$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft File: 639473CD2054A78B39F9AC7A83232462F00E71AA.mft (raw, json) Hash identifier: eSg0/aVNYbfcRIdFTv8raviHeNm0IcgCYIjD0eW6ahE= Subject key identifier: FF:76:51:89:35:C4:F4:C4:7A:DA:8E:55:90:01:B5:8D:BE:EF:64:3C Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA Certificate serial: 3E18C6F5156792AA51F387D7C543AC37E4629DC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft Manifest number: 0D62 Signing time: Tue 04 Nov 2025 06:01:49 +0000 Manifest this update: Tue 04 Nov 2025 05:56:49 +0000 Manifest next update: Fri 07 Nov 2025 08:12:49 +0000 Files and hashes: 1: 323430303a643638303a35393a3a2f34382d3438203d3e203539323832.roa (hash: 0AzZnlQLCCzpiwYH8VB91hQfBqmdrJ+ok40Qb8sCeko=) 2: 323430303a643638303a353a3a2f34382d3438203d3e203539323832.roa (hash: /8HKOKl3PxMMPopAmXJsDfZHfFoo7wkQ81V5TqWB1uE=) 3: 323430303a643638303a666163653a3a2f34382d3438203d3e203539323832.roa (hash: u5dDjhuBvBzcqNjKEeW7vizdTx58v6wY4rfkMiHiI5I=) 4: 3130332e3232382e3234342e302f32342d3234203d3e203539323832.roa (hash: esxHqUt3Xq6PKKXsfFgfUEYi1fJUgVnC6F8M6sDPUJM=) 5: 3130332e3232382e3234372e302f32342d3234203d3e203539323832.roa (hash: 4gtV8ZXJhBLgP6alnZmazQL9Du+oKvqI/MvatS0Bbyw=) 6: 3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa (hash: QsDPs2mlZqyMZXfjf6Zh+NWMXGWy1j4R+YaYRxdbecQ=) 7: 323430303a643638303a3a2f33322d3438203d3e203539323832.roa (hash: SgqLAGcMTNBEKnSS7cpl5WafnRLBI8WCT5GxxXyN0zA=) 8: 3130332e3232382e3234362e302f32342d3234203d3e203539323832.roa (hash: XZ4OJKWgYbKu4ak8HWaN9bEJfkYQKh79GGoEWm0kS2Q=) 9: 3131362e3230362e3231332e302f32342d3234203d3e203539323832.roa (hash: JPYapDBTyTePbdwtE88+heXxGhufXE50JBbJ2fq7FKo=) 10: 323430303a643638303a323a3a2f34382d3438203d3e203539323832.roa (hash: qLkIroWnbqSVivBGqvgi5oF8E8eNhXgrJocCdlawdNk=) 11: 3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa (hash: 7JHZWmtz01hYjYbLRHq9pCZCM42A/jGx+qscoYZR+8M=) 12: 3131362e3230362e3231342e302f32342d3234203d3e203539323832.roa (hash: mgdd33inbho0w/YafQxmlb4mn2645LWgbd4GjzvqC5g=) 13: 3130332e3232382e3234342e302f32322d3234203d3e203539323832.roa (hash: kkZ5080z9oUs+jW8iHX1Tzr1MG5R0/keiimPL4Y7DMk=) 14: 323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa (hash: 5B7v2ShhK5C4wbhQiHatQFgCi8oUxqkoPlhjyp+Rnaw=) 15: 3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa (hash: /sujTtwH0ddwmWj6UyMseljhgpcNLVkP8+vtS5y3rGg=) 16: 639473CD2054A78B39F9AC7A83232462F00E71AA.crl (hash: UnZQykycbA0tlrFMATyrfREC++iItN9pyVQ0gRRuaKc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:12:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:18:c6:f5:15:67:92:aa:51:f3:87:d7:c5:43:ac:37:e4:62:9d:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA Validity Not Before: Nov 4 05:56:49 2025 GMT Not After : Nov 7 08:12:49 2025 GMT Subject: CN=FF76518935C4F4C47ADA8E559001B58DBEEF643C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f8:30:65:69:3e:11:6a:a7:85:58:ba:36:5d: 6a:d0:9e:a2:60:1c:ca:e5:1c:e8:8c:64:6f:cc:85: 18:6a:7a:44:06:b2:5c:40:28:f5:f9:09:cf:27:5e: 61:39:14:a8:cd:93:cd:21:b4:7a:38:4d:b1:8a:62: