$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft File: 10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft (raw, json) Hash identifier: 2nfTeBcA/mUvgzyFF5FiGW26yP2wRUF8nv9hp4E3MFA= Subject key identifier: 4E:16:8C:65:F4:05:F2:64:EC:31:AC:79:47:F8:F6:3A:DE:AE:E3:4D Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF Certificate issuer: /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Certificate serial: 351750E450BA49C81C0D7A36C0C088D63DF33A8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft Manifest number: 052C Signing time: Tue 04 Nov 2025 00:31:59 +0000 Manifest this update: Tue 04 Nov 2025 00:26:59 +0000 Manifest next update: Fri 07 Nov 2025 03:42:59 +0000 Files and hashes: 1: 3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa (hash: uDN60ejcwmufdw9lRATsCm8TNe8pbZTXPxEDJDFJrtI=) 2: 323430323a626538303a3a2f33352d3335203d3e20313331373439.roa (hash: Oqj6PoE4F8AznRA3O47Q/vammp0q4o8hLusJKPdYYNc=) 3: 323430323a626538303a343030303a3a2f33352d3335203d3e20313331373439.roa (hash: NQhanJjaDTGlHqgVpp7WZk1oBiHC9a8024nRDhFHB5U=) 4: 323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa (hash: YJQzg1U9jA4AWFaUYLdryvvEck232YTbH13zq010OFw=) 5: 323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa (hash: u7HIVNgPT8nOMxVXRQicLF9a4KID/8Fh81X51PzO+cY=) 6: 3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa (hash: SjzDmLz46qIS/nJ0zn3gr3kiE+RR+H/5PGnqBHKVams=) 7: 3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (hash: Hah38SlTgCkIbLHq1q3uLH0RNUqGa3DsQKagbnlKgEg=) 8: 323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa (hash: 85lx2+O0c1Tye1V/YF4G0HFNwN1FRAy3MZlTA2YttNs=) 9: 3130332e33312e3133342e302f32332d3233203d3e20313331373439.roa (hash: R5DcBcZsZ/tVTFJsSzzQGY3wUUyH7B2253S6p3vidZI=) 10: 323430323a626538303a3a2f33342d3334203d3e20313331373439.roa (hash: qwxYNTh6xKdp2uATuIFR5O42e+8ng5z76v1e121JSWc=) 11: 323430323a626538303a3a2f33332d3333203d3e20313331373439.roa (hash: wXhkK7uiuOpjHC2A0NMyoBCjpeit4b5RIwLk/h9wbpQ=) 12: 323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa (hash: wPrR/CuGOoimfu2ESRqwKfIX+XXz6lk/Ile4WLcqwSQ=) 13: 323430323a626538303a383030303a3a2f33352d3335203d3e20313331373439.roa (hash: Htx/fOPObPi6ATUBVsfJbs0qEhGzdpd2T6aHa8E9uiQ=) 14: 10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl (hash: SoDG5XOXy3/znEk7TTwB9cRKSFuQ7uMofpUWC4aLA1Y=) 15: 323430323a626538303a383030303a3a2f33342d3334203d3e20313331373439.roa (hash: lrGsnHWNUUeWw86IHGDadF3wESv1aEvqYzkKNtLSTYI=) 16: 3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa (hash: jQaUGbMnprmPG29gShaOC88VLFUYJfQ53uR+ITg6jLM=) 17: 323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa (hash: UmYtyoPy4ZvZZv42ISGmkzTMakpIhylvPVTLu1TKOwE=) 18: 323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa (hash: 8yEyL4RD7Qa35m9yx8L60c6viJWD8aIwuREP+x+PT4o=) 19: 323430323a626538303a3a2f33322d3332203d3e20313331373439.roa (hash: rAFjuW4Ob+s+8+VX602W+l2HlUbwposeuUvXP5ZI5FU=) 20: 323430323a626538303a633030303a3a2f33342d3334203d3e20313331373439.roa (hash: nIo8hwuirVHnHkmWMKJHXedLZK1IsiVp+gI1eB5wIWM=) 21: 3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa (hash: TkM6f8/8bl8VJM/y37L1BIkGsrEx/IcZC/SKW3F/E78=) 22: 323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa (hash: noUPhk/lMic4mWf4jKWj6yuqbnoenZnLHoMy6mHYvdE=) 23: 323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa (hash: +XotVkUYpiJ83hc89EWoIGxGRhhZu0xl8ZYTUA6r/r8=) 24: 3130332e33312e3133332e302f32342d3234203d3e20313331373439.roa (hash: C8WKEDh35WX/j3rJi1+NJXVLBziYbBALI4qujCiFsgQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 03:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:17:50:e4:50:ba:49:c8:1c:0d:7a:36:c0:c0:88:d6:3d:f3:3a:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Validity