$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft File: F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft (raw, json) Hash identifier: dSojgkDEvkU0KXFuc/JK8+mnE3uzKsW2owsTTdNBchY= Subject key identifier: AB:69:FB:81:3C:39:5E:DD:5F:31:34:4F:40:92:BF:3A:C1:DE:73:C3 Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 Certificate issuer: /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Certificate serial: 652A237E21F868B1515DF5029B6AB4B2CD60239F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft Manifest number: 0528 Signing time: Sat 25 Oct 2025 21:01:27 +0000 Manifest this update: Sat 25 Oct 2025 20:56:27 +0000 Manifest next update: Wed 29 Oct 2025 04:40:27 +0000 Files and hashes: 1: 3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa (hash: X871KmxDisPDxaQpNaNmNV8uKTNCiB9DC630xRuhDpo=) 2: 3137352e3131312e3131332e302f32342d3234203d3e203436303236.roa (hash: 6tYZRHS1gp6lxrRLkcMQOZpyzT7UZqMxo9oLwoeh2Kk=) 3: 3137352e3131312e3131362e302f32342d3234203d3e203436303236.roa (hash: yvTVsKwfMbm9/tZX55oqWjXKQNBRGzzlj+jV8XkeY/A=) 4: 3137352e3131312e3131372e302f32342d3234203d3e203436303236.roa (hash: PAUNyFLoTuXnyzJaaygCGIoZ2kkR7s3iDrCXWwkOWpM=) 5: 3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa (hash: AZYO50pcht7zbgRleVLHSfxxSeX3cLrYkpQk4y4IB8g=) 6: 3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa (hash: I9Xm1cEngTYg6WB2t4U5k+twc9OnUGEq5Opc/dfrZDc=) 7: 3130332e3133352e37322e302f32322d3234203d3e203436303236.roa (hash: yzByHbO6Frok5mfNqGJAnbHUvCHTDaMTJ6hmg53mLQI=) 8: 3130332e3133352e37352e302f32342d3234203d3e203436303236.roa (hash: dn2LxIR2i9f98oBHTTzMm7c0l11yZxH5BdOjGXs/ET8=) 9: 3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa (hash: VSjVNeF6CQhhuIMP9VzYdgPpAyYTICUyURNkkRPZvf0=) 10: 3130332e3133352e37342e302f32332d3234203d3e203436303236.roa (hash: KXtJmDO4hKKtckmp6/OjWqYrbZ7ZmK12D4CTr8FodJE=) 11: 3137352e3131312e3131322e302f32342d3234203d3e203436303236.roa (hash: addoLGX7l1qN9yrFfHEwbDZZ1vggnAx8LkSg4qCXPoA=) 12: 3137352e3131312e3131342e302f32342d3234203d3e203436303236.roa (hash: +kWoeqncIsg2yG08LA8FNhnez+6IikrA0zXpF5e1dxk=) 13: 3130332e3133352e37332e302f32342d3234203d3e203436303236.roa (hash: lsw9Lj4TdivwiY9urFVLBPCnaQDyjQIHv9L2rFNGJcY=) 14: 3130332e3133352e37342e302f32342d3234203d3e203436303236.roa (hash: qZ2majG5cGcPiPcNAPu4jGy/H5NlD9ILAfwhNapK3KI=) 15: F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl (hash: Uc3cLlsj29hZ3487KEYKsqm3OjfHSTXp2PnvUlwevYw=) 16: 3130332e3133352e37322e302f32332d3234203d3e203436303236.roa (hash: rEgIPgrk+DS47tvTK2+eEPfHUVseXsnwTUUBVtEyooc=) 17: 3130332e3133352e37322e302f32342d3234203d3e203436303236.roa (hash: YN/2s31112uMwq4KT5YT8EMIK9P8Spv9BQ+gu6aYN4g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 04:40:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:2a:23:7e:21:f8:68:b1:51:5d:f5:02:9b:6a:b4:b2:cd:60:23:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Validity Not Before: Oct 25 20:56:27 2025 GMT Not After : Oct 29 04:40:27 2025 GMT Subject: CN=AB69FB813C395EDD5F31344F4092BF3AC1DE73C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e0:c5:56:e5:c8:a6:23:5b:fe:e1:03:27:9d: fc:af:d5:3f:32:8b:a4:f2:10:75:bb:25:33:ca:af: a1:21:c7:f6:92:a8:9a:c6:af:c8:0c:23:ab:6b:c3: b2:ce:45:8c:36:b3:d2:17:01:cf:47:01:06:a7:85: 