$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft File: 10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft (raw, json) Hash identifier: 9F2NJt43flZP2xtrDICcwzE0bKlT1/5bSA/94aaGGKE= Subject key identifier: 8E:0F:85:2D:72:BE:DD:50:6F:99:38:5D:E7:3D:9D:C6:AE:69:CE:46 Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 Certificate issuer: /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Certificate serial: 1F299F28C7C42155E39607DF575805A5C71834ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft Manifest number: 0237 Signing time: Mon 08 Sep 2025 17:10:06 +0000 Manifest this update: Mon 08 Sep 2025 17:05:06 +0000 Manifest next update: Fri 12 Sep 2025 03:10:06 +0000 Files and hashes: 1: 3230322e3135342e35302e302f32332d3234203d3e2034343334.roa (hash: ZwNK0Xv1at3vOxD5KziQbyzmahFiznfplJZrfw6LVYc=) 2: 3230322e3135342e33342e302f32332d3234203d3e2034343334.roa (hash: MzgA2YxM0khqae/ptQuHX/BFpukLulpQzzyxYbZDPG0=) 3: 3230322e3135342e31322e302f32332d3234203d3e20313439373037.roa (hash: fP4hNA2uEzHr5eJDUSmt0gsGgJey+aWljQi65QQOvIM=) 4: 3230322e3135342e33382e302f32332d3234203d3e2034343334.roa (hash: rNppIf8F2LO9ttcZ+I/37ceEFJwOBMDyipMsXaPL1RI=) 5: 323430313a353430303a3a2f33322d3438203d3e2034343334.roa (hash: 5f2FENCYdZXpfDtDA/XrlMk1aTtzTsaccWLZkB2kYFw=) 6: 3230322e3135342e32382e302f32332d3234203d3e2034343334.roa (hash: Xkr9+BbgKkdOfIp7/uVWYj8j5BExvm2wckS+wmywVpQ=) 7: 3230322e3135342e302e302f32332d3234203d3e2034343334.roa (hash: TW2qfwk3IyXXvVlUvaAuu++R07uPcCvy5DroHQeD+Lk=) 8: 3230322e3135342e31362e302f32342d3234203d3e2034343334.roa (hash: vKyqlEzg+lvdvHXGjSmu3QaN4+K+ytrNGj7etZcdkAE=) 9: 3230322e3135342e32362e302f32332d3234203d3e2034343334.roa (hash: CwyffnaKtta7KHb+tUcPUodR6E/TMa/wisbD1itoBCw=) 10: 3230322e3135342e34382e302f32332d3234203d3e2034343334.roa (hash: DaIodEZrzZG05f+8VX+aOIeWfOOtKUPSWikxuJEpgtc=) 11: 3230322e3135342e322e302f32332d3234203d3e2034343334.roa (hash: prehUBKAJRsXNRzub7IjmH4pzZvSPoY6oCS3XrResb0=) 12: 3230322e3135342e35322e302f32332d3234203d3e2034343334.roa (hash: 2nYYyutoGWkE+9lnwbwlBQoePgSFCd9w/Rekw2BCuB0=) 13: 3230322e3135342e34342e302f32332d3234203d3e20313338383836.roa (hash: lZqH3Wsutt6yR+euDDRxJPNsXm0m+fe89x8M/G2u/kc=) 14: 3230322e3135342e32302e302f32332d3234203d3e2034343334.roa (hash: R3EsVF/rVF9GRFERCiXvXBkGIwN6HbirIt+4zyYoihQ=) 15: 3230322e3135342e34362e302f32332d3234203d3e2034343334.roa (hash: OWGMoEG1lPBEVjHdWPD2zCFlFFjFg3fE02fnHF45KEQ=) 16: 3230322e3135342e35342e302f32332d3234203d3e2034343334.roa (hash: lviZifemLU2cD4+pVzpiyUp8vIfCZH1cla4y37uixhQ=) 17: 3230322e3135342e32342e302f32332d3234203d3e2034343334.roa (hash: h2s96Qstcyq7E0bAgUdcFLvK8+Ts47MJxuRaUmmKHN8=) 18: 3230322e3135342e342e302f32332d3234203d3e2034343334.roa (hash: zy6Fupv3AJ26AG5UP/vrLfDISpdi8U43rAH28JZL364=) 19: 3230322e3135342e33362e302f32332d3234203d3e20313431363037.roa (hash: 4azYJIfIwLBN6QOXYJQcD/4KChhMtRRTK+Od9tKQdq8=) 20: 3230322e3135342e31352e302f32342d3234203d3e20313431383938.roa (hash: vsJ5WzGp45gbxGKZxt2QqXdYE6+x8XFID1b6vdf5F10=) 21: 3230322e3135342e382e302f32332d3234203d3e2034343334.roa (hash: tqpMYz/ZkYn8sUWXFAqxRbeip8ri+G7y4b0Q2b0ck8M=) 22: 3230322e3135342e31392e302f32342d3234203d3e20313336313231.roa (hash: quIdMhaf0vXebgLUGTIXSCgmeKOwgEYI4nVp9GxaH5Y=) 23: 3230322e3135342e302e302f31382d3231203d3e2034343334.roa (hash: rsQ1KgfXFTEvdfrP64vDIgpHjFUl2VwPlIuni6poiTo=) 24: 10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl (hash: yRUdVh0FPrBhuak3RKG7pPWg0bvROZOLMQX0RAJbiGM=) 25: 3230322e3135342e362e302f32332d3234203d3e2034343334.roa (hash: aY+USAt3i9dXs8Pocpjb3Zx+aejvpG49dttCddEYYyI=) 26: 3230322e3135342e31342e302f32342d3234203d3e20313431383938.roa (hash: eejvEtGLXBzzi2i/vzy4cv+5D99T4UxeexhjMPGnxwg=) 27: 3230322e3135342e35362e302f32312d3234203d3e2034343334.roa (hash: P0VFn+JZdOuKkPpgn7zOvihIkYl4NBYzNYbtHo3aUmY=) 28: 3230322e3135342e34322e302f32332d3234203d3e2034343334.roa (hash: oeTYohibSnnZXim+ZkL35QfrvFfJfarGJPwa9aJT2lg=) 29: 3230322e3135342e33302e302f32332d3234203d3e2034343334.roa (hash: m2nps6x8EfBgsrcE+Om9IhpeYnfvgVJdaRLu8yl2PQk=) 30: 3230322e3135342e32322e302f32332d3234203d3e2034343334.roa (hash: IsumY/LI2eWKioFFgecYu3SgypZBZRPgSeAtc5+YVks=) 31: 3230322e3135342e31372e302f32342d3234203d3e20313431363037.roa (hash: ZdrDVhTZzeAMKvH8VvLNOfqWv2uHby+NF47je/9ASIY=) 32: 3230322e3135342e31312e302f32342d3234203d3e20313431383938.roa (hash: 54Ljt7w2+3bCs/X+gNAM1B6kN/UFpf/bAD72tus+++8=) 33: 3230322e3135342e33322e302f32332d3234203d3e2034343334.roa (hash: pMd4eDdEkhnUdJLoDzXpUzpPwYHKSmcWxXYsb8lhMxE=) 34: 3230322e3135342e31382e302f32332d3234203d3e20313336313231.roa (hash: uOcunMNIUambPFjsToEaFnaHkhPIcAuSOtw/k5oRB6o=) 35: 3230322e3135342e31302e302f32342d3234203d3e2034343334.roa (hash: pnwu5dYlD3OB20NKuyrhB7Yn5CWVKSACtOFhy4ysI5I=) 36: 3230322e3135342e34302e302f32332d3234203d3e2034343334.roa (hash: 079mJlZrMuzPvRxbYY/XHaN6hL2KXO61c1yJFwg9zWU=) 37: 3230322e3135342e31382e302f32342d3234203d3e20313336313231.roa (hash: zOrekVHKDlRTk2Cm8y3kE2iNwTc4NxHsl+gpBFdmBQw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 02:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:29:9f:28:c7:c4:21:55:e3:96:07:df:57:58:05:a5:c7:18:34:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Validity Not Before: Sep 8 17:05:06 2025 GMT Not After : Sep 12 03:10:06 2025 GMT Subject: CN=8E0F852D72BEDD506F99385DE73D9DC6AE69CE46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c8:0e:51:8f:78:6d:e7:8a:10:e6:32:8c:76: e7:94:4d:1a:46:00:0f:cf:09:8b:b7:f4:fc:46:d4: 21:e9:27:61:12:d1:1d:af:45:fd:0b:56:74:2d:ee: 84:97:f4:b2:7a:6c:8a:7c:31:71:4d:8c:d5:2a:72: c4:d6:31:32:1f:24:88:a1:c7:36:8c:00:4c:22:b2: a0:8b:08:1c:30:d6:a1:50:81:bf:26:ec:1c:b9:a5: d8:4e:35:e3:88:11:9a:45:96:68:66:97:e6:5b:88: 14:1e:64:01:ac:ed:a2:8d:8c:cd:f5:13:ab:cc:8b: fb:72:1f:3a:1f:40:c3:bf:e5:6d:8f:26:b9:c6:8a: b4:44:0a:71:f1:4d:ed:36:24:8a:29:3f:cc:ae:2e: 58:89:ac:91:9e:76:3b:58:00:5c:ae:ab:22:07:6a: 