$ rpki-client -vvf repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft File: 2993EFF92300988A33773DD8C4B502F74B907112.mft (raw, json) Hash identifier: jz5RVNhCtJXJ1HreJdPukvtPkarU9JI9k83jcpwUH0s= Subject key identifier: 45:FF:A4:2F:5F:45:51:7B:10:43:59:5F:06:2D:48:22:E3:F7:76:24 Authority key identifier: 29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12 Certificate issuer: /CN=2993EFF92300988A33773DD8C4B502F74B907112 Certificate serial: 0B7FA1085B6FD08A53F57013EAE8692E352802B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer Subject info access: rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft Manifest number: 01E3 Signing time: Fri 05 Sep 2025 17:12:14 +0000 Manifest this update: Fri 05 Sep 2025 17:07:14 +0000 Manifest next update: Tue 09 Sep 2025 05:05:14 +0000 Files and hashes: 1: 3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa (hash: JCzAZhJKrjcnXPRUzXNAKrf8B2XJvFX+OCG60Nl0Dgk=) 2: 3130332e3130352e37362e302f32342d3234203d3e203535363736.roa (hash: UUqUhVxo4riOoAS8LfSUq3H3CWxdpGF4ZToXB6Mfx1U=) 3: 3130332e3130352e37372e302f32342d3234203d3e203535363736.roa (hash: /T3q0aKMlccwCqwpvQMGCHEcfpAgRAD32J67j3q+a2M=) 4: 3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa (hash: KvURdCiLhHkbUOwAzv8M2lOHWbthmo9CgPxXvVYh4Sg=) 5: 3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa (hash: HyOmqTBNJysFk0nvijg1y0JCQQaN+Dk9utcTlFmaQHY=) 6: 2993EFF92300988A33773DD8C4B502F74B907112.crl (hash: R9I+HDxTZ4P3XlWFtClvhZn9nHB8O4El1Oytd6rz7Fc=) 7: 3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa (hash: TT7MUwzbMrgBN8oEIAyXqU2sblUIPBHys6QVI7/dQqE=) 8: 323430323a326334303a3a2f34382d3438203d3e203535363736.roa (hash: Cry5tI26ZFq+xJIM45fHnqWQpQQD1hwh8FhbwaGJxgw=) 9: 323430323a326334303a3a2f34382d3438203d3e20313336383734.roa (hash: u1/FWvhkUX8NdpjOfCEzIQ83rh9KfgiQw+mbq+Uaf5Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 05:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:7f:a1:08:5b:6f:d0:8a:53:f5:70:13:ea:e8:69:2e:35:28:02:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2993EFF92300988A33773DD8C4B502F74B907112 Validity Not Before: Sep 5 17:07:14 2025 GMT Not After : Sep 9 05:05:14 2025 GMT Subject: CN=45FFA42F5F45517B1043595F062D4822E3F77624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f9:23:01:13:97:d1:63:13:c8:91:d5:ba:21: 3d:a6:ba:73:a0:4a:5a:d9:eb:bb:98:ba:9f:35:9a: b3:94:3e:36:d5:5c:68:f2:31:f7:a9:8c:94:0a:93: f5:c1:88:2c:63:5e:8f:7f:63:a7:80:62:97:36:db: 8e:80:9e:27:f3:64:d9:c5:e1:95:e9:a7:32:0e:0e: 83:9d:01:a1:e2:91:4e:09:8b:53:90:5d:46:e2:c7: 51:c3:c6:bc:69:6b:3e:1c:0a:a3:31:e0:4c:c8:a9: 69:91:3b:b3:6b:38:8a:dc:eb:56:f7:82:74:c8:fb: 26:c5:3f:5c:52:13:4a:34:b4:af:51:27:5b:3c:ba: db:e6:e7:21:90:12:c7:a3:95:5e:d2:85:ab:ea:3e: 9c:5e:80:24:b8:05:92:2f:c8:c8:a6:e0:2f:4b:c9: 39:ff:ed:a3:95:18:76:cc:0a:93:cb:85:4f:5e:fb: ea:7e:3b:5e:6c:34:d4:86:69:ca:42:bc:11:a4:f0: 