$ rpki-client -vvf repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft File: 08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft (raw, json) Hash identifier: xEisHxK/tEcWhm+KrW99RWV890l9ujDZ2r7sx2r1EaA= Subject key identifier: A6:01:7C:E7:A3:79:86:70:54:7C:B7:79:07:EF:E4:05:32:33:FA:32 Authority key identifier: 08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25 Certificate issuer: /CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25 Certificate serial: 51E200ED06CB4BDE07140DD9BC7155F8BD69E26F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft Manifest number: 0517 Signing time: Fri 05 Sep 2025 01:51:35 +0000 Manifest this update: Fri 05 Sep 2025 01:46:35 +0000 Manifest next update: Mon 08 Sep 2025 13:25:35 +0000 Files and hashes: 1: 3130332e3130322e31332e302f32342d3234203d3e20313336383635.roa (hash: w8KhQhAE9qtOeUsIYiL4lko66TpmJ+xch/XP9e9vq2Y=) 2: 3130332e3130322e31352e302f32342d3234203d3e20313337333331.roa (hash: MQx/O8O2uQJVqHYOSxfo/Q2KG9J3bcLTiM4IdvIIF+I=) 3: 3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa (hash: VX2tVKkS7LzPxrLmOsssh+r2zJ3zeiGSJ2bMTYWz5Q8=) 4: 08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl (hash: cxjohqKlkq4LNHvd1Y1byqf5HISS0J0J/hyMDAWFkgc=) 5: 323430313a646234303a3a2f33322d3332203d3e20313336383635.roa (hash: KGUF32Kc9eR09Ep+PLSsXC9//4a1BdJ7Q2PE9xYrp/A=) 6: 3130332e3130322e31322e302f32342d3234203d3e20313336383635.roa (hash: 3P9Pl6Hs5uriFWxnAGmotMmA1+l8H3Rlr0SXz2N0yKQ=) 7: 3130332e3130322e31342e302f32342d3234203d3e20313336383635.roa (hash: dUXFtPIF61cMsxlijUdeGn+XAjJGBrV/EpzRTuOKE9M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 13:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:e2:00:ed:06:cb:4b:de:07:14:0d:d9:bc:71:55:f8:bd:69:e2:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25 Validity Not Before: Sep 5 01:46:35 2025 GMT Not After : Sep 8 13:25:35 2025 GMT Subject: CN=A6017CE7A3798670547CB77907EFE4053233FA32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:39:3f:01:a1:a6:fe:f7:8f:d1:ca:dd:5f:2d: 6d:6e:e5:34:01:3f:70:5d:24:4e:ac:01:39:bb:b3: 7b:2e:9a:ff:45:9a:1e:b5:45:3a:b4:14:3d:75:68: 54:28:9d:00:8d:0a:93:70:93:0e:99:3b:a9:f7:87: d4:5f:52:c4:37:0f:a8:1d:b1:e4:2b:7d:61:b7:c8: fc:c3:21:44:9f:35:a2:98:6d:09:3e:db:e2:00:d4: b4:32:8b:54:ee:86:8c:47:c8:ec:e6:db:09:67:f9: 13:51:71:72:e3:f3:e9:5e:75:66:d7:e5:a3:f2:2c: 07:74:80:80:7b:0e:8b:eb:63:4d:6c:84:1c:94:56: a9:d6:ff:4b:04:bb:25:27:17:c2:fb:a8:65:1d:ed: 51:b9:cb:73:21:67:d1:53:43:2f:85:9e:0d:1b:71: c8:d1:69:80:ea:6d:59:b3:ef:f7:c8:7b:0e:3f:9b: 81:4c:94:69:d9:55:dd:3d:b3:33:0e:67:69:dc:21: 11:4f:88:f9:d7:f0:4f:88:b1:a5:ab:7f:f4:52:44: 3d:32:d9:35:92:6c:e6:e9:49:ca:31:aa:71:5e:ad: ad:bb:7f:b6:c2:8b:19:6e:dd:80:7d:11:1a:19:cf: