$ rpki-client -vvf repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft File: 0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft (raw, json) Hash identifier: alrN1FSTP21h5PxtsD4lwJhS9uDjl/j2mKPA/H6sVPQ= Subject key identifier: A3:B4:96:0D:65:53:53:F8:1C:74:F2:B6:C8:D6:EB:56:81:00:6F:EA Authority key identifier: 0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F Certificate issuer: /CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F Certificate serial: 66BB65DCAC035185A5DD88E3EFFD528783A878BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft Manifest number: 0252 Signing time: Tue 28 Oct 2025 09:51:21 +0000 Manifest this update: Tue 28 Oct 2025 09:46:21 +0000 Manifest next update: Fri 31 Oct 2025 21:31:21 +0000 Files and hashes: 1: 3130332e3232302e3131332e302f32342d3234203d3e20313333383237.roa (hash: KZ/MfJDGlUF+5FRxy7S8cNkPyicIqb4wdkx7H0nRfJc=) 2: 323430343a613634303a3133393a3a2f34382d3438203d3e20313333383237.roa (hash: DRnLhFvj0XZm0VXEZ42TGDJPOpd0ZTUBf7MwJZ8bqOE=) 3: 323430343a613634303a3935373a3a2f34382d3438203d3e20313333383237.roa (hash: FJlkjy7Zh6RrMJcyoFN5uq7ubbcgdbOVveGSZgScDgQ=) 4: 0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl (hash: 4pr1daZCIPoTYUZi5GdrVRVLeyBIG3BttRx9d0/zKhc=) 5: 3130332e39352e362e302f32342d3234203d3e20313333383237.roa (hash: vwui1qpHSvDVofVRy/Tt5fu+EupEaZj/9/a37EvMSjI=) 6: 3130332e39352e362e302f32332d3233203d3e20313333383237.roa (hash: uU+RiPAP5rA80po/0W6dMPifTVUm5kY6ALP/Ca/ACi0=) 7: 323430343a613634303a36363a3a2f34382d3438203d3e20313333383237.roa (hash: 2VTD3WI/p1+3+37bAKEOPoRJrNamvZNDqASz/hNbToE=) 8: 3130332e35352e3133392e302f32342d3234203d3e20313333383237.roa (hash: NRTKisssuBxZObjpfMlPvnnfb3JZpeBG9KHtEvhVsJY=) 9: 323430343a613634303a3a2f33322d3332203d3e20313333383237.roa (hash: X36QLgVhGJ49HLtt76O3IZYZ5R6XiQpbmzY9UR5vonE=) 10: 3130332e39352e372e302f32342d3234203d3e20313333383237.roa (hash: I9GyAIe3s6r5o1IVue8LyW9A/cEmB+1nHgZeZ+VKm1g=) 11: 323430343a613634303a3131333a3a2f34382d3438203d3e20313333383237.roa (hash: k78QygJvZC5uoGv2K0v+mQ5YwQ0X8MznZdn5hmtLPD8=) 12: 323430343a613634303a3935363a3a2f34382d3438203d3e20313333383237.roa (hash: TdPV1Ae9NsfX/q2I6yHzDhMS8SBCOPuv6qM2EykOC0U=) 13: 323430343a613634303a36323a3a2f34382d3438203d3e20313333383237.roa (hash: jBGgrMGnibBJ35+neDfX4MwBNDGqqmS27hN6Fi2jltI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 17:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:bb:65:dc:ac:03:51:85:a5:dd:88:e3:ef:fd:52:87:83:a8:78:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F Validity Not Before: Oct 28 09:46:21 2025 GMT Not After : Oct 31 21:31:21 2025 GMT Subject: CN=A3B4960D655353F81C74F2B6C8D6EB5681006FEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:77:17:30:1a:5b:ba:6c:b5:14:60:ba:94:26: 05:ea:ed:5a:1e:0b:6b:d1:07:9e:d8:be:d4:7c:02: 91:aa:00:7d:51:2a:04:ee:32:f3:32:f2:12:54:4e: 13:50:57:96:13:63:ca:10:cd:bf:c4:fd:73:83:b7: 47:fc:f9:4c:dc:fb:f6:b6:ca:41:09:33:90:40:06: 91:2e:d1:66:dd:a4:ca:bb:32:28:eb:93:db:fb:f2: 0e:21:a8:69:b7:7d:1c:f2:eb:0a:31:d9:0b:d8:20: 5c:11:e7:50:36:4e:9b:1d:73:b7:8a:c3:8c:57:92: 