$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft File: C00163880F235714759920507217F2A7D557C953.mft (raw, json) Hash identifier: sPk03M2AKVUV5oR5IFY4dgNmJ20EMFKAh+B/vIGbT3g= Subject key identifier: 17:23:D9:69:5A:36:87:E8:09:87:F3:11:C1:22:41:EB:FE:6B:A2:6A Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53 Certificate issuer: /CN=C00163880F235714759920507217F2A7D557C953 Certificate serial: 09DEFAAE56151FCF0C1C3C538C8FDD69EC9BF852 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft Manifest number: 0533 Signing time: Sun 02 Nov 2025 14:31:08 +0000 Manifest this update: Sun 02 Nov 2025 14:26:08 +0000 Manifest next update: Wed 05 Nov 2025 15:15:08 +0000 Files and hashes: 1: 3130332e31372e3234342e302f32322d3234203d3e203535363636.roa (hash: pKw5LGAwZ02j8bp/435WnbI3b3bMVBsuwWMCKuHmspo=) 2: 3130332e31372e3234362e302f32332d3234203d3e20313439373436.roa (hash: V5/+oe0yc47TDeQuvZAPNLqrTj16mL6buLmaKxjOGog=) 3: 3130332e31372e3234352e302f32342d3234203d3e20313439373436.roa (hash: drDWXbS5Lt2BNjwhp2t9NFg/ubNQHhmV8ihSFb/W+xw=) 4: 3130332e3234372e3132302e302f32322d3234203d3e203535363636.roa (hash: rTOdy2cdmmm5QYorTFShkoD3ZBHt/J9THDepoiG1zQU=) 5: 3131392e322e35312e302f32342d3234203d3e20313439373436.roa (hash: 8Pbf5fsxv/JzP6C1MTXqHphtIKSudWZyH6TaxId01SE=) 6: 323430313a313730303a3a2f33322d3438203d3e203535363636.roa (hash: wJcVXH5kdnO3oVC250cjFRiURy0rH8CsrLKZhYlCnvE=) 7: 3131312e36382e32342e302f32312d3234203d3e203535363636.roa (hash: g2oV0iGk+oSLBEAQ3+fcNmyGfdkZlXFUuvI/IByWsRg=) 8: 34392e3132382e3137362e302f32312d3234203d3e203535363636.roa (hash: YznKDs1CbxF08N3mJ1JGQ46Fgw+8Zoc4by7UrLF1FjE=) 9: 3130332e3235352e3234322e302f32342d3234203d3e20313439373436.roa (hash: JYMDp6E4TEckql4p/4GjSNO2rr/124noQyLp4F0BuMo=) 10: 3131322e37382e33322e302f32312d3234203d3e203535363636.roa (hash: oKxubgVSq9KanfdFvoxAtxxPQZTjjUlhGrzvFIeghIM=) 11: 3230332e33302e3233362e302f32332d3234203d3e203535363636.roa (hash: XSZGKE/S6Hn7twCZ3sUL7QvBv8/jTjIsBvikiErVDPQ=) 12: 34392e3132382e3137382e302f32342d3234203d3e20313439373436.roa (hash: ojFdU43pMzAF8Kl2ss98Rrj2MseDcSjIaVkU6XMeYuI=) 13: 3131392e322e34382e302f32332d3234203d3e20313439373436.roa (hash: J/qEk8PLS2L818NmmW0MNEe+BNloyc7SI+CudCB88po=) 14: 3131392e322e34382e302f32312d3234203d3e203535363636.roa (hash: 2Y6D9qyT24i+mrDmXDYxZ/h+kMGeojU/2MwD0/st0XM=) 15: 3230322e3134352e362e302f32332d3234203d3e203535363636.roa (hash: xHN63AGHVhpLy6i5Ne/Rg1b8TEgYmsmsilFtTygXtok=) 16: 3130332e3234372e3132322e302f32342d3234203d3e20313432333630.roa (hash: NQW7UwpMESN0U2eeb5sCy8+6MskrqZgb0v8mJ0QPgMY=) 17: 3131312e36382e32382e302f32342d3234203d3e20313439373436.roa (hash: M5MIXM9yrLqkivi97+1D94IkM8JBddI+ZQwKNBZcwPA=) 18: 3130332e3234372e3132312e302f32342d3234203d3e20313439373436.roa (hash: IDWCZT4uAeHS9R8+qCUs6bMdQGmyEUG0b6ZQgSamVag=) 19: 34332e3235322e3135362e302f32322d3234203d3e20313439373436.roa (hash: g6G0tGc+VbiXH94zgiJaavS68ToTcFl7b92TkAIdvw4=) 20: 3131362e3235342e3131322e302f32312d3234203d3e203535363636.roa (hash: ne4Fd9z4GMtggr+H/mTwmUbV1S7/FJjgjsGd2sQh0+E=) 21: C00163880F235714759920507217F2A7D557C953.crl (hash: tRjbkgJk7tF2moecsR/zYHvvJmPQE5a3se8gGwwuOlw=) 22: 3131362e3235342e3131352e302f32342d3234203d3e20313439373436.roa (hash: /nevEPzljzS1GPlEHXnOO2d6UHLxx+c29+SvhwCD4hA=) 23: 3131322e37382e33382e302f32342d3234203d3e20313439373436.roa (hash: /9HEDitBud2JL5PjNF8lccXxuUn2nEtlKhSkIJ1OpE8=) 24: 3130332e3235352e3234302e302f32322d3234203d3e203535363636.roa (hash: oCRdMEaQb+0L+jLmpAQiC99Gb3FvgP0DAlKAkjWxSuo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 15:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:de:fa:ae:56:15:1f:cf:0c:1c:3c:53:8c:8f:dd:69:ec:9b:f8:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C00163880F235714759920507217F2A7D557C953 Validity Not Before: Nov 2 14:26:08 2025 GMT Not After : Nov 5 15:15:08 2025 GMT Subject: CN=1723D9695A3687E80987F311C12241EBFE6BA26A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0c:ab:3e:d6:ea:5e:3e:49:09:fa:2e:e5:21: d3:eb:e7:ab:a2:34:82:4d:82:15:fc:53:a7:1b:5f: 31:f9:11:1c:e0:65:c3:e9:16:55:4c:5a:04:60:29: 36:0e:78:86:16:35:5e:f5:d2:94:dd:b1:39:3b:f2: a2:a3:19:3f:fc:23:18:8e:e8:78:bf:c9:5e:a7:3c: 4c:e7:7d:26:c2:1b:a0:38:4b:ab:8c:9a:bc:a0:6e: a0:fc:10:ac:93:15:e0:d0:62:7a:03:bc:c3:8d:a3: 3f:18:fe:67:6b:0d:bc:ff:f0:61:03:34:b5:38:79: 8f:fd:24:0e:46:47:a2:29:8b:d3:be:5a:61:6e:3b: 65:46:ad:22:56:23:2b:57:49:4d:ce:fc:5e:de:3b: d5:58:18:20:6d:ef:24:c0:73:af:7d:1f:d9:3f:e9: b0:bd:72:3b:1c:c0:da:58:e8:0f:7b:30:57:ae:ee: 70:04:ad:9e:03:4b:5c:50:08:7a:de:8d:14:70:b7: c3:9e:e2:f6:01:1f:2d:fd:b4:76:3f:82:19:aa:38: 3c:9c:00:69:a7:b4:bc:29:39:7e:df:ad:bf:8c:ef: 62:fd:dd:ff:c1:ea:eb:29:10:65:a0:b1:69:b9:db: 3e:8b:15:4e:46:6b:1b:8f:58:5a:97:a6:32:75:51: a5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:23:D9:69:5A:36:87:E8:09:87:F3:11:C1:22:41:EB:FE:6B:A2:6A X509v3 Authority Key Identifier: keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:f3:f4:d5:af:62:a4:54:f8:1c:c3:7b:dd:37:3e:2a:3f:e0: