$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft File: 8469874AE268E2CD4E9A137EDD5599C748530E9E.mft (raw, json) Hash identifier: hkbN4muyOU1JjI61V5nSigRUExwraWXubHiXlJdAt8Y= Subject key identifier: B0:A0:40:CA:60:3F:37:5F:24:73:81:25:E1:D0:FE:4A:0F:5E:2C:F8 Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E Certificate issuer: /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E Certificate serial: 25B68438B50A75EA1BA2481632327AD18F02C5EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft Manifest number: 053A Signing time: Mon 03 Nov 2025 01:12:10 +0000 Manifest this update: Mon 03 Nov 2025 01:07:10 +0000 Manifest next update: Thu 06 Nov 2025 02:35:10 +0000 Files and hashes: 1: 3133372e35392e3136302e302f32322d3234203d3e203539323831.roa (hash: t5dSILf0M9LETh0ONTCtPeHbE5Gq+eulQJzX449lTa8=) 2: 3133372e35392e3136322e302f32342d3234203d3e203536323432.roa (hash: q6gnQ689gbyPRWkFyTqwu7clrVFZi6YA0qntQoU052Y=) 3: 3133372e35392e3136312e302f32342d3234203d3e203536323432.roa (hash: 8kcmZ4RG24jB44cBv71IJKv0c+Dtp9Ygk9nrjPzZQxo=) 4: 323430303a636438303a3a2f33322d3438203d3e203539323831.roa (hash: w3mgpqsf+QCQ0IESSJ7u/cpRjR0jksdX+ZR9wNYh8rI=) 5: 3130332e3232382e3131362e302f32332d3233203d3e203536323432.roa (hash: 6BZFe33/a07P77heVgE/RRa/s7Eo4pTfBbM0ftWFlFs=) 6: 3130332e3232382e3131362e302f32322d3234203d3e203539323831.roa (hash: 0on0Zr09JZO2uwExsn4al/aKrzhro4Rbk1hM7yfdFaI=) 7: 3130332e3232382e3131362e302f32322d3232203d3e203536323432.roa (hash: LN+YrVCzUblkTbFghEN9RcfZWB+oIkio+9woygN18Nk=) 8: 323430303a636438303a3a2f33322d3438203d3e203536323432.roa (hash: lejxupJB/ypozilIjk9IOKEOtlHup4PnPlCfI+BqLVI=) 9: 8469874AE268E2CD4E9A137EDD5599C748530E9E.crl (hash: cpsH3ITXRSsxyeqiksY1jW/dXq0YFoUdHGRgK5ni8tY=) 10: 3133372e35392e3136332e302f32342d3234203d3e203536323432.roa (hash: nBHgJ9scpxnDLh4WsmH3WPakx6Rx02RsuPBuZbUxKAs=) 11: 3133372e35392e3136322e302f32332d3233203d3e203536323432.roa (hash: zqqM4+D0YvV3kzADDLg9UoTtA+fv3LSZ59niExdp6h4=) 12: 3130332e3232382e3131382e302f32332d3233203d3e203536323432.roa (hash: 1wEjJgzGmGFQx1qLaHwF1vXvoQd7g22cQT5tuVMpCSs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 02:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:b6:84:38:b5:0a:75:ea:1b:a2:48:16:32:32:7a:d1:8f:02:c5:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E Validity Not Before: Nov 3 01:07:10 2025 GMT Not After : Nov 6 02:35:10 2025 GMT Subject: CN=B0A040CA603F375F24738125E1D0FE4A0F5E2CF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3d:e7:f8:3d:fe:ed:91:ae:36:4d:ce:9f:d5: 3b:29:72:5c:bf:2e:1f:a0:de:18:3d:67:16:e6:88: a9:3a:1a:91:bc:09:76:31:ba:f8:30:41:5f:41:4c: 69:83:ef:eb:0f:94:12:05:e9:4c:0e:df:0b:2e:9b: be:74:a0:f9:91:da:9a:6d:81:89:49:51:3e:bf:ae: 23:ae:2a:88:5c:38:c8:71:a6:89:f0:4d:4e:27:a5: 5e:53:89:63:80:b9:c5:99:f6:75:59:68:ea:e3:74: 71:49:04:95:2c:b8:6b:27:89:5e:27:a6:ee:3a:c1: 30:4e:f8:49:03:f1:ff:5e:1c:5d:49:8d:ec:d5:59: 41:39:6a:14:9c:ee:d7:2f:df:b2:e0:dd:eb:98:03: