$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft File: 012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft (raw, json) Hash identifier: 49/tD07df3BsPIMIjMcmEHWsKSAxla9cjoaWVPllj1g= Subject key identifier: 7D:2D:BE:D5:4E:0F:9E:C6:E3:9D:99:D7:24:56:6C:4F:33:D6:87:54 Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C Certificate issuer: /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C Certificate serial: 7389A21924A72BF5DE665A70CDE96820F329681E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft Manifest number: 0524 Signing time: Tue 04 Nov 2025 12:02:17 +0000 Manifest this update: Tue 04 Nov 2025 11:57:17 +0000 Manifest next update: Fri 07 Nov 2025 22:23:17 +0000 Files and hashes: 1: 3130332e3234362e3131372e302f32342d3234203d3e203536323433.roa (hash: qkkJ54NZ40Um3ciYsl/FGUnS4rYZSGlzZD4dWlUI5hM=) 2: 3230322e39332e3133352e302f32342d3234203d3e2034333832.roa (hash: ri1oMn8me80QpVGUqBtvPXHCGV+V3jM8xkbu4T3ytno=) 3: 3230322e39332e3134322e302f32342d3234203d3e2034333832.roa (hash: /rqrLGb+IkPW8rjy02EXXMaWAA6ibmhWcBGw6CAxGjc=) 4: 3230322e39332e3134332e302f32342d3234203d3e2034333832.roa (hash: HxTVM3BaA8ke4XmmAmeOxfSVVSVRh0EkdWqpyqwPT1U=) 5: 3230322e39332e3133392e302f32342d3234203d3e2034333832.roa (hash: 2xWfiK5wGmMcUrPcXTeK+FMi4oIrH3FKfxMpAgGIdSQ=) 6: 3230322e39332e3134302e302f32342d3234203d3e2034333832.roa (hash: AxG3Av6Lr1ooWeZ52jFBXjksOOp131HOnOlkyHCdSIY=) 7: 3230322e39332e3132392e302f32342d3234203d3e2034333832.roa (hash: 0aNy0ETuqhbORaoBLuDRgIvkLNekuqgE5MuIzbIuHu4=) 8: 3230322e39332e3133382e302f32342d3234203d3e2034333832.roa (hash: 9VqDU3d2jTW23JJ05scMXpgKwNdRFXtjy3WCszDduNE=) 9: 3230322e39332e3133342e302f32342d3234203d3e2034333832.roa (hash: XNOVEI3YN45FFKxPdBMlhL4tIvoqWKr9UzQJy69423A=) 10: 3230322e39332e3133372e302f32342d3234203d3e2034333832.roa (hash: bc52vQ8UC2G4/y1ll8Fk+/X4/gPss4cwSVJImtHITIQ=) 11: 3230322e39332e3132382e302f32342d3234203d3e2034333832.roa (hash: Kcq6RiACas78b8uWIYiFOtGS3r3yMXUnaWfx7z/cdEU=) 12: 3130332e3234362e3131392e302f32342d3234203d3e203536323433.roa (hash: iVB5CfMmFrw/1sxkrTtiTl8LrYbLbK8j8toSYOpEOdI=) 13: 323430333a623930303a3a2f33322d3332203d3e2034333832.roa (hash: JWHfZ6w+iObuBrwQGbo/6Xd2nLZuo2KPm5ntS1O1mZA=) 14: 012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl (hash: lSSuK28QxBfnz4v+oJbdvrfuiNlb80uf8XNY3mzy6sc=) 15: 