$ rpki-client -vvf repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft File: 115880D133393FF2D96A5861679B5166AFDB1248.mft (raw, json) Hash identifier: 3vqiprXS6yBqAh9XMyRWO1gj6s6yQEZDLT8/qaSXM50= Subject key identifier: CE:AF:FE:96:F4:FF:FE:A1:1B:56:B8:8B:90:37:9D:06:44:F7:29:D6 Authority key identifier: 11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48 Certificate issuer: /CN=115880D133393FF2D96A5861679B5166AFDB1248 Certificate serial: 679026BE5426EBA35CCA1DF25FCFD67A27F4F3CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft Manifest number: 01B8 Signing time: Thu 04 Sep 2025 21:12:09 +0000 Manifest this update: Thu 04 Sep 2025 21:07:09 +0000 Manifest next update: Mon 08 Sep 2025 08:36:09 +0000 Files and hashes: 1: 3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa (hash: ovzcVNQEy/mX6iGBONz7ezsyibr0pRiafYk0E6VSJek=) 2: 3130332e3136312e3133342e302f32342d3234203d3e20313530343635.roa (hash: +z4cRvyNT4QtWwPTkT8yZCGmj9VTYSFEsOdsS2JDhX8=) 3: 3130332e3136312e3133352e302f32342d3234203d3e20313530343635.roa (hash: Jn9654uE1MAkhxHMr7LmE5+YeOZ6sz4Pa6nAFO5Kq+Q=) 4: 3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa (hash: dsbjoyKjKxL4iwUB8V3WadTuSmVRqe7mRaojqe/cx6g=) 5: 3130332e3136312e3133342e302f32332d3233203d3e20313530343635.roa (hash: MPl5ELQ+jnWnL8LJsxoYECXhQIy/2gQtSqxW1SRND58=) 6: 115880D133393FF2D96A5861679B5166AFDB1248.crl (hash: q8AbWSkf+XyLAIWduPYVoSIgxJXU8mLEuZ4pWn1EYOk=) 7: 3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa (hash: PUB3O8b9f0V9upxUQ1vz/Akmef3nw9nhl+zmK2wYTN8=) 8: 3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa (hash: qOgMs8L+7L6hzGSgXrwuDdjZMuQgbmzasXiAjPj9OOI=) 9: 3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa (hash: mM1uMrTnIIOB9qV95bnMry0CA1H0myomJNfLWIW9li4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 08:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:90:26:be:54:26:eb:a3:5c:ca:1d:f2:5f:cf:d6:7a:27:f4:f3:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115880D133393FF2D96A5861679B5166AFDB1248 Validity Not Before: Sep 4 21:07:09 2025 GMT Not After : Sep 8 08:36:09 2025 GMT Subject: CN=CEAFFE96F4FFFEA11B56B88B90379D0644F729D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:28:ef:a3:10:ee:0c:37:c3:25:fc:dd:7c:91: 8a:6b:fd:12:46:39:d7:3f:59:57:20:f8:5f:c2:4f: ef:de:e3:71:1f:7c:79:85:bc:fe:bc:40:f4:a0:e3: e8:1d:18:5e:e2:80:51:b9:f1:0f:8d:23:60:8e:7f: 9b:68:f1:ce:29:bd:e4:92:50:88:10:15:4f:ab:69: 2d:7b:05:95:14:e1:7f:fe:80:87:6e:84:e5:8b:36: e9:2e:8c:58:8a:0a:3e:76:e8:f3:8e:cf:07:4e:97: 1f:bb:98:c6:b4:a3:0b:7a:f9:c9:c7:c9:51:d3:f0: 6f:d4:a2:6a:c2:69:02:cf:65:c2:ab:c8:1f:12:de: ea:a4:70:93:16:fd:b4:8f:c5:01:a5:89:6a:eb:8d: f1:81:12:12:cf:de:6b:49:69:a8:dd:97:92:27:3f: 91:f1:fc:9b:d9:46:20:05:d3:80:3c:f2:b9:82:dc: 37:3f:a6:23:ab:31:c5:3c:c1:04:09:f0:af:10:5d: 