$ rpki-client -vvf repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft File: 284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft (raw, json) Hash identifier: FN9ZniT6JT4cnDMG44C34VwtsDdmO8QmEhTD1a0dYqg= Subject key identifier: EA:AE:30:85:AA:54:A1:12:6F:C7:F2:06:5D:11:70:9A:F5:CE:94:03 Authority key identifier: 28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA Certificate issuer: /CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA Certificate serial: 2B2A917344F6E273E24B3E294EFBBEE9B12B8F63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft Manifest number: 024D Signing time: Sun 07 Sep 2025 00:51:39 +0000 Manifest this update: Sun 07 Sep 2025 00:46:39 +0000 Manifest next update: Wed 10 Sep 2025 09:13:39 +0000 Files and hashes: 1: 323430343a356434303a313a3a2f34382d3438203d3e20313338353938.roa (hash: 7Ra3Fe83WVldtrwmBn6CcKZZT+lK+aCd/JbT64/wrRw=) 2: 323430343a356434303a373a3a2f34382d3438203d3e20313338353938.roa (hash: 2JoT7M7m37m0xJyrGZ0XzlMJ4mVcLTVKVu699zp/2U0=) 3: 3130332e3133342e35312e302f32342d3234203d3e20313338353938.roa (hash: rzmqH60uJRn3sGzkNJLLdHpbEepRCB0kAM+v2dcsYmc=) 4: 323430343a356434303a333a3a2f34382d3438203d3e20313338353938.roa (hash: xTc48z78x2hTWAz50fsj2u48rca6GyIeaspfgC6Ied0=) 5: 323430343a356434303a353a3a2f34382d3438203d3e20313338353938.roa (hash: Lbx56bi7U9t4V4gIX7m4fulkNS6DqtlvmzQW0U2Yss4=) 6: 323430343a356434303a383a3a2f34382d3438203d3e20313338353938.roa (hash: LCHOag0uJb1cjVFsg2v6UKKoMu1dXnSpGeS35y1AH+w=) 7: 3130332e3133342e34382e302f32342d3234203d3e20313338353938.roa (hash: vdRaqu+ifEWqE1r8nytgBjN36IR5VUDio5Qen7pybes=) 8: 323430343a356434303a363a3a2f34382d3438203d3e20313338353938.roa (hash: BMaPZKd4S9fQAuwU5kc5O93/vGGp5sulKN1fvWKFFuE=) 9: 323430343a356434303a323a3a2f34382d3438203d3e20313338353938.roa (hash: vUuh6v5PPRzVvuwUZOwe6R6chuRFULbcu3aLCW2qA2Y=) 10: 3130332e3133342e35302e302f32342d3234203d3e20313332383239.roa (hash: 7HCsscFWHwPhWZMbOcuZYtCZgWu1kaGruUGGQu1z3Bg=) 11: 323430343a356434303a393a3a2f34382d3438203d3e20313338353938.roa (hash: s7BQD7yLxj5kSwHPL3ObyjKROEx8KemxAu+k28dACKE=) 12: 323430343a356434303a3a2f34382d3438203d3e20313338353938.roa (hash: XQn6RBqlg6RuaEoPTX1Jp1jRKOhAgtTrK3uAW566Uwk=) 13: 284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl (hash: yta/WpKdiy+voZv/YjF6PQgSP3xjOyjxrLIzkwwXYhE=) 14: 3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa (hash: Q3P+SORmjSYUFWgFOxdx+KlxGjY858iSOT5wN8UZTKY=) 15: 323430343a356434303a343a3a2f34382d3438203d3e20313338353938.roa (hash: /selJRjYRY2RXdacberK6RXbNBqDD4h8KJuD+6tSmiM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 09:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:2a:91:73:44:f6:e2:73:e2:4b:3e:29:4e:fb:be:e9:b1:2b:8f:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA Validity Not Before: Sep 7 00:46:39 2025 GMT Not After : Sep 10 09:13:39 2025 GMT Subject: CN=EAAE3085AA54A1126FC7F2065D11709AF5CE9403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:80:7e:64:95:33:f1:3b:ac:aa:b9:1d:8e:1d: e4:ee:28:4b:e2:9a:a4:a9:ad:18:40:6b:0c:fa:40: e2:b3:17:2b:a2:b2:9c:69:cf:5d:93:40:31:bc:20: 5f:27:a7:fc:d1:79:c8:48:d2:a4:a3:aa:9f:85:66: 48:cb:53:f9:55:9a:14:8d:2c:d5:32:7a:6a:26:1b: 