ab:28:b4:52:ec:e2:56:f5:70:c3:74:65:2c:84:be:f2:f1:89: 57:01:56:3a:7e:db:50:97:a8:a8:bf:ca:30:c9:a3:7c:e0:76: 7b:6e:62:b5:31:b2:01:49:a5:46:2b:41:b3:b8:7c:c4:25:69: fb:90:f7:60:79:24:1a:1a:1d:1c:8c:6b:e1:38:97:f7:c7:32: e2:58:15:f1:11:41:46:d1:67:11:86:04:a1:86:ed:fa:99:7a: e7:94:61:8e:88:ba:e5:29:aa:5c:b9:85:e2:1b:4c:55:f0:ad: 36:e0:41:7c:58:bb:60:26:31:66:89:46:13:7d:43:63:a7:a8: 6c:fb:37:17:08:6c:37:22:9b:b4:0d:44:26:ac:ef:5b:7d:a4: 2a:06:df:29:6a:39:ca:e4:43:c8:38:62:d7:f6:2d:32:84:24: ca:0d:6f:42:53:c3:29:da:6b:a0:9a:74:4c:26:fd:a7:05:3a: 3c:f3:20:26:8c:cb:97:c1:27:8e:53:a3:41:2b:d4:ff:4c:f0: 02:fb:14:97:0c:53:64:57:d9:e2:a7:fc:61:e4:03:79:80:89: bd:57:e2:1a:04:8d:c7:7e:e7:1f:74:c9:3b:b1:16:88:12:7c: 2b:6e:49:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCd76rlYVH88MHDxTjI/daeyb+FIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwMTYzODgwRjIzNTcxNDc1OTkyMDUwNzIxN0YyQTdE NTU3Qzk1MzAeFw0yNTExMDIxNDI2MDhaFw0yNTExMDUxNTE1MDhaMDMxMTAvBgNV BAMTKDE3MjNEOTY5NUEzNjg3RTgwOTg3RjMxMUMxMjI0MUVCRkU2QkEyNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKDKs+1upePkkJ+i7lIdPr56ui NIJNghX8U6cbXzH5ERzgZcPpFlVMWgRgKTYOeIYWNV710pTdsTk78qKjGT/8IxiO 6Hi/yV6nPEznfSbCG6A4S6uMmrygbqD8EKyTFeDQYnoDvMONoz8Y/mdrDbz/8GED NLU4eY/9JA5GR6Ipi9O+WmFuO2VGrSJWIytXSU3O/F7eO9VYGCBt7yTAc699H9k/ 6bC9cjscwNpY6A97MFeu7nAErZ4DS1xQCHrejRRwt8Oe4vYBHy39tHY/ghmqODyc AGmntLwpOX7frb+M72L93f/B6uspEGWgsWm52z6LFU5GaxuPWFqXpjJ1UaVvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFyPZaVo2h+gJh/MRwSJB6/5romowHwYDVR0j BBgwFoAUwAFjiA8jVxR1mSBQchfyp9VXyVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWE3YTExNS1iOGI4LTQ5MGItODMyMC1jOWU1OWExMDAzZGQvMC9DMDAxNjM4ODBG MjM1NzE0NzU5OTIwNTA3MjE3RjJBN0Q1NTdDOTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwMTYzODgwRjIzNTcxNDc1OTkyMDUwNzIxN0YyQTdENTU3 Qzk1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVhN2ExMTUtYjhiOC00OTBiLTgz MjAtYzllNTlhMTAwM2RkLzAvQzAwMTYzODgwRjIzNTcxNDc1OTkyMDUwNzIxN0Yy QTdENTU3Qzk1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLz9NWvYqRU+BzDe903Pio/4KsotFLs4lb1 cMN0ZSyEvvLxiVcBVjp+21CXqKi/yjDJo3zgdntuYrUxsgFJpUYrQbO4fMQlafuQ 92B5JBoaHRyMa+E4l/fHMuJYFfERQUbRZxGGBKGG7fqZeueUYY6IuuUpqly5heIb TFXwrTbgQXxYu2AmMWaJRhN9Q2OnqGz7NxcIbDcim7QNRCas71t9pCoG3ylqOcrk Q8g4Ytf2LTKEJMoNb0JTwynaa6CadEwm/acFOjzzICaMy5fBJ45To0Er1P9M8AL7 FJcMU2RX2eKn/GHkA3mAib1X4hoEjcd+5x90yTuxFogSfCtuSUA= -----END CERTIFICATE-----Generated at Tue Nov 4 16:01:52 2025 by rpki-client