$ rpki-client -vvf repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft File: 523EE8D6F461B8FD4106F482C46C1029B1013145.mft (raw, json) Hash identifier: NNfdEGwB0cXQnwSLB/Sn6XffMGKiPD3Ajc5WKgapi1A= Subject key identifier: 90:6D:25:C2:2C:20:C9:17:89:92:47:3C:80:2A:96:F9:08:30:E3:B7 Authority key identifier: 52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45 Certificate issuer: /CN=523EE8D6F461B8FD4106F482C46C1029B1013145 Certificate serial: 799C83EB4A54E9F8EB188CB0EBA9B4C1705A4A0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft Manifest number: BC Signing time: Fri 05 Sep 2025 16:50:36 +0000 Manifest this update: Fri 05 Sep 2025 16:45:36 +0000 Manifest next update: Tue 09 Sep 2025 01:40:36 +0000 Files and hashes: 1: 3130332e31392e38302e302f32342d3234203d3e20313332363339.roa (hash: YEDjMiqzXqQQzIDtWpx+jx5Bn+2TYkAiFHsRj0775yM=) 2: 3130332e31392e38312e302f32342d3234203d3e20313332363339.roa (hash: jKwlGthiQpzXwnHyIqfnx5NGkz2sE+y3uVu40s6f6sc=) 3: 3130332e3132392e3233312e302f32342d3234203d3e20313332363339.roa (hash: jWc0sz86L+eDtr+nDMgQgH+2S7uRf5Y8Wu7u8v4zz0Q=) 4: 3130332e31392e38302e302f32332d3234203d3e20313332363339.roa (hash: z0HZjcHieRuZ5HHeSmTqSUrJvHMtgbLp6o8sJVRupVI=) 5: 3130332e3132392e3233302e302f32342d3234203d3e20313332363339.roa (hash: zP2/XdcDOhp440RXruEyN+zWviJE7i53kBfkBKlQJ0I=) 6: 523EE8D6F461B8FD4106F482C46C1029B1013145.crl (hash: iBXDLcbajc7rawr9S+Rrwq0rK9dBguhpYwzwcEurIsw=) 7: 3130332e3132392e3233302e302f32332d3234203d3e20313332363339.roa (hash: H0hxzRE1P/k0NGsIoy/0kaAKznrWHPdRQxgiRW4T5Qo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.crl rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 01:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:9c:83:eb:4a:54:e9:f8:eb:18:8c:b0:eb:a9:b4:c1:70:5a:4a:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=523EE8D6F461B8FD4106F482C46C1029B1013145 Validity Not Before: Sep 5 16:45:36 2025 GMT Not After : Sep 9 01:40:36 2025 GMT Subject: CN=906D25C22C20C9178992473C802A96F90830E3B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b8:7d:ef:bd:d1:6c:a4:95:c0:a1:97:71:8f: e2:16:a1:4a:7c:34:da:16:1a:97:28:cd:27:49:f7: 7a:9e:dd:3a:bc:7f:98:d4:5a:51:04:d3:8e:c0:da: 61:89:6e:a2:46:ce:d2:23:9a:5e:e6:eb:c2:e8:9f: 0a:6f:f0:04:06:18:3d:6b:d0:a2:3b:1f:21:e9:c4: bb:3b:91:73:89:e8:88:87:21:af:f7:14:ab:eb:3f: 6f:0c:a6:7f:ea:30:06:ea:93:83:1e:73:61:46:b9: 13:35:c0:40:bd:a1:c2:f2:41:3c:e6:ab:ff:4f:b1: a7:e1:23:6d:7f:a1:ef:d1:7c:11:fc:58:92:0b:83: 05:e3:6c:53:2a:01:fe:2b:b3:f7:f6:d4:f9:cd:92: 74:82:76:26:32:e2:aa:0e:04:91:f1:f2:59:99:f8: 9d:5f:14:63:55:f7:fb:62:fd:ba:c2:f5:d9:f5:84: 22:bf:49:7e:b9:3e:7a:42:93:b7:8d:a6:65:e9:3a: fa:09:68:68:36:31:ca:4a:0f:3f:68:2a:7c:d3:f2: c7:ee:49:70:d3:03:bb:8d:ee:39:b2:05:43:c3:4e: 