$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft File: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft (raw, json) Hash identifier: 0xok6LL+gZLDZJh0069Aj7w85RC0ay906mOXmuSKZxw= Subject key identifier: F3:02:12:88:7C:D6:C4:6B:3A:2B:C4:72:C9:D2:A0:41:CD:DC:3B:25 Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 786A35313603B6C40A201F1815EE3E07F3F1B367 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft Manifest number: 0521 Signing time: Wed 03 Sep 2025 03:51:15 +0000 Manifest this update: Wed 03 Sep 2025 03:46:15 +0000 Manifest next update: Sat 06 Sep 2025 15:27:15 +0000 Files and hashes: 1: 34332e3234372e31322e302f32322d3234203d3e203338333230.roa (hash: 2g+NXNHiM0B7rPdW5gGiKA7VbkoVsAcew6mjSoTkRN4=) 2: 3230332e3137332e38382e302f32342d3234203d3e20313339343630.roa (hash: haQraVSry86Exch9h906IOyEPpafpeXC5ih1PxjR4d4=) 3: 3130332e32392e3136342e302f32322d3234203d3e203338333230.roa (hash: bwSFGiowGIWFw0Xqwv4OlEcc83VdK0o2KzJnJCZ2DT0=) 4: 3230332e3137332e39302e302f32332d3234203d3e20313339343630.roa (hash: 23+gG2DOC+ur5eVWAZvoHWGDnxOhWjXAjjErKhmGrS4=) 5: 3230332e3137332e39312e302f32342d3234203d3e20313339343630.roa (hash: nnj0KLDw9ngWzorUbdMHyDWYfETgXpzXO3uTEwZi24Q=) 6: 323430343a333930303a313a3a2f34382d3438203d3e203338333230.roa (hash: jyHfiZ6i7aZCFxYleJN7o61t2gr/9pVuDKWy33Zgxrk=) 7: 3137352e3130332e34352e302f32342d3234203d3e203338333230.roa (hash: dsLjT0RvHwdlA2P0hS8Ta/QvI/7GUPU2p577iDafIJk=) 8: 3137352e3130332e35372e302f32342d3234203d3e203338333230.roa (hash: QS/GUZ+NIoj800cmERiNyPU2Mys6n5EswZVGgcYBu4o=) 9: 3137352e3130332e33342e302f32342d3234203d3e203338333230.roa (hash: mJ+S52vU66RNY0f8EN8g3gvOa1pNNig2fMcG1fH79DY=) 10: 3137352e3130332e35332e302f32342d3234203d3e203338333230.roa (hash: Q22OsVQGNiQHv7rsWq7HdXb5YFdsKjAZXlHpHoKvOag=) 11: 3132322e3134342e302e302f32322d3234203d3e203338333230.roa (hash: 7667q65z5ALRHOPz7ZlyjDc7iiTkR7i4e2iT+KR7k3I=) 12: 323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa (hash: gOJdZEtA6e6fwm7lb/MvZbjgtOf6sLlu0HNuBmiaEZM=) 13: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl (hash: NgEmJcMfdTTARs5jZATe4cRAeeR/MI5oiWmZDiJszdc=) 14: 3137352e3130332e33332e302f32342d3234203d3e203338333230.roa (hash: Y3N/pOr0hqk+rgEWsHTxDUxkckXwK8BwQRc3Oa99toQ=) 15: 3132322e3134342e342e302f32322d3234203d3e203338333230.roa (hash: yOFSHNJ7/tBSXur8DRCWTGrdUQ9S5IWN+tn279DD4tU=) 16: 3230332e3137332e38392e302f32342d3234203d3e203338333230.roa (hash: 5A8+p1O/f/o7MKvT/iojY154TSW6xBkoOLtIqG2w4iU=) 17: 3131392e3131302e36382e302f32322d3234203d3e203338333230.roa (hash: hd2StT+jTnjUGpfUQ62nAy49x8ecNllIMBX9uxJvBO8=) 18: 3131392e3131302e36342e302f32322d3234203d3e203338333230.roa (hash: xet50Y1T2RaCmjZyVilwT++Qk9zQxszZ374/545MhhM=) 19: 3137352e3130332e33322e302f32342d3234203d3e203338333230.roa (hash: SKzoUE6GJjGbrRoLBDSg0MJXDhRPXJNlIyQMu/0QWEw=) 20: 3131392e3131302e37322e302f32322d3234203d3e203338333230.roa (hash: EaI6/Dsx2ZEnLc96pWiD/aogqQZmiIKOu7YhzjemiyQ=) 21: 323430343a333930303a6139323a3a2f34382d3438203d3e203338333230.roa (hash: Ketrz/J8f8AAk0/U1Pdx/6YBxlFbuGP5tM7vrclBTuI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 15:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:6a:35:31:36:03:b6:c4:0a:20:1f:18:15:ee:3e:07:f3:f1:b3:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Sep 