$ rpki-client -vvf repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft File: C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft (raw, json) Hash identifier: VqVNpC1Uk8PSV0w7du5C2bko1Ys5SOpOkBlBoJLQIhA= Subject key identifier: D7:A0:74:7A:8A:B9:9E:CD:F6:1B:B9:42:5B:74:5E:9E:FD:A9:1B:80 Authority key identifier: C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E Certificate issuer: /CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E Certificate serial: 5EAAAF9B853D1B97EB11E48ADFBC47127450D6F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft Manifest number: 0525 Signing time: Sun 02 Nov 2025 22:41:56 +0000 Manifest this update: Sun 02 Nov 2025 22:36:56 +0000 Manifest next update: Thu 06 Nov 2025 08:49:56 +0000 Files and hashes: 1: 3137352e3138342e3233382e302f32332d3234203d3e20313334363534.roa (hash: MG/J/pE598W0dSws8CxeYL22B2yFb4db9pJ8veM+SQU=) 2: 3132332e3235352e3230302e302f32312d3234203d3e203234353231.roa (hash: 6LyyJJeV4MUKQUmSmy0p8Z51yI1Vj4eAExDWuf2DxM8=) 3: 3131322e3130392e31362e302f32312d3234203d3e203234353231.roa (hash: okeDaf7d0Xuvp8xnTxJzUWPegOkeMCYHPs8G9yAmQ6Y=) 4: 323430333a626130303a3630303a3a2f34302d3438203d3e203234353231.roa (hash: 3d/V5R3s99pTSM8/puBLUbnmOCHIHkwIjm/VO8zQunM=) 5: 3137352e3138342e3232342e302f32312d3234203d3e203234353231.roa (hash: trFC+pX4oMn7rw9va8+zapompho+fZFvfIyOd+ou6p0=) 6: 3131392e38322e3234302e302f32312d3234203d3e203234353231.roa (hash: UQj5o2r9jrF7gwD6zEDeivAaIC1EoryECU1Z4pufDeg=) 7: 3130332e3231352e32342e302f32322d3234203d3e2039333431.roa (hash: XTblwJ4OpupQKVM3L+0VPdo1vzAlW+UZ6yrctqElG0s=) 8: 323430333a626130303a3730303a3a2f34302d3438203d3e203234353231.roa (hash: zubx4XjBq87KwKwie4SbJb3Fj1Zuzvqgr/H/hHvCf/0=) 9: 3137352e3138342e3233322e302f32322d3234203d3e2039333431.roa (hash: /NJYIz5c5OxCtCzAI9eMSZnnK2DRsoEPFpGekXPN3/Y=) 10: 3230332e38392e32342e302f32312d3234203d3e203234353231.roa (hash: 25bjKMZwqQbYi5jKvGEGUrT2NIQ4GwrYcOU6Y3FnIcI=) 11: C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl (hash: KspZoiG4AFqDj1qsDn4xdxzc7F69ZRhJ3H630uylmzg=) 12: 323430333a626130303a3a2f33322d3438203d3e203234353231.roa (hash: B9qLkdqrOWwVF5tA2jsrqX21V3LrtEAcPvXr3jC/ETM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 08:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:aa:af:9b:85:3d:1b:97:eb:11:e4:8a:df:bc:47:12:74:50:d6:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E Validity Not Before: Nov 2 22:36:56 2025 GMT Not After : Nov 6 08:49:56 2025 GMT Subject: CN=D7A0747A8AB99ECDF61BB9425B745E9EFDA91B80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8f:e6:2b:ea:2d:a7:35:90:0d:08:bb:b7:22: 7f:3a:cd:52:f9:e2:a6:05:71:5f:b5:34:a1:7e:1c: e7:f5:6d:d2:50:c0:6a:f5:f2:80:53:6b:b5:56:51: 66:7d:55:1b:34:0d:b2:68:29:1b:2b:49:e4:df:95: 7c:2b:04:56:d3:7c:a4:f8:f9:12:64:56:fd:c5:41: b5:ee:b0:49:bd:f5:25:cb:5e:af:fb:e9:9b:66:fb: c8:5c:52:4b:44:54:f8:30:77:65:54:05:3c:31:82: d2:9f:e1:71:34:7b:2f:86:51:fc:83:08:be:4a:f9: 93:dd:b0:29:8a:39:ce:28:e9:2e:ea:31:77:ca:7f: 