$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft File: 639473CD2054A78B39F9AC7A83232462F00E71AA.mft (raw, json) Hash identifier: WpzM/cLa5gJ0xpl5ImImCkywFEriChzvNt3kW/uyxXE= Subject key identifier: AF:33:5B:22:65:52:B4:9E:30:82:3D:14:50:50:20:68:11:F7:3C:55 Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA Certificate serial: 52588DD18C383B0605C431CAB6385D7F339E1C39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft Manifest number: 0D5E Signing time: Sun 26 Oct 2025 10:01:50 +0000 Manifest this update: Sun 26 Oct 2025 09:56:50 +0000 Manifest next update: Wed 29 Oct 2025 18:19:50 +0000 Files and hashes: 1: 639473CD2054A78B39F9AC7A83232462F00E71AA.crl (hash: dgN5rEaV9/6ptxEbbV++MqQWlhguRvGUfKdQC35scIQ=) 2: 3131362e3230362e3231332e302f32342d3234203d3e203539323832.roa (hash: JPYapDBTyTePbdwtE88+heXxGhufXE50JBbJ2fq7FKo=) 3: 3130332e3232382e3234362e302f32342d3234203d3e203539323832.roa (hash: XZ4OJKWgYbKu4ak8HWaN9bEJfkYQKh79GGoEWm0kS2Q=) 4: 323430303a643638303a35393a3a2f34382d3438203d3e203539323832.roa (hash: 0AzZnlQLCCzpiwYH8VB91hQfBqmdrJ+ok40Qb8sCeko=) 5: 323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa (hash: 5B7v2ShhK5C4wbhQiHatQFgCi8oUxqkoPlhjyp+Rnaw=) 6: 3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa (hash: /sujTtwH0ddwmWj6UyMseljhgpcNLVkP8+vtS5y3rGg=) 7: 323430303a643638303a3a2f33322d3438203d3e203539323832.roa (hash: SgqLAGcMTNBEKnSS7cpl5WafnRLBI8WCT5GxxXyN0zA=) 8: 3130332e3232382e3234342e302f32322d3234203d3e203539323832.roa (hash: kkZ5080z9oUs+jW8iHX1Tzr1MG5R0/keiimPL4Y7DMk=) 9: 3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa (hash: 7JHZWmtz01hYjYbLRHq9pCZCM42A/jGx+qscoYZR+8M=) 10: 3130332e3232382e3234372e302f32342d3234203d3e203539323832.roa (hash: 4gtV8ZXJhBLgP6alnZmazQL9Du+oKvqI/MvatS0Bbyw=) 11: 3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa (hash: QsDPs2mlZqyMZXfjf6Zh+NWMXGWy1j4R+YaYRxdbecQ=) 12: 3130332e3232382e3234342e302f32342d3234203d3e203539323832.roa (hash: esxHqUt3Xq6PKKXsfFgfUEYi1fJUgVnC6F8M6sDPUJM=) 13: 3131362e3230362e3231342e302f32342d3234203d3e203539323832.roa (hash: mgdd33inbho0w/YafQxmlb4mn2645LWgbd4GjzvqC5g=) 14: 323430303a643638303a353a3a2f34382d3438203d3e203539323832.roa (hash: /8HKOKl3PxMMPopAmXJsDfZHfFoo7wkQ81V5TqWB1uE=) 15: 323430303a643638303a666163653a3a2f34382d3438203d3e203539323832.roa (hash: u5dDjhuBvBzcqNjKEeW7vizdTx58v6wY4rfkMiHiI5I=) 16: 323430303a643638303a323a3a2f34382d3438203d3e203539323832.roa (hash: qLkIroWnbqSVivBGqvgi5oF8E8eNhXgrJocCdlawdNk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 18:19:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:58:8d:d1:8c:38:3b:06:05:c4:31:ca:b6:38:5d:7f:33:9e:1c:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA Validity Not Before: Oct 26 09:56:50 2025 GMT Not After : Oct 29 18:19:50 2025 GMT Subject: CN=AF335B226552B49E30823D145050206811F73C55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ef:62:95:1e:a5:72:4d:b3:03:70:12:d7:93: 08:6e:f7:34:eb:8e:c0:97:0e:7f:65:49:80:74:58: b5:92:79:53:bd:6c:92:64:d8:a2:b7:ed:d4:60:fd: 50:68:f1:fc:18:19:a1:eb:3c:e5:44:c8:a0:66:40: 