Not Before: Nov 4 00:26:59 2025 GMT Not After : Nov 7 03:42:59 2025 GMT Subject: CN=4E168C65F405F264EC31AC7947F8F63ADEAEE34D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:57:18:84:0c:98:57:89:0f:d2:4b:af:0f:40: 9e:1d:9d:7d:6a:f5:50:9e:8f:2d:31:20:ed:87:72: 16:ee:63:c4:1c:20:d1:10:9b:15:40:1c:dc:5e:d3: 67:8f:81:66:96:71:f4:39:82:b6:fb:6f:f9:5d:c8: 36:8b:60:49:b9:11:e6:a3:7f:3c:d9:4d:b9:10:17: 47:d4:e2:7e:94:b4:20:f3:01:ac:35:0b:64:82:3d: 77:d0:9e:71:a3:fb:fe:2d:ad:fc:2d:8a:f0:90:99: 55:49:2f:00:35:77:5b:ae:c8:d8:b5:f3:f8:69:ad: 51:fb:53:d4:7b:1c:b6:17:db:c4:ee:78:2e:f2:56: 3c:6b:10:14:1c:6f:5f:b3:06:3f:64:a9:f5:1e:26: da:5c:f3:6f:2c:45:bb:dd:d4:9c:65:b9:4a:3a:7b: cc:96:93:9a:9d:a5:8a:06:2b:c1:58:7a:72:94:cb: 21:4d:c5:df:ae:a2:71:c4:af:96:bd:05:40:c1:e7: 69:1f:14:e9:1d:a1:d4:44:b6:1d:8f:8f:82:81:1c: 90:81:76:d3:96:6f:02:4a:63:c1:69:d0:59:f5:fa: 0c:0c:af:25:85:00:4b:c6:89:78:db:00:d0:e3:70: a0:49:13:f1:91:5a:ba:0d:db:41:ca:39:ee:bc:fb: 61:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:16:8C:65:F4:05:F2:64:EC:31:AC:79:47:F8:F6:3A:DE:AE:E3:4D X509v3 Authority Key Identifier: keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:5c:7d:7a:f6:62:e4:c4:6a:5c:63:96:b7:e2:cf:f6:8a:98: cb:6a:70:b6:cf:b5:6f:f7:9c:9b:c2:d4:6c:01:03:c8:42:c6: f7:4e:38:e1:f5:34:50:5f:d9:14:06:c9:13:30:28:20:72:0c: ef:f7:24:aa:87:03:e7:36:d1:ca:a6:90:36:9f:01:07:f6:be: b0:9f:bf:d4:df:95:ae:33:d4:61:2b:23:21:e9:6f:b9:d4:b1: 34:53:ef:bc:f0:c6:72:c6:41:f0:88:36:fe:88:d1:3f:9f:28: c2:6a:53:cc:bd:5c:62:9f:0c:f4:d7:95:92:23:21:72:9d:b9: b5:b0:38:cd:06:bb:e4:01:8c:d0:c1:cd:c4:e3:15:f4:71:8f: 87:4b:9c:fc:fa:b8:b4:2d:e0:76:0d:36:51:70:d1:6d:56:2d: 68:e2:85:48:71:61:9c:01:b6:fa:e3:26:59:a3:ba:c5:83:80: 6b:a9:bc:94:4d:ab:ce:dd:47:90:92:6e:f0:e5:43:c5:e9:0e: 92:37:0f:69:1f:32:f3:73:87:b0:c5:72:79:5a:00:ab:a9:d4: 97:62:18:96:a6:e6:23:fc:11:c8:8f:8f:58:d9:81:89:0c:7f: db:39:0c:22:25:7b:2b:e3:1d:61:5c:50:30:e2:08:90:57:d6: 4c:59:50:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNRdQ5FC6ScgcDXo2wMCI1j3zOo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5 NTIyNDZGRjAeFw0yNTExMDQwMDI2NTlaFw0yNTExMDcwMzQyNTlaMDMxMTAvBgNV BAMTKDRFMTY4QzY1RjQwNUYyNjRFQzMxQUM3OTQ3RjhGNjNBREVBRUUzNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaVxiEDJhXiQ/SS68PQJ4dnX1q 9VCejy0xIO2HchbuY8QcINEQmxVAHNxe02ePgWaWcfQ5grb7b/ldyDaLYEm5Eeaj fzzZTbkQF0fU4n6UtCDzAaw1C2SCPXfQnnGj+/4trfwtivCQmVVJLwA1d1uuyNi1 8/hprVH7U9R7HLYX28TueC7yVjxrEBQcb1+zBj9kqfUeJtpc828sRbvd1JxluUo6 e8yWk5qdpYoGK8FYenKUyyFNxd+uonHEr5a9BUDB52kfFOkdodREth2Pj4KBHJCB dtOWbwJKY8Fp0Fn1+gwMryWFAEvGiXjbANDjcKBJE/GRWroN20HKOe68+2EVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUThaMZfQF8mTsMax5R/j2Ot6u400wHwYDVR0j BBgwFoAUEP41sEDoo9BeW+m+5PCmNpUiRv8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDBmNGYzNy1jN2ZiLTQ3ZDAtOGE4NS1lY2ZkMTJiOTE1ZjUvMC8xMEZFMzVCMDQw RThBM0QwNUU1QkU5QkVFNEYwQTYzNjk1MjI0NkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5NTIy NDZGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAwZjRmMzctYzdmYi00N2QwLThh ODUtZWNmZDEyYjkxNWY1LzAvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2 MzY5NTIyNDZGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRcfXr2YuTEalxjlrfiz/aKmMtqcLbPtW/3 nJvC1GwBA8hCxvdOOOH1NFBf2RQGyRMwKCByDO/3JKqHA+c20cqmkDafAQf2vrCf v9Tfla4z1GErIyHpb7nUsTRT77zwxnLGQfCINv6I0T+fKMJqU8y9XGKfDPTXlZIj IXKdubWwOM0Gu+QBjNDBzcTjFfRxj4dLnPz6uLQt4HYNNlFw0W1WLWjihUhxYZwB tvrjJlmjusWDgGupvJRNq87dR5CSbvDlQ8XpDpI3D2kfMvNzh7DFcnlaAKup1Jdi GJam5iP8EciPj1jZgYkMf9s5DCIleyvjHWFcUDDiCJBX1kxZUDQ= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:40 2025 by rpki-client