95:58:41:44:24:4b:27:f8:9d:ad:67:46:e4:d0:e1: 44:13:cb:a4:ee:d5:69:82:30:53:3b:d5:c6:1c:57: 02:9d:07:3f:99:c2:b2:df:81:62:26:fd:9c:a2:d2: 73:c0:da:4c:1d:8d:0e:79:63:81:3d:d7:20:11:1f: 07:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FF:A4:2F:5F:45:51:7B:10:43:59:5F:06:2D:48:22:E3:F7:76:24 X509v3 Authority Key Identifier: keyid:29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b7:70:38:a0:17:0c:f6:d6:22:f3:76:fa:ed:ca:69:25:d4: 21:e8:50:3f:96:b2:25:ed:ec:e5:ac:b3:4a:cd:0d:aa:90:19: 08:ae:0c:89:9e:d4:bc:49:b0:24:c3:85:d6:56:70:c6:59:c8: 5a:e8:7f:60:d1:fc:96:27:25:08:16:30:16:3a:d1:7b:aa:20: c3:50:a0:48:16:7c:64:16:5a:d7:22:7c:3e:32:b4:eb:e5:30: 5b:77:d7:35:e2:31:c5:fa:01:51:a5:92:ae:11:63:a5:d2:33: 81:6f:e6:72:18:93:77:c8:dc:18:b5:48:51:58:49:23:33:f3: 75:ca:ce:93:63:d8:63:ae:ea:56:ff:bb:05:96:0f:b2:ca:2a: 23:d8:e6:88:d4:a8:95:91:83:80:3b:40:b9:ae:2d:51:13:e4: bb:84:46:d7:dd:c6:29:5d:fe:1d:20:ed:05:46:e7:09:ac:28: bb:5c:31:c7:98:45:c0:d9:d4:4c:4e:4e:34:de:c8:62:b3:ba: b4:88:54:48:ef:9f:1f:b2:a4:18:30:59:81:88:f9:80:8a:35: ec:2e:35:9f:4d:a5:89:ef:83:17:39:36:2b:0d:41:aa:fe:78: 09:02:4e:73:88:56:d8:1b:9f:a9:fd:98:f0:e3:de:8d:57:65: 55:f0:64:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC3+hCFtv0IpT9XAT6uhpLjUoArMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAyRjc0 QjkwNzExMjAeFw0yNTA5MDUxNzA3MTRaFw0yNTA5MDkwNTA1MTRaMDMxMTAvBgNV BAMTKDQ1RkZBNDJGNUY0NTUxN0IxMDQzNTk1RjA2MkQ0ODIyRTNGNzc2MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi+SMBE5fRYxPIkdW6IT2munOg SlrZ67uYup81mrOUPjbVXGjyMfepjJQKk/XBiCxjXo9/Y6eAYpc2246AnifzZNnF 4ZXppzIODoOdAaHikU4Ji1OQXUbix1HDxrxpaz4cCqMx4EzIqWmRO7NrOIrc61b3 gnTI+ybFP1xSE0o0tK9RJ1s8utvm5yGQEsejlV7ShavqPpxegCS4BZIvyMim4C9L yTn/7aOVGHbMCpPLhU9e++p+O15sNNSGacpCvBGk8JVYQUQkSyf4na1nRuTQ4UQT y6Tu1WmCMFM71cYcVwKdBz+ZwrLfgWIm/Zyi0nPA2kwdjQ55Y4E91yARHwdtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURf+kL19FUXsQQ1lfBi1IIuP3diQwHwYDVR0j BBgwFoAUKZPv+SMAmIozdz3YxLUC90uQcRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzdiYzNkMi00YWIzLTRjZmItOTIyMi02NmM2ZWE5NDQ3ZTMvMC8yOTkzRUZGOTIz MDA5ODhBMzM3NzNERDhDNEI1MDJGNzRCOTA3MTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAyRjc0Qjkw NzExMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc3YmMzZDItNGFiMy00Y2ZiLTky MjItNjZjNmVhOTQ0N2UzLzAvMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAy Rjc0QjkwNzExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEm3cDigFwz21iLzdvrtymkl1CHoUD+WsiXt 7OWss0rNDaqQGQiuDIme1LxJsCTDhdZWcMZZyFrof2DR/JYnJQgWMBY60XuqIMNQ oEgWfGQWWtcifD4ytOvlMFt31zXiMcX6AVGlkq4RY6XSM4Fv5nIYk3fI3Bi1SFFY SSMz83XKzpNj2GOu6lb/uwWWD7LKKiPY5ojUqJWRg4A7QLmuLVET5LuERtfdxild /h0g7QVG5wmsKLtcMceYRcDZ1ExOTjTeyGKzurSIVEjvnx+ypBgwWYGI+YCKNewu NZ9NpYnvgxc5NisNQar+eAkCTnOIVtgbn6n9mPDj3o1XZVXwZJA= -----END CERTIFICATE-----Generated at Sun Sep 7 15:36:36 2025 by rpki-client