$ rpki-client -vvf repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft File: DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft (raw, json) Hash identifier: 7VDHOO7NMAHIcpnQ13kN5mMmvulGlFuWkICoyZYt+KE= Subject key identifier: C0:B8:51:0D:33:DD:6B:67:9C:BD:F8:DA:76:62:A3:DD:4B:F7:E9:00 Authority key identifier: DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A Certificate issuer: /CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Certificate serial: 6D79B793B833332D5F1A698DEB1E0E013B64B574 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft Manifest number: 0363 Signing time: Tue 04 Nov 2025 04:41:14 +0000 Manifest this update: Tue 04 Nov 2025 04:36:14 +0000 Manifest next update: Fri 07 Nov 2025 11:15:14 +0000 Files and hashes: 1: 3130332e3133322e31332e302f32342d3234203d3e20313331373336.roa (hash: 2cxxZUWkJsO3oT8bqHDC+csSkm6PFb2gUAHDSh62gR8=) 2: 3130332e3133322e31322e302f32342d3234203d3e20313331373336.roa (hash: yYY5Xasn+MhbZ/7PqdrXZuQAXqu+qcVQtvVv3ePHTro=) 3: 323430343a326363303a3a2f34332d3433203d3e20313331373336.roa (hash: FOu7z+lFtPq+cQCxDqirVfbm+xQEfu1NcMOm+058Mco=) 4: DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl (hash: iB5Cj4jGmNpytwZH9K0G+zXzVbjNZOUbgajewzFkPi0=) 5: 3130332e3133322e31342e302f32342d3234203d3e20313331373336.roa (hash: XPqP92iiEQWlwXCwRpR2WN8Lt9Zye6dCVSvcRgh/30k=) 6: 323430343a326363303a32343a3a2f34362d3436203d3e20313331373336.roa (hash: pNNOikD6VzRUPv7yZG6Cg3KiGof++IQqkIf9l+Tqx7M=) 7: 323430343a326363303a32383a3a2f34362d3436203d3e20313331373336.roa (hash: dl0z7TuYwDUuSU57FfKOeKvhobp1vKvNdUgb56XLczs=) 8: 323430343a326363303a32633a3a2f34362d3436203d3e20313331373336.roa (hash: t4c93T36jMt5VZmXd/bp2z8IhiNgox8OFSWiaBbxAhQ=) 9: 323430343a326363303a32303a3a2f34362d3436203d3e20313331373336.roa (hash: AL79go4QRK47TgrAmtQGB5fYfJRAvCqPrZVQAqwDWT4=) 10: 3130332e3133322e31352e302f32342d3234203d3e20313331373336.roa (hash: YsQ/6eOY7UY889dueTFqI5fZ9jzbm6RP7AZHDvdYNjo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 11:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:79:b7:93:b8:33:33:2d:5f:1a:69:8d:eb:1e:0e:01:3b:64:b5:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Validity Not Before: Nov 4 04:36:14 2025 GMT Not After : Nov 7 11:15:14 2025 GMT Subject: CN=C0B8510D33DD6B679CBDF8DA7662A3DD4BF7E900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3d:05:48:bf:2f:18:87:f4:c3:a6:e4:65:11: c7:47:50:6e:ee:03:df:a5:05:7a:57:5b:10:04:90: db:30:af:3d:50:7d:10:03:db:29:33:c2:5b:f5:47: 26:d1:14:2e:71:bb:29:a0:50:00:41:26:c0:29:b2: 99:d4:8a:1c:5e:fb:49:f2:99:11:62:6e:fe:73:64: a1:a5:61:d6:ba:0a:94:09:46:08:96:05:2c:55:24: 4c:31:88:3c:9c:c3:46:c6:2a:42:05:9d:b5:f4:93: 5f:3d:20:fc:40:8e:03:c0:57:d5:8e:58:02:8c:a7: 0e:44:3e:f9:22:10:cf:47:b1:44:3d:f7:23:ef:06: a0:f8:1f:6c:64:5c:6e:ca:db:09:f6:48:eb:49:c0: e0:65:f0:0f:7b:ce:f4:75:aa:7b:8c:05:0b:04:25: ac:6b:9c:3d:a0:b9:a6:8c:54:4c:6f:c0:e7:2f:ef: