$ rpki-client -vvf repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft File: C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft (raw, json) Hash identifier: iUN65BOPAlLbqcQonwPlcm5k/S/agJCIznpyHlHQ54s= Subject key identifier: 8E:8D:BD:1D:79:3F:70:AF:13:51:CE:1A:81:10:F0:18:B0:FE:B8:02 Authority key identifier: C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E Certificate issuer: /CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E Certificate serial: 0F60E0748593E46AA121E7854C75C1573F4516E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft Manifest number: 0523 Signing time: Wed 29 Oct 2025 05:41:56 +0000 Manifest this update: Wed 29 Oct 2025 05:36:56 +0000 Manifest next update: Sat 01 Nov 2025 15:15:56 +0000 Files and hashes: 1: 323430333a626130303a3630303a3a2f34302d3438203d3e203234353231.roa (hash: 3d/V5R3s99pTSM8/puBLUbnmOCHIHkwIjm/VO8zQunM=) 2: 3230332e38392e32342e302f32312d3234203d3e203234353231.roa (hash: 25bjKMZwqQbYi5jKvGEGUrT2NIQ4GwrYcOU6Y3FnIcI=) 3: 323430333a626130303a3730303a3a2f34302d3438203d3e203234353231.roa (hash: zubx4XjBq87KwKwie4SbJb3Fj1Zuzvqgr/H/hHvCf/0=) 4: C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl (hash: VpSJo2GKpPbMa4zO5jL91B+4DiLafvMqy5DxTcHC9x4=) 5: 3132332e3235352e3230302e302f32312d3234203d3e203234353231.roa (hash: 6LyyJJeV4MUKQUmSmy0p8Z51yI1Vj4eAExDWuf2DxM8=) 6: 3131322e3130392e31362e302f32312d3234203d3e203234353231.roa (hash: okeDaf7d0Xuvp8xnTxJzUWPegOkeMCYHPs8G9yAmQ6Y=) 7: 3131392e38322e3234302e302f32312d3234203d3e203234353231.roa (hash: UQj5o2r9jrF7gwD6zEDeivAaIC1EoryECU1Z4pufDeg=) 8: 3130332e3231352e32342e302f32322d3234203d3e2039333431.roa (hash: XTblwJ4OpupQKVM3L+0VPdo1vzAlW+UZ6yrctqElG0s=) 9: 3137352e3138342e3233322e302f32322d3234203d3e2039333431.roa (hash: /NJYIz5c5OxCtCzAI9eMSZnnK2DRsoEPFpGekXPN3/Y=) 10: 323430333a626130303a3a2f33322d3438203d3e203234353231.roa (hash: B9qLkdqrOWwVF5tA2jsrqX21V3LrtEAcPvXr3jC/ETM=) 11: 3137352e3138342e3233382e302f32332d3234203d3e20313334363534.roa (hash: MG/J/pE598W0dSws8CxeYL22B2yFb4db9pJ8veM+SQU=) 12: 3137352e3138342e3232342e302f32312d3234203d3e203234353231.roa (hash: trFC+pX4oMn7rw9va8+zapompho+fZFvfIyOd+ou6p0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 15:15:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:60:e0:74:85:93:e4:6a:a1:21:e7:85:4c:75:c1:57:3f:45:16:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E Validity Not Before: Oct 29 05:36:56 2025 GMT Not After : Nov 1 15:15:56 2025 GMT Subject: CN=8E8DBD1D793F70AF1351CE1A8110F018B0FEB802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e7:5c:1d:7f:1c:5e:68:6e:f9:2e:a5:f8:e1: 2b:dd:bf:82:4a:2d:58:de:2f:7d:a9:59:27:b2:cb: 86:0c:7e:47:9d:5e:6c:54:d0:86:e5:c4:b1:0b:06: d5:91:2e:81:91:c0:7c:36:11:a5:e3:b4:35:1b:67: da:0e:7e:5b:60:7a:fa:99:f8:51:b2:5e:9d:de:1a: 88:a2:ea:63:ab:85:80:64:2d:e9:3c:ce:a1:af:9f: ad:08:80:85:7d:14:28:27:ed:eb:03:05:10:e9:13: 8c:76:3b:07:e7:ef:2f:b7:8d:6c:80:c7:80:ef:fb: cb:d1:00:f9:48:ae:9a:3c:12:33:e9:6a:77:9c:e1: 