3230322e39332e3133322e302f32342d3234203d3e2034333832.roa (hash: HZhJmMH/Ke4cPS3cjwshrQlxCqO5LSReCzOgD2oJQGE=) 16: 3130332e3234362e3131362e302f32342d3234203d3e203536323433.roa (hash: sFm39yL/wE3VY7beJqFDG9gTkKfaNeEukDIdxaa9zRE=) 17: 3230322e39332e3134312e302f32342d3234203d3e2034333832.roa (hash: bBONzBtnp5cZgKGGF/WSDLhv6iSsnxnb46nVEQMcaEk=) 18: 3130332e3234362e3131382e302f32342d3234203d3e203536323433.roa (hash: /w7eKmK7IgjbUT0N0MS/xY50UMcyTaRIoyZfbv+wX+Q=) 19: 3230322e39332e3133332e302f32342d3234203d3e2034333832.roa (hash: vkTDe9buXDOgB6kWHFGcwJdVcp2flSZI09Z4kQqjciU=) 20: 3230322e39332e3133302e302f32342d3234203d3e2034333832.roa (hash: mk2uuBuKIDHj7rkFbCdRe6jSuAPJ/hDxuUfm/exdaSw=) 21: 3230322e39332e3133312e302f32342d3234203d3e2034333832.roa (hash: w9IXrLEpnOTvHIWW3gOa5yz7gU/R3agEoOz9SkOzTf8=) 22: 3230322e39332e3133362e302f32342d3234203d3e2034333832.roa (hash: uZGMmLO+ihx1HauuMCEhDeKUaoZ9Cej3WyjpZuP5mxw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:89:a2:19:24:a7:2b:f5:de:66:5a:70:cd:e9:68:20:f3:29:68:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C Validity Not Before: Nov 4 11:57:17 2025 GMT Not After : Nov 7 22:23:17 2025 GMT Subject: CN=7D2DBED54E0F9EC6E39D99D724566C4F33D68754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:25:85:6b:58:fa:a8:ef:91:86:e8:da:9c:e5: 8e:ed:4d:77:e5:67:46:20:21:65:f5:2a:d1:4a:c7: a8:86:3e:1d:65:bc:fc:f4:2e:ad:95:c6:e6:12:c5: 4f:c2:e0:89:69:a2:b2:b0:2f:30:09:21:c9:43:92: da:a4:5e:96:a7:af:6a:1c:8f:f4:76:3a:9d:c3:62: a7:a2:a7:46:0b:97:27:16:14:c3:40:5d:a2:7c:94: c4:de:22:fe:fa:cf:bc:b0:35:80:97:b2:7f:17:6c: 3d:d6:05:94:73:b7:05:17:c9:0b:d2:46:3d:72:cc: d5:93:6b:00:ae:84:19:7e:f1:50:0a:8c:a9:70:50: 83:41:d7:be:37:f4:86:ca:22:3f:00:3a:ab:90:38: 0b:01:48:15:a7:4d:dc:81:09:92:8d:23:93:f2:71: 94:8b:bf:51:23:2b:18:a8:e1:ff:81:35:11:bf:0a: b0:1d:8f:a4:6e:75:d9:6d:22:ef:1b:c0:e4:b6:73: 00:06:95:46:96:b4:58:bb:e2:31:21:54:93:c5:b6: 55:40:d8:a9:bb:fa:3d:4b:43:e5:a3:ab:4c:5c:9c: b7:00:0e:4e:74:f6:16:ab:ee:92:6d:a0:0d:95:59: fe:75:26:be:ea:4b:57:10:3d:7d:fb:9d:ba:4a:19: e4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:2D:BE:D5:4E:0F:9E:C6:E3:9D:99:D7:24:56:6C:4F:33:D6:87:54 X509v3 Authority Key Identifier: keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:29:e6:9d:7e:36:0c:02:5d:90:c8:0c:70:87:69:64:22:c8: 25:e0:e2:0a:06:ae:77:4c:f5:59:60:f7:36:09:6b:a5:6f:f7: