$ rpki-client -vvf repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft File: D68CA7C6F514D7168C00790717FB869AF68B125E.mft (raw, json) Hash identifier: Gqj9uw2K7zz+o71t9kxF1sp+UHyTsSLDbFOrfegYeBA= Subject key identifier: 21:E5:A5:8E:6F:2C:C3:9C:CB:8E:1F:C6:66:5D:33:EB:D7:D6:22:AF Authority key identifier: D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E Certificate issuer: /CN=D68CA7C6F514D7168C00790717FB869AF68B125E Certificate serial: 0CAE67C78FFDEB11C7010E2884DE732AFE7C703B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft Manifest number: 026A Signing time: Sun 16 Nov 2025 02:40:53 +0000 Manifest this update: Sun 16 Nov 2025 02:35:53 +0000 Manifest next update: Wed 19 Nov 2025 06:51:53 +0000 Files and hashes: 1: 3130332e3134322e3235342e302f32342d3234203d3e20313339333831.roa (hash: xpJYN2koDz6242yH404bncg8zalibRwq73KpJsJcVB8=) 2: 323030313a6466313a363338303a3a2f34382d3438203d3e20313339333831.roa (hash: vuTTJNURLP5vgJImsWTQOQLshtByIl8yIWAQC+TExAY=) 3: 323030313a6466313a363338303a3a2f34382d3438203d3e203435333035.roa (hash: G7BNKn0aQeDATXJ1JamzPIxZOqsRSSDm9xJMQAbHt5c=) 4: 3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa (hash: 09EcthFcc0U294qSUk1qjMUpfEmQzlaHp9ePt/3ow3Q=) 5: 3130332e3134322e3235352e302f32342d3234203d3e203435333035.roa (hash: fW5qne1R9fTa45nGDciUROmSkAV8mbUeGR9m/oXMOAw=) 6: 3130332e3134322e3235342e302f32332d3234203d3e20313339333831.roa (hash: gV2Q8xF8XiWikE1+w9yu7jENKeKHaDELW9P6oOlSzDE=) 7: 3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa (hash: ebXS+Tyb8iuyOHa8yQE2FE8hZAgaawDNcd7a/TUN4jY=) 8: 3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa (hash: tArDMQ0CljWlxInpOnDNWhLbYH4HF1sjePzkXRXnEac=) 9: D68CA7C6F514D7168C00790717FB869AF68B125E.crl (hash: YrM480vB59jm/olaGxsKTCE5+tO45tBz6An/7698tvk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Nov 2025 06:51:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ae:67:c7:8f:fd:eb:11:c7:01:0e:28:84:de:73:2a:fe:7c:70:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D68CA7C6F514D7168C00790717FB869AF68B125E Validity Not Before: Nov 16 02:35:53 2025 GMT Not After : Nov 19 06:51:53 2025 GMT Subject: CN=21E5A58E6F2CC39CCB8E1FC6665D33EBD7D622AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:15:22:39:16:ab:cd:ff:69:27:29:5f:b1:77: 00:e1:aa:16:f3:fc:de:b7:0c:88:25:92:a4:13:f8: d2:08:2a:bd:f1:dd:5a:ac:2a:0e:9e:69:6c:7d:fb: 75:4d:30:eb:e8:85:27:d9:7b:1f:d9:35:4b:1c:95: 13:2d:ff:b7:ff:3c:a8:f7:bd:cf:5c:d2:11:ee:ea: f0:fd:24:9b:fc:4a:04:6c:6e:85:71:a9:ee:53:40: 60:7d:a1:16:a6:94:d9:b8:ae:32:ba:dc:bb:08:7a: 5a:a2:71:b3:d8:b0:c7:cd:b8:a0:c1:50:f8:bd:0a: 32:0d:bd:a1:4e:8a:80:9a:28:e1:eb:65:c5:f6:64: 99:ca:52:be:21:4b:5f:c4:33:af:45:61:df:97:80: 91:4c:7d:2b:16:93:40:4b:ad:d3:de:18:b6:e8:e4: 2e:95:08:99:a4:53:3a:c8:1f:3f:18:3f:b4:59:dc: 9f:98:70:6b:cc:c8:95:fb:c7:b2:dc:3c:2c:4b:ba: 