$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft File: 0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft (raw, json) Hash identifier: +dXMAUE3k6umiFt/2Z4+ZRqDGp2YM2/DT7LNLgsg4+o= Subject key identifier: 10:89:53:CE:2E:03:1E:54:ED:15:20:F6:8C:74:A0:B1:AF:39:9F:D1 Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2 Certificate issuer: /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2 Certificate serial: 4A021231717F177642DB5DA2BE600D865E98DFBB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft Manifest number: 0552 Signing time: Sun 02 Nov 2025 21:30:51 +0000 Manifest this update: Sun 02 Nov 2025 21:25:51 +0000 Manifest next update: Thu 06 Nov 2025 00:17:51 +0000 Files and hashes: 1: 323430363a393330303a3a2f33322d3438203d3e203338353036.roa (hash: wSzeEeUlQ9dVeDBBx0XlYcJDAiPM7sQsbdx5J/YQ+rE=) 2: 3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa (hash: JNQ343i5OALYy6+PPMTF9ZMCDVDR/l5G+uGpk10x6iY=) 3: 3131302e37362e3135312e302f32342d3234203d3e20313333383330.roa (hash: 8rPJ4nXTJ70Up3y89jTvrnK5p5EQ4mjAGK2p65JUucA=) 4: 3131372e3130332e3136382e302f32312d3234203d3e203338353036.roa (hash: zHFuXcJsHRS8oU5g73vyR9ezkdJAc6jv+r1NZhBGTU4=) 5: 3131302e37362e3134382e302f32332d3234203d3e20313430343831.roa (hash: Mo+ywRg/G9o+M5ufzONjfakS+qPVaicNW0HrvAATwhk=) 6: 3131302e37362e3134362e302f32332d3233203d3e20313430343831.roa (hash: nj7nwkg4jEji5skSyGq127SyeIEToj2AxAchD/5z7y0=) 7: 0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl (hash: vY6L+gHkj2RPKWZYiGkFY8lrFxhm3nyHr51A3Owm1t8=) 8: 3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa (hash: eUGLFIbBQXUlbrF2iA2Xszdo9Zh7AGLGsZzJrRkvT6k=) 9: 3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa (hash: /Pgqw6Rs+ajT828waAS0R/dEt8fu2pWuzGj9i8zT3Rk=) 10: 3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa (hash: l79vjEoCDRYp7Imq4o09nFUUOawBLUlHdvJpjB5kQuE=) 11: 3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (hash: 6L28DKU2IWYtA3lRV3VTpPyJ/UkW+g97L32zaXfZ124=) 12: 3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa (hash: QhseuehbmAg1CgvzVHn3OnXvEwbOGfNyxdByQxi2PSM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 00:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:02:12:31:71:7f:17:76:42:db:5d:a2:be:60:0d:86:5e:98:df:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2 Validity Not Before: Nov 2 21:25:51 2025 GMT Not After : Nov 6 00:17:51 2025 GMT Subject: CN=108953CE2E031E54ED1520F68C74A0B1AF399FD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8f:c1:41:25:c1:70:7c:33:6e:e3:29:bb:65: 9a:6c:13:ea:5c:4d:23:3b:ec:21:62:8e:74:aa:b7: 09:23:3f:47:fa:90:d3:1f:34:ee:e9:b3:db:f6:d9: 63:7e:30:4a:76:a1:39:2f:1a:9c:02:7a:c3:67:a1: 88:c0:38:e2:3b:72:7a:e0:1c:a8:c9:d2:93:35:84: f8:1c:37:48:c9:ce:3d:e9:cd:c6:e6:73:f9:b9:de: 52:a7:b9:de:cf:d8:2c:17:51:b7:0b:66:52:91:d5: e4:19:26:ac:0e:70:91:f5:07:68:8a:da:2b:de:d6: 5b:e7:1b:ac:e5:10:06:64:99:1c:29:6a:0d:32:40: 45:bb:e2:14:f4:83:cf:4f:84:ac:79:c2:21:51:88: 