$ rpki-client -vvf repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft File: 415543D423E0BD035D612DEA9BF060290E5552D2.mft (raw, json) Hash identifier: QBW85Z2tOvL7MrHJeMrX90SDlHSLNTB2k0dUjAlIH4s= Subject key identifier: 16:27:00:D8:42:A8:C3:41:1A:4A:A7:34:C0:4B:4F:B4:89:4A:F9:73 Authority key identifier: 41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 Certificate issuer: /CN=415543D423E0BD035D612DEA9BF060290E5552D2 Certificate serial: 7D6E7B2485C3070AF08F9D7BD44EFB5C3F503A6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft Manifest number: 023A Signing time: Thu 04 Sep 2025 00:01:14 +0000 Manifest this update: Wed 03 Sep 2025 23:56:14 +0000 Manifest next update: Sun 07 Sep 2025 04:39:14 +0000 Files and hashes: 1: 3130332e39352e382e302f32342d3234203d3e20313335343838.roa (hash: P5qy6MSQkzBzIpWfwlqRGgttfjrknKyQRFiwh+AluKw=) 2: 415543D423E0BD035D612DEA9BF060290E5552D2.crl (hash: NZ5vrlTVhcPd0XUOW9n2XkD1J1tSeeksLwkzX79X7oU=) 3: 3130332e39352e382e302f32322d3232203d3e20313335343838.roa (hash: V41dsoCGv/A1SNxCT74tNpzG0O4+YBlV/SgqxtUPiBI=) 4: 3130332e39352e31302e302f32342d3234203d3e20313335343838.roa (hash: nboIz3jrBgP6JOmA3BVAd2UeOfnp74QAUC5BcPTJ2ug=) 5: 3130332e39352e392e302f32342d3234203d3e20313335343838.roa (hash: VFHHlL/fG0xnRMHoMgqrHUpXEdzrJEYbY3L4Yb6Ynkg=) 6: 3130332e39352e31312e302f32342d3234203d3e20313335343838.roa (hash: uRQw+5QQP0wXxplDqYvXD7a/PuPwjnqYNZPmeOG1eFc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 04:39:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:6e:7b:24:85:c3:07:0a:f0:8f:9d:7b:d4:4e:fb:5c:3f:50:3a:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=415543D423E0BD035D612DEA9BF060290E5552D2 Validity Not Before: Sep 3 23:56:14 2025 GMT Not After : Sep 7 04:39:14 2025 GMT Subject: CN=162700D842A8C3411A4AA734C04B4FB4894AF973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:46:58:4a:97:49:13:05:1c:61:b1:01:b1:9e: 5a:85:5c:60:f3:72:03:de:c8:90:6f:d3:1c:29:f4: d6:a4:06:4c:37:19:8d:7e:52:ec:48:79:61:d7:bc: 88:f4:d7:9c:80:09:16:cb:73:b3:8d:dc:30:c4:b0: 3a:56:5c:58:d0:df:15:c7:e6:3d:88:8d:38:39:27: d8:27:67:2e:b9:b2:df:e2:f7:24:17:f7:63:60:3e: a4:2e:2c:f7:25:ac:d5:b3:b5:ac:d0:7a:c0:62:73: af:19:68:3d:ae:b7:d8:99:74:c9:fd:be:23:b5:d1: c0:eb:56:61:5c:3b:83:06:88:40:5e:cb:e4:68:b1: 32:32:31:fb:2d:d8:91:58:84:b9:9e:b1:37:46:73: 2a:d1:3c:f0:c1:ee:6d:44:ad:08:d4:6d:67:d5:41: cc:74:61:29:58:d9:da:91:9e:cd:48:ac:39:40:23: 8b:3f:f5:2c:6a:5f:61:28:59:66:a7:50:f6:65:f8: d6:64:2b:d2:46:58:56:fe:f7:e7:38:7e:82:a7:d5: 37:e3:83:c3:1f:dc:df:6d:ff:09:aa:a9:9e:5c:a7: 66:d6:b4:1a:7f:f4:af:0d:0c:c0:dd:bf:3b:41:5f: 26:28:7f:0e:31:6e:f9:b5:66:fd:8d:d2:51:4f:f3: 62:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:27:00:D8:42:A8:C3:41:1A:4A:A7:34:C0:4B:4F:B4:89:4A:F9:73 X509v3 Authority Key Identifier: keyid:41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:c5:5d:66:b7:86:ed:4c:0f:fe:0b:bc:35:05:44:06:4d:c5: 07:ed:7b:44:20:a3:68:ca:22:4d:4e:aa:e7:97:0e:94:76:51: 31:36:97:7e:13:1d:a0:58:af:20:83:e3:f4:1b:cc:50:b4:48: 44:78:68:04:db:b4:3f:01:f7:97:84:89:f2:17:50:b9:b9:07: 1b:75:03:a8:58:ab:9a:81:b2:0e:68:8e:c2:4f:c1:bf:9f:bf: 9e:de:1d:77:20:8a:93:f1:8e:b2:63:34:9c:49:61:8d:97:74: 46:6f:80:89:39:e6:84:cb:f5:7c:a7:b9:1e:6f:64:1a:d2:b5: 72:dc:82:41:be:32:cb:24:9e:9e:60:f7:e6:24:94:ad:01:67: 9c:f0:87:73:46:7f:21:88:37:89:fc:e3:f8:8b:ff:d6:65:eb: c0:9e:fa:9c:dd:f1:c3:2f:07:65:db:20:9c:37:9f:3f:f5:7f: b2:36:cc:7a:2a:2b:6b:70:0d:26:54:3e:aa:9d:5f:c0:2f:03: 3e:66:16:42:e8:35:09:d9:b3:6f:48:5b:c9:c2:d5:92:43:33: 60:80:5d:88:02:86:76:53:05:c0:db:6b:98:ed:fb:9c:97:5d: 4b:ac:d4:8e:80:34:ff:99:0e:29:5f:a1:e2:24:ed:93:51:6f: 14:3a:7f:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfW57JIXDBwrwj5171E77XD9QOm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkw RTU1NTJEMjAeFw0yNTA5MDMyMzU2MTRaFw0yNTA5MDcwNDM5MTRaMDMxMTAvBgNV BAMTKDE2MjcwMEQ4NDJBOEMzNDExQTRBQTczNEMwNEI0RkI0ODk0QUY5NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMRlhKl0kTBRxhsQGxnlqFXGDz cgPeyJBv0xwp9NakBkw3GY1+UuxIeWHXvIj015yACRbLc7ON3DDEsDpWXFjQ3xXH 5j2IjTg5J9gnZy65st/i9yQX92NgPqQuLPclrNWztazQesBic68ZaD2ut9iZdMn9 viO10cDrVmFcO4MGiEBey+RosTIyMfst2JFYhLmesTdGcyrRPPDB7m1ErQjUbWfV Qcx0YSlY2dqRns1IrDlAI4s/9SxqX2EoWWanUPZl+NZkK9JGWFb+9+c4foKn1Tfj g8Mf3N9t/wmqqZ5cp2bWtBp/9K8NDMDdvztBXyYofw4xbvm1Zv2N0lFP82JlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFicA2EKow0EaSqc0wEtPtIlK+XMwHwYDVR0j BBgwFoAUQVVD1CPgvQNdYS3qm/BgKQ5VUtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzY0NjVlYy05MTYwLTQ1OWItOGQxMS05NDhmYzI2ZGExYzAvMC80MTU1NDNENDIz RTBCRDAzNUQ2MTJERUE5QkYwNjAyOTBFNTU1MkQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkwRTU1 NTJEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM2NDY1ZWMtOTE2MC00NTliLThk MTEtOTQ4ZmMyNmRhMWMwLzAvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYw MjkwRTU1NTJEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHFXWa3hu1MD/4LvDUFRAZNxQfte0Qgo2jK Ik1OqueXDpR2UTE2l34THaBYryCD4/QbzFC0SER4aATbtD8B95eEifIXULm5Bxt1 A6hYq5qBsg5ojsJPwb+fv57eHXcgipPxjrJjNJxJYY2XdEZvgIk55oTL9XynuR5v ZBrStXLcgkG+Mssknp5g9+YklK0BZ5zwh3NGfyGIN4n84/iL/9Zl68Ce+pzd8cMv B2XbIJw3nz/1f7I2zHoqK2twDSZUPqqdX8AvAz5mFkLoNQnZs29IW8nC1ZJDM2CA XYgChnZTBcDba5jt+5yXXUus1I6ANP+ZDilfoeIk7ZNRbxQ6f6Q= -----END CERTIFICATE-----Generated at Fri Sep 5 10:39:36 2025 by rpki-client