$ rpki-client -vvf repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft File: 818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft (raw, json) Hash identifier: cTdHxURDsy7zvGDjjnVytE0Pjahh47yyZ0tKgWJecog= Subject key identifier: E1:79:6C:05:7D:25:A9:BD:7F:92:5A:8D:A5:DA:64:61:08:0F:60:6E Authority key identifier: 81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9 Certificate issuer: /CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9 Certificate serial: 43F0D70C02A8A97AEE4CF63941BF58697F850D9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft Manifest number: 051C Signing time: Sun 02 Nov 2025 17:42:21 +0000 Manifest this update: Sun 02 Nov 2025 17:37:21 +0000 Manifest next update: Thu 06 Nov 2025 04:14:21 +0000 Files and hashes: 1: 3130332e31392e3138312e302f32342d3234203d3e20313332363432.roa (hash: oFvKKDxpW/0C/Q3mkSaRj7w7VX6MBfKr//38ErGs2CE=) 2: 818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl (hash: f2QYDNvzPErfpU4HD8v047UM+wphQHvGMBDTYiTcq/o=) 3: 3130332e31392e3138302e302f32342d3234203d3e20313332363432.roa (hash: qNqEjSuCjuvM2nb2P9YufyugF7e/EHHhJHg78hVDerc=) 4: 323430353a336463303a3a2f33322d3438203d3e20313332363432.roa (hash: klLZJtnV+xWW7YQzH2mIJ1a0TeqcgHLxJAezwqgVxkg=) 5: 3130332e31392e3138322e302f32342d3234203d3e20313332363432.roa (hash: 3f3jJh3+oWJeudvuDrAqcUf8ITcTw5/zz4360Ggudd4=) 6: 3130332e31392e3138332e302f32342d3234203d3e20313332363432.roa (hash: hpPXUQ5gypmdo+ZfR0ZPUxHpoc6PClgxO5mrZ0mqIsY=) 7: 3130332e31392e3138302e302f32322d3232203d3e20313332363432.roa (hash: SLH6hiLVAcjKJgYGlgSHzMZrDl0w7mu4FSwj+uEfhtQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:f0:d7:0c:02:a8:a9:7a:ee:4c:f6:39:41:bf:58:69:7f:85:0d:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9 Validity Not Before: Nov 2 17:37:21 2025 GMT Not After : Nov 6 04:14:21 2025 GMT Subject: CN=E1796C057D25A9BD7F925A8DA5DA6461080F606E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ae:6c:d0:4f:38:7a:2c:03:f3:1a:ea:c2:dd: 1c:f1:11:62:bb:d4:b0:20:44:e8:31:bb:4b:55:f0: 91:a2:af:92:9d:85:21:ab:a9:35:c7:5e:3b:ba:38: 3b:55:16:cf:a3:0f:61:b7:45:f2:3b:3b:82:41:4b: 33:c9:cf:28:1e:9a:ea:86:f7:2d:ef:8e:8b:32:96: f9:da:d9:27:77:9d:f9:2c:c8:df:57:4d:94:b8:2b: 07:d4:cc:a1:56:b5:cb:a9:05:db:04:eb:a9:65:8c: 5c:f2:a5:81:ec:0e:a4:42:93:bf:f6:8a:f3:c2:29: 3e:fa:a7:51:c2:a2:83:38:91:80:6d:20:53:7c:94: 2e:0f:44:6b:a5:b5:57:b3:37:01:80:07:67:9c:36: 98:e2:55:56:30:5f:a5:14:f6:6c:8a:3c:b2:eb:b0: af:14:06:96:0d:b7:70:49:02:43:31:6e:3f:56:44: 15:8f:d7:a5:5c:08:6a:47:0f:14:55:13:a0:4b:d0: 47:f6:ac:4c:21:60:ab:2f:83:e5:1a:1f:f3:94:d1: 85:bf:39:55:74:37:8a:ce:72:cc:35:ff:75:f1:69: 85:a3:7a:2c:c0:e2:92:d0:14:e4:35:ec:da:82:bd: 29:59:bc:6b:64:17:15:33:b8:63:2b:e4:f7:21:d2: 30:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:79:6C:05:7D:25:A9:BD:7F:92:5A:8D:A5:DA:64:61:08:0F:60:6E X509v3 Authority Key Identifier: keyid:81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:db:ac:55:3a:e0:17:76:9e:89:4d:a9:1d:d4:04:8b:19:2a: 3f:1a:97:d4:04:54:0e:86:1f:bf:94:bf:36:74:0e:17:c5:d8: 8c:02:e7:01:ca:fc:46:a6:73:bc:21:98:a0:93:51:e2:7f:a3: 1f:e8:20:92:49:8e:9d:bd:05:99:ec:1f:31:b2:3c:1e:4d:0e: f4:a5:8c:11:c8:cc:18:dc:e0:65:45:ba:e4:d2:83:c4:52:f1: 23:87:4a:6c:66:f3:22:96:ca:30:57:b7:32:3e:43:4a:07:87: 43:f5:31:8e:f7:c4:a8:2a:da:ee:43:28:1f:5d:b7:a5:03:bc: a5:62:b8:2e:5f:d4:1e:e2:ad:aa:45:bb:25:d2:ca:d3:dd:88: ef:c3:e2:c8:12:e5:20:af:45:b4:24:c7:84:9e:b4:29:52:87: 5a:e2:39:fe:3d:00:6c:c6:a9:cf:92:19:ae:d3:7d:dc:85:b3: a3:d5:6b:5d:57:c3:13:09:db:de:01:41:b4:10:d9:7b:43:fc: 28:55:04:ab:af:02:97:75:21:ee:18:c6:f1:17:9d:7d:10:84: a9:72:00:11:8c:f7:8c:f3:bd:15:1b:77:23:0b:ba:d4:fe:43: 50:59:07:c9:e8:45:2b:8f:e1:45:84:97:20:0d:7e:82:e2:b8: 9c:0b:95:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ/DXDAKoqXruTPY5Qb9YaX+FDZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4ODIzQjUwRjhENjNFOUQ5NTNDNEI3NTJGMDREQjA0 MzdDQThFOTAeFw0yNTExMDIxNzM3MjFaFw0yNTExMDYwNDE0MjFaMDMxMTAvBgNV BAMTKEUxNzk2QzA1N0QyNUE5QkQ3RjkyNUE4REE1REE2NDYxMDgwRjYwNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCrmzQTzh6LAPzGurC3RzxEWK7 1LAgROgxu0tV8JGir5KdhSGrqTXHXju6ODtVFs+jD2G3RfI7O4JBSzPJzygemuqG 9y3vjosylvna2Sd3nfksyN9XTZS4KwfUzKFWtcupBdsE66lljFzypYHsDqRCk7/2 ivPCKT76p1HCooM4kYBtIFN8lC4PRGultVezNwGAB2ecNpjiVVYwX6UU9myKPLLr sK8UBpYNt3BJAkMxbj9WRBWP16VcCGpHDxRVE6BL0Ef2rEwhYKsvg+UaH/OU0YW/ OVV0N4rOcsw1/3XxaYWjeizA4pLQFOQ17NqCvSlZvGtkFxUzuGMr5Pch0jC1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4XlsBX0lqb1/klqNpdpkYQgPYG4wHwYDVR0j BBgwFoAUgYgjtQ+NY+nZU8S3UvBNsEN8qOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MGM3NzNjOC1mYjU2LTQ0OWYtODY0OS0xMTJkNmUxNjg2YjMvMC84MTg4MjNCNTBG OEQ2M0U5RDk1M0M0Qjc1MkYwNERCMDQzN0NBOEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODE4ODIzQjUwRjhENjNFOUQ5NTNDNEI3NTJGMDREQjA0MzdD QThFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTBjNzczYzgtZmI1Ni00NDlmLTg2 NDktMTEyZDZlMTY4NmIzLzAvODE4ODIzQjUwRjhENjNFOUQ5NTNDNEI3NTJGMDRE QjA0MzdDQThFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHbrFU64Bd2nolNqR3UBIsZKj8al9QEVA6G H7+UvzZ0DhfF2IwC5wHK/Eamc7whmKCTUeJ/ox/oIJJJjp29BZnsHzGyPB5NDvSl jBHIzBjc4GVFuuTSg8RS8SOHSmxm8yKWyjBXtzI+Q0oHh0P1MY73xKgq2u5DKB9d t6UDvKViuC5f1B7irapFuyXSytPdiO/D4sgS5SCvRbQkx4SetClSh1riOf49AGzG qc+SGa7TfdyFs6PVa11XwxMJ294BQbQQ2XtD/ChVBKuvApd1Ie4YxvEXnX0QhKly ABGM94zzvRUbdyMLutT+Q1BZB8noRSuP4UWElyANfoLiuJwLle0= -----END CERTIFICATE-----Generated at Wed Nov 5 00:25:41 2025 by rpki-client