6d:71:96:fd:11:76:94:9e:c3:56:71:d8:73:dc:af: f5:e3:0f:48:d1:12:c5:61:04:ba:2c:29:05:17:6f: cb:fc:c1:ae:e2:51:45:b6:c5:36:0a:de:ef:4b:6b: d1:dd:83:da:e1:01:0a:84:6c:3e:a9:71:e5:96:b2: e9:a1:86:be:44:dc:47:b8:42:80:e4:ca:57:2b:74: bb:db:3a:8e:2c:bf:64:7c:64:fe:03:1e:a9:48:8a: 3e:9a:e8:68:18:fc:cd:ee:ab:12:0e:fb:d3:11:1a: ba:d2:bc:16:3c:e3:81:a9:63:40:9a:8a:ae:1e:0d: cc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8D:BD:1D:79:3F:70:AF:13:51:CE:1A:81:10:F0:18:B0:FE:B8:02 X509v3 Authority Key Identifier: keyid:C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:74:f2:bd:b7:87:d1:5c:ae:5a:4b:6c:ff:bf:fe:90:86:c5: 0a:3c:a3:64:e0:4a:e9:91:08:e3:d2:32:98:80:70:db:72:f2: e1:f7:8a:33:f9:67:e1:8b:23:25:cb:7b:5e:c0:c2:9d:f2:e8: e8:64:fd:3e:4b:88:0f:87:70:20:b6:50:3f:73:86:f1:65:e3: 8b:ef:ff:77:8a:2c:51:af:a2:8e:6a:4f:a7:55:9b:47:2d:0f: a0:2b:7b:42:f7:65:91:dd:60:1d:d3:ca:ff:bc:dd:32:e5:35: 8f:a5:c0:de:9d:4c:79:01:73:6d:ba:f9:e7:db:5c:f6:55:5a: 98:1d:b1:91:44:1e:21:97:dc:c3:de:55:fa:ba:32:f0:a8:5d: aa:e7:bb:f2:c0:42:5f:f5:6e:9b:e1:0d:44:4f:99:4a:f8:b7: 37:12:a1:36:5a:ed:72:79:df:39:1a:1e:92:2d:bf:69:3e:ce: 3d:5e:09:2c:53:40:ab:ee:6c:30:ef:26:a3:ba:c8:9b:e2:82: 97:45:6b:59:b4:48:8a:87:34:8e:a2:6b:46:de:c3:c4:65:e7: f6:af:e4:32:6f:e9:6f:fa:a4:33:5d:24:99:0c:c7:1b:93:c7: 33:55:c9:bd:02:82:55:b8:1c:20:ec:91:80:07:0a:5c:a8:1a: 47:51:c4:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD2DgdIWT5GqhIeeFTHXBVz9FFukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgz QjI3MUUzRTAeFw0yNTEwMjkwNTM2NTZaFw0yNTExMDExNTE1NTZaMDMxMTAvBgNV BAMTKDhFOERCRDFENzkzRjcwQUYxMzUxQ0UxQTgxMTBGMDE4QjBGRUI4MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX51wdfxxeaG75LqX44Svdv4JK LVjeL32pWSeyy4YMfkedXmxU0IblxLELBtWRLoGRwHw2EaXjtDUbZ9oOfltgevqZ +FGyXp3eGoii6mOrhYBkLek8zqGvn60IgIV9FCgn7esDBRDpE4x2Owfn7y+3jWyA x4Dv+8vRAPlIrpo8EjPpanec4W1xlv0RdpSew1Zx2HPcr/XjD0jREsVhBLosKQUX b8v8wa7iUUW2xTYK3u9La9Hdg9rhAQqEbD6pceWWsumhhr5E3Ee4QoDkylcrdLvb Oo4sv2R8ZP4DHqlIij6a6GgY/M3uqxIO+9MRGrrSvBY844GpY0Caiq4eDcz/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjo29HXk/cK8TUc4agRDwGLD+uAIwHwYDVR0j BBgwFoAUw/dF7ef0wNjlZ0lltSCACDsnHj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDljMjJiMS0xYjdiLTQ2NzEtYWI5NC01YzVlNzQ4ODI1NDcvMC9DM0Y3NDVFREU3 RjRDMEQ4RTU2NzQ5NjVCNTIwODAwODNCMjcxRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgzQjI3 MUUzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA5YzIyYjEtMWI3Yi00NjcxLWFi OTQtNWM1ZTc0ODgyNTQ3LzAvQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgw MDgzQjI3MUUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGV08r23h9FcrlpLbP+//pCGxQo8o2TgSumR COPSMpiAcNty8uH3ijP5Z+GLIyXLe17Awp3y6Ohk/T5LiA+HcCC2UD9zhvFl44vv /3eKLFGvoo5qT6dVm0ctD6Are0L3ZZHdYB3Tyv+83TLlNY+lwN6dTHkBc226+efb XPZVWpgdsZFEHiGX3MPeVfq6MvCoXarnu/LAQl/1bpvhDURPmUr4tzcSoTZa7XJ5 3zkaHpItv2k+zj1eCSxTQKvubDDvJqO6yJvigpdFa1m0SIqHNI6ia0bew8Rl5/av 5DJv6W/6pDNdJJkMxxuTxzNVyb0CglW4HCDskYAHClyoGkdRxAg= -----END CERTIFICATE-----Generated at Thu Oct 30 15:08:09 2025 by rpki-client