$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft File: 10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft (raw, json) Hash identifier: VsRpyThrWxPkYaWJHDxHiWHmPNtCXby5cfDBriAsgdQ= Subject key identifier: 6B:94:C1:7C:73:0F:C3:E0:EF:19:ED:C3:60:92:1E:3E:F1:93:FC:8A Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 Certificate issuer: /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Certificate serial: 0C95F5B65728FE3BA2D40706202ACCBB5D0D0F84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft Manifest number: 024D Signing time: Tue 28 Oct 2025 10:30:06 +0000 Manifest this update: Tue 28 Oct 2025 10:25:06 +0000 Manifest next update: Fri 31 Oct 2025 10:33:06 +0000 Files and hashes: 1: 3230322e3135342e33302e302f32332d3234203d3e2034343334.roa (hash: m2nps6x8EfBgsrcE+Om9IhpeYnfvgVJdaRLu8yl2PQk=) 2: 3230322e3135342e362e302f32332d3234203d3e2034343334.roa (hash: aY+USAt3i9dXs8Pocpjb3Zx+aejvpG49dttCddEYYyI=) 3: 3230322e3135342e31302e302f32342d3234203d3e2034343334.roa (hash: pnwu5dYlD3OB20NKuyrhB7Yn5CWVKSACtOFhy4ysI5I=) 4: 3230322e3135342e34362e302f32332d3234203d3e2034343334.roa (hash: OWGMoEG1lPBEVjHdWPD2zCFlFFjFg3fE02fnHF45KEQ=) 5: 3230322e3135342e33322e302f32332d3234203d3e2034343334.roa (hash: pMd4eDdEkhnUdJLoDzXpUzpPwYHKSmcWxXYsb8lhMxE=) 6: 3230322e3135342e33342e302f32332d3234203d3e2034343334.roa (hash: MzgA2YxM0khqae/ptQuHX/BFpukLulpQzzyxYbZDPG0=) 7: 3230322e3135342e32322e302f32332d3234203d3e2034343334.roa (hash: IsumY/LI2eWKioFFgecYu3SgypZBZRPgSeAtc5+YVks=) 8: 3230322e3135342e31362e302f32342d3234203d3e2034343334.roa (hash: vKyqlEzg+lvdvHXGjSmu3QaN4+K+ytrNGj7etZcdkAE=) 9: 3230322e3135342e32362e302f32332d3234203d3e2034343334.roa (hash: CwyffnaKtta7KHb+tUcPUodR6E/TMa/wisbD1itoBCw=) 10: 3230322e3135342e31372e302f32342d3234203d3e20313431363037.roa (hash: ZdrDVhTZzeAMKvH8VvLNOfqWv2uHby+NF47je/9ASIY=) 11: 3230322e3135342e342e302f32332d3234203d3e2034343334.roa (hash: zy6Fupv3AJ26AG5UP/vrLfDISpdi8U43rAH28JZL364=) 12: 3230322e3135342e302e302f31382d3231203d3e2034343334.roa (hash: rsQ1KgfXFTEvdfrP64vDIgpHjFUl2VwPlIuni6poiTo=) 13: 3230322e3135342e32342e302f32332d3234203d3e2034343334.roa (hash: h2s96Qstcyq7E0bAgUdcFLvK8+Ts47MJxuRaUmmKHN8=) 14: 3230322e3135342e33382e302f32332d3234203d3e2034343334.roa (hash: rNppIf8F2LO9ttcZ+I/37ceEFJwOBMDyipMsXaPL1RI=) 15: 3230322e3135342e35342e302f32332d3234203d3e2034343334.roa (hash: lviZifemLU2cD4+pVzpiyUp8vIfCZH1cla4y37uixhQ=) 16: 3230322e3135342e31382e302f32342d3234203d3e20313336313231.roa (hash: zOrekVHKDlRTk2Cm8y3kE2iNwTc4NxHsl+gpBFdmBQw=) 17: 3230322e3135342e31382e302f32332d3234203d3e20313336313231.roa (hash: uOcunMNIUambPFjsToEaFnaHkhPIcAuSOtw/k5oRB6o=) 18: 3230322e3135342e31392e302f32342d3234203d3e20313336313231.roa (hash: quIdMhaf0vXebgLUGTIXSCgmeKOwgEYI4nVp9GxaH5Y=) 19: 3230322e3135342e34342e302f32332d3234203d3e20313338383836.roa (hash: lZqH3Wsutt6yR+euDDRxJPNsXm0m+fe89x8M/G2u/kc=) 20: 3230322e3135342e31312e302f32342d3234203d3e20313431383938.roa (hash: 54Ljt7w2+3bCs/X+gNAM1B6kN/UFpf/bAD72tus+++8=) 21: 3230322e3135342e34302e302f32332d3234203d3e2034343334.roa (hash: 079mJlZrMuzPvRxbYY/XHaN6hL2KXO61c1yJFwg9zWU=) 22: 3230322e3135342e35302e302f32332d3234203d3e2034343334.roa (hash: ZwNK0Xv1at3vOxD5KziQbyzmahFiznfplJZrfw6LVYc=) 23: 3230322e3135342e34382e302f32332d3234203d3e2034343334.roa (hash: DaIodEZrzZG05f+8VX+aOIeWfOOtKUPSWikxuJEpgtc=) 24: 3230322e3135342e322e302f32332d3234203d3e2034343334.roa (hash: prehUBKAJRsXNRzub7IjmH4pzZvSPoY6oCS3XrResb0=) 25: 3230322e3135342e382e302f32332d3234203d3e2034343334.roa (hash: tqpMYz/ZkYn8sUWXFAqxRbeip8ri+G7y4b0Q2b0ck8M=) 26: 3230322e3135342e35322e302f32332d3234203d3e2034343334.roa (hash: 2nYYyutoGWkE+9lnwbwlBQoePgSFCd9w/Rekw2BCuB0=) 27: 3230322e3135342e34322e302f32332d3234203d3e2034343334.roa (hash: oeTYohibSnnZXim+ZkL35QfrvFfJfarGJPwa9aJT2lg=) 28: 3230322e3135342e302e302f32332d3234203d3e2034343334.roa (hash: TW2qfwk3IyXXvVlUvaAuu++R07uPcCvy5DroHQeD+Lk=) 29: 3230322e3135342e33362e302f32332d3234203d3e20313431363037.roa (hash: 4azYJIfIwLBN6QOXYJQcD/4KChhMtRRTK+Od9tKQdq8=) 30: 10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl (hash: x6g/o+yXgLaclwZWTLN+2qU+L8r+zDXSI1IgwfCIAuw=) 31: 3230322e3135342e35362e302f32312d3234203d3e2034343334.roa (hash: P0VFn+JZdOuKkPpgn7zOvihIkYl4NBYzNYbtHo3aUmY=) 32: 3230322e3135342e32382e302f32332d3234203d3e2034343334.roa (hash: Xkr9+BbgKkdOfIp7/uVWYj8j5BExvm2wckS+wmywVpQ=) 33: 3230322e3135342e31322e302f32332d3234203d3e20313439373037.roa (hash: fP4hNA2uEzHr5eJDUSmt0gsGgJey+aWljQi65QQOvIM=) 34: 3230322e3135342e31342e302f32342d3234203d3e20313431383938.roa (hash: eejvEtGLXBzzi2i/vzy4cv+5D99T4UxeexhjMPGnxwg=) 35: 323430313a353430303a3a2f33322d3438203d3e2034343334.roa (hash: 5f2FENCYdZXpfDtDA/XrlMk1aTtzTsaccWLZkB2kYFw=) 36: 3230322e3135342e31352e302f32342d3234203d3e20313431383938.roa (hash: vsJ5WzGp45gbxGKZxt2QqXdYE6+x8XFID1b6vdf5F10=) 37: 3230322e3135342e32302e302f32332d3234203d3e2034343334.roa (hash: R3EsVF/rVF9GRFERCiXvXBkGIwN6HbirIt+4zyYoihQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 10:33:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:95:f5:b6:57:28:fe:3b:a2:d4:07:06:20:2a:cc:bb:5d:0d:0f:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Validity Not Before: Oct 28 10:25:06 2025 GMT Not After : Oct 31 10:33:06 2025 GMT Subject: CN=6B94C17C730FC3E0EF19EDC360921E3EF193FC8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:fd:c5:9e:17:9c:13:12:e9:8e:2b:65:5e:7d: 9a:67:ce:a2:d9:13:d4:09:6b:2d:f5:bb:a0:54:c9: 92:3c:03:fd:9f:9e:9e:54:77:41:f7:cc:6a:21:d6: 9f:b9:09:0a:29:a7:3b:6b:b9:57:be:4c:c0:a8:2b: 5d:97:4e:1c:4a:88:14:97:c4:19:35:5d:5f:48:59: d7:93:da:f5:78:b3:02:6f:b9:ee:9d:0e:a6:43:ef: 78:13:b9:7a:0e:81:93:b9:a2:87:23:25:fb:00:21: 39:a1:3c:91:75:87:e5:3f:fc:cb:66:9c:d4:db:3e: 66:6b:9d:0b:fa:1b:d2:e4:b1:9c:1e:aa:86:4a:9b: 17:d9:77:75:b0:c8:27:a0:b4:51:55:99:75:71:67: 4d:ee:86:f0:5e:36:27:a1:58:4f:e2:0b:f7:9c:72: 