$ rpki-client -vvf repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft File: 8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft (raw, json) Hash identifier: lhtrGoPqeT+7d8hy4blJHiAFBmgWaj/cOEdp4zFIMvk= Subject key identifier: B5:15:0B:48:6F:1C:B3:57:D1:D5:E1:40:00:7B:38:EE:F6:E8:A9:DB Authority key identifier: 8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA Certificate issuer: /CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA Certificate serial: 48DBE96D659C2CF57AD297A9430F25590ED9F07F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft Manifest number: 0529 Signing time: Wed 05 Nov 2025 21:22:16 +0000 Manifest this update: Wed 05 Nov 2025 21:17:16 +0000 Manifest next update: Sun 09 Nov 2025 04:47:16 +0000 Files and hashes: 1: 34332e3233302e342e302f32342d3234203d3e203338373838.roa (hash: Myo0yUY2zYBlmDu7ifkTtwfEDTywRzZJiBzIgMz4kyk=) 2: 34332e3233312e3132382e302f32332d3233203d3e203338373838.roa (hash: HFx27am61y/dC1xdTadXPgOw5A9a+PEjL0futSZShAU=) 3: 3130332e372e302e302f32332d3233203d3e203338373838.roa (hash: eYJSZ6BNvJdcwOjXxyxNY4HDMCsMbaLoRNn+0CbiAds=) 4: 3130332e372e312e302f32342d3234203d3e203338373838.roa (hash: HfReQfR8KQgqYxrjCjLONRll8cJTpbYph9s5PnSext8=) 5: 3130332e3234322e3138302e302f32342d3234203d3e203338373838.roa (hash: J6znwF/VIOIQq7nf+/cVdXFnP4yNGPdAl3m1qZHQzpE=) 6: 3130332e3234322e3138312e302f32342d3234203d3e203338373838.roa (hash: i565en58aZkxitE/Cu7dj7vQtPe24rOc0XFo1zdj2pA=) 7: 8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl (hash: mgEKMiTsYoPkISgVaUYifv112oo9cJdyBSXKozwYfeQ=) 8: 34332e3233302e372e302f32342d3234203d3e203338373838.roa (hash: i3HQaU7A5T+hugQmUCoVWplcF5RYtJ+OjDq/WGotyFM=) 9: 34332e3233312e3132382e302f32342d3234203d3e203338373838.roa (hash: lmYVrCn9BeJjLwZ83vYZIK3fLJEIHwntZ3WH1J4i7Cc=) 10: 3130332e3234322e3138302e302f32332d3233203d3e203338373838.roa (hash: Q4FCJx2xdQyXWuG/Mkdlbm+EYQuJWHSMRXEQhaDwxBc=) 11: 34332e3233312e3132392e302f32342d3234203d3e203338373838.roa (hash: W5Zb76xYohKVMN4oDjg1HwPWp43mgnWE5orvLBb5SkM=) 12: 3130332e372e302e302f32342d3234203d3e203338373838.roa (hash: IvhePbxETJJ1An12hekeGcMrYJecR0U54GWOfDVzXpo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 23:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:db:e9:6d:65:9c:2c:f5:7a:d2:97:a9:43:0f:25:59:0e:d9:f0:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA Validity Not Before: Nov 5 21:17:16 2025 GMT Not After : Nov 9 04:47:16 2025 GMT Subject: CN=B5150B486F1CB357D1D5E140007B38EEF6E8A9DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:16:04:0c:e5:1f:a7:4a:34:a0:37:4f:87:a7: 3e:8e:3f:37:06:9b:70:de:b8:9c:3d:6e:fd:cf:04: 40:4b:46:ab:89:eb:58:cb:e0:e5:3f:76:15:7b:6a: 0b:34:67:1a:04:35:1f:eb:a4:ac:ac:7d:44:a0:76: 90:42:d0:89:d3:3a:6d:64:7d:73:ee:64:e9:d3:68: 12:ff:1f:49:83:ef:16:e9:8f:b0:54:53:ba:07:20: 76:49:3f:6a:f9:a8:c1:fa:0d:50:c1:80:36:50:eb: 75:7a:e6:fb:f6:27:cd:a5:1d:6a:97:2f:42:be:0f: 00:34:4f:df:6c:d3:d5:52:f7:d9:72:b4:37:2e:ed: a6:0a:a5:98:eb:7c:09:0d:9d:4c:d0:0f:46:df:3a: 