$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft File: 981E5677AC602950ABE1A442C2779E7CB0C108A9.mft (raw, json) Hash identifier: CaO98mMMVCyOu083y3XfeVfyUnkR6YzcxoSiHZGYBSY= Subject key identifier: 5E:0F:5D:74:D1:92:99:00:02:35:D8:4F:76:1F:B5:7E:64:7F:E2:C8 Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Certificate serial: 7ACFD293766E0E00FA61B7401B464C0A3DFAF3EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft Manifest number: 0589 Signing time: Sun 02 Nov 2025 20:11:21 +0000 Manifest this update: Sun 02 Nov 2025 20:06:21 +0000 Manifest next update: Wed 05 Nov 2025 23:52:21 +0000 Files and hashes: 1: 3131302e34342e3136382e302f32332d3233203d3e203234323036.roa (hash: k8TYiHXc6vZmoqXaKgcDXCYwJI5QRLDArVJpzQsFi0s=) 2: 3230332e38342e3133372e302f32342d3234203d3e20323134313433.roa (hash: gGq3gtPXXpT8qmppXJpdYMGRNCe8MtmuCS9LRZ9VUgI=) 3: 3131302e34342e3137312e302f32342d3234203d3e203234323036.roa (hash: /Id0ptV6KhbD1snBODkIm970DRe1HBZaO2KQ2jikLRE=) 4: 323430323a616230303a61663a3a2f34382d3438203d3e203234323036.roa (hash: lNnryO3KjbjallOCFXPMSeEsKPceLct4DmwTgOEASfo=) 5: 3131302e34342e3136382e302f32342d3234203d3e203234323036.roa (hash: H0HlMimCqXAso/aispJtA9+9Apf+w3psosa64aEPhuo=) 6: 3230332e38342e3134302e302f32342d3234203d3e203234323036.roa (hash: T9tknLjTeQ+7ZUfv8SNf4lCYZ42qRdSxxizSEJYn0CA=) 7: 323430323a616230303a63663a3a2f34382d3438203d3e203234323036.roa (hash: 1MMaA/JALdwU46Gmn5cadR8bFFMn6pjjD2wa0Pe9Aag=) 8: 323430323a616230303a3a2f34382d3438203d3e203234323036.roa (hash: DzgPlEX76YPqKshtrhPz/EVID2lXXaNvCCo/tHgJE8c=) 9: 3230332e38342e3134312e302f32342d3234203d3e203234323036.roa (hash: Wij0WNmFzkS7ii03UOjMpVj1DHEK+SaLjmorAVH1mZI=) 10: 3131302e34342e3136382e302f32322d3232203d3e203234323036.roa (hash: 8Z6QdZAm6ipP1goiFZjslQYb9XOb/wZyuYYrPlulaFM=) 11: 323430323a616230303a65663a3a2f34382d3438203d3e203234323036.roa (hash: tmM3oKcQYom0eZ0XNJS+YU7h43ssUwLiYaqon6dfaUY=) 12: 323430323a616230303a636166653a3a2f34382d3438203d3e203234323036.roa (hash: yk2Beo121KKGPqhGrImYDU3EMLdITUqRzn7ocJjo60c=) 13: 3230332e38342e3133382e302f32342d3234203d3e20313338303737.roa (hash: slxJrksLG/ugoCdz0xpYsZxbcTeP+M/3OR1Tilc8hic=) 14: 3131302e34342e3137302e302f32342d3234203d3e20313338303737.roa (hash: u/hRr1E7iAZVxPG4K+GYy4e7bkPpI7qrdTq8mm4/3Ao=) 15: 323430323a616230303a64663a3a2f34382d3438203d3e203234323036.roa (hash: 9MSiXUftqD7YwgoDDhRkUOlJfbnaxlrR0kRkqPsHDsM=) 16: 3131302e34342e3136392e302f32342d3234203d3e203234323036.roa (hash: njKwh9fBki9cQ9S37NNLRAGEY/gEGO5YoV7LWFXK6D8=) 17: 323430323a616230303a3a2f33322d3332203d3e203234323036.roa (hash: aaVQCjxDcTZfVP0GXV6UmhAVx/WHjfyhQPMjY9CDL1Y=) 18: 3230332e38342e3133392e302f32342d3234203d3e20313338383433.roa (hash: wu8diV5jdWuux9C39Tvhu1GJ88vcA6Du/7ncHsnVM8k=) 19: 3230332e38342e3133362e302f32342d3234203d3e203234323036.roa (hash: 4CIlhDwPBWmO489rSkBL096ATSwuK+FjlEMQtzZL/kc=) 20: 3230332e38342e3134322e302f32342d3234203d3e20313338383433.roa (hash: XBonl+MDq5JKpWntnVm6TMfayZbg8tQu2RWN6XgAyJw=) 21: 3230332e38342e3134332e302f32342d3234203d3e20323133363037.roa (hash: SU/DxOnFopjxkv8c6HfEkmadSFV8VExLgA9VBa2HuUc=) 22: 3131302e34342e3137322e302f32322d3232203d3e20313338303737.roa (hash: L7B4TlCu6+XGwvVIhFVxD06j+oz/txAbz7A9RLeSSuk=) 23: 981E5677AC602950ABE1A442C2779E7CB0C108A9.crl (hash: PCsaCtm9BhxlMe3V1zImPlFb6H1h0/DR1Q5oCKGugBM=) 24: 323430323a616230303a613a3a2f34382d3438203d3e203234323036.roa (hash: vmMOC54VRYyQ6zaPWhSxLckPPT+mw9crTtfHlgZPBE8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:cf:d2:93:76:6e:0e:00:fa:61:b7:40:1b:46:4c:0a:3d:fa:f3:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Validity Not Before: Nov 2 20:06:21 2025 GMT Not After : Nov 5 23:52:21 2025 GMT Subject: CN=5E0F5D74D19299000235D84F761FB57E647FE2C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ec:0f:8d:0f:a7:f0:9e:d6:a0:d4:e9:ce:63: 32:75:6a:30:8c:75:2b:93:77:67:3a:bc:61:00:f7: 58:6f:4a:8c:f7:20:db:4b:68:ef:d5:1f:fb:b1:1f: 12:2e:77:d7:7d:5e:b6:29:58:ad:03:f8:82:bb:3c: 63:c2:56:01:9c:23:c5:9f:25:ca:9c:ff:ed:61:d3: 1d:54:11:d8:ca:6a:75:d0:98:66:08:3b:e9:2b:bf: 61:81:23:61:da:61:5a:1b:44:93:a6:6a:d2:48:4c: 85:be:a5:28:d7:78:aa:22:90:f1:c1:ae:ff:cb:d1: 4c:11:10:96:f9:7c:af:2d:fe:cf:c3:4d:bf:87:28: 99:07:cf:fc:7f:2a:46:b2:fa:71:81:32:0b:3d:61: ca:df:fb:d1:92:bc:6d:7c:54:63:cc:dc:09:5d:20: ff:01:de:51:6f:41:6f:b5:6d:5d:a7:1a:a9:35:9d: a2:69:3f:1e:ed:3e:68:e1:48:f9:cd:33:2e:01:bb: b8:73:11:7f:1c:f3:1f:6c:9a:09:cc:96:b5:76:83: bc:80:07:9f:aa:31:94:0a:ea:80:f2:6d:07:73:ab: 27:43:be:cf:26:c3:74:5f:27:1b:e0:d7:ce:76:83: f2:a6:1d:99:df:21:a1:7f:6f:ee:37:fc:6d:5a:df: 3a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:0F:5D:74:D1:92:99:00:02:35:D8:4F:76:1F:B5:7E:64:7F:E2:C8 