d4:6e:f7:bc:2e:6e:71:fe:7c:9f:4a:9d:49:c8:a9: 1c:08:02:9b:5c:3d:43:d8:a8:19:a7:cb:dc:3c:d8: 9a:aa:9a:d2:d8:56:87:aa:90:72:e6:49:10:4c:fb: d8:0a:6e:00:aa:36:45:25:af:f3:b2:62:3e:d6:04: 20:f6:db:8f:46:3c:d5:f6:3f:7d:c4:8d:3d:f3:d4: d4:e9:0c:db:5a:a3:02:db:68:ed:77:d9:67:20:ee: 7d:29:ec:5c:c6:4e:91:e1:6a:15:b5:a6:e4:45:5d: dd:8c:9c:28:9e:00:77:0d:bc:3e:ce:6c:57:90:76: d8:31:1e:f7:0b:7c:9d:8e:76:95:4b:23:66:eb:5a: b7:c8:3a:29:b1:09:d1:34:7e:2f:bd:a1:87:ba:7d: fe:de:46:97:5e:ec:88:d4:b5:d3:a0:bc:be:fc:84: a7:21:58:fb:8d:53:25:de:88:0c:55:bb:66:ad:9c: b1:06:04:8e:93:7c:8f:0d:87:f8:07:61:ff:9c:17: 66:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:76:51:89:35:C4:F4:C4:7A:DA:8E:55:90:01:B5:8D:BE:EF:64:3C X509v3 Authority Key Identifier: keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ee:57:f3:db:55:b6:4f:79:57:3f:a1:4e:d8:72:96:29:87: b7:64:4e:09:89:ca:3e:c5:92:68:55:eb:2a:99:2c:46:7a:94: 00:5f:bb:34:33:5d:83:07:7e:0e:01:97:ad:7d:a5:0d:6e:cc: 65:fb:c9:17:f3:ee:4d:ea:49:b1:c6:9e:28:80:4f:0b:c8:11: ba:f9:fc:b4:df:bd:36:2c:c4:1c:40:3c:c3:f6:df:1f:55:cd: 6d:98:05:49:0c:c2:bf:0a:e9:f7:cf:0c:1b:80:29:5c:5a:36: 7f:fd:a5:3a:3a:68:96:5a:6a:43:c5:a4:dc:59:f4:8f:fc:25: d6:0f:c7:84:9b:fb:8d:74:08:f9:bd:f1:bd:51:da:50:8f:84: 59:9a:fa:59:3a:4d:84:45:a2:78:2c:5b:85:2c:5a:7d:b5:d2: 8e:b1:07:09:32:16:94:ac:79:03:46:c0:03:ec:d9:4c:58:7c: 9d:57:97:d8:a7:c5:27:e0:97:4a:c4:4f:fb:fa:bf:07:f3:f9: 24:76:95:05:ac:82:06:b5:13:ce:ab:b3:98:83:9c:20:16:fc: 76:2b:ed:91:11:6f:6f:9f:69:e8:c1:5b:6e:19:51:c7:b2:02: 70:be:d1:ab:f9:e2:b9:54:65:f2:42:d4:47:d4:e9:8a:13:4f: 6a:4b:6a:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPhjG9RVnkqpR84fXxUOsN+RinccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG MDBFNzFBQTAeFw0yNTExMDQwNTU2NDlaFw0yNTExMDcwODEyNDlaMDMxMTAvBgNV BAMTKEZGNzY1MTg5MzVDNEY0QzQ3QURBOEU1NTkwMDFCNThEQkVFRjY0M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl+DBlaT4RaqeFWLo2XWrQnqJg HMrlHOiMZG/MhRhqekQGslxAKPX5Cc8nXmE5FKjNk80htHo4TbGKYtRu97wubnH+ fJ9KnUnIqRwIAptcPUPYqBmny9w82JqqmtLYVoeqkHLmSRBM+9gKbgCqNkUlr/Oy Yj7WBCD2249GPNX2P33EjT3z1NTpDNtaowLbaO132Wcg7n0p7FzGTpHhahW1puRF Xd2MnCieAHcNvD7ObFeQdtgxHvcLfJ2OdpVLI2brWrfIOimxCdE0fi+9oYe6ff7e Rpde7IjUtdOgvL78hKchWPuNUyXeiAxVu2atnLEGBI6TfI8Nh/gHYf+cF2ZpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/3ZRiTXE9MR62o5VkAG1jb7vZDwwHwYDVR0j BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF NzFBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg0NjRhNWItMmZjZS00N2RhLTgw NDctNjhkMmJkNjNjOWMzLzAvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0 NjJGMDBFNzFBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7uV/PbVbZPeVc/oU7YcpYph7dkTgmJyj7F kmhV6yqZLEZ6lABfuzQzXYMHfg4Bl619pQ1uzGX7yRfz7k3qSbHGniiATwvIEbr5 /LTfvTYsxBxAPMP23x9VzW2YBUkMwr8K6ffPDBuAKVxaNn/9pTo6aJZaakPFpNxZ 9I/8JdYPx4Sb+410CPm98b1R2lCPhFma+lk6TYRFongsW4UsWn210o6xBwkyFpSs eQNGwAPs2UxYfJ1Xl9inxSfgl0rET/v6vwfz+SR2lQWsgga1E86rs5iDnCAW/HYr 7ZERb2+faejBW24ZUceyAnC+0av54rlUZfJC1EfU6YoTT2pLajQ= -----END CERTIFICATE-----Generated at Tue Nov 4 21:14:03 2025 by rpki-client