$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft File: 1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft (raw, json) Hash identifier: el1qdq4SekZntQfwER5mlaB0jbXUI0sM3N/gKByJgT8= Subject key identifier: D2:DB:E9:EE:E3:64:94:0C:F5:38:0B:9C:00:7C:9D:A6:AE:B1:71:BD Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Certificate serial: 12A06E1581F916D972962575A69AA26DFA113C41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft Manifest number: 01FE Signing time: Tue 04 Nov 2025 06:31:37 +0000 Manifest this update: Tue 04 Nov 2025 06:26:37 +0000 Manifest next update: Fri 07 Nov 2025 13:21:37 +0000 Files and hashes: 1: 3230322e34332e37322e302f32342d3234203d3e203435323938.roa (hash: an5W/cXaXaYModPf+N6XOmKZ/Cp6c1fvWdj3PKqPfww=) 2: 3230322e34332e37332e302f32342d3234203d3e203435323938.roa (hash: hBeqiHGxmy6NCMgmNV6p5ha99Si74kGBcjRNx7S7+Rw=) 3: 3138322e31362e3235332e302f32342d3234203d3e203435323938.roa (hash: 7tSE7KkWcsihzvchBrW5YTBm20JcWETuKHlir2V2b+Y=) 4: 34332e3234392e3230392e302f32342d3234203d3e203435323938.roa (hash: HKEFlGd3fuMjLaak9jaJVW3JC6xTjvu6XpG5EhM3CNI=) 5: 3138322e31362e3234352e302f32342d3234203d3e203435323938.roa (hash: 3Kl0ykpc+rRNPwjYjMx54Tqd+CRH2FVLtk851hbh3Rs=) 6: 3138322e31362e3235352e302f32342d3234203d3e203435323938.roa (hash: Ih6LaUurzUOWghMvWPDG/3giShb9DXnYrcHVYKod+qY=) 7: 3130332e3235332e3130362e302f32332d3233203d3e2039323531.roa (hash: mn89fCBpa1L+r4Zi4IcWuFHARAg3/d1uhObCHoGGpiQ=) 8: 3138322e31362e3235312e302f32342d3234203d3e203435323938.roa (hash: Mt1DXYTW3OSb5Bm3PeVFWr97+FI1i3tLsNyzndoYvcM=) 9: 3138322e31362e3234322e302f32342d3234203d3e203435323938.roa (hash: uhBFE26V8tIU7PQEDrMRdIxjx5J3XkgvP9oT8QwvDXE=) 10: 3138322e31362e3235322e302f32342d3234203d3e203435323938.roa (hash: /v0Cr6fAOvdJvYC4l4q8Wzedl9V95Oxul6gOFuLUT4s=) 11: 3138322e31362e3235342e302f32342d3234203d3e203435323938.roa (hash: Br2zhO2mtWf4byMN5oW5IF0fqGbzZ4jKe7O7XXXytF4=) 12: 3130332e3235332e3130362e302f32342d3234203d3e2039323531.roa (hash: 76H0qrG4Uy5/8aWW6KHmL8OdUAxhoKIYB8VrEwRt7hA=) 13: 34392e35302e352e302f32342d3234203d3e203436303234.roa (hash: +bXCaBbua6T2KBv/snNdo+ibMSi47YiRL7LuzmtTWcA=) 14: 3138322e31362e3234342e302f32342d3234203d3e203435323938.roa (hash: dInQPRjkGOWRH1BIDOtz9jdXpBLceJN8qrYrHJtpPKc=) 15: 3130332e3234372e3234342e302f32342d3234203d3e203435323938.roa (hash: ofYpfyIwrFc3EyGc5HbuOjiaT8PI5lzgpR6J06rc1og=) 16: 3138322e31362e3234312e302f32342d3234203d3e203435323938.roa (hash: uqHQK1i4at+YRbQKPp9nCOZWuomqh/0ErADJ9NJSjx0=) 17: 3230332e3230392e3139302e302f32342d3234203d3e203435323938.roa (hash: ICLKoH8LfO9RPqo2cawJT61bywbgOJprlh0DKtnFRUE=) 18: 3130332e3234372e3234352e302f32342d3234203d3e203435323938.roa (hash: IJt7WQVcz/0uFXbYVzOWeIiU6dKLtu7e9DHOJN2UhzI=) 19: 