43:74:ce:09:77:73:7b:c4:ba:d0:cb:9d:0a:95:b0: 44:52:02:ab:59:87:4c:7e:d0:27:89:39:4c:3e:40: 82:75:80:99:23:2e:ea:c2:f3:83:be:39:60:69:bd: 9f:9b:01:3e:e7:30:b3:28:40:81:7b:50:83:65:d9: 54:01:cf:9b:55:ea:c4:a9:99:bb:31:b0:c4:14:45: a1:84:e7:3a:18:5f:34:dd:fc:17:6f:12:59:91:cf: c7:d4:8b:dc:af:4b:de:45:cf:9e:61:91:26:8a:ca: 7c:e2:23:35:4f:a6:7c:a2:93:8a:64:e7:f6:12:a1: 32:01:45:1f:9b:dc:ad:cf:14:a9:9b:83:26:44:37: 73:9c:cd:9a:61:6e:d5:66:d3:86:45:fa:37:8b:d3: 14:67:bc:42:d7:f9:32:5a:77:91:de:b1:aa:7a:1d: 8d:2e:eb:02:1b:9d:6a:9c:18:3d:5b:e4:d6:1b:b4: d0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AE:30:85:AA:54:A1:12:6F:C7:F2:06:5D:11:70:9A:F5:CE:94:03 X509v3 Authority Key Identifier: keyid:28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:e7:c9:53:8f:f6:d9:c8:5d:54:0e:16:ae:15:a1:5f:07:3d: 54:9a:b5:a6:c1:b9:f4:1b:91:3b:53:65:7f:d1:cd:ff:7e:9c: 1c:e1:b4:4a:9a:a8:37:81:20:49:0b:d8:c4:20:27:44:9a:a0: 96:34:c6:30:fc:e4:ca:a9:3a:13:5c:a3:72:ce:bc:bf:16:9b: 55:5c:5b:4b:98:81:64:b0:ef:04:20:52:e4:54:6b:13:2d:ee: ef:77:f3:8c:2d:90:8a:7c:82:8f:ce:dd:a1:a3:6f:49:90:8f: 61:f6:ad:ad:b5:39:46:c5:41:38:bb:34:a4:0d:8f:b3:e5:2d: f3:9b:d1:dd:b4:cb:d8:b1:c9:c8:5a:87:de:93:3c:a1:5e:4a: c7:9e:33:6d:02:94:14:df:b8:2a:64:73:4f:60:2b:87:2f:5b: 1d:9e:5e:28:79:a1:7b:9f:4a:3c:73:0c:9a:34:a7:71:30:4c: 53:73:9e:ea:8b:cf:38:9d:30:d5:d5:2b:81:e9:ee:23:94:19: 4c:b9:59:16:38:9f:62:b7:4a:74:6c:bf:cc:e1:41:e1:3f:ff: 33:cb:12:b6:8b:17:3f:3d:14:c4:64:4c:aa:b3:de:31:91:94: a0:de:6a:f9:b9:f9:5b:a8:8a:00:e2:24:92:bb:94:3d:3b:ff: 2f:6a:23:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKyqRc0T24nPiSz4pTvu+6bErj2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVGQTY0 NDRERjJFQTAeFw0yNTA5MDcwMDQ2MzlaFw0yNTA5MTAwOTEzMzlaMDMxMTAvBgNV BAMTKEVBQUUzMDg1QUE1NEExMTI2RkM3RjIwNjVEMTE3MDlBRjVDRTk0MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCngH5klTPxO6yquR2OHeTuKEvi mqSprRhAawz6QOKzFyuispxpz12TQDG8IF8np/zRechI0qSjqp+FZkjLU/lVmhSN LNUyemomG0N0zgl3c3vEutDLnQqVsERSAqtZh0x+0CeJOUw+QIJ1gJkjLurC84O+ OWBpvZ+bAT7nMLMoQIF7UINl2VQBz5tV6sSpmbsxsMQURaGE5zoYXzTd/BdvElmR z8fUi9yvS95Fz55hkSaKynziIzVPpnyik4pk5/YSoTIBRR+b3K3PFKmbgyZEN3Oc zZphbtVm04ZF+jeL0xRnvELX+TJad5Hesap6HY0u6wIbnWqcGD1b5NYbtNDBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6q4whapUoRJvx/IGXRFwmvXOlAMwHwYDVR0j BBgwFoAUKEuK2tPgmOm/vqxqkSnvpkRN8uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Yzg1YzZiOS0zNGY5LTRhODUtOWNlYS1jMTZlOThhOGI1ZTAvMC8yODRCOEFEQUQz RTA5OEU5QkZCRUFDNkE5MTI5RUZBNjQ0NERGMkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVGQTY0NDRE RjJFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM4NWM2YjktMzRmOS00YTg1LTlj ZWEtYzE2ZTk4YThiNWUwLzAvMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVG QTY0NDRERjJFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKrnyVOP9tnIXVQOFq4VoV8HPVSatabBufQb kTtTZX/Rzf9+nBzhtEqaqDeBIEkL2MQgJ0SaoJY0xjD85MqpOhNco3LOvL8Wm1Vc W0uYgWSw7wQgUuRUaxMt7u9384wtkIp8go/O3aGjb0mQj2H2ra21OUbFQTi7NKQN j7PlLfOb0d20y9ixychah96TPKFeSseeM20ClBTfuCpkc09gK4cvWx2eXih5oXuf SjxzDJo0p3EwTFNznuqLzzidMNXVK4Hp7iOUGUy5WRY4n2K3SnRsv8zhQeE//zPL EraLFz89FMRkTKqz3jGRlKDeavm5+VuoigDiJJK7lD07/y9qI2Y= -----END CERTIFICATE-----Generated at Sun Sep 7 13:57:21 2025 by rpki-client