1d:a7:ef:0b:50:a5:a8:02:5d:10:98:43:f7:09:68: c3:8a:d5:6e:c0:95:50:ce:48:16:18:99:05:40:3e: 55:d5:60:b2:ef:36:8f:b1:bb:46:a3:38:dd:79:ed: c9:bd:b3:7d:2f:04:6b:d4:37:31:60:2c:56:43:ca: 21:84:62:ad:56:a0:05:24:21:c2:5e:2e:b3:48:74: 3e:36:2b:b0:fd:b2:83:58:f8:31:f8:1c:18:2f:ed: e7:0e:c0:d8:2b:8a:55:7d:c1:f5:d3:7a:8a:49:10: 59:4e:3f:97:88:aa:0f:74:78:ee:92:46:3f:cf:57: 95:db:d8:ea:ea:10:fe:51:30:eb:1a:ea:42:1d:46: 14:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B4:96:0D:65:53:53:F8:1C:74:F2:B6:C8:D6:EB:56:81:00:6F:EA X509v3 Authority Key Identifier: keyid:0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:e8:0d:4b:6f:0a:80:ce:05:61:91:b8:59:5e:f3:3e:83:a4: c4:11:5b:7b:91:93:31:fa:3a:9e:ef:73:05:71:46:d1:6e:2e: 87:ae:60:af:72:3c:02:89:9f:18:1a:68:a1:cc:9d:a0:ba:cd: b2:71:f8:8e:75:19:65:80:0c:d7:41:ea:3b:e8:8d:96:56:6c: c4:de:46:f9:84:45:27:ff:80:47:1e:4c:59:23:de:8f:c5:04: de:7e:fe:22:56:62:99:b1:a2:22:37:dc:5b:e0:f9:4e:83:85: c3:0b:0e:e3:2d:ec:a9:ed:d0:c8:e9:94:ec:77:04:11:0c:2f: 19:a5:c0:85:92:c4:79:1e:88:e4:bd:4a:a2:2c:15:42:23:44: 47:f3:9d:a2:8f:e9:c8:01:cb:58:b6:dc:b9:e0:c7:b8:dd:9e: c8:56:fe:e3:54:3a:56:7b:29:f8:04:a5:f6:ed:0f:db:6d:36: 40:25:4e:58:0f:5b:d9:1d:c5:8b:d1:3f:33:7f:1f:4a:32:1d: c9:ae:48:30:67:b7:5c:d3:7b:7a:ab:bd:f9:18:1f:bd:9d:8b: 35:6c:9a:66:17:e6:69:27:c9:a3:90:d5:92:2f:ce:7d:25:09: cc:3a:da:11:a6:f9:01:27:fc:ed:46:5f:7b:5c:49:a8:42:82: 59:40:97:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZrtl3KwDUYWl3Yjj7/1Sh4OoeLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFNkE3OUQ1M0Q4MjlGMkE1NTYyMzY3NkU4RDJBOUE1 NjlGODM2RjAeFw0yNTEwMjgwOTQ2MjFaFw0yNTEwMzEyMTMxMjFaMDMxMTAvBgNV BAMTKEEzQjQ5NjBENjU1MzUzRjgxQzc0RjJCNkM4RDZFQjU2ODEwMDZGRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmdxcwGlu6bLUUYLqUJgXq7Voe C2vRB57YvtR8ApGqAH1RKgTuMvMy8hJUThNQV5YTY8oQzb/E/XODt0f8+Uzc+/a2 ykEJM5BABpEu0WbdpMq7Mijrk9v78g4hqGm3fRzy6wox2QvYIFwR51A2Tpsdc7eK w4xXkh2n7wtQpagCXRCYQ/cJaMOK1W7AlVDOSBYYmQVAPlXVYLLvNo+xu0ajON15 7cm9s30vBGvUNzFgLFZDyiGEYq1WoAUkIcJeLrNIdD42K7D9soNY+DH4HBgv7ecO wNgrilV9wfXTeopJEFlOP5eIqg90eO6SRj/PV5Xb2OrqEP5RMOsa6kIdRhQ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo7SWDWVTU/gcdPK2yNbrVoEAb+owHwYDVR0j BBgwFoAUDOannVPYKfKlViNnbo0qmlafg28wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTk5MDEyNS02MDlhLTQ4YzgtYWM4Ni0xYzNiYzMxNWJhZDYvMC8wQ0U2QTc5RDUz RDgyOUYyQTU1NjIzNjc2RThEMkE5QTU2OUY4MzZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFNkE3OUQ1M0Q4MjlGMkE1NTYyMzY3NkU4RDJBOUE1NjlG ODM2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE5OTAxMjUtNjA5YS00OGM4LWFj ODYtMWMzYmMzMTViYWQ2LzAvMENFNkE3OUQ1M0Q4MjlGMkE1NTYyMzY3NkU4RDJB OUE1NjlGODM2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAInoDUtvCoDOBWGRuFle8z6DpMQRW3uRkzH6 Op7vcwVxRtFuLoeuYK9yPAKJnxgaaKHMnaC6zbJx+I51GWWADNdB6jvojZZWbMTe RvmERSf/gEceTFkj3o/FBN5+/iJWYpmxoiI33Fvg+U6DhcMLDuMt7Knt0MjplOx3 BBEMLxmlwIWSxHkeiOS9SqIsFUIjREfznaKP6cgBy1i23Lngx7jdnshW/uNUOlZ7 KfgEpfbtD9ttNkAlTlgPW9kdxYvRPzN/H0oyHcmuSDBnt1zTe3qrvfkYH72dizVs mmYX5mknyaOQ1ZIvzn0lCcw62hGm+QEn/O1GX3tcSahCgllAl4M= -----END CERTIFICATE-----Generated at Tue Oct 28 15:47:55 2025 by rpki-client