e6:7f:92:55:89:fe:02:7e:c5:86:b0:c3:79:a2:60: 10:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:01:7C:E7:A3:79:86:70:54:7C:B7:79:07:EF:E4:05:32:33:FA:32 X509v3 Authority Key Identifier: keyid:08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:c0:8c:b2:ac:0b:17:45:d1:5f:09:c6:60:3d:e7:22:34:3e: 76:41:79:92:78:88:18:66:02:cf:6c:f9:a7:13:49:c4:af:5d: 91:cd:5f:45:04:cc:fa:67:95:a0:87:d6:39:71:72:61:65:98: 42:02:d6:1a:b7:24:47:e2:e8:b3:d9:c0:c5:ff:36:3a:8c:42: ec:fe:5f:3e:26:75:ef:fa:c0:f3:53:33:72:b7:73:80:6b:ab: e3:fd:8e:c1:83:c2:8d:7c:4b:67:e3:9a:39:85:d4:38:22:49: d6:95:ba:34:2c:46:fb:5b:28:a7:59:16:d3:ae:e0:f7:3d:96: 37:54:f4:f7:f6:e4:f7:e5:51:16:94:42:74:5c:88:94:9c:94: c1:ba:53:eb:ef:84:c4:7c:9e:83:e2:a3:8c:fd:80:3d:be:31: 9c:e0:d6:93:ac:11:3c:8f:f5:0a:1d:f3:38:7a:72:a3:1f:c2: 7f:e4:0d:6d:cd:ea:22:74:e6:ec:f8:69:0b:70:70:a7:02:e3: 67:84:9a:56:01:be:0b:1c:17:5a:12:cf:54:5a:20:bf:63:a7: 76:60:87:3b:7f:b4:1c:56:d5:89:13:4a:7e:26:b5:6f:26:32: c2:86:08:99:db:f9:b6:6b:59:4b:a7:12:f0:7d:2b:23:31:9f: 09:74:96:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUeIA7QbLS94HFA3ZvHFV+L1p4m8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFDQjE4 N0Y2M0MyNTAeFw0yNTA5MDUwMTQ2MzVaFw0yNTA5MDgxMzI1MzVaMDMxMTAvBgNV BAMTKEE2MDE3Q0U3QTM3OTg2NzA1NDdDQjc3OTA3RUZFNDA1MzIzM0ZBMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXOT8Boab+94/Ryt1fLW1u5TQB P3BdJE6sATm7s3sumv9Fmh61RTq0FD11aFQonQCNCpNwkw6ZO6n3h9RfUsQ3D6gd seQrfWG3yPzDIUSfNaKYbQk+2+IA1LQyi1TuhoxHyOzm2wln+RNRcXLj8+ledWbX 5aPyLAd0gIB7DovrY01shByUVqnW/0sEuyUnF8L7qGUd7VG5y3MhZ9FTQy+Fng0b ccjRaYDqbVmz7/fIew4/m4FMlGnZVd09szMOZ2ncIRFPiPnX8E+IsaWrf/RSRD0y 2TWSbObpScoxqnFera27f7bCixlu3YB9ERoZz+Z/klWJ/gJ+xYaww3miYBDRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpgF856N5hnBUfLd5B+/kBTIz+jIwHwYDVR0j BBgwFoAUCHcxkfv8IaPIYVo+NqKssYf2PCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Zjg2YjEyZS1lNTc0LTQyNmItYWE2Yi00OTM5ZTNiMDMwYmEvMC8wODc3MzE5MUZC RkMyMUEzQzg2MTVBM0UzNkEyQUNCMTg3RjYzQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFDQjE4N0Y2 M0MyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY4NmIxMmUtZTU3NC00MjZiLWFh NmItNDkzOWUzYjAzMGJhLzAvMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFD QjE4N0Y2M0MyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfAjLKsCxdF0V8JxmA95yI0PnZBeZJ4iBhm As9s+acTScSvXZHNX0UEzPpnlaCH1jlxcmFlmEIC1hq3JEfi6LPZwMX/NjqMQuz+ Xz4mde/6wPNTM3K3c4Brq+P9jsGDwo18S2fjmjmF1DgiSdaVujQsRvtbKKdZFtOu 4Pc9ljdU9Pf25PflURaUQnRciJSclMG6U+vvhMR8noPio4z9gD2+MZzg1pOsETyP 9Qod8zh6cqMfwn/kDW3N6iJ05uz4aQtwcKcC42eEmlYBvgscF1oSz1RaIL9jp3Zg hzt/tBxW1YkTSn4mtW8mMsKGCJnb+bZrWUunEvB9KyMxnwl0luQ= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:44 2025 by rpki-client