$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft File: 639473CD2054A78B39F9AC7A83232462F00E71AA.mft (raw, json) Hash identifier: lT7oRLBvMotzYTVLvo+Ax+hhVztVf0KabumRsxh/FHs= Subject key identifier: 13:CE:EF:C7:12:1C:23:AA:97:6B:BF:B4:77:09:34:41:FD:12:22:D2 Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA Certificate serial: 1ABFD495942CAC7C97814D169FE9C74DF4337651 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft Manifest number: 0D47 Signing time: Thu 04 Sep 2025 12:02:46 +0000 Manifest this update: Thu 04 Sep 2025 11:57:46 +0000 Manifest next update: Sun 07 Sep 2025 15:23:46 +0000 Files and hashes: 1: 3130332e3232382e3234372e302f32342d3234203d3e203539323832.roa (hash: 4gtV8ZXJhBLgP6alnZmazQL9Du+oKvqI/MvatS0Bbyw=) 2: 3130332e3232382e3234362e302f32342d3234203d3e203539323832.roa (hash: XZ4OJKWgYbKu4ak8HWaN9bEJfkYQKh79GGoEWm0kS2Q=) 3: 323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa (hash: 5B7v2ShhK5C4wbhQiHatQFgCi8oUxqkoPlhjyp+Rnaw=) 4: 639473CD2054A78B39F9AC7A83232462F00E71AA.crl (hash: YFnDrUK1HoRIOeKuSvoifsPE/CEBIwfu0bBa67S1rSU=) 5: 3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa (hash: /sujTtwH0ddwmWj6UyMseljhgpcNLVkP8+vtS5y3rGg=) 6: 3131362e3230362e3231342e302f32342d3234203d3e203539323832.roa (hash: mgdd33inbho0w/YafQxmlb4mn2645LWgbd4GjzvqC5g=) 7: 323430303a643638303a353a3a2f34382d3438203d3e203539323832.roa (hash: /8HKOKl3PxMMPopAmXJsDfZHfFoo7wkQ81V5TqWB1uE=) 8: 3130332e3232382e3234342e302f32322d3234203d3e203539323832.roa (hash: kkZ5080z9oUs+jW8iHX1Tzr1MG5R0/keiimPL4Y7DMk=) 9: 3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa (hash: 7JHZWmtz01hYjYbLRHq9pCZCM42A/jGx+qscoYZR+8M=) 10: 323430303a643638303a323a3a2f34382d3438203d3e203539323832.roa (hash: qLkIroWnbqSVivBGqvgi5oF8E8eNhXgrJocCdlawdNk=) 11: 323430303a643638303a35393a3a2f34382d3438203d3e203539323832.roa (hash: 0AzZnlQLCCzpiwYH8VB91hQfBqmdrJ+ok40Qb8sCeko=) 12: 323430303a643638303a666163653a3a2f34382d3438203d3e203539323832.roa (hash: u5dDjhuBvBzcqNjKEeW7vizdTx58v6wY4rfkMiHiI5I=) 13: 323430303a643638303a3a2f33322d3438203d3e203539323832.roa (hash: SgqLAGcMTNBEKnSS7cpl5WafnRLBI8WCT5GxxXyN0zA=) 14: 3131362e3230362e3231332e302f32342d3234203d3e203539323832.roa (hash: JPYapDBTyTePbdwtE88+heXxGhufXE50JBbJ2fq7FKo=) 15: 3130332e3232382e3234342e302f32342d3234203d3e203539323832.roa (hash: esxHqUt3Xq6PKKXsfFgfUEYi1fJUgVnC6F8M6sDPUJM=) 16: 3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa (hash: QsDPs2mlZqyMZXfjf6Zh+NWMXGWy1j4R+YaYRxdbecQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 15:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:bf:d4:95:94:2c:ac:7c:97:81:4d:16:9f:e9:c7:4d:f4:33:76:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA Validity Not Before: Sep 4 11:57:46 2025 GMT Not After : Sep 7 15:23:46 2025 GMT Subject: CN=13CEEFC7121C23AA976BBFB477093441FD1222D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c9:0b:fc:0c:5c:7c:dc:d8:ec:df:5f:ad:7e: e8:fa:5f:82:38:e2:4a:07:4b:f8:cd:ba:69:fb:fc: 2f:7f:0a:64:af:a5:18:de:32:8c:0c:22:5a:7c:79: 92:be:49:94:47:77:91:dd:94:14:9f:b3:85:56:14: 