$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft File: C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft (raw, json) Hash identifier: j5BGr8Ixr7IwkSnrlgx5rHX8r8BzraB83EhklylaNmw= Subject key identifier: DD:9B:4C:0B:5F:35:E6:A4:B4:59:20:79:5E:94:81:77:15:A9:BB:BC Authority key identifier: C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A Certificate issuer: /CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A Certificate serial: 2D9ED5E79A5E6C01D87DCBC1EA89F2E911634954 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft Manifest number: 049D Signing time: Thu 04 Sep 2025 23:31:32 +0000 Manifest this update: Thu 04 Sep 2025 23:26:32 +0000 Manifest next update: Mon 08 Sep 2025 09:31:32 +0000 Files and hashes: 1: 3130332e32382e31322e302f32332d3234203d3e203538343034.roa (hash: IQxqj9PY3nbC6wwPV82C6ExLe7/jv0UMpi+DEeQSqxQ=) 2: 323030313a6466303a3266633a3a2f34382d3438203d3e203538343034.roa (hash: 8zY41tTngWvKTe/HAKHtyytdzc6XdijkL5LcFd6Ewbk=) 3: 34332e3235322e3133392e302f32342d3234203d3e203538343034.roa (hash: c6fpSUbyQdt1ZsHYs9eWhZI0zdnm3cArV6v/GBThWWc=) 4: 3130332e32382e31322e302f32322d3233203d3e203538343034.roa (hash: Ffjrt07F64qfTUTQRM4q8gB9QS8eehDO7qAs3NtubXM=) 5: 34332e3235322e3133362e302f32342d3234203d3e203538343034.roa (hash: VElKMVk3iPulNjS9HeHc93PPFZl5g9fy4/nN9cMU7rI=) 6: 3130332e32382e31342e302f32332d3234203d3e203538343034.roa (hash: g8UPVDpb1m/IFnDlcUZIzOXR04b/PAWmv165hevmi70=) 7: C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl (hash: IX82nlTpsZFKSGiul3Z+da6toktT1dqNDuxfPlWflnI=) 8: 34332e3235322e3133362e302f32322d3233203d3e203538343034.roa (hash: m0WKFr7Q9JfSEuoay78BCi3cNgU52tNMlZWVG7Fhi1s=) 9: 34332e3235322e3133382e302f32342d3234203d3e203538343034.roa (hash: cfaaVl5RivAI5aEsFEpR96b1yzNXPD55gNZl0+j6JoI=) 10: 34332e3235322e3133372e302f32342d3234203d3e203538343034.roa (hash: N7dD/FSi3TZ7eLd1FkTH81UWI+fs0udUhwSc1vTMSUU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 09:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:9e:d5:e7:9a:5e:6c:01:d8:7d:cb:c1:ea:89:f2:e9:11:63:49:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A Validity Not Before: Sep 4 23:26:32 2025 GMT Not After : Sep 8 09:31:32 2025 GMT Subject: CN=DD9B4C0B5F35E6A4B45920795E94817715A9BBBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:45:c3:78:68:b5:24:b2:70:fc:25:49:0f:47: 3e:e9:34:8a:99:28:8f:2d:d3:b2:58:55:53:b1:e9: 14:61:eb:ea:d4:be:a8:43:18:3a:07:89:c7:ab:c6: ce:35:7a:28:fd:82:05:d3:85:0a:c2:bf:7b:64:52: 12:dd:86:d7:ee:52:ff:cf:48:61:e6:57:cf:eb:4a: 4b:0f:16:19:26:97:a6:5d:af:4e:c6:59:42:8b:98: 58:b9:b9:90:74:b6:b5:bc:7b:8f:d0:82:ce:82:04: f7:bd:f9:44:74:15:7e:30:66:89:01:fc:ec:d4:ed: 02:b8:9c:51:ae:19:5d:91:f4:ed:2e:e3:89:a1:5d: 2e:bd:ac:04:3e:1d:95:06:99:50:db:d4:37:f5:b8: d4:13:34:3d:25:a9:c5:97:db:0a:fe:e7:34:7a:53: 70:03:06:3d:1c:55:b4:d3:3e:13:64:cc:29:3a:50: 