$ rpki-client -vvf repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft File: B605E2C01C5BDC6CEE49545C80501360234DC910.mft (raw, json) Hash identifier: 5HPFXkYc+QCQYODgVeU0Y8axsj50whwmiLiRLAd7SJA= Subject key identifier: E5:A7:96:CA:8F:EA:B5:F6:82:3A:82:25:DA:DA:5A:03:9C:3E:E9:BB Authority key identifier: B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10 Certificate issuer: /CN=B605E2C01C5BDC6CEE49545C80501360234DC910 Certificate serial: 4D41DF8C6D3F780942FE74509F2D7DABF1795418 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer Subject info access: rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft Manifest number: 050C Signing time: Wed 03 Sep 2025 12:20:04 +0000 Manifest this update: Wed 03 Sep 2025 12:15:04 +0000 Manifest next update: Sat 06 Sep 2025 17:22:04 +0000 Files and hashes: 1: 3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (hash: isINXQLKIC1dEiiAoWDEseWdjl997XY6+RtHzF8UKMk=) 2: 3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (hash: L3ZzIiAydRdMLY3ej77+q1So7IkWU5tA3zvtMa14wvQ=) 3: 3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa (hash: 4R3cIWzWFlBnUOjDtKgjITkNYaOCw4Tx4+7Vb5ietQo=) 4: 3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa (hash: tZJdaYJ4K7yW2v2tBg39Lb9tz4r7Kf6sn+VE2gvdsHw=) 5: B605E2C01C5BDC6CEE49545C80501360234DC910.crl (hash: Yezoxr0URea111UGjsdSzaC01KT6ANxlAXXbe+qk0ng=) 6: 3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (hash: NtqkwrlUwIEQ1zhmOPelG6/o7YZq6aMqPrp+f2CJ/tw=) 7: 3131352e3137382e35332e302f32342d3234203d3e20313331373137.roa (hash: 5Br8jzUfiBL0O6Kopm71gWMUaniCVXm/uXqyIID9rs0=) 8: 3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (hash: /bgLX80Id13xkunC59CvIZtu8KOfj3mxVa1lG5ZXF/0=) 9: 3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (hash: AVHUuCu/pWOfGEGbs7pgdGUZzNAVfi/HDMj4JakhRSI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 17:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:41:df:8c:6d:3f:78:09:42:fe:74:50:9f:2d:7d:ab:f1:79:54:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B605E2C01C5BDC6CEE49545C80501360234DC910 Validity Not Before: Sep 3 12:15:04 2025 GMT Not After : Sep 6 17:22:04 2025 GMT Subject: CN=E5A796CA8FEAB5F6823A8225DADA5A039C3EE9BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a4:d9:17:49:52:bf:2e:86:57:7f:8c:cb:0b: 2d:4e:e7:e7:2b:0c:f4:e3:32:87:ff:87:ce:55:43: 93:46:1e:be:27:3d:36:39:7a:3c:e6:90:70:98:96: 7e:cf:ec:b9:3e:04:d2:13:fc:cc:0c:2a:2a:8c:70: 81:48:f3:37:28:c2:b7:13:ac:92:0f:20:19:68:2a: 2d:5d:64:bd:12:e2:47:30:60:ec:bf:16:df:8b:01: 5d:ac:9a:96:63:7e:08:e0:2f:35:37:15:ab:1a:f5: 86:49:35:d5:2a:80:03:9a:cc:33:42:db:15:b5:5c: bd:ef:d7:57:3c:d1:6e:c8:10:a0:f6:42:4b:e7:ec: 66:61:ec:5e:92:e9:cd:11:c7:56:3e:b8:09:ac:ff: 17:65:66:8a:76:e4:6b:47:98:27:b6:90:17:59:e0: d6:16:c8:85:0d:32:71:1f:33:59:ce:a3:47:06:97: ce:4a:f9:00:08:51:c1:85:0d:99:1d:ff:48:b4:fc: ad:f3:54:7a:c3:02:a0:6e:7f:5f:ec:32:ec:37:83: 14:4c:3a:83:98:f2:e6:ff:18:ec:4a:7a:00:b7:f6: a7:48:1c:8c:c5:f8:20:c6:2f:1d:44:90:98:b7:65: 5e:6b:92:0b:15:48:b4:95:29:0c:ab:8c:61:bd:a2: 66:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A7:96:CA:8F:EA:B5:F6:82:3A:82:25:DA:DA:5A:03:9C:3E:E9:BB X509v3 Authority Key Identifier: keyid:B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:a2:0c:73:7b:03:07:68:16:7d:82:c2:62:9d:ff:61:1d:0f: 7c:9d:ae:60:fa:21:54:cf:f5:29:9e:9d:91:27:d4:28:28:26: d4:8a:a5:40:53:9f:dc:51:65:13:8b:77:a2:99:0a:8e:4f:30: 84:c8:9f:86:29:fe:56:7e:e9:56:2d:98:bb:f0:10:50:0e:e9: 33:22:54:d9:3b:e1:91:a3:93:1b:be:c3:ec:40:ad:42:50:5a: b2:25:f6:ce:a6:4e:f3:d3:23:49:1b:3e:10:e6:cb:d2:e1:3a: 3c:31:46:7f:0b:04:46:d5:75:ba:d0:b7:ab:5d:a2:76:81:58: d8:ac:56:d7:de:22:4a:b0:5f:15:2c:88:5f:22:71:69:7e:95: 29:97:25:03:ac:90:83:d1:8a:38:b8:56:f5:ee:62:eb:42:10: 5f:5a:82:92:f7:bb:e5:64:81:c4:ff:04:a5:1d:0c:6c:0a:90: 7c:bb:94:27:05:06:23:fa:02:52:2a:87:b3:8e:0d:57:5e:0d: cc:6b:4c:d8:34:69:d9:3c:b8:23:1c:b2:8e:b7:f9:4a:7d:cd: a3:dd:ce:31:d9:d6:81:a0:ea:df:8e:24:eb:3e:c6:f5:7f:0c: 1b:d9:28:29:9c:24:e7:23:3e:06:80:9f:06:d6:9f:a0:19:48: ce:93:e1:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTUHfjG0/eAlC/nRQny19q/F5VBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEzNjAy MzREQzkxMDAeFw0yNTA5MDMxMjE1MDRaFw0yNTA5MDYxNzIyMDRaMDMxMTAvBgNV BAMTKEU1QTc5NkNBOEZFQUI1RjY4MjNBODIyNURBREE1QTAzOUMzRUU5QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYpNkXSVK/LoZXf4zLCy1O5+cr DPTjMof/h85VQ5NGHr4nPTY5ejzmkHCYln7P7Lk+BNIT/MwMKiqMcIFI8zcowrcT rJIPIBloKi1dZL0S4kcwYOy/Ft+LAV2smpZjfgjgLzU3Fasa9YZJNdUqgAOazDNC 2xW1XL3v11c80W7IEKD2Qkvn7GZh7F6S6c0Rx1Y+uAms/xdlZop25GtHmCe2kBdZ 4NYWyIUNMnEfM1nOo0cGl85K+QAIUcGFDZkd/0i0/K3zVHrDAqBuf1/sMuw3gxRM OoOY8ub/GOxKegC39qdIHIzF+CDGLx1EkJi3ZV5rkgsVSLSVKQyrjGG9omYtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5aeWyo/qtfaCOoIl2tpaA5w+6bswHwYDVR0j BBgwFoAUtgXiwBxb3GzuSVRcgFATYCNNyRAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWZlOGY5Yi04YzM0LTQzNDItYTBmZS1jYTEwNzVmYmE1ZmYvMC9CNjA1RTJDMDFD NUJEQzZDRUU0OTU0NUM4MDUwMTM2MDIzNERDOTEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEzNjAyMzRE QzkxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVmZThmOWItOGMzNC00MzQyLWEw ZmUtY2ExMDc1ZmJhNWZmLzAvQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEz NjAyMzREQzkxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMGiDHN7AwdoFn2CwmKd/2EdD3ydrmD6IVTP 9SmenZEn1CgoJtSKpUBTn9xRZROLd6KZCo5PMITIn4Yp/lZ+6VYtmLvwEFAO6TMi VNk74ZGjkxu+w+xArUJQWrIl9s6mTvPTI0kbPhDmy9LhOjwxRn8LBEbVdbrQt6td onaBWNisVtfeIkqwXxUsiF8icWl+lSmXJQOskIPRiji4VvXuYutCEF9agpL3u+Vk gcT/BKUdDGwKkHy7lCcFBiP6AlIqh7OODVdeDcxrTNg0adk8uCMcso63+Up9zaPd zjHZ1oGg6t+OJOs+xvV/DBvZKCmcJOcjPgaAnwbWn6AZSM6T4Qk= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:55 2025 by rpki-client