3d:cc:ea:eb:cf:39:ad:b6:f8:08:84:16:2f:70:cd: 72:7a:22:65:27:96:23:e3:7a:61:ef:a5:e9:3e:f2: 04:7b:18:60:89:55:5f:d9:dc:9f:3b:e7:35:40:12: 54:24:aa:76:13:5c:dc:96:82:38:1d:4a:ce:61:5d: 93:e7:99:ee:ed:01:83:9b:9d:f5:1a:be:3b:84:71: c3:17:38:46:a5:7f:88:54:57:cb:12:0e:43:e7:1e: cc:1f:69:63:fe:4f:b3:2a:a7:8d:e5:3b:72:83:3d: 8d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:15:0B:48:6F:1C:B3:57:D1:D5:E1:40:00:7B:38:EE:F6:E8:A9:DB X509v3 Authority Key Identifier: keyid:8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:48:ee:6b:6b:b3:15:74:4b:57:de:54:80:b2:0d:f6:f1:40: 2c:5c:16:67:14:57:d5:2d:0d:5f:af:30:5e:7b:14:fb:64:7e: 5f:91:45:77:01:e0:bc:f2:28:42:cd:60:6e:29:82:51:8f:07: 5b:1b:03:db:8c:e4:58:97:d9:ae:6b:46:fd:c6:1a:ce:0e:cd: 54:b9:bb:6b:23:e8:e9:c4:ef:29:4d:d8:54:ff:ee:60:d7:5e: 10:46:0b:11:cb:8f:29:73:ec:ea:0c:79:19:f6:99:8a:77:3b: a8:a8:5e:38:46:9e:32:47:10:26:3b:3e:76:e9:8d:39:03:5e: 38:af:a8:52:e8:d6:58:ca:84:16:5e:20:95:b3:97:37:28:fd: 00:a1:9c:a8:09:46:d7:96:2a:ad:c0:c5:cb:02:c2:7c:69:09: f3:1e:4a:ef:3b:da:f8:5c:79:c5:84:67:83:e6:86:40:b9:57: cf:63:1a:07:c4:57:a2:e2:0a:de:78:ef:99:c4:ad:57:a9:c2: 94:dd:bc:22:46:2f:73:62:a3:32:ca:15:2c:a8:ff:b2:6d:1a: 4b:ff:b2:00:7f:7a:1e:b2:53:35:db:52:c7:90:6a:37:4a:d2: 87:98:c7:e8:b1:5f:ea:af:1f:8f:49:55:4d:20:05:0d:91:ff: 65:9c:04:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSNvpbWWcLPV60pepQw8lWQ7Z8H8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5MDAw MUZFRkVDQTAeFw0yNTExMDUyMTE3MTZaFw0yNTExMDkwNDQ3MTZaMDMxMTAvBgNV BAMTKEI1MTUwQjQ4NkYxQ0IzNTdEMUQ1RTE0MDAwN0IzOEVFRjZFOEE5REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9FgQM5R+nSjSgN0+Hpz6OPzcG m3DeuJw9bv3PBEBLRquJ61jL4OU/dhV7ags0ZxoENR/rpKysfUSgdpBC0InTOm1k fXPuZOnTaBL/H0mD7xbpj7BUU7oHIHZJP2r5qMH6DVDBgDZQ63V65vv2J82lHWqX L0K+DwA0T99s09VS99lytDcu7aYKpZjrfAkNnUzQD0bfOj3M6uvPOa22+AiEFi9w zXJ6ImUnliPjemHvpek+8gR7GGCJVV/Z3J875zVAElQkqnYTXNyWgjgdSs5hXZPn me7tAYObnfUavjuEccMXOEalf4hUV8sSDkPnHswfaWP+T7Mqp43lO3KDPY2rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtRULSG8cs1fR1eFAAHs47vboqdswHwYDVR0j BBgwFoAUjD5EouK0ddXPSkjlLRcpAAH+/sowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGUyYmYwOS01ZjQyLTRiNjUtYTQyZC02M2QwNzk2ZDIwNmMvMC84QzNFNDRBMkUy QjQ3NUQ1Q0Y0QTQ4RTUyRDE3MjkwMDAxRkVGRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5MDAwMUZF RkVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRlMmJmMDktNWY0Mi00YjY1LWE0 MmQtNjNkMDc5NmQyMDZjLzAvOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5 MDAwMUZFRkVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRI7mtrsxV0S1feVICyDfbxQCxcFmcUV9Ut DV+vMF57FPtkfl+RRXcB4LzyKELNYG4pglGPB1sbA9uM5FiX2a5rRv3GGs4OzVS5 u2sj6OnE7ylN2FT/7mDXXhBGCxHLjylz7OoMeRn2mYp3O6ioXjhGnjJHECY7Pnbp jTkDXjivqFLo1ljKhBZeIJWzlzco/QChnKgJRteWKq3AxcsCwnxpCfMeSu872vhc ecWEZ4PmhkC5V89jGgfEV6LiCt5475nErVepwpTdvCJGL3NiozLKFSyo/7JtGkv/ sgB/eh6yUzXbUseQajdK0oeYx+ixX+qvH49JVU0gBQ2R/2WcBFI= -----END CERTIFICATE-----Generated at Thu Nov 6 00:36:32 2025 by rpki-client