dc:41:fe:00:50:4a:db:e4:ee:a9:f0:2b:cf:52:06: 62:d1:1a:99:8f:28:3c:74:56:6a:ed:a4:63:c0:41: af:f8:13:42:d9:bc:04:b2:03:d4:de:3d:38:9d:f3: 81:27:34:4d:95:4d:37:8a:00:ce:c3:74:c0:8d:f6: f9:6f:eb:54:52:da:3d:db:eb:2f:07:d6:a9:80:67: bb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B8:51:0D:33:DD:6B:67:9C:BD:F8:DA:76:62:A3:DD:4B:F7:E9:00 X509v3 Authority Key Identifier: keyid:DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:0c:bb:58:6b:0a:16:71:fe:97:4e:92:a2:61:f6:38:30:da: e0:4b:51:04:aa:bb:c0:80:c0:1f:c6:5e:eb:62:2e:b8:6a:fc: 3d:89:0d:00:19:3d:3c:c7:36:3b:41:1e:a6:3b:10:fe:64:df: 9a:a4:2d:c6:a5:86:b6:18:d1:03:3e:f4:b0:69:4d:68:56:1c: 53:bd:27:86:a1:0a:9b:e6:f5:4a:a5:36:6a:45:fd:4c:fd:7d: 4e:85:2a:18:8d:e3:d2:34:ee:77:f5:eb:1c:6f:ac:02:2c:aa: 81:c2:88:e5:15:6e:d7:18:b1:80:e0:f5:10:bb:4e:16:5d:33: 1f:08:c9:ff:e3:ec:4b:b6:23:b5:12:5f:b5:ee:7e:22:82:b1: e3:4c:8e:26:d9:d6:c2:33:6f:1b:ff:5f:d4:28:a5:24:c6:0e: 18:ff:b9:43:b9:ca:49:eb:31:ac:9e:39:53:b1:e6:7f:8f:b1: 8f:63:0f:10:0a:a5:e1:46:2f:e9:51:4a:37:16:e0:bb:4c:73: f7:41:70:3b:55:cb:53:75:fc:9c:3c:d2:25:3b:38:19:62:6a: 60:bb:a0:08:e8:88:74:07:e4:9c:77:b6:29:a0:c6:d4:16:42: ae:2a:07:62:e6:8e:9c:da:a6:32:6b:30:10:82:43:36:0c:29: 1b:e0:85:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbXm3k7gzMy1fGmmN6x4OATtktXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBE OUMzNEU0QTAeFw0yNTExMDQwNDM2MTRaFw0yNTExMDcxMTE1MTRaMDMxMTAvBgNV BAMTKEMwQjg1MTBEMzNERDZCNjc5Q0JERjhEQTc2NjJBM0RENEJGN0U5MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1PQVIvy8Yh/TDpuRlEcdHUG7u A9+lBXpXWxAEkNswrz1QfRAD2ykzwlv1RybRFC5xuymgUABBJsApspnUihxe+0ny mRFibv5zZKGlYda6CpQJRgiWBSxVJEwxiDycw0bGKkIFnbX0k189IPxAjgPAV9WO WAKMpw5EPvkiEM9HsUQ99yPvBqD4H2xkXG7K2wn2SOtJwOBl8A97zvR1qnuMBQsE JaxrnD2guaaMVExvwOcv79xB/gBQStvk7qnwK89SBmLRGpmPKDx0VmrtpGPAQa/4 E0LZvASyA9TePTid84EnNE2VTTeKAM7DdMCN9vlv61RS2j3b6y8H1qmAZ7trAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwLhRDTPda2ecvfjadmKj3Uv36QAwHwYDVR0j BBgwFoAU347ymUy1QgnywqOae859oNnDTkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjVjZGEzNi02OTNhLTRjMWEtYmE5ZS1lMGUxNzgxMTIxNDAvMC9ERjhFRjI5OTRD QjU0MjA5RjJDMkEzOUE3QkNFN0RBMEQ5QzM0RTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBEOUMz NEU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI1Y2RhMzYtNjkzYS00YzFhLWJh OWUtZTBlMTc4MTEyMTQwLzAvREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdE QTBEOUMzNEU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcMu1hrChZx/pdOkqJh9jgw2uBLUQSqu8CA wB/GXutiLrhq/D2JDQAZPTzHNjtBHqY7EP5k35qkLcalhrYY0QM+9LBpTWhWHFO9 J4ahCpvm9UqlNmpF/Uz9fU6FKhiN49I07nf16xxvrAIsqoHCiOUVbtcYsYDg9RC7 ThZdMx8Iyf/j7Eu2I7USX7XufiKCseNMjibZ1sIzbxv/X9QopSTGDhj/uUO5yknr MayeOVOx5n+PsY9jDxAKpeFGL+lRSjcW4LtMc/dBcDtVy1N1/Jw80iU7OBliamC7 oAjoiHQH5Jx3timgxtQWQq4qB2LmjpzapjJrMBCCQzYMKRvghfE= -----END CERTIFICATE-----Generated at Tue Nov 4 19:01:20 2025 by rpki-client