09:72:3b:3f:8b:3f:0e:20:11:78:c5:50:92:1a:16: aa:3b:dc:20:1d:a8:c3:72:06:e9:31:fb:d1:21:60: 5b:22:c8:f9:ee:07:1d:cc:19:79:88:2b:db:6f:0f: 26:60:7f:09:ee:01:0e:63:56:43:8b:f5:6d:d2:59: e8:d8:b4:11:60:a0:38:98:d1:99:07:19:60:83:7e: 01:cd:32:ef:e1:2d:d3:9b:28:43:a5:b8:42:a0:63: b6:e4:51:cc:e3:6a:5c:a0:24:12:d0:4b:e9:f0:fc: fb:32:3d:88:8e:1b:58:99:42:ee:40:f8:68:2a:a8: 3a:5d:5e:00:32:ee:6c:18:8e:0e:01:50:a2:e6:a2: 8f:3d:a0:e5:46:2f:76:f1:21:31:fe:13:26:44:87: fa:f1:c7:c8:71:16:a1:29:81:63:a6:2e:50:42:84: fb:ec:73:38:47:ed:d7:db:a9:6e:e8:90:6c:ce:4c: 70:ff:8e:39:bd:65:f2:7b:77:88:34:01:07:50:34: f3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:33:5B:22:65:52:B4:9E:30:82:3D:14:50:50:20:68:11:F7:3C:55 X509v3 Authority Key Identifier: keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:fd:cd:81:3c:f1:42:ae:5d:96:eb:4c:82:a3:f2:d3:c0:0e: 67:6d:82:13:1a:a3:2d:88:c7:09:14:ff:17:64:70:d9:b0:85: cf:25:54:87:fe:eb:af:f7:58:7e:05:db:0c:44:5c:80:74:2c: 14:10:9e:ad:96:41:47:e2:fc:b7:0d:18:41:f7:e3:9c:d4:9a: 4b:e0:91:58:16:01:82:e9:b8:ee:d6:47:34:0d:b9:24:1a:51: 99:f9:a9:90:e7:a5:93:5a:45:96:5f:47:d9:9c:c3:ec:61:c7: c0:16:cb:ae:a8:6f:8b:27:d1:d5:85:9d:95:60:fd:9d:77:07: 83:d8:ee:1d:d2:54:90:ec:23:23:0f:fd:7b:2d:ef:eb:38:8d: 21:b7:52:33:9b:97:a8:7a:da:41:17:c3:1c:ef:84:4e:d9:21: ba:5b:d9:8e:49:77:97:5f:f8:e9:e3:ea:0a:2f:57:11:71:95: b5:f5:a1:68:2e:85:74:21:09:7c:51:ed:95:37:16:43:a4:cc: e6:d3:24:11:ee:d4:fd:5f:44:b2:d0:0f:d7:f0:b4:3d:6c:b1: 0a:9d:86:1a:f5:00:b1:2d:a5:a8:88:1a:ce:e9:08:12:20:ed: 19:cc:d4:a4:d7:f9:05:ab:ee:23:12:01:96:1f:d0:c9:35:63: 47:ef:5c:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUliN0Yw4OwYFxDHKtjhdfzOeHDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG MDBFNzFBQTAeFw0yNTEwMjYwOTU2NTBaFw0yNTEwMjkxODE5NTBaMDMxMTAvBgNV BAMTKEFGMzM1QjIyNjU1MkI0OUUzMDgyM0QxNDUwNTAyMDY4MTFGNzNDNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe72KVHqVyTbMDcBLXkwhu9zTr jsCXDn9lSYB0WLWSeVO9bJJk2KK37dRg/VBo8fwYGaHrPOVEyKBmQAlyOz+LPw4g EXjFUJIaFqo73CAdqMNyBukx+9EhYFsiyPnuBx3MGXmIK9tvDyZgfwnuAQ5jVkOL 9W3SWejYtBFgoDiY0ZkHGWCDfgHNMu/hLdObKEOluEKgY7bkUczjalygJBLQS+nw /PsyPYiOG1iZQu5A+GgqqDpdXgAy7mwYjg4BUKLmoo89oOVGL3bxITH+EyZEh/rx x8hxFqEpgWOmLlBChPvsczhH7dfbqW7okGzOTHD/jjm9ZfJ7d4g0AQdQNPOdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrzNbImVStJ4wgj0UUFAgaBH3PFUwHwYDVR0j BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF NzFBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg0NjRhNWItMmZjZS00N2RhLTgw NDctNjhkMmJkNjNjOWMzLzAvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0 NjJGMDBFNzFBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMf9zYE88UKuXZbrTIKj8tPADmdtghMaoy2I xwkU/xdkcNmwhc8lVIf+66/3WH4F2wxEXIB0LBQQnq2WQUfi/LcNGEH345zUmkvg kVgWAYLpuO7WRzQNuSQaUZn5qZDnpZNaRZZfR9mcw+xhx8AWy66ob4sn0dWFnZVg /Z13B4PY7h3SVJDsIyMP/Xst7+s4jSG3UjObl6h62kEXwxzvhE7ZIbpb2Y5Jd5df +Onj6govVxFxlbX1oWguhXQhCXxR7ZU3FkOkzObTJBHu1P1fRLLQD9fwtD1ssQqd hhr1ALEtpaiIGs7pCBIg7RnM1KTX+QWr7iMSAZYf0Mk1Y0fvXPQ= -----END CERTIFICATE-----Generated at Mon Oct 27 20:03:52 2025 by rpki-client