0a:59:d0:81:97:12:15:b1:95:5a:a8:1c:43:5d:52: c5:56:1d:3e:b7:89:2f:c7:86:14:58:4f:62:f8:19: 20:03:53:19:58:64:a6:21:8a:77:8c:a1:cd:28:85: 1b:61:b4:70:ee:ef:db:21:da:3a:6b:77:12:54:70: cf:0b:8c:06:47:1b:a8:e6:7a:46:29:15:07:e3:c8: fa:ce:94:52:a5:a0:6c:c6:13:a2:a5:5f:a1:91:1a: 9e:7e:49:02:4b:e0:b2:85:a7:ac:4a:f3:77:04:c7: c6:e7:a3:c3:4a:f4:12:28:cc:4b:c3:b9:c7:76:51: 49:87:d6:ec:1a:fd:8d:b7:97:df:d0:08:6b:af:b4: 87:14:05:5a:60:b4:96:44:bf:be:5b:03:4e:49:39: 03:a0:8d:19:38:95:f9:70:74:e6:d7:4b:83:e3:e6: 21:56:cf:75:9b:84:0e:84:23:7d:52:2e:18:54:7e: 71:9b:30:da:29:72:28:fe:a6:70:8f:9a:48:35:50: 70:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:69:FB:81:3C:39:5E:DD:5F:31:34:4F:40:92:BF:3A:C1:DE:73:C3 X509v3 Authority Key Identifier: keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:0e:1c:d8:eb:ba:8b:aa:e5:df:a7:5c:e6:58:41:90:0e:e4: c0:33:71:52:ea:5e:81:c3:92:b7:2d:7d:84:1d:5c:02:0e:0d: 84:6b:38:1a:7d:b8:9e:8b:a2:ab:41:d0:39:0b:34:56:7a:7e: 6e:44:f0:07:5a:eb:ce:60:96:40:c8:cc:03:9e:23:0f:52:44: 17:03:6c:d7:1c:c2:f4:cb:a1:e1:8b:ae:3f:41:03:8a:4e:83: 82:f9:ec:cd:b9:2f:b4:2c:3b:5c:a1:8c:8e:8e:81:56:c4:a2: 7c:3a:d4:b4:87:4d:ab:d9:3e:6d:0b:b8:ce:ee:3d:29:d1:33: 08:41:23:01:da:8c:93:49:10:4f:f3:1e:17:01:8d:d1:25:cf: ca:b6:6a:05:47:84:25:44:9c:49:58:c3:95:f1:4d:1c:a1:14: 1a:0a:55:e3:b6:40:67:f6:21:de:c8:97:9b:32:c7:de:46:16: 46:55:58:a3:47:a5:ab:91:bd:bb:ac:46:4f:ac:fd:b7:ac:10: ac:06:f4:93:d4:57:78:aa:5f:ff:75:ef:17:9e:70:51:fe:b3: 20:d4:45:70:63:6b:bb:76:9a:0d:74:0c:0a:a5:df:e6:c8:ac: b3:7d:51:b4:00:b2:48:84:5b:0d:7c:fa:47:64:7c:1c:fa:1c: fc:0d:e3:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZSojfiH4aLFRXfUCm2q0ss1gI58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4 NDkwM0UxNzAeFw0yNTEwMjUyMDU2MjdaFw0yNTEwMjkwNDQwMjdaMDMxMTAvBgNV BAMTKEFCNjlGQjgxM0MzOTVFREQ1RjMxMzQ0RjQwOTJCRjNBQzFERTczQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo4MVW5cimI1v+4QMnnfyv1T8y i6TyEHW7JTPKr6Ehx/aSqJrGr8gMI6trw7LORYw2s9IXAc9HAQanhQpZ0IGXEhWx lVqoHENdUsVWHT63iS/HhhRYT2L4GSADUxlYZKYhineMoc0ohRthtHDu79sh2jpr dxJUcM8LjAZHG6jmekYpFQfjyPrOlFKloGzGE6KlX6GRGp5+SQJL4LKFp6xK83cE x8bno8NK9BIozEvDucd2UUmH1uwa/Y23l9/QCGuvtIcUBVpgtJZEv75bA05JOQOg jRk4lflwdObXS4Pj5iFWz3WbhA6EI31SLhhUfnGbMNopcij+pnCPmkg1UHBvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq2n7gTw5Xt1fMTRPQJK/OsHec8MwHwYDVR0j BBgwFoAU+MGaj4yw3chdHI5VY4+0NYSQPhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmY0ZWJjZC0yOWNmLTRlZWMtYTkyYS1kMTEzNmY1Zjk5MzYvMC9GOEMxOUE4RjhD QjBEREM4NUQxQzhFNTU2MzhGQjQzNTg0OTAzRTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4NDkw M0UxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZmNGViY2QtMjljZi00ZWVjLWE5 MmEtZDExMzZmNWY5OTM2LzAvRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0 MzU4NDkwM0UxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALIOHNjruouq5d+nXOZYQZAO5MAzcVLqXoHD krctfYQdXAIODYRrOBp9uJ6LoqtB0DkLNFZ6fm5E8Ada685glkDIzAOeIw9SRBcD bNccwvTLoeGLrj9BA4pOg4L57M25L7QsO1yhjI6OgVbEonw61LSHTavZPm0LuM7u PSnRMwhBIwHajJNJEE/zHhcBjdElz8q2agVHhCVEnElYw5XxTRyhFBoKVeO2QGf2 Id7Il5syx95GFkZVWKNHpauRvbusRk+s/besEKwG9JPUV3iqX/917xeecFH+syDU RXBja7t2mg10DAql3+bIrLN9UbQAskiEWw18+kdkfBz6HPwN42I= -----END CERTIFICATE-----Generated at Tue Oct 28 01:05:03 2025 by rpki-client