a2:e7:c2:f7:c7:4b:57:e4:e1:45:e8:7b:78:cd:ef: 44:c8:3f:45:ee:41:9c:f5:55:27:6e:ee:e6:22:70: 51:eb:b1:86:7d:22:e0:48:01:48:50:9b:a9:f8:ff: 0c:b1:1e:3e:7b:33:26:15:ef:1e:57:70:ce:65:86: 54:dd:62:df:97:59:5c:4f:5f:5b:7a:ac:1a:e9:4c: 25:ec:0e:de:f1:6d:d5:bf:eb:b8:11:b5:b1:ed:d6: 9d:d3:ec:c3:73:ad:65:c0:4d:54:85:48:22:fa:99: 75:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A0:40:CA:60:3F:37:5F:24:73:81:25:E1:D0:FE:4A:0F:5E:2C:F8 X509v3 Authority Key Identifier: keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:ce:13:52:2f:7d:bf:5b:84:05:a6:ca:b7:b2:df:b6:52:25: 8b:93:00:30:54:1a:ef:9a:7b:f1:d3:56:e4:c5:af:92:3f:47: d0:e1:4a:60:b2:f4:44:1c:8e:1d:ac:73:e8:de:df:cd:bf:fb: 51:ef:04:61:d5:22:1a:43:38:98:49:6e:7e:f4:58:86:4b:c8: 87:db:ad:13:ce:55:18:d4:8f:20:92:cd:b2:44:02:26:ae:ef: 49:5b:b8:ce:87:45:45:78:d5:ea:01:9b:54:e9:a3:bc:85:a3: 54:64:78:3a:7a:71:94:e8:43:71:82:0c:03:b1:74:f5:be:f0: e5:19:38:17:0d:67:48:55:ee:7a:c0:07:71:41:17:f2:f1:d1: 94:79:47:cd:7b:c0:a1:92:73:60:09:e6:fb:31:68:9b:83:cb: 25:f9:d7:bc:a8:2e:bc:b7:f6:e5:82:e0:c8:6a:d9:78:8a:ca: e6:5d:11:41:88:31:80:04:0b:e9:ce:e5:c8:95:b5:ab:e9:ca: 79:0c:c9:be:10:2e:c9:98:14:c3:c6:6a:8d:cf:22:6f:cd:f9: c7:a2:51:9f:c6:25:3e:b4:b9:0f:6b:76:72:9a:5f:f7:5c:b0: 24:14:a3:e9:9e:fe:60:eb:92:9b:97:07:98:8a:44:3e:8c:82: 24:a4:ac:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJbaEOLUKdeobokgWMjJ60Y8CxewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0 ODUzMEU5RTAeFw0yNTExMDMwMTA3MTBaFw0yNTExMDYwMjM1MTBaMDMxMTAvBgNV BAMTKEIwQTA0MENBNjAzRjM3NUYyNDczODEyNUUxRDBGRTRBMEY1RTJDRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcPef4Pf7tka42Tc6f1Tspcly/ Lh+g3hg9ZxbmiKk6GpG8CXYxuvgwQV9BTGmD7+sPlBIF6UwO3wsum750oPmR2ppt gYlJUT6/riOuKohcOMhxponwTU4npV5TiWOAucWZ9nVZaOrjdHFJBJUsuGsniV4n pu46wTBO+EkD8f9eHF1JjezVWUE5ahSc7tcv37Lg3euYA6LnwvfHS1fk4UXoe3jN 70TIP0XuQZz1VSdu7uYicFHrsYZ9IuBIAUhQm6n4/wyxHj57MyYV7x5XcM5lhlTd Yt+XWVxPX1t6rBrpTCXsDt7xbdW/67gRtbHt1p3T7MNzrWXATVSFSCL6mXU7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsKBAymA/N18kc4El4dD+Sg9eLPgwHwYDVR0j BBgwFoAUhGmHSuJo4s1OmhN+3VWZx0hTDp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2EyZDI1Yi1jYjE4LTQ1YmUtOWZhMS0xNTRjYTE1NzkyMjMvMC84NDY5ODc0QUUy NjhFMkNENEU5QTEzN0VERDU1OTlDNzQ4NTMwRTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0ODUz MEU5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdhMmQyNWItY2IxOC00NWJlLTlm YTEtMTU0Y2ExNTc5MjIzLzAvODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5 Qzc0ODUzMEU5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKTOE1Ivfb9bhAWmyrey37ZSJYuTADBUGu+a e/HTVuTFr5I/R9DhSmCy9EQcjh2sc+je382/+1HvBGHVIhpDOJhJbn70WIZLyIfb rRPOVRjUjyCSzbJEAiau70lbuM6HRUV41eoBm1Tpo7yFo1RkeDp6cZToQ3GCDAOx dPW+8OUZOBcNZ0hV7nrAB3FBF/Lx0ZR5R817wKGSc2AJ5vsxaJuDyyX517yoLry3 9uWC4Mhq2XiKyuZdEUGIMYAEC+nO5ciVtavpynkMyb4QLsmYFMPGao3PIm/N+cei UZ/GJT60uQ9rdnKaX/dcsCQUo+me/mDrkpuXB5iKRD6MgiSkrPA= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:36 2025 by rpki-client