$ rpki-client -vvf repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.mft File: 365454AF0090F9E623861AF2120855412F7447D1.mft (raw, json) Hash identifier: ruNbC40lQ47VUq7qTU7X8CJ8Rlf1Rbxou4PIyMvo608= Subject key identifier: 4D:DC:FD:95:16:99:FF:C0:7E:FB:1B:B0:14:BE:2D:AE:72:46:4A:BA Authority key identifier: 36:54:54:AF:00:90:F9:E6:23:86:1A:F2:12:08:55:41:2F:74:47:D1 Certificate issuer: /CN=365454AF0090F9E623861AF2120855412F7447D1 Certificate serial: 733169CCF43EE483C9B83418655622358E48587E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.mft Manifest number: 04BF Signing time: Mon 03 Nov 2025 09:41:30 +0000 Manifest this update: Mon 03 Nov 2025 09:36:30 +0000 Manifest next update: Thu 06 Nov 2025 20:25:30 +0000 Files and hashes: 1: 3230322e3138302e35312e302f32342d3234203d3e203338313435.roa (hash: 8TSYif/0D4aDH7Kpxbqg2U73KC4bFmlhMOyHVKJ4UYk=) 2: 3230322e3138302e35322e302f32342d3234203d3e203338313435.roa (hash: hZdDJxVjtO1n0AGl1pB9t846WGWMULCEbo7Iz08dGoM=) 3: 3230322e3138302e35302e302f32342d3234203d3e203338313435.roa (hash: bZX75iy9N+Ln9f4W1cEkOcocBbvC0fi1o2SUf4QjlZA=) 4: 3230322e3138302e34382e302f32342d3234203d3e203338313435.roa (hash: ZG5lRIgVPPnPalDKOSGSXgvgYYzSif5pGZ3BPHLpeQc=) 5: 3230322e3138302e35352e302f32342d3234203d3e203338313435.roa (hash: i8tvPVoOum4nG9XrD2ntRcWq9sGCP+uCSaIJBxU6rDw=) 6: 3230322e3138302e35332e302f32342d3234203d3e203338313435.roa (hash: uJAPQ0voXCtnWGxjfbutuCKwtM6QUA3WnVapuXURnzU=) 7: 3230322e3138302e34392e302f32342d3234203d3e203338313435.roa (hash: 48G8rWgbkd9q0EBSK1XNOH/9+qJpc8zHTn5QZMpRRfs=) 8: 3230322e3138302e35342e302f32342d3234203d3e203338313435.roa (hash: EebQPkPYFK14OqBzKASx2gixOonVdg9YqhFAZDEu4RA=) 9: 365454AF0090F9E623861AF2120855412F7447D1.crl (hash: /eVz30DO114VpbgGp5H03DF+aTV7F8SJMiBAnBcQywQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.crl rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 20:25:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:31:69:cc:f4:3e:e4:83:c9:b8:34:18:65:56:22:35:8e:48:58:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=365454AF0090F9E623861AF2120855412F7447D1 Validity Not Before: Nov 3 09:36:30 2025 GMT Not After : Nov 6 20:25:30 2025 GMT Subject: CN=4DDCFD951699FFC07EFB1BB014BE2DAE72464ABA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9e:c5:df:bd:89:e5:34:cf:5c:1e:05:de:3a: 63:42:68:fb:2f:ee:4c:f6:a9:c5:78:ba:6f:2e:64: c2:a5:c2:8a:4c:d2:e0:82:07:26:46:e7:a7:fd:aa: 07:61:e9:2e:73:00:74:a1:03:62:c5:9c:8c:b8:73: ff:c8:8b:f2:f4:bf:29:0d:3c:2b:fe:5d:02:3e:db: 6d:2f:e5:f7:ac:d9:fe:a9:d7:32:00:26:dc:b5:17: 75:1b:dc:ce:a9:ef:37:5b:22:5a:13:ad:74:ea:77: 23:94:c5:f4:06:d2:fe:54:86:ae:65:dd:97:33:a8: 4f:f0:4e:8a:42:82:d2:a3:ec:5f:75:b7:bf:1a:67: 57:88:bb:81:d4:33:44:1b:9c:32:93:6d:39:c2:3a: 65:88:66:1f:72:e5:c5:57:45:60:6d:9a:25:63:50: 37:11:5e:0e:00:a5:13:81:16:84:1e:20:04:da:51: 6f:e9:67:86:8c:b2:1c:00:54:43:ce:7b:fc:95:a1: d7:2b:6e:cf:d1:ea:3a:86:5b:b5:29:98:c6:13:12: 