$ rpki-client -vvf repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft File: C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft (raw, json) Hash identifier: lG6pqzrJbpnZIN2O5LdugOHMNcafBoxd6z72Nz91tKM= Subject key identifier: 0F:91:93:C3:76:E7:61:CC:46:35:BA:5B:EB:FC:16:FF:5A:59:BA:B5 Authority key identifier: C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F Certificate issuer: /CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F Certificate serial: 4B175007DFADB8F14363F4959DC82336190878A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft Manifest number: 0569 Signing time: Tue 04 Nov 2025 05:02:24 +0000 Manifest this update: Tue 04 Nov 2025 04:57:24 +0000 Manifest next update: Fri 07 Nov 2025 10:43:24 +0000 Files and hashes: 1: 3130332e32322e3235312e302f32342d3234203d3e20313331313131.roa (hash: FQpoIAC9AkHOj7gF3JsxAlTSaEMd9sYKYRZgoHuK7yw=) 2: 3130332e32322e3235302e302f32342d3234203d3e20313331313131.roa (hash: 516xDtvKLseki+IBX6h+mKjxbuiKgwqfJB4LmOXicXw=) 3: 3230322e34332e3137362e302f32302d3234203d3e20313331313131.roa (hash: 2LFPdQC7sfy55qfY3d9WCKIbl57qZU5+z9zs069asuU=) 4: 3230332e3137362e3138302e302f32322d3234203d3e20313331313131.roa (hash: VU0ZIZ2pkWLbL/yZX6A7PXJh4wAgz1Lfo/SmUnfVxjs=) 5: 3230322e34332e3137362e302f32322d3234203d3e20313331313131.roa (hash: o4EuiIX65DjYa3ywyHTPaQSCo34pp+K8+jEM2BCf1A4=) 6: 32372e35302e31362e302f32302d3234203d3e20313331313131.roa (hash: K0Qyq4TQNm4Gb6O7QApcWBMQFh1hlsrrhE70FrRZJng=) 7: 3130332e32322e3234382e302f32322d3234203d3e20313331313131.roa (hash: kWqKP/lyIhDws2h8Me6LYP31KQBLG0udbqPtWea7AOc=) 8: 34332e3234332e3134302e302f32322d3234203d3e20313331313131.roa (hash: Ln/zBXifrR3kRN5QO8V+SWT6tpUWR1WnEob5sCVgP4s=) 9: 3130332e32322e3234392e302f32342d3234203d3e20313331313131.roa (hash: aY0anTpEZIat4/VeI01P3kjwTwtzNISJMDgT1crbBNU=) 10: 3131392e3233352e3230382e302f32302d3234203d3e20313331313131.roa (hash: bNy3O3/D8sze1XtEAGH5p80v+qY7OivRx/ulln1yeBc=) 11: 3130332e32322e3234382e302f32342d3234203d3e20313331313131.roa (hash: UtJjITDA9JHQ6VJXBVisu99jt556rMiuNEZSGObwvAc=) 12: C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl (hash: tGv9pX8BVIFarL4iAvlPQbpLT6zq5TWEXbdodOyWFt0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:43:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:17:50:07:df:ad:b8:f1:43:63:f4:95:9d:c8:23:36:19:08:78:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F Validity Not Before: Nov 4 04:57:24 2025 GMT Not After : Nov 7 10:43:24 2025 GMT Subject: CN=0F9193C376E761CC4635BA5BEBFC16FF5A59BAB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:06:77:bf:9e:8a:c9:15:38:2e:92:97:09:c0: 1f:8b:c0:47:80:d2:a7:28:68:60:c6:d8:82:21:7d: a7:29:d1:39:a7:fe:14:ec:61:29:ea:1a:e6:f1:6e: 66:c4:c1:a7:ac:f3:ab:ac:7c:16:ae:c4:db:84:38: 04:98:97:9b:55:dd:11:39:0e:92:17:00:60:f9:77: 96:48:87:dd:e7:56:26:d8:81:da:0d:a8:b8:3c:93: be:32:0e:9b:2c:41:0c:a8:d9:3e:73:27:57:bc:8d: 08:b0:b2:e6:d5:9d:68:c8:04:72:a3:c3:bc:c4:f8: 27:a4:17:b8:cc:5e:2a:33:9c:b5:e4:96:e7:61:eb: ce:e8:1f:de:38:6b:cc:8e:ba:12:56:6a:65:aa:5c: 