f9:89:3a:f1:1d:cd:30:c5:23:c9:d6:60:23:97:94:20:1e:80: 4e:e1:99:b2:03:d0:be:ea:a6:3f:06:71:ef:ea:d3:93:81:31: 91:ea:94:95:d3:c9:f6:aa:9d:fa:a7:d6:a9:a6:1a:d4:01:d4: c1:5f:50:21:fb:d4:77:36:fa:2a:47:66:1f:51:31:f9:1f:83: c1:db:b8:4b:3f:28:1d:c9:d0:55:3a:6f:e7:3c:04:ea:8f:19: 99:60:51:90:3b:65:9b:19:90:23:f9:4d:72:d3:10:e3:91:6d: f3:21:91:52:d2:2a:48:31:d0:a6:b3:51:1a:2c:27:c2:0f:f9: ea:f0:f6:f7:81:f1:c7:a3:30:bc:8a:fa:6f:5b:5c:55:39:52: df:fa:12:f0:5f:9f:6f:4b:47:68:9c:7f:21:83:0b:8b:a8:2c: 20:17:99:52:ab:d1:a1:2d:f0:4a:b4:13:c7:56:aa:e0:42:e4: 12:40:de:6a:0d:e5:42:a7:10:38:56:8e:9d:40:53:1d:6f:ef: 16:19:69:f1:73:20:d4:66:1b:ed:6f:a5:7e:2d:69:8f:32:ab: 74:4e:da:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc4miGSSnK/XeZlpwzeloIPMpaB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMx RUZEQTkzQzAeFw0yNTExMDQxMTU3MTdaFw0yNTExMDcyMjIzMTdaMDMxMTAvBgNV BAMTKDdEMkRCRUQ1NEUwRjlFQzZFMzlEOTlENzI0NTY2QzRGMzNENjg3NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKJYVrWPqo75GG6Nqc5Y7tTXfl Z0YgIWX1KtFKx6iGPh1lvPz0Lq2VxuYSxU/C4IlporKwLzAJIclDktqkXpanr2oc j/R2Op3DYqeip0YLlycWFMNAXaJ8lMTeIv76z7ywNYCXsn8XbD3WBZRztwUXyQvS Rj1yzNWTawCuhBl+8VAKjKlwUINB17439IbKIj8AOquQOAsBSBWnTdyBCZKNI5Py cZSLv1EjKxio4f+BNRG/CrAdj6RuddltIu8bwOS2cwAGlUaWtFi74jEhVJPFtlVA 2Km7+j1LQ+Wjq0xcnLcADk509har7pJtoA2VWf51Jr7qS1cQPX37nbpKGeRVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfS2+1U4PnsbjnZnXJFZsTzPWh1QwHwYDVR0j BBgwFoAUAS0vWZN/2+ZQlbnrSXHZ0x79qTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODZiMzg4OS02OTY2LTQ1ZWYtOTA3My1hZDE0MDExYWMzYjIvMC8wMTJEMkY1OTkz N0ZEQkU2NTA5NUI5RUI0OTcxRDlEMzFFRkRBOTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMxRUZE QTkzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg2YjM4ODktNjk2Ni00NWVmLTkw NzMtYWQxNDAxMWFjM2IyLzAvMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5 RDMxRUZEQTkzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEp5p1+NgwCXZDIDHCHaWQiyCXg4goGrndM 9Vlg9zYJa6Vv9/mJOvEdzTDFI8nWYCOXlCAegE7hmbID0L7qpj8Gce/q05OBMZHq lJXTyfaqnfqn1qmmGtQB1MFfUCH71Hc2+ipHZh9RMfkfg8HbuEs/KB3J0FU6b+c8 BOqPGZlgUZA7ZZsZkCP5TXLTEOORbfMhkVLSKkgx0KazURosJ8IP+erw9veB8cej MLyK+m9bXFU5Ut/6EvBfn29LR2icfyGDC4uoLCAXmVKr0aEt8Eq0E8dWquBC5BJA 3moN5UKnEDhWjp1AUx1v7xYZafFzINRmG+1vpX4taY8yq3RO2io= -----END CERTIFICATE-----Generated at Tue Nov 4 16:45:02 2025 by rpki-client