72:e0:28:bf:1b:7a:b4:8e:57:e3:b9:19:12:b1:2c: 75:85:5c:26:6a:4e:de:e0:c9:ca:cd:b0:a5:c1:44: fa:9b:4d:0d:32:73:69:e6:f6:fe:48:cf:9e:af:35: 6f:62:69:69:06:cb:2c:0d:b5:d1:7e:f9:39:c1:13: 5c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AF:FE:96:F4:FF:FE:A1:1B:56:B8:8B:90:37:9D:06:44:F7:29:D6 X509v3 Authority Key Identifier: keyid:11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:a8:29:55:ae:8e:fb:f5:25:f3:32:98:b4:3e:21:bc:c6:97: cb:cf:d6:ac:48:bc:47:de:20:f6:78:09:23:13:a7:46:03:f6: 53:0b:59:dc:6c:80:68:17:7e:ad:e9:e2:0d:2f:a9:dc:56:7f: 39:24:18:0d:ce:28:c3:24:23:d1:4b:9e:da:73:f0:2a:7d:88: dc:9e:b3:4d:e4:bd:b4:a6:fb:11:a7:a0:44:b1:10:8f:21:db: d0:bc:94:26:6c:30:74:d5:ae:76:b6:a0:e6:71:49:18:56:a9: 20:15:cf:f3:c8:10:16:9e:6b:ce:2a:22:04:a4:c4:ea:eb:48: a5:8f:36:45:8e:f5:f4:aa:ac:b2:7e:6d:85:8b:d7:4c:ef:bb: 81:8c:4d:15:cc:07:f9:60:08:26:11:4f:ea:71:3b:e3:6b:89: d5:74:af:98:5e:70:7a:d2:4f:93:6f:99:13:be:2b:d3:e8:d6: 00:1a:61:4c:a2:bd:65:54:e7:c6:5a:ee:69:5e:b2:9f:47:e6: 7c:cc:27:81:23:24:11:6f:2c:e4:e7:d0:ea:ca:aa:59:67:c0: 67:56:ba:52:75:09:77:a4:27:b3:de:ac:a8:d7:9d:6e:c7:5b: 12:98:d2:53:b1:51:47:0b:bd:a6:5b:c0:5f:61:74:74:a8:5c: 7c:37:97:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ5AmvlQm66Ncyh3yX8/Weif088wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUxNjZB RkRCMTI0ODAeFw0yNTA5MDQyMTA3MDlaFw0yNTA5MDgwODM2MDlaMDMxMTAvBgNV BAMTKENFQUZGRTk2RjRGRkZFQTExQjU2Qjg4QjkwMzc5RDA2NDRGNzI5RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMKO+jEO4MN8Ml/N18kYpr/RJG Odc/WVcg+F/CT+/e43EffHmFvP68QPSg4+gdGF7igFG58Q+NI2COf5to8c4pveSS UIgQFU+raS17BZUU4X/+gIduhOWLNukujFiKCj526POOzwdOlx+7mMa0owt6+cnH yVHT8G/UomrCaQLPZcKryB8S3uqkcJMW/bSPxQGliWrrjfGBEhLP3mtJaajdl5In P5Hx/JvZRiAF04A88rmC3Dc/piOrMcU8wQQJ8K8QXXLgKL8berSOV+O5GRKxLHWF XCZqTt7gycrNsKXBRPqbTQ0yc2nm9v5Iz56vNW9iaWkGyywNtdF++TnBE1xnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzq/+lvT//qEbVriLkDedBkT3KdYwHwYDVR0j BBgwFoAUEViA0TM5P/LZalhhZ5tRZq/bEkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTU2ODAxZi1hNjdiLTQzZGQtOGY2Mi1iN2IwZDYwMzE3YWYvMC8xMTU4ODBEMTMz MzkzRkYyRDk2QTU4NjE2NzlCNTE2NkFGREIxMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUxNjZBRkRC MTI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE1NjgwMWYtYTY3Yi00M2RkLThm NjItYjdiMGQ2MDMxN2FmLzAvMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUx NjZBRkRCMTI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKioKVWujvv1JfMymLQ+IbzGl8vP1qxIvEfe IPZ4CSMTp0YD9lMLWdxsgGgXfq3p4g0vqdxWfzkkGA3OKMMkI9FLntpz8Cp9iNye s03kvbSm+xGnoESxEI8h29C8lCZsMHTVrna2oOZxSRhWqSAVz/PIEBaea84qIgSk xOrrSKWPNkWO9fSqrLJ+bYWL10zvu4GMTRXMB/lgCCYRT+pxO+NridV0r5hecHrS T5NvmRO+K9Po1gAaYUyivWVU58Za7mlesp9H5nzMJ4EjJBFvLOTn0OrKqllnwGdW ulJ1CXekJ7PerKjXnW7HWxKY0lOxUUcLvaZbwF9hdHSoXHw3lzs= -----END CERTIFICATE-----Generated at Fri Sep 5 19:52:30 2025 by rpki-client