2f:4f:5b:5b:85:8f:0c:e5:3c:b2:44:59:53:1b:3e: 8e:4a:10:62:b7:20:61:44:38:8e:b0:6a:06:d7:ca: 0f:7b:30:f3:ad:f4:30:9f:af:12:6a:87:ca:ee:05: 94:c1:55:3f:95:84:5f:d8:82:01:e1:57:53:dc:b9: 4f:d9:6e:66:f3:8d:0b:1f:e3:c2:59:40:f2:52:8b: c9:db:6d:ea:3d:c6:3f:97:1c:73:3d:e2:18:d0:c9: 7b:1e:17:1d:e2:d3:7f:fa:77:e6:c2:d1:79:40:9f: 03:c9:3f:5b:7a:5e:11:97:b0:2c:c8:8a:a9:f7:b0: 34:94:a6:ef:7f:23:b5:7e:ce:a0:6a:f1:79:b9:09: 3a:4d:12:96:bd:68:68:0c:4e:09:34:75:b4:9e:3f: 81:95:fa:3e:1b:66:7a:e1:01:0f:e1:63:57:e7:e5: e0:d2:88:ba:23:62:3c:37:a3:7e:83:fd:38:5a:ad: d3:25:1e:9a:1d:b0:7e:20:fa:e9:6c:66:f1:fb:98: 8c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:CE:EF:C7:12:1C:23:AA:97:6B:BF:B4:77:09:34:41:FD:12:22:D2 X509v3 Authority Key Identifier: keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:5f:15:4a:f7:e4:94:fd:d0:db:75:4a:1c:eb:8b:ef:5b:22: 23:4e:6a:3b:a5:90:42:18:03:88:e2:90:3c:14:bb:a7:e1:48: 64:4c:4d:2e:83:f5:2d:74:7c:06:b5:f0:04:28:4e:5f:f6:53: 44:c1:b9:11:24:ab:f9:0f:a5:29:62:60:d4:b7:b2:e6:ca:ae: 04:53:b0:51:4f:fc:5e:6b:ed:b2:d1:39:a3:a7:f4:51:a0:5b: b3:bb:fd:3b:49:2e:b0:62:7a:d0:9e:b4:35:80:b5:9b:78:26: 48:17:d7:6f:21:98:bd:8c:1a:45:60:91:57:95:3a:71:68:86: 6e:8f:50:63:06:0b:d6:95:d7:a3:bf:6b:62:88:5d:e7:70:51: 73:4a:35:5d:13:44:a8:5f:1f:eb:91:15:a3:bf:61:0c:43:01: 81:d6:46:10:de:56:bc:17:7a:a6:ca:0e:cc:1b:e3:d2:d1:44: 14:ed:e5:ae:4c:b7:fa:a6:09:b7:18:1e:44:e7:49:f1:7a:f6: b1:eb:d0:01:70:57:7f:b2:b1:27:64:2d:1c:d5:ee:a3:1f:cd: be:94:76:56:4a:a0:27:1e:08:89:d5:ad:aa:56:ff:53:a6:3e: 00:81:c9:86:ea:b8:d2:a7:72:23:a2:55:86:39:35:f0:f0:e5: 7a:41:dc:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGr/UlZQsrHyXgU0Wn+nHTfQzdlEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG MDBFNzFBQTAeFw0yNTA5MDQxMTU3NDZaFw0yNTA5MDcxNTIzNDZaMDMxMTAvBgNV BAMTKDEzQ0VFRkM3MTIxQzIzQUE5NzZCQkZCNDc3MDkzNDQxRkQxMjIyRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFyQv8DFx83Njs31+tfuj6X4I4 4koHS/jNumn7/C9/CmSvpRjeMowMIlp8eZK+SZRHd5HdlBSfs4VWFC9PW1uFjwzl PLJEWVMbPo5KEGK3IGFEOI6wagbXyg97MPOt9DCfrxJqh8ruBZTBVT+VhF/YggHh V1PcuU/ZbmbzjQsf48JZQPJSi8nbbeo9xj+XHHM94hjQyXseFx3i03/6d+bC0XlA nwPJP1t6XhGXsCzIiqn3sDSUpu9/I7V+zqBq8Xm5CTpNEpa9aGgMTgk0dbSeP4GV +j4bZnrhAQ/hY1fn5eDSiLojYjw3o36D/ThardMlHpodsH4g+ulsZvH7mIxjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE87vxxIcI6qXa7+0dwk0Qf0SItIwHwYDVR0j BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF NzFBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg0NjRhNWItMmZjZS00N2RhLTgw NDctNjhkMmJkNjNjOWMzLzAvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0 NjJGMDBFNzFBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZfFUr35JT90Nt1Shzri+9bIiNOajulkEIY A4jikDwUu6fhSGRMTS6D9S10fAa18AQoTl/2U0TBuREkq/kPpSliYNS3subKrgRT sFFP/F5r7bLROaOn9FGgW7O7/TtJLrBietCetDWAtZt4JkgX128hmL2MGkVgkVeV OnFohm6PUGMGC9aV16O/a2KIXedwUXNKNV0TRKhfH+uRFaO/YQxDAYHWRhDeVrwX eqbKDswb49LRRBTt5a5Mt/qmCbcYHkTnSfF69rHr0AFwV3+ysSdkLRzV7qMfzb6U dlZKoCceCInVrapW/1OmPgCByYbquNKnciOiVYY5NfDw5XpB3D0= -----END CERTIFICATE-----Generated at Fri Sep 5 10:11:45 2025 by rpki-client