3138322e31362e3235302e302f32342d3234203d3e203435323938.roa (hash: x0aTPjrDPj2tG+isyUHS4PYr+Z/d0GFTwX/xZzQ4/Ng=) 20: 34392e35302e342e302f32332d3233203d3e203436303234.roa (hash: UYaCog++0gqvsXDea9mZnkKimC89Lnd8uWKZu9Blm80=) 21: 34332e3234392e3230382e302f32342d3234203d3e203435323938.roa (hash: ZBvkqi4wu7ycsgvkdgZN2UrIQ3x4XvFGJe42h/LvuEk=) 22: 3138322e31362e3234392e302f32342d3234203d3e203435323938.roa (hash: zyocrG2hpeP9qlrJD0AmGWe005OQobfbPO7J468S0C0=) 23: 34392e35302e342e302f32342d3234203d3e203436303234.roa (hash: ZHh4TwmNkfiSfrilBWgPwnleDnUmWbiEe9KNZbEdlK8=) 24: 3130332e3235332e3130372e302f32342d3234203d3e2039323531.roa (hash: 9GPvbzS14nrsGqBa86Psp3VYtnnpTdNwmEPZ8WpOVfk=) 25: 3138322e31362e3234302e302f32342d3234203d3e203435323938.roa (hash: yNFLxX05WMZzMi6ZeEGl6RBki5EIiqpoaz15mWF+Us4=) 26: 3138322e31362e3234372e302f32342d3234203d3e203435323938.roa (hash: 4amRYbhJJSDWXkkRhhbgFlFkWrr2hCXvNhf2mcpgA/s=) 27: 3138322e31362e3234362e302f32342d3234203d3e203435323938.roa (hash: ayee7O41lSuhdkX8kgFCAyEZoZeltyZMUPLzbervZDg=) 28: 3138322e31362e3234382e302f32342d3234203d3e203435323938.roa (hash: uiNs4PF5jn59nxQSw5oyyEUEF1jh8DIcSo1Ma1LzQ/Y=) 29: 1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl (hash: RL+kMLKsqsTSNhBE9+SdMRwHrudCJB171xlNGpa7SQY=) 30: 3138322e31362e3234332e302f32342d3234203d3e203435323938.roa (hash: P8D28JKFM06MNi05ib5wcU9FclilcMp00khEQOaFKnw=) 31: 34332e3234392e3231302e302f32342d3234203d3e203435323938.roa (hash: k7dWhdkZK9UJDfOHlX9DtKI4ltVhma3w/Rs97O9liQA=) 32: 34332e3234392e3231312e302f32342d3234203d3e203435323938.roa (hash: 1w/9LRyUE06eBEdRnx71e6cTE3cd85bkpMBBImnruAE=) 33: 3230322e34332e37322e302f32332d3233203d3e203435323938.roa (hash: CmCK8ZpA/FudP6hIFHJcphPOJ9k3R40wP9Auosw941k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a0:6e:15:81:f9:16:d9:72:96:25:75:a6:9a:a2:6d:fa:11:3c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Validity Not Before: Nov 4 06:26:37 2025 GMT Not After : Nov 7 13:21:37 2025 GMT Subject: CN=D2DBE9EEE364940CF5380B9C007C9DA6AEB171BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b3:2d:ee:ad:eb:16:2d:f0:d0:59:27:5e:51: 37:1d:cb:12:91:b0:73:2b:7c:c3:ed:95:8c:bd:5f: 8b:55:60:22:92:55:bc:0f:f6:b7:f3:85:03:48:92: 7d:a0:d8:bb:7c:26:2b:4c:fd:3e:10:e4:99:3f:0e: fa:8d:a2:5f:7e:2e:50:40:14:ba:cb:99:e1:cf:01: b8:a7:a6:bc:ea:75:92:18:35:36:cc:a9:b5:8b:7c: c5:92:3e:6e:2c:85:85:87:f8:49:78:aa:b0:f1:23: f1:61:2f:41:ce:25:c7:10:5e:78:20:e5:98:ff:94: af:19:dd:6c:40:3e:b4:fe:d9:1a:8c:77:1a:97:b8: f6:7f:b5:26:a6:82:9e:47:b0:ab:7e:61:bf:d7:b7: b5:87:90:4c:0a:a2:0a:b7:58:5f:08:e9:0b:14:03: 6b:2a:de:6c:6f:92:b6:6d:24:7b:5b:25:bd:a1:9e: c3:1d:31:98:62:98:de:57:49:8f:84:48:3e:9a:8e: 67:bf:97:5c:56:7b:55:86:61:c6:2f:57:34:e0:6b: b4:c5:36:b8:bd:c2:54:5e:1d:5a:a6:1d:a8:4b:81: