$ rpki-client -vvf repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft File: 8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft (raw, json) Hash identifier: pafLUAjtQHKfpJj7R9su24KntdQ9S+DHE//IQ4QEkZ8= Subject key identifier: D1:75:0F:2E:1F:1D:F8:48:B5:75:6B:C7:FE:49:CA:6A:41:D1:F8:45 Authority key identifier: 8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA Certificate issuer: /CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA Certificate serial: 72CF18407752F646D5879FF64D7270777151DC88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft Manifest number: 050F Signing time: Sat 06 Sep 2025 15:22:15 +0000 Manifest this update: Sat 06 Sep 2025 15:17:15 +0000 Manifest next update: Tue 09 Sep 2025 21:14:15 +0000 Files and hashes: 1: 34332e3233312e3132382e302f32342d3234203d3e203338373838.roa (hash: lmYVrCn9BeJjLwZ83vYZIK3fLJEIHwntZ3WH1J4i7Cc=) 2: 34332e3233302e342e302f32342d3234203d3e203338373838.roa (hash: Myo0yUY2zYBlmDu7ifkTtwfEDTywRzZJiBzIgMz4kyk=) 3: 34332e3233302e372e302f32342d3234203d3e203338373838.roa (hash: i3HQaU7A5T+hugQmUCoVWplcF5RYtJ+OjDq/WGotyFM=) 4: 8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl (hash: s4IFjkaW42J56JctWtNDkCHNG/soGwGcDD4Dls2lxbE=) 5: 3130332e3234322e3138302e302f32342d3234203d3e203338373838.roa (hash: J6znwF/VIOIQq7nf+/cVdXFnP4yNGPdAl3m1qZHQzpE=) 6: 3130332e372e302e302f32342d3234203d3e203338373838.roa (hash: IvhePbxETJJ1An12hekeGcMrYJecR0U54GWOfDVzXpo=) 7: 3130332e372e302e302f32332d3233203d3e203338373838.roa (hash: eYJSZ6BNvJdcwOjXxyxNY4HDMCsMbaLoRNn+0CbiAds=) 8: 34332e3233312e3132382e302f32332d3233203d3e203338373838.roa (hash: HFx27am61y/dC1xdTadXPgOw5A9a+PEjL0futSZShAU=) 9: 34332e3233312e3132392e302f32342d3234203d3e203338373838.roa (hash: W5Zb76xYohKVMN4oDjg1HwPWp43mgnWE5orvLBb5SkM=) 10: 3130332e3234322e3138312e302f32342d3234203d3e203338373838.roa (hash: i565en58aZkxitE/Cu7dj7vQtPe24rOc0XFo1zdj2pA=) 11: 3130332e372e312e302f32342d3234203d3e203338373838.roa (hash: HfReQfR8KQgqYxrjCjLONRll8cJTpbYph9s5PnSext8=) 12: 3130332e3234322e3138302e302f32332d3233203d3e203338373838.roa (hash: Q4FCJx2xdQyXWuG/Mkdlbm+EYQuJWHSMRXEQhaDwxBc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 21:14:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:cf:18:40:77:52:f6:46:d5:87:9f:f6:4d:72:70:77:71:51:dc:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA Validity Not Before: Sep 6 15:17:15 2025 GMT Not After : Sep 9 21:14:15 2025 GMT Subject: CN=D1750F2E1F1DF848B5756BC7FE49CA6A41D1F845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:98:2a:c0:8a:39:36:3c:39:e4:3c:4a:e1:07: 8c:23:85:e4:35:22:5a:aa:c4:69:32:e1:7d:ec:86: e4:49:7c:a0:c7:3f:33:2f:45:b0:63:a1:9c:e0:02: 3a:24:89:0c:87:61:9c:e1:40:47:f8:8d:e4:19:3a: 2e:ab:a4:02:f6:70:11:55:3f:35:8d:e0:94:77:87: ab:df:81:3c:05:de:8a:c9:74:c3:19:cc:7b:77:5f: 25:2e:3d:09:4a:54:cf:99:80:90:b8:cd:03:aa:e9: d0:1f:b7:14:49:01:3e:18:89:e9:a2:f9:0e:cb:98: fe:bd:37:0d:03:d2:a9:48:df:0a:b9:7b:7e:fd:0c: dd:62:20:88:46:03:35:e8:f3:b4:b5:47:4e:b6:79: e1:da:16:1e:0d:25:43:36:75:26:55:cf:85:b5:a3: de:59:8a:d9:33:67:cf:02:82:86:d1:29:77:79:29: 3b:11:58:52:ee:9d:b3:9f:87:49:5c:65:95:ff:13: f8:89:a0:c8:02:eb:11:95:14:f3:5b:31:1e:6b:1b: 8b:7a:4f:97:c6:b7:cc:1e:b5:bd:38:33:19:7f:f2: 95:72:08:c9:48:94:4d:7c:c4:b9:d1:73:a1:9b:dc: 52:7c:ae:7c:82:d9:00:8c:f8:d4:c3:56:c5:a5:c8: 19:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:75:0F:2E:1F:1D:F8:48:B5:75:6B:C7:FE:49:CA:6A:41:D1:F8:45 X509v3 Authority Key Identifier: keyid:8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:ef:42:7c:f3:bb:12:10:3e:6b:04:e7:85:f0:ff:16:35:20: 91:90:f1:b4:6d:9a:f0:71:02:49:0f:95:0d:9d:4d:ec:a4:05: 41:96:82:44:34:16:05:18:67:f3:08:36:b4:52:00:c2:11:8f: 86:6b:0e:13:e1:79:e6:fb:44:37:6e:ca:bc:e3:63:5c:de:71: 8c:04:b8:c9:8f:0b:0f:4d:fa:d2:c2:b8:eb:4a:d5:77:71:c4: a5:1e:02:12:ee:6e:3e:6c:bf:7b:52:6b:cf:33:2a:9c:87:c1: 10:5e:c9:4f:42:78:71:77:23:97:b2:93:91:05:99:7b:d0:23: a5:49:9d:02:21:25:ce:1f:c8:bc:ad:70:50:97:71:dc:61:03: 63:c9:b5:fa:f9:34:f9:09:f2:5b:63:39:bd:5d:75:48:f1:b6: 8e:6a:9b:50:9c:0f:c5:43:43:c2:26:39:77:47:b6:0a:0b:b0: 33:a4:6c:9c:e7:67:de:84:ca:6a:73:2f:f3:e5:b1:32:23:d7: 60:1f:67:62:fb:da:aa:5b:9e:c9:fe:58:c9:3f:32:ac:f5:35: 2c:60:b2:3f:e7:8c:8e:f0:05:99:a6:4e:ed:ad:6a:57:93:77: b1:a2:2c:1d:cc:f5:75:f4:83:37:a0:50:41:6f:b7:2c:09:89: f6:c7:aa:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcs8YQHdS9kbVh5/2TXJwd3FR3IgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5MDAw MUZFRkVDQTAeFw0yNTA5MDYxNTE3MTVaFw0yNTA5MDkyMTE0MTVaMDMxMTAvBgNV BAMTKEQxNzUwRjJFMUYxREY4NDhCNTc1NkJDN0ZFNDlDQTZBNDFEMUY4NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGmCrAijk2PDnkPErhB4wjheQ1 IlqqxGky4X3shuRJfKDHPzMvRbBjoZzgAjokiQyHYZzhQEf4jeQZOi6rpAL2cBFV PzWN4JR3h6vfgTwF3orJdMMZzHt3XyUuPQlKVM+ZgJC4zQOq6dAftxRJAT4Yiemi +Q7LmP69Nw0D0qlI3wq5e379DN1iIIhGAzXo87S1R062eeHaFh4NJUM2dSZVz4W1 o95ZitkzZ88CgobRKXd5KTsRWFLunbOfh0lcZZX/E/iJoMgC6xGVFPNbMR5rG4t6 T5fGt8wetb04Mxl/8pVyCMlIlE18xLnRc6Gb3FJ8rnyC2QCM+NTDVsWlyBn5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0XUPLh8d+Ei1dWvH/knKakHR+EUwHwYDVR0j BBgwFoAUjD5EouK0ddXPSkjlLRcpAAH+/sowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGUyYmYwOS01ZjQyLTRiNjUtYTQyZC02M2QwNzk2ZDIwNmMvMC84QzNFNDRBMkUy QjQ3NUQ1Q0Y0QTQ4RTUyRDE3MjkwMDAxRkVGRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5MDAwMUZF RkVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRlMmJmMDktNWY0Mi00YjY1LWE0 MmQtNjNkMDc5NmQyMDZjLzAvOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5 MDAwMUZFRkVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTvQnzzuxIQPmsE54Xw/xY1IJGQ8bRtmvBx AkkPlQ2dTeykBUGWgkQ0FgUYZ/MINrRSAMIRj4ZrDhPheeb7RDduyrzjY1zecYwE uMmPCw9N+tLCuOtK1XdxxKUeAhLubj5sv3tSa88zKpyHwRBeyU9CeHF3I5eyk5EF mXvQI6VJnQIhJc4fyLytcFCXcdxhA2PJtfr5NPkJ8ltjOb1ddUjxto5qm1CcD8VD Q8ImOXdHtgoLsDOkbJznZ96EympzL/PlsTIj12AfZ2L72qpbnsn+WMk/Mqz1NSxg sj/njI7wBZmmTu2taleTd7GiLB3M9XX0gzegUEFvtywJifbHqoU= -----END CERTIFICATE-----Generated at Sun Sep 7 13:45:22 2025 by rpki-client