$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft File: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft (raw, json) Hash identifier: k4Imhg8cXwqV+lOs2fSGdcpbMEWe3yVthjQW9aS/3zM= Subject key identifier: 02:7C:2D:86:54:62:C2:F1:5E:13:8B:B9:2A:72:C3:06:66:1A:03:66 Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 2FE6AF4B78833E0151AD54EA83EB08388FF3243B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft Manifest number: 0531 Signing time: Mon 03 Nov 2025 13:22:11 +0000 Manifest this update: Mon 03 Nov 2025 13:17:11 +0000 Manifest next update: Thu 06 Nov 2025 18:04:11 +0000 Files and hashes: 1: 323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa (hash: EtS1eZLUTwWRZJ7Ml0izUQhw9pv4Am/WahNfvxjKTrc=) 2: 323430323a616134303a31343a3a2f34382d3438203d3e20313337333330.roa (hash: ra0Qf+ys3TjTOOjzu7G6xBCVp6PgE8NBjiFHNgjZfy0=) 3: 3130332e3131322e3133382e302f32342d3234203d3e20313531303433.roa (hash: k2s+fTciMW1AcHEt1AHKQvUa6LHEm5gF/5id8cjIJ3s=) 4: 323430323a616134303a323a3a2f34382d3438203d3e20313337333330.roa (hash: vTpYTNK2Iedt3x6MQB/Xrh13AhkarFJV4HWTUjcGM/Y=) 5: 323430323a616134303a31353a3a2f34382d3438203d3e20313337333330.roa (hash: cplcGCMTKNbyST3IWkDxcP/n/AeMzarnQF1LNyGc5EY=) 6: 323430323a616134303a353a3a2f34382d3438203d3e20313337333330.roa (hash: Pt4kHivj/+/IoSa7PGPfSPyAlm/DgqrXfAGO9WlCDqE=) 7: 323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa (hash: tQTDeuCAhgIHqT4JvN+SYFcrP542mVZbW7Uy9er1rk4=) 8: 323430323a616134303a383a3a2f34382d3438203d3e20313337333330.roa (hash: vAnV4g431JCqkwtUthm0ie5OhAW6+m/w0zGsqm8XSOo=) 9: 323430323a616134303a3a2f33322d3332203d3e20313337333330.roa (hash: vtCuldzUtylI5t9/fCW+s++nz3SUBB8oSaeAOGcN8rI=) 10: 323430323a616134303a31313a3a2f34382d3438203d3e20313337333330.roa (hash: BBYTiuzRjYx15TfoXkETOVppXlE7UGzNaI5UpnCSg40=) 11: 323430323a616134303a31333a3a2f34382d3438203d3e20313337333330.roa (hash: w4rnLSoK9Ogry5Be/7bEeNtK/st8upmlmof3uHLSQS4=) 12: 323430323a616134303a31323a3a2f34382d3438203d3e20313337333330.roa (hash: QFubIhbbL6UEYuVrgh+b+Oy9CvlVLee6F9ADT2A6kec=) 13: 3130332e3131322e3133362e302f32342d3234203d3e203633383638.roa (hash: pkEXO9z6ueQK4Zfm+Nf2SnX0XqqCEAzcqWTKKEbP/J8=) 14: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl (hash: VoqPliP91VkUtD/tCCd0Tyyo9p/pAEf/C4itw49Yx9Q=) 15: 323430323a616134303a313a3a2f34382d3438203d3e20313337333330.roa (hash: sfX//sKOJiEuG3MX815fs00hBV5qvYrVSNOlry6c+5c=) 16: 323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa (hash: SFCF3eZAfaB4k234A4Mal+M9wtz6OMi0W08cO5CL2c4=) 17: 323430323a616134303a343a3a2f34382d3438203d3e20313337333330.roa (hash: 1oWczp9RZm7lezuDVU+ofnA0tfj2lVP+IvFgjT0dOg4=) 18: 3130332e3131322e3133372e302f32342d3234203d3e203633383638.roa (hash: RepflhJLBvu2zVpJCecwi2+RZYpN1UHaxDcpF0oO+gg=) 19: 323430323a616134303a373a3a2f34382d3438203d3e20313337333330.roa (hash: Z1axM0kuScQ1wsgtnc4QX9GvMZLuIsV8v/ScHLgFtiU=) 20: 323430323a616134303a31303a3a2f34382d3438203d3e20313337333330.roa (hash: JdwC9cZZayLXOr62V5QKdUDNIE+2Jw/cXMDWMiK/ID0=) 21: 3130332e3131322e3133392e302f32342d3234203d3e20313337333330.roa (hash: 8Vv5VC5lHskbGpjOq0r7bl7lFeNfDlBP9NjEDxxuRz8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 18:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e6:af:4b:78:83:3e:01:51:ad:54:ea:83:eb:08:38:8f:f3:24:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Nov 