06:c9:98:d6:ba:25:26:36:29:0b:2d:56:9f:66:7f: b4:5a:e5:16:3d:98:cb:73:f0:0f:ff:d5:9c:e7:5e: d3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:6D:25:C2:2C:20:C9:17:89:92:47:3C:80:2A:96:F9:08:30:E3:B7 X509v3 Authority Key Identifier: keyid:52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:7b:fd:e0:ca:6d:60:d2:24:2b:9b:37:ba:30:e8:45:ba:d4: 6a:dc:11:69:f7:f1:04:0f:48:ea:c8:44:35:ac:7c:20:ba:b8: 8e:9f:24:ee:ac:ec:41:aa:3f:ab:ad:b6:2b:77:48:12:56:68: 05:16:b9:0f:a1:e0:02:46:ea:53:99:17:c6:f4:87:fc:d6:0d: 59:23:c9:d9:01:a6:3e:be:62:a7:4b:68:21:b1:ec:d9:4e:26: cd:68:bc:eb:70:ef:ea:ff:97:8f:ea:d3:14:a1:9a:97:93:15: b8:e4:e6:bd:9e:f5:53:bb:7d:c2:0d:a2:9e:31:79:79:9c:ac: 3d:d4:4a:04:cd:78:70:d1:eb:3c:0c:63:a5:c2:ee:13:f5:dc: 5c:08:83:93:4c:8e:54:8a:c9:d4:ac:8d:69:18:c2:e5:db:b0: 28:d1:ff:b6:df:c8:a8:bd:f2:85:e1:47:72:93:0d:c0:6b:8e: fb:80:d0:af:5c:e5:39:5c:73:78:7c:d2:22:df:cc:02:2a:d4: 67:0c:d1:77:4e:01:4a:0e:b4:5f:41:bf:f4:2a:e1:18:93:55: 88:74:65:13:47:c8:77:c5:dc:dd:81:90:7f:e3:d2:da:6f:ec: 7f:7f:78:10:6e:7f:fe:48:ee:00:04:03:7d:46:c5:af:76:f7: 8d:c2:57:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeZyD60pU6fjrGIyw66m0wXBaSg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEwMjlC MTAxMzE0NTAeFw0yNTA5MDUxNjQ1MzZaFw0yNTA5MDkwMTQwMzZaMDMxMTAvBgNV BAMTKDkwNkQyNUMyMkMyMEM5MTc4OTkyNDczQzgwMkE5NkY5MDgzMEUzQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsuH3vvdFspJXAoZdxj+IWoUp8 NNoWGpcozSdJ93qe3Tq8f5jUWlEE047A2mGJbqJGztIjml7m68Lonwpv8AQGGD1r 0KI7HyHpxLs7kXOJ6IiHIa/3FKvrP28Mpn/qMAbqk4Mec2FGuRM1wEC9ocLyQTzm q/9PsafhI21/oe/RfBH8WJILgwXjbFMqAf4rs/f21PnNknSCdiYy4qoOBJHx8lmZ +J1fFGNV9/ti/brC9dn1hCK/SX65PnpCk7eNpmXpOvoJaGg2McpKDz9oKnzT8sfu SXDTA7uN7jmyBUPDTgbJmNa6JSY2KQstVp9mf7Ra5RY9mMtz8A//1ZznXtPxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkG0lwiwgyReJkkc8gCqW+Qgw47cwHwYDVR0j BBgwFoAUUj7o1vRhuP1BBvSCxGwQKbEBMUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWE0Mjc0Mi04OWQyLTQ5YmItOGEzZS0yOTRjMzY4OTcxZjUvMC81MjNFRThENkY0 NjFCOEZENDEwNkY0ODJDNDZDMTAyOUIxMDEzMTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEwMjlCMTAx MzE0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhNDI3NDItODlkMi00OWJiLThh M2UtMjk0YzM2ODk3MWY1LzAvNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEw MjlCMTAxMzE0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIt7/eDKbWDSJCubN7ow6EW61GrcEWn38QQP SOrIRDWsfCC6uI6fJO6s7EGqP6uttit3SBJWaAUWuQ+h4AJG6lOZF8b0h/zWDVkj ydkBpj6+YqdLaCGx7NlOJs1ovOtw7+r/l4/q0xShmpeTFbjk5r2e9VO7fcINop4x eXmcrD3USgTNeHDR6zwMY6XC7hP13FwIg5NMjlSKydSsjWkYwuXbsCjR/7bfyKi9 8oXhR3KTDcBrjvuA0K9c5Tlcc3h80iLfzAIq1GcM0XdOAUoOtF9Bv/Qq4RiTVYh0 ZRNHyHfF3N2BkH/j0tpv7H9/eBBuf/5I7gAEA31Gxa92943CVw0= -----END CERTIFICATE-----Generated at Sun Sep 7 15:28:37 2025 by rpki-client