50:9d:08:68:d2:37:28:15:2c:ef:4d:8d:9b:24:10: 66:93:5d:10:1a:6a:a7:4a:4f:45:57:88:cd:3d:22: 81:27:d3:9a:4d:d9:78:b4:13:2c:02:0a:62:77:cb: b7:44:13:a9:d8:30:fa:30:9f:b9:b1:c2:69:b9:c1: db:cb:ee:97:bf:3b:fa:4a:c4:7d:b0:f4:bc:4f:8b: 70:ed:b3:29:aa:65:4a:b2:c5:c6:7e:e3:79:79:13: f2:63:70:75:55:4d:04:f5:44:c0:cc:a8:20:2d:4f: 07:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:89:53:CE:2E:03:1E:54:ED:15:20:F6:8C:74:A0:B1:AF:39:9F:D1 X509v3 Authority Key Identifier: keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:8e:22:35:02:12:bf:bb:f2:7b:e6:5a:48:3c:ca:42:72:24: 2b:6c:03:64:a4:d2:ed:1e:eb:92:64:08:12:b9:09:82:bf:3e: 78:d4:9e:73:e6:27:cb:46:b5:00:9e:9c:50:a8:45:9c:ec:ab: 7b:28:f3:b6:92:6b:1c:80:dd:d8:8c:c8:e5:e9:69:ac:4c:bb: e0:94:5f:aa:cb:ef:8f:ce:43:68:fd:3a:18:bd:aa:a4:5c:b9: a8:e8:93:91:41:5c:c5:ed:9f:da:df:e9:75:e3:f9:db:fb:11: dd:53:70:fa:85:18:c9:51:67:3a:74:d0:15:e1:19:7d:82:28: dd:94:07:ca:09:30:10:76:b7:28:9f:48:ef:c5:1a:ea:4c:dd: 14:28:5d:46:80:9d:38:ff:c0:e8:3d:5f:fd:13:dc:75:62:b5: 19:58:76:88:97:68:b9:aa:ff:49:8f:01:0d:c8:3e:d1:d6:a4: d5:ae:d7:c0:fc:13:80:ed:02:85:5a:ad:7b:00:f4:a9:d5:e3: bc:ca:ee:47:e9:c8:cf:34:15:ad:6c:81:e5:a1:fd:3c:99:da: 04:24:53:75:1e:26:53:4f:e4:e2:fb:3f:bb:52:e8:02:d9:42: 28:ca:5e:93:49:df:2b:a1:d1:86:91:62:44:71:57:dd:ff:57: 68:65:0f:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSgISMXF/F3ZC212ivmANhl6Y37swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1 MUJDMTdBMjAeFw0yNTExMDIyMTI1NTFaFw0yNTExMDYwMDE3NTFaMDMxMTAvBgNV BAMTKDEwODk1M0NFMkUwMzFFNTRFRDE1MjBGNjhDNzRBMEIxQUYzOTlGRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEj8FBJcFwfDNu4ym7ZZpsE+pc TSM77CFijnSqtwkjP0f6kNMfNO7ps9v22WN+MEp2oTkvGpwCesNnoYjAOOI7cnrg HKjJ0pM1hPgcN0jJzj3pzcbmc/m53lKnud7P2CwXUbcLZlKR1eQZJqwOcJH1B2iK 2ive1lvnG6zlEAZkmRwpag0yQEW74hT0g89PhKx5wiFRiFCdCGjSNygVLO9NjZsk EGaTXRAaaqdKT0VXiM09IoEn05pN2Xi0EywCCmJ3y7dEE6nYMPown7mxwmm5wdvL 7pe/O/pKxH2w9LxPi3DtsymqZUqyxcZ+43l5E/JjcHVVTQT1RMDMqCAtTwepAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEIlTzi4DHlTtFSD2jHSgsa85n9EwHwYDVR0j BBgwFoAUD9BE1hNIyI3c/8Tzwzv7xFG8F6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjU0OGJhZC03ZmVkLTQxZmQtYjQyZS03ODAzNzJjNDUyNTUvMC8wRkQwNDRENjEz NDhDODhERENGRkM0RjNDMzNCRkJDNDUxQkMxN0EyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1MUJD MTdBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGI1NDhiYWQtN2ZlZC00MWZkLWI0 MmUtNzgwMzcyYzQ1MjU1LzAvMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZC QzQ1MUJDMTdBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2OIjUCEr+78nvmWkg8ykJyJCtsA2Sk0u0e 65JkCBK5CYK/PnjUnnPmJ8tGtQCenFCoRZzsq3so87aSaxyA3diMyOXpaaxMu+CU X6rL74/OQ2j9Ohi9qqRcuajok5FBXMXtn9rf6XXj+dv7Ed1TcPqFGMlRZzp00BXh GX2CKN2UB8oJMBB2tyifSO/FGupM3RQoXUaAnTj/wOg9X/0T3HVitRlYdoiXaLmq /0mPAQ3IPtHWpNWu18D8E4DtAoVarXsA9KnV47zK7kfpyM80Fa1sgeWh/TyZ2gQk U3UeJlNP5OL7P7tS6ALZQijKXpNJ3yuh0YaRYkRxV93/V2hlD3o= -----END CERTIFICATE-----Generated at Tue Nov 4 01:58:32 2025 by rpki-client