$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft File: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft (raw, json) Hash identifier: 3q+nIO46gS3ZpMed9NXB8kWGU4NoHFVIK4CN8wCX7P0= Subject key identifier: 7C:CA:D0:CD:4C:97:1D:78:FA:E0:CD:77:61:D4:A8:6A:FA:59:3B:9C Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 7F0F40FE0A6FA529852B6391A8F76BC80FFC66F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft Manifest number: 053F Signing time: Wed 05 Nov 2025 18:31:19 +0000 Manifest this update: Wed 05 Nov 2025 18:26:19 +0000 Manifest next update: Sun 09 Nov 2025 05:22:19 +0000 Files and hashes: 1: 3131392e3131302e36382e302f32322d3234203d3e203338333230.roa (hash: hd2StT+jTnjUGpfUQ62nAy49x8ecNllIMBX9uxJvBO8=) 2: 323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa (hash: gOJdZEtA6e6fwm7lb/MvZbjgtOf6sLlu0HNuBmiaEZM=) 3: 323430343a333930303a313a3a2f34382d3438203d3e203338333230.roa (hash: jyHfiZ6i7aZCFxYleJN7o61t2gr/9pVuDKWy33Zgxrk=) 4: 34332e3234372e31322e302f32322d3234203d3e203338333230.roa (hash: 2g+NXNHiM0B7rPdW5gGiKA7VbkoVsAcew6mjSoTkRN4=) 5: 3131392e3131302e36342e302f32322d3234203d3e203338333230.roa (hash: xet50Y1T2RaCmjZyVilwT++Qk9zQxszZ374/545MhhM=) 6: 3132322e3134342e302e302f32322d3234203d3e203338333230.roa (hash: 6KFCBq0GeLMij9zX0LHtO8AChuye1d1F56fk0H8ZhzU=) 7: 3230332e3137332e38382e302f32342d3234203d3e20313339343630.roa (hash: haQraVSry86Exch9h906IOyEPpafpeXC5ih1PxjR4d4=) 8: 3137352e3130332e34352e302f32342d3234203d3e203338333230.roa (hash: dsLjT0RvHwdlA2P0hS8Ta/QvI/7GUPU2p577iDafIJk=) 9: 3230332e3137332e39302e302f32332d3234203d3e20313339343630.roa (hash: 23+gG2DOC+ur5eVWAZvoHWGDnxOhWjXAjjErKhmGrS4=) 10: 3137352e3130332e35372e302f32342d3234203d3e203338333230.roa (hash: QS/GUZ+NIoj800cmERiNyPU2Mys6n5EswZVGgcYBu4o=) 11: 3137352e3130332e33322e302f32342d3234203d3e203338333230.roa (hash: SKzoUE6GJjGbrRoLBDSg0MJXDhRPXJNlIyQMu/0QWEw=) 12: 3132322e3134342e342e302f32322d3234203d3e203338333230.roa (hash: V3630RXZfBbv0izTqUqFayseBZlNQ8xYG082iWZg+6Q=) 13: 323430343a333930303a6139323a3a2f34382d3438203d3e203338333230.roa (hash: Ketrz/J8f8AAk0/U1Pdx/6YBxlFbuGP5tM7vrclBTuI=) 14: 3137352e3130332e33342e302f32342d3234203d3e203338333230.roa (hash: mJ+S52vU66RNY0f8EN8g3gvOa1pNNig2fMcG1fH79DY=) 15: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl (hash: FdxHobXmmOXIFE0q1+g9A5PYyBnAspOTzqmB4KSIIyY=) 16: 3230332e3137332e38392e302f32342d3234203d3e203338333230.roa (hash: 5A8+p1O/f/o7MKvT/iojY154TSW6xBkoOLtIqG2w4iU=) 17: 3230332e3137332e39312e302f32342d3234203d3e20313339343630.roa (hash: nnj0KLDw9ngWzorUbdMHyDWYfETgXpzXO3uTEwZi24Q=) 18: 3131392e3131302e37322e302f32322d3234203d3e203338333230.roa (hash: EaI6/Dsx2ZEnLc96pWiD/aogqQZmiIKOu7YhzjemiyQ=) 19: 3130332e32392e3136342e302f32322d3234203d3e203338333230.roa (hash: bwSFGiowGIWFw0Xqwv4OlEcc83VdK0o2KzJnJCZ2DT0=) 20: 3137352e3130332e33332e302f32342d3234203d3e203338333230.roa (hash: Y3N/pOr0hqk+rgEWsHTxDUxkckXwK8BwQRc3Oa99toQ=) 21: 3137352e3130332e35332e302f32342d3234203d3e203338333230.roa (hash: Q22OsVQGNiQHv7rsWq7HdXb5YFdsKjAZXlHpHoKvOag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 23:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:0f:40:fe:0a:6f:a5:29:85:2b:63:91:a8:f7:6b:c8:0f:fc:66:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Nov 