d8:c7:ef:0c:f2:a6:f8:63:53:b7:58:04:96:d3:7c: 36:ad:8e:63:9f:3f:61:0a:2b:57:dd:ba:44:a9:bf: 44:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DB:E9:EE:E3:64:94:0C:F5:38:0B:9C:00:7C:9D:A6:AE:B1:71:BD X509v3 Authority Key Identifier: keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:d3:a5:51:56:4d:9c:77:14:c1:be:11:eb:d1:45:ab:95:45: 3d:43:82:64:fd:41:62:c5:05:b4:ee:e5:ff:8a:9a:e7:02:55: 8c:6d:5f:45:a1:ac:4b:7e:52:a4:ff:ef:fd:12:88:19:46:e2: 79:64:df:ec:65:23:98:1b:da:4f:47:ac:d0:b0:fd:38:68:2e: 90:0e:d0:dc:a9:c3:e8:15:0d:3c:d2:f1:03:d5:16:34:9e:aa: 6d:d1:cf:9e:b4:5c:e9:98:2c:25:57:10:6a:5b:90:cf:7f:e0: 46:c1:31:be:36:7a:d5:48:53:e5:cc:5d:1d:6d:75:47:86:7c: 55:86:39:d0:1f:c6:aa:5e:1e:c3:ed:cc:cf:be:54:bd:c9:91: 48:9c:bd:b0:8d:48:e0:77:d5:51:a4:0d:68:5d:b7:75:ca:31: a7:8f:a5:69:2a:38:2d:ab:4f:4c:d3:ba:ba:ba:f7:55:6c:ae: da:76:3e:03:59:23:f3:35:6c:80:56:5d:09:fd:dd:84:2d:0a: 18:22:ea:28:f8:30:40:f3:0c:35:aa:48:e8:fc:58:24:79:af: cf:89:0f:98:6c:0d:e9:ea:06:b3:88:f8:a1:c7:12:69:f6:fb: f7:33:91:40:6d:c1:b1:3b:34:09:25:87:f1:91:cd:35:cc:50: 22:bb:8b:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEqBuFYH5FtlyliV1ppqibfoRPEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JD ODg2RjFERTAeFw0yNTExMDQwNjI2MzdaFw0yNTExMDcxMzIxMzdaMDMxMTAvBgNV BAMTKEQyREJFOUVFRTM2NDk0MENGNTM4MEI5QzAwN0M5REE2QUVCMTcxQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYsy3uresWLfDQWSdeUTcdyxKR sHMrfMPtlYy9X4tVYCKSVbwP9rfzhQNIkn2g2Lt8JitM/T4Q5Jk/DvqNol9+LlBA FLrLmeHPAbinprzqdZIYNTbMqbWLfMWSPm4shYWH+El4qrDxI/FhL0HOJccQXngg 5Zj/lK8Z3WxAPrT+2RqMdxqXuPZ/tSamgp5HsKt+Yb/Xt7WHkEwKogq3WF8I6QsU A2sq3mxvkrZtJHtbJb2hnsMdMZhimN5XSY+ESD6ajme/l1xWe1WGYcYvVzTga7TF Nri9wlReHVqmHahLgdjH7wzypvhjU7dYBJbTfDatjmOfP2EKK1fdukSpv0TLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0tvp7uNklAz1OAucAHydpq6xcb0wHwYDVR0j BBgwFoAUGtWX00A/vRN8gUKePebYe8iG8d4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWVjMjVlNC05YWE4LTRiZWYtOTA5Ny1jMGJlYzBiMjY2YTcvMC8xQUQ1OTdEMzQw M0ZCRDEzN0M4MTQyOUUzREU2RDg3QkM4ODZGMURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JDODg2 RjFERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVlYzI1ZTQtOWFhOC00YmVmLTkw OTctYzBiZWMwYjI2NmE3LzAvMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4 N0JDODg2RjFERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLTpVFWTZx3FMG+EevRRauVRT1DgmT9QWLF BbTu5f+KmucCVYxtX0WhrEt+UqT/7/0SiBlG4nlk3+xlI5gb2k9HrNCw/ThoLpAO 0Nypw+gVDTzS8QPVFjSeqm3Rz560XOmYLCVXEGpbkM9/4EbBMb42etVIU+XMXR1t dUeGfFWGOdAfxqpeHsPtzM++VL3JkUicvbCNSOB31VGkDWhdt3XKMaePpWkqOC2r T0zTurq691Vsrtp2PgNZI/M1bIBWXQn93YQtChgi6ij4MEDzDDWqSOj8WCR5r8+J D5hsDenqBrOI+KHHEmn2+/czkUBtwbE7NAklh/GRzTXMUCK7i3E= -----END CERTIFICATE-----Generated at Tue Nov 4 16:46:47 2025 by rpki-client