$ rpki-client -vvf repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft File: 023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft (raw, json) Hash identifier: huXIiPlZ8ghXa/4v4P7UzW7xMkyBnNlkAsB2YdR+2w4= Subject key identifier: 52:62:EC:1F:83:CD:92:89:AE:92:3A:AB:FA:EE:BD:E2:2F:81:76:26 Authority key identifier: 02:3D:AF:79:3C:D2:BA:F6:C7:BC:7A:45:A1:3D:F2:36:B7:40:16:61 Certificate issuer: /CN=023DAF793CD2BAF6C7BC7A45A13DF236B7401661 Certificate serial: 1CE79C18AD96D67F45F146B803DFB093164F05F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft Manifest number: 025F Signing time: Sat 06 Sep 2025 14:22:00 +0000 Manifest this update: Sat 06 Sep 2025 14:17:00 +0000 Manifest next update: Tue 09 Sep 2025 16:22:00 +0000 Files and hashes: 1: 3130332e3134392e3132302e302f32342d3234203d3e20313339393532.roa (hash: fr8+FrmlPGl8AfQlow8lySzaZVznKtOBprgMvRW46vw=) 2: 3130332e3134392e3132302e302f32332d3233203d3e2037373133.roa (hash: yOR4ha1iNJToiWgXnk0oG7heqETlfk80W41Jvd2P1xg=) 3: 3130332e3134392e3132302e302f32332d3233203d3e20313430303233.roa (hash: B08azy3XQsiTZf5UppG1ngPrOYAEwHH6x3322yJGfrI=) 4: 3130332e3134392e3132312e302f32342d3234203d3e20313339393532.roa (hash: s6MFeDXqeIkTAot5lzYFNGxoGgi1Yjw/2CsMKFqccxU=) 5: 3130332e3134392e3132302e302f32332d3233203d3e20313339393532.roa (hash: TIp9WHuUqK5QCHJsHK2qMd4Di3b+YgT1J52ydC6PYvs=) 6: 3130332e3134392e3132312e302f32342d3234203d3e2037373133.roa (hash: zVGnPMz6FjIWNaiokQGONx21w4m18vhd71uDshC7eyA=) 7: 3130332e3134392e3132302e302f32342d3234203d3e2037373133.roa (hash: Q49EnVockO7Wf1pEkALOtAUiauf7qPnxOjOocdL9Yus=) 8: 023DAF793CD2BAF6C7BC7A45A13DF236B7401661.crl (hash: zCgcO+J92pHtnyXZgNMhKOxYuGqYVbXlbEUkz8+uBKI=) 9: 3130332e3134392e3132312e302f32342d3234203d3e20313430303233.roa (hash: 2gVCxg+hDmKkdBfr1IN+Jz7t1loTVbupLhThyLDp4zk=) 10: 3130332e3134392e3132302e302f32332d3234203d3e20313430303233.roa (hash: RZP1u67IkDY1VxYw8axwNJaL5jYZcoL8kOhW1c7O+Eg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.crl rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 16:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:e7:9c:18:ad:96:d6:7f:45:f1:46:b8:03:df:b0:93:16:4f:05:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=023DAF793CD2BAF6C7BC7A45A13DF236B7401661 Validity Not Before: Sep 6 14:17:00 2025 GMT Not After : Sep 9 16:22:00 2025 GMT Subject: CN=5262EC1F83CD9289AE923AABFAEEBDE22F817626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5c:8f:eb:6a:04:ce:85:99:e6:88:24:54:f6: 15:5f:30:c8:42:2a:1e:c3:23:58:ad:cb:eb:05:71: 23:5c:25:3a:8b:84:dc:d7:fd:24:05:95:55:9e:12: 84:d5:75:55:82:2b:3d:5f:88:88:92:98:80:40:8e: 2e:d8:da:97:fd:4e:35:0e:2d:8f:f0:7a:ec:16:53: da:a2:09:28:4a:72:08:a7:c4:50:1c:1f:c9:2d:57: a3:e3:66:35:83:0d:2a:fa:8e:4b:0a:85:47:6f:14: 51:da:6e:38:12:df:a8:27:46:dc:e6:21:49:e2:7b: e9:8c:04:cd:a9:7d:c6:6f:aa:49:32:e0:2a:ea:38: 5f:4e:34:60:f2:c9:b4:bf:7e:69:9f:06:1f:94:3c: 24:90:94:e9:54:a1:86:79:14:a8:d9:d0:34:a8:ab: 6d:30:f0:6a:6a:a3:ea:8c:71:20:d5:2f:df:42:8d: 