61:58:22:b5:fa:66:5b:25:1c:10:1e:fa:45:dd:3b: 3e:27:b1:3d:c1:96:1f:c7:4e:4d:99:61:5d:a5:eb: 01:3f:5a:b0:fc:fc:87:c2:ea:4e:23:6f:40:fb:e1: f5:27:b3:a7:de:d5:b1:f0:e1:8d:78:20:96:63:9e: 7e:88:63:ba:7b:b3:65:04:2c:dc:5b:bb:ae:92:4d: 51:8b:29:9a:aa:7f:ee:42:de:31:fb:c8:7f:6f:bc: cb:ff:8a:10:74:5d:70:75:97:a5:bf:57:db:36:5c: 18:47:44:de:14:0a:23:18:2f:1e:5b:1c:94:4f:81: a4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A0:74:7A:8A:B9:9E:CD:F6:1B:B9:42:5B:74:5E:9E:FD:A9:1B:80 X509v3 Authority Key Identifier: keyid:C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:99:69:79:f9:84:26:5e:be:43:ea:45:9d:27:88:6e:03:53: 3c:70:d1:b1:5b:d8:8f:5c:e8:00:ba:04:74:f5:18:32:56:c5: d3:2f:90:76:9a:59:c8:bc:83:3c:71:03:b2:db:1d:15:bf:5d: 4d:a9:44:6e:5f:6f:07:9b:43:34:86:9d:8a:29:a6:c3:05:80: 02:40:52:e6:47:a2:11:77:a0:d1:48:83:cc:4a:bb:de:4f:55: e2:ad:3b:b7:0a:db:e2:74:b8:e1:75:2c:d5:6d:d8:15:96:5c: 75:d4:68:64:4e:db:a9:a3:8d:7e:b4:f9:26:f7:20:49:17:9c: e7:96:8b:ed:ea:fe:7e:f2:ab:e1:18:a6:e0:bb:6f:d3:cf:54: c7:8b:56:a8:f5:36:e7:31:ac:f7:10:18:8a:6d:e6:0d:ae:ca: eb:96:c8:0c:a8:de:1e:d8:e0:1c:c2:51:6c:22:3e:9e:f3:c4: 64:4b:6c:d0:d4:56:0d:82:5a:00:92:1e:fa:c0:42:c0:87:67: 3e:f3:b9:67:c7:03:1e:42:61:cb:a9:3e:92:c8:d5:ab:72:c2: 53:84:33:35:e9:07:c0:ef:79:33:10:ed:f4:fd:68:aa:57:f2: 8a:32:94:bc:8b:da:46:90:00:00:bd:3c:25:ea:1c:5f:23:d0: b6:22:86:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXqqvm4U9G5frEeSK37xHEnRQ1vUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgz QjI3MUUzRTAeFw0yNTExMDIyMjM2NTZaFw0yNTExMDYwODQ5NTZaMDMxMTAvBgNV BAMTKEQ3QTA3NDdBOEFCOTlFQ0RGNjFCQjk0MjVCNzQ1RTlFRkRBOTFCODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnj+Yr6i2nNZANCLu3In86zVL5 4qYFcV+1NKF+HOf1bdJQwGr18oBTa7VWUWZ9VRs0DbJoKRsrSeTflXwrBFbTfKT4 +RJkVv3FQbXusEm99SXLXq/76Ztm+8hcUktEVPgwd2VUBTwxgtKf4XE0ey+GUfyD CL5K+ZPdsCmKOc4o6S7qMXfKf2FYIrX6ZlslHBAe+kXdOz4nsT3Blh/HTk2ZYV2l 6wE/WrD8/IfC6k4jb0D74fUns6fe1bHw4Y14IJZjnn6IY7p7s2UELNxbu66STVGL KZqqf+5C3jH7yH9vvMv/ihB0XXB1l6W/V9s2XBhHRN4UCiMYLx5bHJRPgaQdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU16B0eoq5ns32G7lCW3Renv2pG4AwHwYDVR0j BBgwFoAUw/dF7ef0wNjlZ0lltSCACDsnHj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDljMjJiMS0xYjdiLTQ2NzEtYWI5NC01YzVlNzQ4ODI1NDcvMC9DM0Y3NDVFREU3 RjRDMEQ4RTU2NzQ5NjVCNTIwODAwODNCMjcxRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgzQjI3 MUUzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA5YzIyYjEtMWI3Yi00NjcxLWFi OTQtNWM1ZTc0ODgyNTQ3LzAvQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgw MDgzQjI3MUUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyZaXn5hCZevkPqRZ0niG4DUzxw0bFb2I9c 6AC6BHT1GDJWxdMvkHaaWci8gzxxA7LbHRW/XU2pRG5fbwebQzSGnYoppsMFgAJA UuZHohF3oNFIg8xKu95PVeKtO7cK2+J0uOF1LNVt2BWWXHXUaGRO26mjjX60+Sb3 IEkXnOeWi+3q/n7yq+EYpuC7b9PPVMeLVqj1NucxrPcQGIpt5g2uyuuWyAyo3h7Y 4BzCUWwiPp7zxGRLbNDUVg2CWgCSHvrAQsCHZz7zuWfHAx5CYcupPpLI1atywlOE MzXpB8DveTMQ7fT9aKpX8ooylLyL2kaQAAC9PCXqHF8j0LYihnA= -----END CERTIFICATE-----Generated at Tue Nov 4 22:22:13 2025 by rpki-client