3 03:46:15 2025 GMT Not After : Sep 6 15:27:15 2025 GMT Subject: CN=F30212887CD6C46B3A2BC472C9D2A041CDDC3B25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a6:4b:43:64:71:ee:82:0c:7f:7f:cf:31:a3: d6:30:8a:5e:fc:7d:4c:50:16:36:56:5f:95:33:d4: 90:4e:7e:b1:f8:8f:65:54:57:32:3e:b3:fc:80:b2: 97:4d:ac:7f:c4:97:e2:a7:e1:3d:c9:38:5f:04:49: 18:ee:55:0c:db:f9:fb:1c:0d:ff:ed:a8:0c:d8:7b: 82:7a:3d:9b:2a:9b:1d:e1:ac:74:de:8d:ca:92:0e: d6:7c:aa:b0:9b:64:e9:3e:86:22:a3:22:70:c7:50: 42:56:43:d7:fb:ee:ae:6b:6e:91:1c:39:99:ef:6e: 74:15:8f:47:8f:17:4c:89:7f:f0:24:0f:fb:8c:04: bc:f2:02:6d:cb:bb:78:1a:58:b4:93:88:2b:97:5b: 79:78:c0:3b:9c:08:b3:95:c5:36:46:35:11:ab:18: 58:3e:7e:32:57:a6:ae:a7:2b:06:cc:a2:b6:91:f6: 42:9b:3e:d7:c2:6b:76:ce:31:d7:b4:2b:d2:99:fc: 07:51:35:72:74:aa:7a:3d:ef:97:91:90:55:ea:e2: fd:48:47:d1:05:d9:fa:2b:8b:cd:6d:a1:a8:04:bc: 17:a1:14:4d:9e:21:5e:3e:67:10:49:d6:9d:bc:de: b5:ae:e8:7a:87:0c:61:be:e1:7c:ee:91:cd:fe:6b: bf:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:02:12:88:7C:D6:C4:6B:3A:2B:C4:72:C9:D2:A0:41:CD:DC:3B:25 X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:a8:3c:d8:34:bb:f3:c4:6e:d2:cc:e9:e4:b6:b1:4f:dd:58: f1:47:b9:1c:80:60:f4:87:8b:c3:87:26:75:f3:16:e8:05:be: 34:b5:75:01:7d:5d:71:5f:59:a9:78:58:69:c5:b3:d9:b4:f2: 31:68:e8:3c:14:0d:9e:7e:b1:a0:5e:f6:4a:33:a5:8a:58:0d: 1f:0a:df:50:79:64:c6:50:a1:b4:2f:95:94:d4:f6:56:9b:bc: fa:ba:3d:78:a1:ae:40:cf:0c:fc:69:2b:2a:ce:28:f5:b0:da: ee:67:f5:8b:fc:d8:4a:c9:96:25:e5:0a:68:37:63:aa:42:b4: 51:4c:de:32:31:62:8d:7a:df:36:75:e1:00:cf:5c:1f:89:81: 53:92:88:4a:1e:59:7f:4c:fa:4e:32:c0:4c:54:58:74:46:b7: c7:be:9d:62:e0:76:2a:56:ac:8c:98:51:62:a3:68:6a:93:6e: 5e:5d:88:e8:fc:3b:f6:e3:05:61:4b:9a:0b:37:58:3d:b1:cd: c3:49:b9:37:26:a7:cb:3a:c4:a7:c3:1b:68:79:04:e7:de:2f: c5:62:da:3a:f4:2d:74:aa:f1:6c:84:80:16:b5:72:7b:a4:f8: 61:cb:12:06:ab:69:66:54:ec:f5:2b:94:a2:f7:0f:b8:46:6c: 7c:76:c4:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeGo1MTYDtsQKIB8YFe4+B/Pxs2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNTA5MDMwMzQ2MTVaFw0yNTA5MDYxNTI3MTVaMDMxMTAvBgNV BAMTKEYzMDIxMjg4N0NENkM0NkIzQTJCQzQ3MkM5RDJBMDQxQ0REQzNCMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHpktDZHHuggx/f88xo9Ywil78 fUxQFjZWX5Uz1JBOfrH4j2VUVzI+s/yAspdNrH/El+Kn4T3JOF8ESRjuVQzb+fsc Df/tqAzYe4J6PZsqmx3hrHTejcqSDtZ8qrCbZOk+hiKjInDHUEJWQ9f77q5rbpEc OZnvbnQVj0ePF0yJf/AkD/uMBLzyAm3Lu3gaWLSTiCuXW3l4wDucCLOVxTZGNRGr GFg+fjJXpq6nKwbMoraR9kKbPtfCa3bOMde0K9KZ/AdRNXJ0qno975eRkFXq4v1I R9EF2fori81toagEvBehFE2eIV4+ZxBJ1p283rWu6HqHDGG+4Xzukc3+a7+DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8wISiHzWxGs6K8RyydKgQc3cOyUwHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk0NWI4NmUtMDg5NS00NzU5LWE3 N2MtYTA2Y2UxNGUyNDNjLzAvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVB MjMzMUY4MDJFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGoPNg0u/PEbtLM6eS2sU/dWPFHuRyAYPSH i8OHJnXzFugFvjS1dQF9XXFfWal4WGnFs9m08jFo6DwUDZ5+saBe9kozpYpYDR8K 31B5ZMZQobQvlZTU9labvPq6PXihrkDPDPxpKyrOKPWw2u5n9Yv82ErJliXlCmg3 Y6pCtFFM3jIxYo163zZ14QDPXB+JgVOSiEoeWX9M+k4ywExUWHRGt8e+nWLgdipW rIyYUWKjaGqTbl5diOj8O/bjBWFLmgs3WD2xzcNJuTcmp8s6xKfDG2h5BOfeL8Vi 2jr0LXSq8WyEgBa1cnuk+GHLEgaraWZU7PUrlKL3D7hGbHx2xOA= -----END CERTIFICATE-----Generated at Fri Sep 5 10:11:36 2025 by rpki-client