3 13:17:11 2025 GMT Not After : Nov 6 18:04:11 2025 GMT Subject: CN=027C2D865462C2F15E138BB92A72C306661A0366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bd:a8:fa:05:b2:33:86:00:c9:8d:93:72:ff: 4f:b4:69:5c:4f:09:d8:c2:48:ad:d1:0a:2b:be:99: 2a:54:2b:e7:5e:d7:0e:ef:c0:5b:80:84:43:e0:dd: 48:8c:09:1f:69:32:59:24:1c:b3:fd:04:b0:85:03: 0e:fb:6b:3e:87:47:d3:d9:5b:a1:7b:cf:16:08:e7: c4:ba:3b:22:fa:c7:18:5f:6a:47:f3:b2:a7:f0:06: 6c:bc:60:b5:a0:df:3a:d0:87:8b:1b:06:4b:d1:9f: 39:37:6c:57:ac:68:e3:41:d7:3e:d1:c5:40:ba:b3: 5c:20:04:28:4a:9a:d3:20:98:f3:e7:58:31:f6:24: 6c:f0:22:48:ed:c7:9c:8c:7b:3a:50:41:ea:b8:25: 86:d4:db:ef:bc:b2:ba:4a:bf:d1:6e:bd:4f:ef:63: 38:16:0c:19:51:dd:ef:73:3c:1c:5e:fe:b0:5f:b8: 36:dd:28:fb:d5:ba:8b:a4:f9:e9:35:8a:1a:1b:05: 69:67:1f:e1:3b:24:98:a1:c1:b5:d4:af:ac:05:e4: 94:11:e1:55:be:69:53:6a:56:08:c0:6e:b9:84:87: cf:cd:d0:60:a7:50:4c:ea:5c:17:75:ad:75:fd:bd: 91:fb:e8:a4:f6:d7:eb:72:d8:05:07:71:3e:53:6b: 1f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:7C:2D:86:54:62:C2:F1:5E:13:8B:B9:2A:72:C3:06:66:1A:03:66 X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:0a:03:bb:6a:19:bd:97:da:4c:e5:23:3c:9b:b4:da:e6:94: 55:6a:28:55:f1:fc:fe:0c:0a:61:e8:db:f5:98:4c:ae:35:dc: 10:88:1d:1f:c8:72:fa:61:33:ae:db:73:22:18:9c:37:dd:9a: 22:cb:1c:32:72:06:99:80:e5:4e:64:e6:4f:7b:bc:18:12:96: ae:1a:88:de:77:38:6c:15:c8:22:7b:1f:bd:88:e3:5f:81:fc: b7:3f:5c:00:cd:77:35:d0:8e:16:ac:8a:ac:35:4d:6c:14:e7: 05:c4:1a:98:5a:8c:73:3e:ea:c0:2b:8c:aa:3d:59:81:af:5f: 70:e7:17:99:c1:b8:af:3d:3d:5d:01:fb:fb:1b:a1:9c:6c:2d: 1c:f7:76:d7:ee:88:10:48:bf:85:1c:c2:e3:17:6d:55:f7:49: fc:56:d1:05:c1:7b:de:7e:01:a7:95:ac:14:8f:9c:34:90:f1: 00:1d:88:33:49:81:9f:9a:35:41:ea:8f:85:95:ca:9f:fb:8e: 68:ba:ab:49:7c:bc:bb:1a:35:b1:15:6e:0f:6b:c5:1f:d6:06: 81:03:bb:76:1f:2e:3f:05:35:bc:5f:41:8c:5b:1d:81:23:9f: 5b:a1:65:99:51:c0:32:8f:a7:2e:50:54:7d:1a:57:0e:25:b4: 3e:7e:02:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL+avS3iDPgFRrVTqg+sIOI/zJDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNTExMDMxMzE3MTFaFw0yNTExMDYxODA0MTFaMDMxMTAvBgNV BAMTKDAyN0MyRDg2NTQ2MkMyRjE1RTEzOEJCOTJBNzJDMzA2NjYxQTAzNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+vaj6BbIzhgDJjZNy/0+0aVxP CdjCSK3RCiu+mSpUK+de1w7vwFuAhEPg3UiMCR9pMlkkHLP9BLCFAw77az6HR9PZ W6F7zxYI58S6OyL6xxhfakfzsqfwBmy8YLWg3zrQh4sbBkvRnzk3bFesaONB1z7R xUC6s1wgBChKmtMgmPPnWDH2JGzwIkjtx5yMezpQQeq4JYbU2++8srpKv9FuvU/v YzgWDBlR3e9zPBxe/rBfuDbdKPvVuouk+ek1ihobBWlnH+E7JJihwbXUr6wF5JQR 4VW+aVNqVgjAbrmEh8/N0GCnUEzqXBd1rXX9vZH76KT21+ty2AUHcT5Tax/XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAnwthlRiwvFeE4u5KnLDBmYaA2YwHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGMzNGZmMDgtZDIxZi00MjBiLTg3 ZGYtNTMxMDNiNmRjMjUzLzAvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUx MkZFNEMxRDAwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQKA7tqGb2X2kzlIzybtNrmlFVqKFXx/P4M CmHo2/WYTK413BCIHR/IcvphM67bcyIYnDfdmiLLHDJyBpmA5U5k5k97vBgSlq4a iN53OGwVyCJ7H72I41+B/Lc/XADNdzXQjhasiqw1TWwU5wXEGphajHM+6sArjKo9 WYGvX3DnF5nBuK89PV0B+/sboZxsLRz3dtfuiBBIv4UcwuMXbVX3SfxW0QXBe95+ AaeVrBSPnDSQ8QAdiDNJgZ+aNUHqj4WVyp/7jmi6q0l8vLsaNbEVbg9rxR/WBoED u3YfLj8FNbxfQYxbHYEjn1uhZZlRwDKPpy5QVH0aVw4ltD5+Apw= -----END CERTIFICATE-----Generated at Tue Nov 4 21:03:45 2025 by rpki-client