92:98:5b:e8:66:3b:c4:02:89:d5:87:18:ef:a8:1d: a4:43:79:4e:48:8c:91:e3:a3:ce:f4:e0:90:93:e2: f7:2f:4d:f7:7f:f3:af:24:69:98:50:89:8d:ce:44: 45:db:e2:e5:06:bc:35:83:ee:f2:e8:2c:fd:d0:fb: 84:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E5:A5:8E:6F:2C:C3:9C:CB:8E:1F:C6:66:5D:33:EB:D7:D6:22:AF X509v3 Authority Key Identifier: keyid:D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ce:e0:59:42:84:8a:4a:3d:c8:bf:a0:16:1c:c8:07:dd:73: d9:e1:fe:97:2d:fb:f6:fb:46:70:a5:ff:ed:a7:84:d4:28:ed: b1:6d:24:50:d7:f2:cb:b4:6b:3a:43:27:55:ae:e4:df:bd:b6: 8d:f6:d7:6c:56:fb:fc:18:ab:21:6b:87:b5:3b:8b:fe:df:e8: b6:a9:bb:14:9b:01:0b:bd:1d:ed:d7:f9:60:57:92:84:eb:de: 0b:0e:53:02:3e:9a:44:fa:85:c8:96:3f:15:3f:18:98:7b:17: 77:70:d2:dc:bd:67:ea:f9:cd:0f:19:18:20:4d:0c:49:ed:38: 13:38:92:43:2e:a0:22:f4:b1:20:c6:55:f6:f2:16:1a:9f:f2: 63:dd:01:eb:59:5a:ed:f8:2a:e3:bf:42:6c:6c:0f:86:6e:a4: 6e:8d:8e:1f:f4:60:a2:a2:4d:9a:ba:48:c1:d2:e8:2a:c5:5d: f1:58:ed:48:eb:69:0a:da:ec:4a:8f:ec:a6:46:e6:7d:ca:33: c4:d4:9a:b3:6f:87:16:dc:72:56:64:fe:8d:9c:b0:3b:b9:2b: 58:32:72:10:a5:42:0f:c7:af:17:d3:82:ab:d3:70:51:57:f7: b4:74:b3:49:2f:d4:27:e2:87:d3:b0:54:ba:8d:bf:19:4e:eb: a8:37:44:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDK5nx4/96xHHAQ4ohN5zKv58cDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFG NjhCMTI1RTAeFw0yNTExMTYwMjM1NTNaFw0yNTExMTkwNjUxNTNaMDMxMTAvBgNV BAMTKDIxRTVBNThFNkYyQ0MzOUNDQjhFMUZDNjY2NUQzM0VCRDdENjIyQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlFSI5FqvN/2knKV+xdwDhqhbz /N63DIglkqQT+NIIKr3x3VqsKg6eaWx9+3VNMOvohSfZex/ZNUsclRMt/7f/PKj3 vc9c0hHu6vD9JJv8SgRsboVxqe5TQGB9oRamlNm4rjK63LsIelqicbPYsMfNuKDB UPi9CjINvaFOioCaKOHrZcX2ZJnKUr4hS1/EM69FYd+XgJFMfSsWk0BLrdPeGLbo 5C6VCJmkUzrIHz8YP7RZ3J+YcGvMyJX7x7LcPCxLupKYW+hmO8QCidWHGO+oHaRD eU5IjJHjo8704JCT4vcvTfd/868kaZhQiY3OREXb4uUGvDWD7vLoLP3Q+4RPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIeWljm8sw5zLjh/GZl0z69fWIq8wHwYDVR0j BBgwFoAU1oynxvUU1xaMAHkHF/uGmvaLEl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGRjMWRkOC02ZDI1LTQ3YzctYWFhNC1iZGRmMWI5ZDY3N2UvMC9ENjhDQTdDNkY1 MTRENzE2OEMwMDc5MDcxN0ZCODY5QUY2OEIxMjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFGNjhC MTI1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRkYzFkZDgtNmQyNS00N2M3LWFh YTQtYmRkZjFiOWQ2NzdlLzAvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2 OUFGNjhCMTI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXO4FlChIpKPci/oBYcyAfdc9nh/pct+/b7 RnCl/+2nhNQo7bFtJFDX8su0azpDJ1Wu5N+9to3212xW+/wYqyFrh7U7i/7f6Lap uxSbAQu9He3X+WBXkoTr3gsOUwI+mkT6hciWPxU/GJh7F3dw0ty9Z+r5zQ8ZGCBN DEntOBM4kkMuoCL0sSDGVfbyFhqf8mPdAetZWu34KuO/QmxsD4ZupG6Njh/0YKKi TZq6SMHS6CrFXfFY7UjraQra7EqP7KZG5n3KM8TUmrNvhxbcclZk/o2csDu5K1gy chClQg/HrxfTgqvTcFFX97R0s0kv1Cfih9OwVLqNvxlO66g3ROM= -----END CERTIFICATE-----Generated at Mon Nov 17 12:10:16 2025 by rpki-client