$ rpki-client -vvf repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft File: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft (raw, json) Hash identifier: PUeCMe2jHzA7DwXI+g4yb8tzxUmdN7BZdQw8mbTmpKs= Subject key identifier: 3D:37:96:AA:87:AA:03:2C:18:CC:40:5B:8E:3C:8B:5A:A3:8B:D2:0E Authority key identifier: C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 Certificate issuer: /CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Certificate serial: 3BB5EAB0805AD3BC141439BB83B34FEF847369B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft Manifest number: BC Signing time: Wed 05 Nov 2025 02:11:26 +0000 Manifest this update: Wed 05 Nov 2025 02:06:26 +0000 Manifest next update: Sat 08 Nov 2025 06:45:26 +0000 Files and hashes: 1: 3130332e3231372e3137322e302f32332d3233203d3e20313333333534.roa (hash: zKHXogUEbsyyC8ISVc+ANF+73aCbCi6els1lcd1hD1E=) 2: 3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa (hash: tfvFAul9pjc/Wi//p7lcXXJokuoGN8UfdeXWsqF8UAA=) 3: 3130332e3231372e3137322e302f32342d3234203d3e20313333333534.roa (hash: Jy6L+sGekPMyuMtdpky0D2jRd/OipqZg9C05WnpPS4Y=) 4: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl (hash: KH1cPuKsVthzIT7VHfSufPUpS0u85UdD69tRUrGf0yA=) 5: 3130332e3233322e33332e302f32342d3234203d3e20313333333534.roa (hash: L0OHjTLAoKuTGX0pU6SpedvQBvVTanvlgQCeJn9jtow=) 6: 3130332e3231372e3137332e302f32342d3234203d3e20313333333534.roa (hash: +SLAv/Ao5ipR0W/v6AgPtFrgrn+d0qK7qqbca2xo8WU=) 7: 3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa (hash: vaX/n6vc4K9mejYUu1eJI/tNjnfyjVyWN2o5zH8Hflc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 06:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b5:ea:b0:80:5a:d3:bc:14:14:39:bb:83:b3:4f:ef:84:73:69:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Validity Not Before: Nov 5 02:06:26 2025 GMT Not After : Nov 8 06:45:26 2025 GMT Subject: CN=3D3796AA87AA032C18CC405B8E3C8B5AA38BD20E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:62:90:f6:74:49:f7:7f:5c:e3:cf:a6:40:71: 3a:59:83:0d:3f:35:49:7d:2b:31:4a:a2:4a:f3:64: 8d:40:54:af:ed:97:74:7f:00:ba:a4:bb:0a:28:3e: a1:01:b6:6d:51:9c:eb:53:2b:57:63:16:4e:c4:9d: 18:2a:1d:8d:ac:6a:e2:f4:cf:3e:bd:ed:90:78:5e: 64:7f:1c:07:a6:76:b8:54:0b:77:16:64:66:15:fc: ea:53:4e:49:12:8e:82:69:d4:81:b3:e3:a4:57:a3: 57:43:bc:04:05:e2:8a:25:d9:27:04:d9:f6:c6:38: 88:3c:e2:fa:e0:b2:e4:27:ee:ba:66:6e:cd:a5:11: 90:24:0f:ed:e2:f1:f4:64:e2:40:6d:4a:1e:3f:ec: 90:48:b1:45:23:3f:e1:26:15:33:00:09:51:ba:da: e2:e2:b5:04:ab:e7:1c:38:ef:0d:42:ca:55:d4:18: 86:2c:85:bd:93:47:a8:c2:63:81:51:57:bb:bf:3a: c2:dc:b3:f1:9a:7e:b2:28:f6:24:8f:f8:72:76:bb: 42:e5:fe:fe:c3:62:59:29:24:db:4b:9c:31:3e:5e: 79:e9:a6:a8:67:75:3f:d1:b9:e5:64:65:de:23:75: c2:29:f6:e5:23:e5:40:bb:8e:e4:03:2a:db:67:4b: 04:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:37:96:AA:87:AA:03:2C:18:CC:40:5B:8E:3C:8B:5A:A3:8B:D2:0E X509v3 Authority Key Identifier: keyid:C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:54:d7:ec:5d:45:f4:4a:b0:76:49:a1:56:dc:91:8f:fd:b3: 46:85:37:71:8f:11:ad:3c:91:e2:ee:1d:0b:69:0a:78:bf:7d: 12:7b:3a:c4:5e:d8:cf:c7:12:b4:fe:4f:77:c7:91:23:ff:4f: 1a:56:14:52:ab:a2:7f:3a:2b:f3:2d:14:26:94:0e:3d:aa:38: 47:ec:3b:43:64:c7:05:0b:78:d0:bd:c4:42:29:1a:7a:16:49: 69:f4:da:85:a6:7b:db:5c:f4:93:55:69:51:af:23:e8:e8:48: 59:d8:80:4c:9b:fe:35:be:42:22:c5:29:62:a8:99:6c:2f:90: bd:a9:74:50:20:23:ce:f7:cb:db:c5:2e:70:7a:c9:7e:ea:a4: 29:3b:82:07:fe:3b:04:b6:b7:ed:0b:b7:50:c0:fb:fb:1b:d5: 18:80:d2:24:6f:27:a6:83:59:9e:df:dd:f7:ce:e5:90:0e:b6: f9:50:db:08:49:7c:82:9c:39:9c:31:49:fa:d1:c9:17:3c:5e: c4:94:ee:7c:c4:3c:dc:ca:01:2a:53:f7:64:1c:2f:cc:27:f5: 6d:a7:6d:df:e5:b0:74:f2:c6:49:48:69:3b:f5:10:75:55:33: 2f:02:b3:fc:57:e2:4f:83:65:88:f0:62:25:b8:7f:a4:a5:0a: 21:ed:86:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO7XqsIBa07wUFDm7g7NP74RzabcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2 OTNDMkZDNjAeFw0yNTExMDUwMjA2MjZaFw0yNTExMDgwNjQ1MjZaMDMxMTAvBgNV BAMTKDNEMzc5NkFBODdBQTAzMkMxOENDNDA1QjhFM0M4QjVBQTM4QkQyMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuYpD2dEn3f1zjz6ZAcTpZgw0/ NUl9KzFKokrzZI1AVK/tl3R/ALqkuwooPqEBtm1RnOtTK1djFk7EnRgqHY2sauL0 zz697ZB4XmR/HAemdrhUC3cWZGYV/OpTTkkSjoJp1IGz46RXo1dDvAQF4ool2ScE 2fbGOIg84vrgsuQn7rpmbs2lEZAkD+3i8fRk4kBtSh4/7JBIsUUjP+EmFTMACVG6 2uLitQSr5xw47w1CylXUGIYshb2TR6jCY4FRV7u/OsLcs/GafrIo9iSP+HJ2u0Ll /v7DYlkpJNtLnDE+XnnppqhndT/RueVkZd4jdcIp9uUj5UC7juQDKttnSwQNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPTeWqoeqAywYzEBbjjyLWqOL0g4wHwYDVR0j BBgwFoAUwMtQj30anvkEnM+evQWW52k8L8YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2U0NTAzOS02ZWQwLTQ4M2QtYTFiOS1jNGY0ODU0YzVjZjUvMC9DMENCNTA4RjdE MUE5RUY5MDQ5Q0NGOUVCRDA1OTZFNzY5M0MyRkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2OTND MkZDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNlNDUwMzktNmVkMC00ODNkLWEx YjktYzRmNDg1NGM1Y2Y1LzAvQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2 RTc2OTNDMkZDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1U1+xdRfRKsHZJoVbckY/9s0aFN3GPEa08 keLuHQtpCni/fRJ7OsRe2M/HErT+T3fHkSP/TxpWFFKron86K/MtFCaUDj2qOEfs O0NkxwULeNC9xEIpGnoWSWn02oWme9tc9JNVaVGvI+joSFnYgEyb/jW+QiLFKWKo mWwvkL2pdFAgI873y9vFLnB6yX7qpCk7ggf+OwS2t+0Lt1DA+/sb1RiA0iRvJ6aD WZ7f3ffO5ZAOtvlQ2whJfIKcOZwxSfrRyRc8XsSU7nzEPNzKASpT92QcL8wn9W2n bd/lsHTyxklIaTv1EHVVMy8Cs/xX4k+DZYjwYiW4f6SlCiHthuw= -----END CERTIFICATE-----Generated at Wed Nov 5 23:42:41 2025 by rpki-client