96:2e:5b:99:04:a1:57:16:cf:68:e7:77:ac:70:e6: 52:51:4d:9e:10:28:6e:f6:1a:30:74:76:d7:e0:ea: 93:12:3d:ff:74:43:c3:f6:e6:06:09:a1:46:6f:36: a1:20:32:9c:4a:6e:9b:07:32:51:c3:7a:f1:71:c8: ff:0a:9e:f2:23:81:27:9c:13:a2:56:b4:5d:70:d3: 17:4c:9b:54:ef:2f:9c:73:e1:84:b4:3b:be:34:e5: e7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:0F:85:2D:72:BE:DD:50:6F:99:38:5D:E7:3D:9D:C6:AE:69:CE:46 X509v3 Authority Key Identifier: keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:43:bc:85:94:a2:9c:91:6d:40:97:27:df:36:87:fa:1f:bd: 45:2d:2e:b4:d5:c7:8f:5b:71:bf:b2:83:a5:55:a5:6f:f6:9f: cb:e5:3f:a3:9f:12:56:3b:bd:35:86:cc:d7:88:95:ca:28:e0: 9e:4e:3a:74:a0:76:f3:d5:6d:77:85:4d:af:b9:9d:60:9b:52: f3:55:78:6f:83:ba:ee:41:9d:45:bc:f6:0c:02:bc:21:38:20: fa:01:57:e3:7f:5e:d1:fb:19:c5:57:97:ab:aa:27:e3:cc:a3: cc:7a:9c:56:b9:c4:e6:ac:1a:21:14:97:7c:d6:e7:ed:d1:a2: 33:57:47:74:6f:2d:09:01:18:76:c9:fe:a9:7d:62:15:71:09: 65:b0:1f:f7:ba:21:5a:69:48:d3:5f:8a:1b:bc:72:c4:d5:8d: 0f:b3:7a:54:35:41:58:c0:ab:90:fa:b9:73:d7:1b:7c:ad:14: fd:ea:20:48:48:66:f4:bc:5a:40:5e:23:fc:1c:6e:09:67:24: 74:24:53:08:b0:68:ec:5e:ea:24:81:90:92:2a:18:83:b7:96: 28:62:31:6f:f6:71:cf:fb:e1:95:da:50:f6:e1:28:7c:5d:14: e4:c0:a6:ce:06:61:05:c7:4d:09:bd:78:f2:af:93:0b:5e:22: 70:8e:96:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHymfKMfEIVXjlgffV1gFpccYNO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5 QUU5MjdGNjAeFw0yNTA5MDgxNzA1MDZaFw0yNTA5MTIwMzEwMDZaMDMxMTAvBgNV BAMTKDhFMEY4NTJENzJCRURENTA2Rjk5Mzg1REU3M0Q5REM2QUU2OUNFNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/yA5Rj3ht54oQ5jKMdueUTRpG AA/PCYu39PxG1CHpJ2ES0R2vRf0LVnQt7oSX9LJ6bIp8MXFNjNUqcsTWMTIfJIih xzaMAEwisqCLCBww1qFQgb8m7By5pdhONeOIEZpFlmhml+ZbiBQeZAGs7aKNjM31 E6vMi/tyHzofQMO/5W2PJrnGirRECnHxTe02JIopP8yuLliJrJGedjtYAFyuqyIH apYuW5kEoVcWz2jnd6xw5lJRTZ4QKG72GjB0dtfg6pMSPf90Q8P25gYJoUZvNqEg MpxKbpsHMlHDevFxyP8KnvIjgSecE6JWtF1w0xdMm1TvL5xz4YS0O7405ecpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjg+FLXK+3VBvmThd5z2dxq5pzkYwHwYDVR0j BBgwFoAUEPAPrm8Lk6vclWKKzjw8GJrpJ/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzBjMTRhOS0zYTc3LTQ5ZTItOTE5NC00OGQwOTEzNDU4YjIvMC8xMEYwMEZBRTZG MEI5M0FCREM5NTYyOEFDRTNDM0MxODlBRTkyN0Y2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5QUU5 MjdGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWMwYzE0YTktM2E3Ny00OWUyLTkx OTQtNDhkMDkxMzQ1OGIyLzAvMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzND MTg5QUU5MjdGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxDvIWUopyRbUCXJ982h/ofvUUtLrTVx49b cb+yg6VVpW/2n8vlP6OfElY7vTWGzNeIlcoo4J5OOnSgdvPVbXeFTa+5nWCbUvNV eG+Duu5BnUW89gwCvCE4IPoBV+N/XtH7GcVXl6uqJ+PMo8x6nFa5xOasGiEUl3zW 5+3RojNXR3RvLQkBGHbJ/ql9YhVxCWWwH/e6IVppSNNfihu8csTVjQ+zelQ1QVjA q5D6uXPXG3ytFP3qIEhIZvS8WkBeI/wcbglnJHQkUwiwaOxe6iSBkJIqGIO3lihi MW/2cc/74ZXaUPbhKHxdFOTAps4GYQXHTQm9ePKvkwteInCOlvs= -----END CERTIFICATE-----Generated at Tue Sep 9 02:24:14 2025 by rpki-client