X509v3 Authority Key Identifier: keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:50:10:66:2a:47:96:3a:03:bd:b0:ea:87:0d:d5:99:44:2a: 10:bf:da:30:fc:8d:d6:7c:e6:16:44:68:cf:e2:6e:14:82:64: 9f:0e:d0:25:51:f1:f1:47:ae:fa:10:bb:54:6c:a5:fd:70:8f: ab:e0:0e:1e:67:7e:c7:7e:40:4f:2b:56:58:1b:59:06:07:0f: 56:cf:ec:7f:4d:38:30:36:73:71:f9:73:eb:ec:27:08:30:43: 9d:89:32:c5:07:40:37:e2:1f:16:63:4b:d8:e1:02:79:20:8b: 0b:91:76:56:1f:e2:a2:c4:f5:bd:86:0b:ba:a1:c3:f2:f2:94: 91:ce:02:c4:e5:f4:df:c9:a0:a3:89:81:ba:18:db:b0:9f:c1: 44:d9:e5:4f:9c:f5:b9:c0:80:b7:a9:37:04:af:2f:80:5a:95: 6c:f6:cb:01:ae:85:2c:36:22:ca:cf:d8:df:b3:0d:19:f6:b7: 20:15:29:22:9e:3c:e4:c3:8d:82:eb:01:07:a3:78:f6:f2:7d: 9d:5a:49:63:7a:61:3b:2a:c0:42:23:cf:3c:c8:2b:b0:99:47: 09:65:f4:0a:57:5e:ac:61:68:db:0d:7d:c0:bf:43:21:1c:a8: 4a:aa:4a:22:cb:ca:0a:93:1a:9e:6c:81:f5:5b:33:3c:31:ce: 66:75:7a:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUes/Sk3ZuDgD6YbdAG0ZMCj368+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC MEMxMDhBOTAeFw0yNTExMDIyMDA2MjFaFw0yNTExMDUyMzUyMjFaMDMxMTAvBgNV BAMTKDVFMEY1RDc0RDE5Mjk5MDAwMjM1RDg0Rjc2MUZCNTdFNjQ3RkUyQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg7A+ND6fwntag1OnOYzJ1ajCM dSuTd2c6vGEA91hvSoz3INtLaO/VH/uxHxIud9d9XrYpWK0D+IK7PGPCVgGcI8Wf Jcqc/+1h0x1UEdjKanXQmGYIO+krv2GBI2HaYVobRJOmatJITIW+pSjXeKoikPHB rv/L0UwREJb5fK8t/s/DTb+HKJkHz/x/Kkay+nGBMgs9Ycrf+9GSvG18VGPM3Ald IP8B3lFvQW+1bV2nGqk1naJpPx7tPmjhSPnNMy4Bu7hzEX8c8x9smgnMlrV2g7yA B5+qMZQK6oDybQdzqydDvs8mw3RfJxvg1852g/KmHZnfIaF/b+43/G1a3zoPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXg9ddNGSmQACNdhPdh+1fmR/4sgwHwYDVR0j BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx MDhBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc5MjJmODktM2U5Yi00YjIxLTkx ODYtYTY0OGMyZGEzZjdiLzAvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlF N0NCMEMxMDhBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADRQEGYqR5Y6A72w6ocN1ZlEKhC/2jD8jdZ8 5hZEaM/ibhSCZJ8O0CVR8fFHrvoQu1Rspf1wj6vgDh5nfsd+QE8rVlgbWQYHD1bP 7H9NODA2c3H5c+vsJwgwQ52JMsUHQDfiHxZjS9jhAnkgiwuRdlYf4qLE9b2GC7qh w/LylJHOAsTl9N/JoKOJgboY27CfwUTZ5U+c9bnAgLepNwSvL4BalWz2ywGuhSw2 IsrP2N+zDRn2tyAVKSKePOTDjYLrAQejePbyfZ1aSWN6YTsqwEIjzzzIK7CZRwll 9ApXXqxhaNsNfcC/QyEcqEqqSiLLygqTGp5sgfVbMzwxzmZ1egs= -----END CERTIFICATE-----Generated at Tue Nov 4 16:36:18 2025 by rpki-client