90:c3:84:bc:49:89:ac:82:17:28:39:e2:cc:af:c6: b8:42:84:a1:7a:10:29:1e:1c:d1:5f:d1:ed:3f:07: 77:d4:b7:0f:66:88:bb:be:d1:75:6e:75:2c:4e:60: b6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:DC:FD:95:16:99:FF:C0:7E:FB:1B:B0:14:BE:2D:AE:72:46:4A:BA X509v3 Authority Key Identifier: keyid:36:54:54:AF:00:90:F9:E6:23:86:1A:F2:12:08:55:41:2F:74:47:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f2:02:97:e9:ed:d0:76:82:44:2b:49:87:2e:73:cd:e8:b5: 56:77:15:e1:f1:5a:c4:3b:a4:e9:a5:39:b2:31:c6:8c:01:43: 81:cb:f2:ba:f6:41:d1:e7:98:97:6f:6d:ec:e7:a8:b0:0a:de: c0:5c:9b:13:3f:7e:1f:09:b6:e6:a4:eb:cd:90:99:d5:b9:82: e5:f8:61:2c:71:18:89:67:5d:ba:23:54:06:5d:d6:1e:dd:96: 24:a5:da:23:29:7a:23:0a:1f:40:ec:e5:c0:2a:4e:f0:fe:7b: 0e:27:36:1d:61:43:82:58:39:dd:b0:d6:3d:e4:e1:fc:80:ef: 89:39:f6:fb:3d:b2:bb:12:14:2c:46:74:5a:fe:81:ae:81:03: 7e:3b:73:66:e3:7d:06:a2:5f:ef:fd:b3:51:41:fe:95:97:09: 5d:f9:11:9e:03:28:1a:8e:9b:ff:82:f1:e0:c7:9f:fb:72:2c: 16:77:96:7c:47:62:eb:18:26:9f:39:e6:7e:7b:0a:3f:c2:62: 3c:e3:9f:4d:08:c6:13:8d:9b:46:36:c0:fc:97:d8:0d:5e:10: 88:8b:f8:35:5a:9e:5b:9c:bd:9c:af:5b:73:71:09:50:87:2e: f2:a7:54:8b:35:74:00:56:f8:79:aa:ee:c1:59:d8:01:2e:a4: ae:cb:3f:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUczFpzPQ+5IPJuDQYZVYiNY5IWH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY1NDU0QUYwMDkwRjlFNjIzODYxQUYyMTIwODU1NDEy Rjc0NDdEMTAeFw0yNTExMDMwOTM2MzBaFw0yNTExMDYyMDI1MzBaMDMxMTAvBgNV BAMTKDRERENGRDk1MTY5OUZGQzA3RUZCMUJCMDE0QkUyREFFNzI0NjRBQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDensXfvYnlNM9cHgXeOmNCaPsv 7kz2qcV4um8uZMKlwopM0uCCByZG56f9qgdh6S5zAHShA2LFnIy4c//Ii/L0vykN PCv+XQI+220v5fes2f6p1zIAJty1F3Ub3M6p7zdbIloTrXTqdyOUxfQG0v5Uhq5l 3ZczqE/wTopCgtKj7F91t78aZ1eIu4HUM0QbnDKTbTnCOmWIZh9y5cVXRWBtmiVj UDcRXg4ApROBFoQeIATaUW/pZ4aMshwAVEPOe/yVodcrbs/R6jqGW7UpmMYTEpDD hLxJiayCFyg54syvxrhChKF6ECkeHNFf0e0/B3fUtw9miLu+0XVudSxOYLbPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTdz9lRaZ/8B++xuwFL4trnJGSrowHwYDVR0j BBgwFoAUNlRUrwCQ+eYjhhryEghVQS90R9EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Nzk4NGUzYS00OGY5LTRjZGEtYmU2Yy00MDA2YzA4ZjhmZDIvMC8zNjU0NTRBRjAw OTBGOUU2MjM4NjFBRjIxMjA4NTU0MTJGNzQ0N0QxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzY1NDU0QUYwMDkwRjlFNjIzODYxQUYyMTIwODU1NDEyRjc0 NDdEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTc5ODRlM2EtNDhmOS00Y2RhLWJl NmMtNDAwNmMwOGY4ZmQyLzAvMzY1NDU0QUYwMDkwRjlFNjIzODYxQUYyMTIwODU1 NDEyRjc0NDdEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/yApfp7dB2gkQrSYcuc83otVZ3FeHxWsQ7 pOmlObIxxowBQ4HL8rr2QdHnmJdvbeznqLAK3sBcmxM/fh8Jtuak682QmdW5guX4 YSxxGIlnXbojVAZd1h7dliSl2iMpeiMKH0Ds5cAqTvD+ew4nNh1hQ4JYOd2w1j3k 4fyA74k59vs9srsSFCxGdFr+ga6BA347c2bjfQaiX+/9s1FB/pWXCV35EZ4DKBqO m/+C8eDHn/tyLBZ3lnxHYusYJp855n57Cj/CYjzjn00IxhONm0Y2wPyX2A1eEIiL +DVanlucvZyvW3NxCVCHLvKnVIs1dABW+Hmq7sFZ2AEupK7LP74= -----END CERTIFICATE-----Generated at Tue Nov 4 16:06:51 2025 by rpki-client