2b:1a:32:5a:17:4d:78:8d:16:d6:2c:36:a0:0d:69: 20:2c:dc:27:be:bc:d7:16:4a:90:99:de:86:7a:52: 89:f4:97:b8:ed:69:cd:3b:70:3d:7d:7c:fe:1b:25: 37:57:f8:a8:ca:61:1e:ba:91:d6:66:6c:2f:4c:84: ea:12:95:a5:cd:cc:06:9b:8c:e3:11:00:78:f1:f1: 35:e7:49:d1:a5:d1:88:70:3d:e3:b2:7b:26:44:c9: 4d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:94:C1:7C:73:0F:C3:E0:EF:19:ED:C3:60:92:1E:3E:F1:93:FC:8A X509v3 Authority Key Identifier: keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:8c:4c:7a:32:49:cc:ea:29:da:20:88:21:09:14:92:de:66: 0c:17:69:c7:3e:22:5f:4f:c3:ff:17:e3:51:ed:29:6d:35:fc: cc:bd:46:f5:a5:6c:32:44:59:2d:62:d4:17:74:3b:0a:c7:3b: 5c:ed:ad:0c:27:eb:cc:c1:18:d4:61:6a:59:4e:ae:dc:67:78: 99:68:fa:ac:b3:87:50:31:fc:d8:7d:26:52:c7:8b:73:b4:08: 74:13:87:03:d7:93:d9:68:07:b5:a0:04:78:ed:b0:ca:a7:41: 46:3d:65:47:1f:5f:fe:95:9e:a4:28:c6:55:d9:69:de:61:6d: bd:2f:b2:f6:99:d1:6a:57:82:d0:e3:70:69:33:e7:c8:77:5c: a1:49:22:6b:e7:38:17:fa:e5:f0:37:81:42:db:6e:35:d4:9c: 64:f9:23:57:13:24:95:f7:6e:cb:68:f4:9c:5b:80:f6:f7:e2: fd:85:a8:27:a2:98:09:a1:5d:36:ca:b6:f6:a2:49:32:1c:24: 35:38:9f:ed:fa:1a:e0:8e:13:30:17:a8:8d:a5:8d:40:79:d9: 57:c5:cc:1b:41:20:39:c4:27:d9:ee:56:b6:1b:d7:55:b9:81: 18:f4:33:df:98:51:5a:e0:31:ad:4d:e7:34:8b:b5:88:0b:09: 4b:96:a6:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDJX1tlco/jui1AcGICrMu10ND4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5 QUU5MjdGNjAeFw0yNTEwMjgxMDI1MDZaFw0yNTEwMzExMDMzMDZaMDMxMTAvBgNV BAMTKDZCOTRDMTdDNzMwRkMzRTBFRjE5RURDMzYwOTIxRTNFRjE5M0ZDOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2/cWeF5wTEumOK2VefZpnzqLZ E9QJay31u6BUyZI8A/2fnp5Ud0H3zGoh1p+5CQoppztruVe+TMCoK12XThxKiBSX xBk1XV9IWdeT2vV4swJvue6dDqZD73gTuXoOgZO5oocjJfsAITmhPJF1h+U//Mtm nNTbPmZrnQv6G9LksZweqoZKmxfZd3WwyCegtFFVmXVxZ03uhvBeNiehWE/iC/ec cisaMloXTXiNFtYsNqANaSAs3Ce+vNcWSpCZ3oZ6Uon0l7jtac07cD19fP4bJTdX +KjKYR66kdZmbC9MhOoSlaXNzAabjOMRAHjx8TXnSdGl0YhwPeOyeyZEyU0FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa5TBfHMPw+DvGe3DYJIePvGT/IowHwYDVR0j BBgwFoAUEPAPrm8Lk6vclWKKzjw8GJrpJ/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzBjMTRhOS0zYTc3LTQ5ZTItOTE5NC00OGQwOTEzNDU4YjIvMC8xMEYwMEZBRTZG MEI5M0FCREM5NTYyOEFDRTNDM0MxODlBRTkyN0Y2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5QUU5 MjdGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWMwYzE0YTktM2E3Ny00OWUyLTkx OTQtNDhkMDkxMzQ1OGIyLzAvMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzND MTg5QUU5MjdGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKMTHoySczqKdogiCEJFJLeZgwXacc+Il9P w/8X41HtKW01/My9RvWlbDJEWS1i1Bd0OwrHO1ztrQwn68zBGNRhallOrtxneJlo +qyzh1Ax/Nh9JlLHi3O0CHQThwPXk9loB7WgBHjtsMqnQUY9ZUcfX/6VnqQoxlXZ ad5hbb0vsvaZ0WpXgtDjcGkz58h3XKFJImvnOBf65fA3gULbbjXUnGT5I1cTJJX3 bsto9JxbgPb34v2FqCeimAmhXTbKtvaiSTIcJDU4n+36GuCOEzAXqI2ljUB52VfF zBtBIDnEJ9nuVrYb11W5gRj0M9+YUVrgMa1N5zSLtYgLCUuWpvk= -----END CERTIFICATE-----Generated at Tue Oct 28 22:08:56 2025 by rpki-client