26:d4:0c:0c:c0:63:32:32:98:b0:ef:95:be:ca:98: 0c:13:65:c6:6d:e5:52:f4:1a:bc:3c:e6:a8:ce:18: d7:c9:7b:15:88:0a:e5:19:02:a7:2b:f1:57:8c:b5: 4d:76:a2:b1:b2:7f:cd:78:86:5f:0f:93:77:5a:fc: e2:d6:03:13:4f:ba:38:8b:18:34:8b:f5:5f:90:7b: b2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:62:EC:1F:83:CD:92:89:AE:92:3A:AB:FA:EE:BD:E2:2F:81:76:26 X509v3 Authority Key Identifier: keyid:02:3D:AF:79:3C:D2:BA:F6:C7:BC:7A:45:A1:3D:F2:36:B7:40:16:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:c5:b4:87:04:d9:87:3b:dc:da:59:db:c9:ab:f6:28:4b:b7: f4:f0:20:6b:9c:d6:75:93:0c:f1:4e:05:bb:ac:83:d9:c0:2d: 0c:f4:b5:61:09:15:53:dd:4e:78:2f:4f:98:cb:e7:11:fa:6d: 2e:da:f3:b6:fa:db:94:fd:fa:d4:ac:1d:24:9f:57:3b:ec:f4: e7:3e:2c:bd:0d:c1:9f:36:d0:43:1f:15:a7:a2:d5:54:12:22: 2b:f1:ee:54:7d:fd:1a:f4:cd:e1:04:f6:0b:d8:55:99:74:3e: 79:b7:10:8c:20:a1:c9:5a:5b:ca:1a:5c:1a:06:73:8c:2a:bd: 57:91:b0:75:42:c8:25:d7:e7:8d:a0:06:b8:13:6d:bb:30:6d: a2:4f:4a:51:6f:98:96:02:67:35:df:7e:67:1a:b7:64:55:6f: 75:5f:09:75:0b:1c:a9:26:3c:4e:28:52:95:ea:77:49:89:b6: 0c:1b:56:20:27:7c:14:7d:7c:15:c7:bb:9f:3a:a6:fd:fc:3f: 89:06:93:0b:45:28:9c:8d:ce:f6:75:56:ae:9c:94:7e:09:dc: ee:68:c7:ac:be:91:49:8a:12:d0:f7:4f:2b:74:9d:52:b6:f1: 4a:ed:76:e4:65:83:fd:d4:4e:3b:05:be:fb:c7:73:81:0e:da: fd:28:74:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHOecGK2W1n9F8Ua4A9+wkxZPBfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIzREFGNzkzQ0QyQkFGNkM3QkM3QTQ1QTEzREYyMzZC NzQwMTY2MTAeFw0yNTA5MDYxNDE3MDBaFw0yNTA5MDkxNjIyMDBaMDMxMTAvBgNV BAMTKDUyNjJFQzFGODNDRDkyODlBRTkyM0FBQkZBRUVCREUyMkY4MTc2MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkXI/ragTOhZnmiCRU9hVfMMhC Kh7DI1ity+sFcSNcJTqLhNzX/SQFlVWeEoTVdVWCKz1fiIiSmIBAji7Y2pf9TjUO LY/weuwWU9qiCShKcginxFAcH8ktV6PjZjWDDSr6jksKhUdvFFHabjgS36gnRtzm IUnie+mMBM2pfcZvqkky4CrqOF9ONGDyybS/fmmfBh+UPCSQlOlUoYZ5FKjZ0DSo q20w8Gpqo+qMcSDVL99CjSbUDAzAYzIymLDvlb7KmAwTZcZt5VL0Grw85qjOGNfJ exWICuUZAqcr8VeMtU12orGyf814hl8Pk3da/OLWAxNPujiLGDSL9V+Qe7IxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUmLsH4PNkomukjqr+u694i+BdiYwHwYDVR0j BBgwFoAUAj2veTzSuvbHvHpFoT3yNrdAFmEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGQwZTY0MC0yMmU5LTQ0MWMtODYzNC1mOTUyNTMwN2RhNzYvMC8wMjNEQUY3OTND RDJCQUY2QzdCQzdBNDVBMTNERjIzNkI3NDAxNjYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIzREFGNzkzQ0QyQkFGNkM3QkM3QTQ1QTEzREYyMzZCNzQw MTY2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhkMGU2NDAtMjJlOS00NDFjLTg2 MzQtZjk1MjUzMDdkYTc2LzAvMDIzREFGNzkzQ0QyQkFGNkM3QkM3QTQ1QTEzREYy MzZCNzQwMTY2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXFtIcE2Yc73NpZ28mr9ihLt/TwIGuc1nWT DPFOBbusg9nALQz0tWEJFVPdTngvT5jL5xH6bS7a87b625T9+tSsHSSfVzvs9Oc+ LL0NwZ820EMfFaei1VQSIivx7lR9/Rr0zeEE9gvYVZl0Pnm3EIwgoclaW8oaXBoG c4wqvVeRsHVCyCXX542gBrgTbbswbaJPSlFvmJYCZzXffmcat2RVb3VfCXULHKkm PE4oUpXqd0mJtgwbViAnfBR9fBXHu586pv38P4kGkwtFKJyNzvZ1Vq6clH4J3O5o x6y+kUmKEtD3Tyt0nVK28UrtduRlg/3UTjsFvvvHc4EO2v0odJQ= -----END CERTIFICATE-----Generated at Sun Sep 7 15:14:42 2025 by rpki-client