$ rpki-client -vvf repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft File: B0928A45D014D8D5FAD50314E828086F12B15610.mft (raw, json) Hash identifier: kkQwsRkCxJs//QZJwXLajx6KL6dnjp3XwXxdy1jPPz4= Subject key identifier: 4C:12:C5:A0:40:92:A7:E2:13:99:95:AD:9B:3E:0D:E6:BE:EA:97:88 Authority key identifier: B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 Certificate issuer: /CN=B0928A45D014D8D5FAD50314E828086F12B15610 Certificate serial: 155D4512BBA2E737D819BC5236873EF7F37F3B0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft Manifest number: 0308 Signing time: Fri 05 Sep 2025 23:21:16 +0000 Manifest this update: Fri 05 Sep 2025 23:16:16 +0000 Manifest next update: Tue 09 Sep 2025 00:24:16 +0000 Files and hashes: 1: 3230322e3132352e38322e302f32342d3234203d3e20313430343433.roa (hash: svi5IuXnIA+13Wc0eQrV3WQdaOBiVClli1PIWM+ewGc=) 2: 3230322e3132352e38332e302f32342d3234203d3e20313430343433.roa (hash: Ky8MrLU9AvVMvZfrLkoaRO/9X/2qSweH3weFbcGoV3c=) 3: B0928A45D014D8D5FAD50314E828086F12B15610.crl (hash: S8PYh3MsjiCyLlskFAiHpoUSCXavBMkPIkWesC24/3A=) 4: 3230322e3132352e38322e302f32332d3233203d3e20313430343433.roa (hash: g4b6/Xa0b41J+1gc8Xz+JaVY6mTt5QNosbt82K9ZCLY=) 5: 3230322e37302e3133322e302f32342d3234203d3e20313430343433.roa (hash: hnSe2L9heULKYvVeefFY6CeCDXE6iTWu+s4r/qCo/4o=) 6: 3230322e37302e3133322e302f32332d3233203d3e20313430343433.roa (hash: unxNSSNtfbW/QtJSHv1+Jppsd16Z88+qlZSg2ZXLUc0=) 7: 3230322e37302e3133332e302f32342d3234203d3e20313430343433.roa (hash: wdtK/qmLPSYK98usl8We2OAmclE1Y5QskILTtOqsrh0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 00:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:5d:45:12:bb:a2:e7:37:d8:19:bc:52:36:87:3e:f7:f3:7f:3b:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0928A45D014D8D5FAD50314E828086F12B15610 Validity Not Before: Sep 5 23:16:16 2025 GMT Not After : Sep 9 00:24:16 2025 GMT Subject: CN=4C12C5A04092A7E2139995AD9B3E0DE6BEEA9788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:07:91:b3:ba:3a:3c:31:97:69:06:d6:9b:00: 67:76:fe:f1:b5:d0:d4:a8:26:a4:14:94:8b:b8:9b: 50:2f:44:5e:57:f7:ed:3e:7d:3d:8f:60:5f:b1:05: 5c:45:e8:b0:5d:fd:c5:cb:3d:3b:aa:21:94:c8:51: ab:a2:18:f2:ef:b0:89:51:e3:4d:36:50:a2:7f:ed: af:4b:a9:1f:39:8e:63:a8:e0:b1:de:24:fe:09:0c: 10:e4:04:b2:ef:92:52:27:ff:af:b0:e4:9c:c8:8e: d7:f8:3d:8c:d1:4f:3d:a1:35:ba:ef:f6:3a:b4:d9: 6f:95:ff:44:03:8e:11:54:38:c5:58:05:db:7a:d4: 12:53:4b:43:a7:3e:49:a3:19:6a:ba:7b:61:9a:10: 89:c3:50:61:ee:0f:d7:0d:b8:a1:df:0a:97:80:41: 91:99:d6:55:c5:db:7b:eb:6f:5b:b5:fe:a6:67:be: 23:d7:de:3f:db:d7:a8:ad:62:31:1b:62:1d:87:4c: 29:1d:a0:e9:51:2f:ed:8c:70:2a:5d:a1:62:0c:35: e4:8f:fa:1d:7c:60:41:8b:3f:60:91:74:2a:e5:b3: 29:c2:8e:dc:f9:e4:6e:0a:0c:0b:44:82:83:20:dd: f2:47:d1:5f:5c:c0:f5:7c:37:36:16:cd:1b:46:bd: 2a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:12:C5:A0:40:92:A7:E2:13:99:95:AD:9B:3E:0D:E6:BE:EA:97:88 X509v3 Authority Key Identifier: keyid:B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:a5:14:93:06:2b:65:ce:b5:ec:4e:05:92:4c:c7:6f:2c:8c: 1e:9b:de:5a:00:38:a8:cf:42:62:21:48:85:8c:1f:a2:84:b4: ab:7b:ab:97:ff:ad:67:ca:96:62:24:91:c7:ec:64:41:68:e4: 16:e7:21:64:12:b6:b6:f8:8e:04:c7:4e:70:32:5c:00:35:e7: 39:c6:34:d0:27:bc:70:cc:bb:a9:0f:10:96:a8:98:b0:d2:da: 5f:88:d0:eb:f1:ee:48:b5:7b:2f:a7:e3:1b:3f:31:61:c3:08: 77:d4:1e:34:ce:55:a5:bd:66:dc:85:2b:c5:01:7d:75:62:c5: 28:c0:7d:5b:2d:e9:63:c6:41:27:05:cf:38:0d:81:2e:5b:bf: a3:50:fd:b9:00:8e:c8:56:65:99:3d:a8:d3:73:7a:03:cf:91: 15:ec:e6:ce:fc:66:bc:40:b7:3a:39:a8:cf:25:0f:25:7b:e5: cc:e0:3f:f5:e2:ca:42:e0:0f:cf:6f:c7:df:98:1d:d3:4c:31: 04:d1:aa:93:41:98:5e:d1:74:6b:85:e9:6e:5f:a4:c2:2e:fd: e6:3a:7f:8d:75:3d:13:8e:33:9c:a6:78:f6:db:34:ec:41:03: 83:67:6c:af:6b:02:d0:88:13:8a:e4:9d:21:f6:00:6d:2a:b2: a8:3c:9b:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFV1FErui5zfYGbxSNoc+9/N/Ow8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYx MkIxNTYxMDAeFw0yNTA5MDUyMzE2MTZaFw0yNTA5MDkwMDI0MTZaMDMxMTAvBgNV BAMTKDRDMTJDNUEwNDA5MkE3RTIxMzk5OTVBRDlCM0UwREU2QkVFQTk3ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaB5Gzujo8MZdpBtabAGd2/vG1 0NSoJqQUlIu4m1AvRF5X9+0+fT2PYF+xBVxF6LBd/cXLPTuqIZTIUauiGPLvsIlR 4002UKJ/7a9LqR85jmOo4LHeJP4JDBDkBLLvklIn/6+w5JzIjtf4PYzRTz2hNbrv 9jq02W+V/0QDjhFUOMVYBdt61BJTS0OnPkmjGWq6e2GaEInDUGHuD9cNuKHfCpeA QZGZ1lXF23vrb1u1/qZnviPX3j/b16itYjEbYh2HTCkdoOlRL+2McCpdoWIMNeSP +h18YEGLP2CRdCrlsynCjtz55G4KDAtEgoMg3fJH0V9cwPV8NzYWzRtGvSpHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTBLFoECSp+ITmZWtmz4N5r7ql4gwHwYDVR0j BBgwFoAUsJKKRdAU2NX61QMU6CgIbxKxVhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2QzMjNiZS04MzdkLTQyNDQtODQ2Yy03ZDIzOTNhOWEwMDkvMC9CMDkyOEE0NUQw MTREOEQ1RkFENTAzMTRFODI4MDg2RjEyQjE1NjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYxMkIx NTYxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NkMzIzYmUtODM3ZC00MjQ0LTg0 NmMtN2QyMzkzYTlhMDA5LzAvQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4 NkYxMkIxNTYxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGelFJMGK2XOtexOBZJMx28sjB6b3loAOKjP QmIhSIWMH6KEtKt7q5f/rWfKlmIkkcfsZEFo5BbnIWQStrb4jgTHTnAyXAA15znG NNAnvHDMu6kPEJaomLDS2l+I0Ovx7ki1ey+n4xs/MWHDCHfUHjTOVaW9ZtyFK8UB fXVixSjAfVst6WPGQScFzzgNgS5bv6NQ/bkAjshWZZk9qNNzegPPkRXs5s78ZrxA tzo5qM8lDyV75czgP/XiykLgD89vx9+YHdNMMQTRqpNBmF7RdGuF6W5fpMIu/eY6 f411PROOM5ymePbbNOxBA4NnbK9rAtCIE4rknSH2AG0qsqg8m30= -----END CERTIFICATE-----Generated at Sun Sep 7 15:43:04 2025 by rpki-client