug0lX1ZEPi+P2e3CiYhhwJME P8dDka3lxZDc134OYPjPphnFmxA6rg8rPKXeZfz44PjSZwh2iImLGAUSFnMbedR7 2xoxopRP5YBXwojX6aI2myn9HMHDTEdnGgh3ecN21MKI/sgh6QcPVKTKxR4Ia31q 92uP8XYpyGgQcCzYuqdNwaVrUdfYOfZAygdlwMgPTguN3vd107JQ265Sxtlx3Rss txZOdTIfj/0/40ua/VT3pxAXCLqthUC/dfgzT9+RUasQOZdyAhy+M3NWiGy1vOb/ OCNjSdXbu9TC9kfYEd/Jm63O8zPdPkEZIHlLbT4OkD/pn38ujiA= -----END CERTIFICATE-----Generated at Tue Sep 9 02:35:03 2025 by rpki-client