69:4b:a1:34:f7:b0:a3:d8:2b:e4:8b:6b:77:e7:7f: f8:c5:4b:98:54:fc:e9:b4:0a:bf:e3:9a:88:ae:8c: d2:af:42:f5:b5:e7:93:91:81:aa:bb:76:f3:0e:cf: 6e:09:ba:26:3f:ca:77:ae:7d:18:09:89:43:25:92: 8b:ed:9b:ee:ff:ad:c2:45:43:2a:a8:73:b6:4b:19: be:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9B:4C:0B:5F:35:E6:A4:B4:59:20:79:5E:94:81:77:15:A9:BB:BC X509v3 Authority Key Identifier: keyid:C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:a9:90:64:49:09:8e:30:34:0b:54:30:e7:85:a6:6a:ab:26: c4:65:23:90:89:c1:58:56:61:ea:b4:be:b5:7b:e9:ce:4b:dc: 6f:86:1a:c5:44:b5:68:f0:03:e4:87:cc:80:aa:d2:b1:91:77: 71:04:da:78:39:26:16:bf:60:0e:3e:18:ec:fd:86:14:04:6b: d3:fd:eb:22:81:d2:6d:8d:10:9e:78:39:36:2c:1f:ee:cc:13: 00:22:e4:b2:2d:18:8f:ef:ed:88:da:47:db:e3:68:db:80:3b: 29:2d:6d:77:62:09:a9:24:73:d7:fd:de:bc:d3:f7:35:ac:33: 83:97:ea:9b:d7:63:9c:56:95:11:ee:c5:d7:6e:84:5d:b9:57: ee:f5:c2:bc:8d:7b:99:d4:e3:f8:4f:44:6c:b8:96:71:11:2d: c2:1d:6c:62:8e:94:f1:37:32:29:fa:19:d9:11:9e:55:b5:ae: 47:af:05:09:3a:00:24:c4:55:a1:28:05:e7:59:40:6c:7c:96: 97:1f:1e:25:99:2e:62:c2:b2:99:1c:c3:bf:ee:a3:23:dc:53: 10:f3:ae:b6:1e:34:e9:03:1f:91:f8:87:94:cd:ae:8d:29:51: be:14:d3:73:c9:1e:3a:fd:27:6c:0e:f9:b1:c6:f7:8e:63:25: cc:81:d2:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULZ7V55pebAHYfcvB6ony6RFjSVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAxMkZG QjQ4ODcxQTAeFw0yNTA5MDQyMzI2MzJaFw0yNTA5MDgwOTMxMzJaMDMxMTAvBgNV BAMTKEREOUI0QzBCNUYzNUU2QTRCNDU5MjA3OTVFOTQ4MTc3MTVBOUJCQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiRcN4aLUksnD8JUkPRz7pNIqZ KI8t07JYVVOx6RRh6+rUvqhDGDoHicerxs41eij9ggXThQrCv3tkUhLdhtfuUv/P SGHmV8/rSksPFhkml6Zdr07GWUKLmFi5uZB0trW8e4/Qgs6CBPe9+UR0FX4wZokB /OzU7QK4nFGuGV2R9O0u44mhXS69rAQ+HZUGmVDb1Df1uNQTND0lqcWX2wr+5zR6 U3ADBj0cVbTTPhNkzCk6UGlLoTT3sKPYK+SLa3fnf/jFS5hU/Om0Cr/jmoiujNKv QvW155ORgaq7dvMOz24JuiY/yneufRgJiUMlkovtm+7/rcJFQyqoc7ZLGb4nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3ZtMC1815qS0WSB5XpSBdxWpu7wwHwYDVR0j BBgwFoAUwlRKDB7oq/naBhRQCTABL/tIhxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTBmOTE2My0zZTVhLTRlZmEtOGJkOS00YWM0YmM2MzA0MTQvMC9DMjU0NEEwQzFF RThBQkY5REEwNjE0NTAwOTMwMDEyRkZCNDg4NzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAxMkZGQjQ4 ODcxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUwZjkxNjMtM2U1YS00ZWZhLThi ZDktNGFjNGJjNjMwNDE0LzAvQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAx MkZGQjQ4ODcxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFapkGRJCY4wNAtUMOeFpmqrJsRlI5CJwVhW Yeq0vrV76c5L3G+GGsVEtWjwA+SHzICq0rGRd3EE2ng5Jha/YA4+GOz9hhQEa9P9 6yKB0m2NEJ54OTYsH+7MEwAi5LItGI/v7YjaR9vjaNuAOyktbXdiCakkc9f93rzT 9zWsM4OX6pvXY5xWlRHuxdduhF25V+71wryNe5nU4/hPRGy4lnERLcIdbGKOlPE3 Min6GdkRnlW1rkevBQk6ACTEVaEoBedZQGx8lpcfHiWZLmLCspkcw7/uoyPcUxDz rrYeNOkDH5H4h5TNro0pUb4U03PJHjr9J2wO+bHG945jJcyB0qQ= -----END CERTIFICATE-----Generated at Fri Sep 5 10:15:05 2025 by rpki-client