5b:01:97:1e:fd:36:b6:11:24:da:f4:7a:02:d1:cb: ac:ed:94:0f:c5:f0:b1:31:c3:15:5e:9a:99:23:e3: 44:19:33:1d:ab:45:85:80:4c:9d:78:64:06:04:cf: f0:eb:4e:21:e6:d0:09:b6:a7:e6:a2:70:1a:5d:92: 6d:70:a6:55:10:3e:b2:67:bc:65:17:d4:9d:17:bc: d6:33:e2:23:df:3d:60:08:21:36:ca:52:ea:71:eb: b5:d6:75:1b:92:42:49:50:79:12:cd:fc:57:c3:bd: 58:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:91:93:C3:76:E7:61:CC:46:35:BA:5B:EB:FC:16:FF:5A:59:BA:B5 X509v3 Authority Key Identifier: keyid:C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c7:46:6b:f9:5d:b2:cd:22:4e:cb:dc:02:d4:25:57:90:f5: 27:7a:0b:9c:d3:85:a0:68:fc:ad:2c:46:a9:28:d5:75:68:1f: 62:46:33:a1:2e:30:48:47:4a:f1:93:0d:bd:97:a8:26:e1:79: 0a:64:f5:a4:d0:67:23:8d:7c:f4:d8:22:0f:c7:32:66:c5:4e: 15:76:75:a3:6b:65:c4:d2:cf:78:87:87:7b:58:7b:be:f0:f6: b3:27:30:0c:33:c5:33:b6:69:1c:01:c9:82:1b:ba:bd:b5:c6: e3:5b:67:f2:b4:50:28:e9:44:bd:6b:37:6b:bc:75:42:a0:9e: 54:e1:56:1c:f0:8a:3d:a1:9e:6a:cd:e2:ac:3a:25:03:69:cf: 51:af:54:b9:b6:93:37:14:d2:65:ce:2f:3a:6f:a9:40:ef:e5: 63:9e:d3:d6:c0:fc:8e:3f:63:5c:49:89:77:c2:12:c7:04:a7: 97:f2:cf:dc:dc:f0:d4:f9:f5:59:b3:69:a5:a9:82:1e:01:a3: fe:bc:c2:37:2f:11:3b:f0:ff:ad:44:51:3b:68:45:80:43:e7: 50:0f:bf:b4:79:60:69:c9:07:94:4c:c7:04:36:4a:22:e7:55: 61:a1:75:bc:64:60:73:31:d6:fd:c6:ff:94:2b:cf:fc:1b:d8: 60:2e:09:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSxdQB9+tuPFDY/SVncgjNhkIeKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFBRjhDOTk5RTlEMDZEQURFQkMzODdENzhCMzA1QUI4 NzE2REMyRjAeFw0yNTExMDQwNDU3MjRaFw0yNTExMDcxMDQzMjRaMDMxMTAvBgNV BAMTKDBGOTE5M0MzNzZFNzYxQ0M0NjM1QkE1QkVCRkMxNkZGNUE1OUJBQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Bne/norJFTgukpcJwB+LwEeA 0qcoaGDG2IIhfacp0Tmn/hTsYSnqGubxbmbEwaes86usfBauxNuEOASYl5tV3RE5 DpIXAGD5d5ZIh93nVibYgdoNqLg8k74yDpssQQyo2T5zJ1e8jQiwsubVnWjIBHKj w7zE+CekF7jMXioznLXkludh687oH944a8yOuhJWamWqXFsBlx79NrYRJNr0egLR y6ztlA/F8LExwxVempkj40QZMx2rRYWATJ14ZAYEz/DrTiHm0Am2p+aicBpdkm1w plUQPrJnvGUX1J0XvNYz4iPfPWAIITbKUupx67XWdRuSQklQeRLN/FfDvVjNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD5GTw3bnYcxGNbpb6/wW/1pZurUwHwYDVR0j BBgwFoAUwa+MmZ6dBtrevDh9eLMFq4cW3C8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OTIwNWU3Yy1hODgxLTQ4NzMtOTE4OC1lNTIxYjZhZjUyOWMvMC9DMUFGOEM5OTlF OUQwNkRBREVCQzM4N0Q3OEIzMDVBQjg3MTZEQzJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFBRjhDOTk5RTlEMDZEQURFQkMzODdENzhCMzA1QUI4NzE2 REMyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTkyMDVlN2MtYTg4MS00ODczLTkx ODgtZTUyMWI2YWY1MjljLzAvQzFBRjhDOTk5RTlEMDZEQURFQkMzODdENzhCMzA1 QUI4NzE2REMyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3HRmv5XbLNIk7L3ALUJVeQ9Sd6C5zThaBo /K0sRqko1XVoH2JGM6EuMEhHSvGTDb2XqCbheQpk9aTQZyONfPTYIg/HMmbFThV2 daNrZcTSz3iHh3tYe77w9rMnMAwzxTO2aRwByYIbur21xuNbZ/K0UCjpRL1rN2u8 dUKgnlThVhzwij2hnmrN4qw6JQNpz1GvVLm2kzcU0mXOLzpvqUDv5WOe09bA/I4/ Y1xJiXfCEscEp5fyz9zc8NT59VmzaaWpgh4Bo/68wjcvETvw/61EUTtoRYBD51AP v7R5YGnJB5RMxwQ2SiLnVWGhdbxkYHMx1v3G/5Qrz/wb2GAuCfc= -----END CERTIFICATE-----Generated at Tue Nov 4 12:54:27 2025 by rpki-client