5 18:26:19 2025 GMT Not After : Nov 9 05:22:19 2025 GMT Subject: CN=7CCAD0CD4C971D78FAE0CD7761D4A86AFA593B9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:46:ec:5c:fe:7e:1a:32:af:8f:52:94:45:ba: 86:c1:62:e1:35:e4:2b:6e:51:7f:5a:a6:16:88:05: 60:b3:2c:07:4b:48:01:30:e4:cf:37:68:b3:09:18: b9:86:c6:4c:33:f8:06:e9:63:c7:81:86:dd:9d:b1: 13:2e:ff:8a:80:ec:08:89:4e:bb:8c:54:f0:d2:5d: 17:d3:11:07:24:da:b9:1a:94:43:38:16:8b:db:ae: 05:d1:de:9b:9c:00:47:cc:ef:7e:86:bd:0b:87:fc: 16:cd:fc:2e:d8:82:82:20:39:27:32:44:2b:0b:4a: 98:ba:26:60:f7:2d:05:9f:4b:d4:bb:15:a9:15:9e: 92:2d:74:51:16:26:26:8f:24:b0:85:89:d0:7c:11: 0e:ec:03:ee:0c:13:a2:2c:6c:aa:72:c2:c3:76:4f: ec:e3:fe:52:c7:bc:f9:a0:6c:93:5f:4e:76:6c:ef: 89:25:0f:4c:5a:53:ae:52:ec:8f:8e:3d:63:4d:30: 3e:cd:33:cf:45:31:75:56:74:1f:92:7d:40:1c:5b: f7:f9:60:3b:66:9c:94:11:d0:82:44:52:d2:7b:e3: ef:61:02:30:dd:56:33:b8:fe:d4:3b:09:f0:d7:47: b2:9c:68:fe:41:e9:88:0b:02:4b:70:88:cd:a0:80: 65:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CA:D0:CD:4C:97:1D:78:FA:E0:CD:77:61:D4:A8:6A:FA:59:3B:9C X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:35:cf:b8:45:db:d9:09:b8:17:48:6e:19:d8:d9:b0:1b:13: 83:ae:a9:bd:c6:ef:45:66:4e:9a:77:d6:4f:d1:af:8d:2d:af: 0d:03:e5:61:3f:8a:b2:ee:5f:b6:2c:db:ca:3e:3d:9f:27:81: 43:ed:65:fc:8f:c7:7e:a6:14:4f:11:a3:9f:12:0e:18:73:78: 3e:71:36:d3:70:df:95:78:d4:22:f7:c4:bb:30:b8:89:e1:11: e0:09:f1:fd:22:de:72:73:b5:d2:c9:53:53:da:8e:81:d3:b6: 60:0d:42:91:9a:ad:f9:98:06:6d:8c:ac:b5:83:0c:09:d2:08: 72:10:9d:0d:bc:aa:3c:28:87:5e:0f:6a:41:5e:2c:8e:05:23: 8f:8b:36:84:3a:60:b2:95:6a:94:78:b9:ae:e3:6a:59:e8:65: 7e:8a:36:25:b1:22:a1:32:a0:62:a3:1c:a0:31:17:1d:9a:22: 83:91:dd:09:f8:48:0e:3c:c3:04:85:8f:5a:77:c7:1c:92:5b: c9:44:41:5f:d2:b2:a8:a2:00:ff:e3:11:fd:82:0a:7c:95:95: 91:80:15:85:94:53:54:d3:67:8c:c0:23:87:7a:cc:b3:cf:b1: 8a:f9:b1:3c:e2:75:23:76:fe:ad:0e:61:53:cd:1d:4d:d6:05: 76:7a:0f:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfw9A/gpvpSmFK2ORqPdryA/8ZvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNTExMDUxODI2MTlaFw0yNTExMDkwNTIyMTlaMDMxMTAvBgNV BAMTKDdDQ0FEMENENEM5NzFENzhGQUUwQ0Q3NzYxRDRBODZBRkE1OTNCOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGRuxc/n4aMq+PUpRFuobBYuE1 5CtuUX9aphaIBWCzLAdLSAEw5M83aLMJGLmGxkwz+AbpY8eBht2dsRMu/4qA7AiJ TruMVPDSXRfTEQck2rkalEM4FovbrgXR3pucAEfM736GvQuH/BbN/C7YgoIgOScy RCsLSpi6JmD3LQWfS9S7FakVnpItdFEWJiaPJLCFidB8EQ7sA+4ME6IsbKpywsN2 T+zj/lLHvPmgbJNfTnZs74klD0xaU65S7I+OPWNNMD7NM89FMXVWdB+SfUAcW/f5 YDtmnJQR0IJEUtJ74+9hAjDdVjO4/tQ7CfDXR7KcaP5B6YgLAktwiM2ggGW3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfMrQzUyXHXj64M13YdSoavpZO5wwHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk0NWI4NmUtMDg5NS00NzU5LWE3 N2MtYTA2Y2UxNGUyNDNjLzAvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVB MjMzMUY4MDJFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADU1z7hF29kJuBdIbhnY2bAbE4Ouqb3G70Vm Tpp31k/Rr40trw0D5WE/irLuX7Ys28o+PZ8ngUPtZfyPx36mFE8Ro58SDhhzeD5x NtNw35V41CL3xLswuInhEeAJ8f0i3nJztdLJU1PajoHTtmANQpGarfmYBm2MrLWD DAnSCHIQnQ28qjwoh14PakFeLI4FI4+LNoQ6YLKVapR4ua7jalnoZX6KNiWxIqEy oGKjHKAxFx2aIoOR3Qn4SA48wwSFj1p3xxySW8lEQV/SsqiiAP/jEf2CCnyVlZGA FYWUU1TTZ4zAI4d6zLPPsYr5sTzidSN2/q0OYVPNHU3WBXZ6D9o= -----END CERTIFICATE-----Generated at Thu Nov 6 01:33:35 2025 by rpki-client