$ rpki-client -vvf repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft File: C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft (raw, json) Hash identifier: hCfVoWiL5C6H62CXQOIO2g3T0p7778PGZePyDBmfnB4= Subject key identifier: 3A:05:7B:5A:9D:CC:97:AE:6B:80:44:1E:04:27:D4:02:CB:3C:57:D0 Authority key identifier: C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E Certificate issuer: /CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E Certificate serial: 60F012434E0BA7EEC9BB1572D01BD81FD26BC2B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft Manifest number: 051F Signing time: Mon 20 Oct 2025 06:21:56 +0000 Manifest this update: Mon 20 Oct 2025 06:16:56 +0000 Manifest next update: Thu 23 Oct 2025 14:25:56 +0000 Files and hashes: 1: 323430333a626130303a3730303a3a2f34302d3438203d3e203234353231.roa (hash: zubx4XjBq87KwKwie4SbJb3Fj1Zuzvqgr/H/hHvCf/0=) 2: 323430333a626130303a3a2f33322d3438203d3e203234353231.roa (hash: B9qLkdqrOWwVF5tA2jsrqX21V3LrtEAcPvXr3jC/ETM=) 3: 3131322e3130392e31362e302f32312d3234203d3e203234353231.roa (hash: okeDaf7d0Xuvp8xnTxJzUWPegOkeMCYHPs8G9yAmQ6Y=) 4: C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl (hash: 4QTR6bEu36fP/Hzii7UbxfdVwNcizHHks6dA8A5+Ojc=) 5: 3137352e3138342e3233382e302f32332d3234203d3e20313334363534.roa (hash: MG/J/pE598W0dSws8CxeYL22B2yFb4db9pJ8veM+SQU=) 6: 3230332e38392e32342e302f32312d3234203d3e203234353231.roa (hash: 25bjKMZwqQbYi5jKvGEGUrT2NIQ4GwrYcOU6Y3FnIcI=) 7: 323430333a626130303a3630303a3a2f34302d3438203d3e203234353231.roa (hash: 3d/V5R3s99pTSM8/puBLUbnmOCHIHkwIjm/VO8zQunM=) 8: 3130332e3231352e32342e302f32322d3234203d3e2039333431.roa (hash: XTblwJ4OpupQKVM3L+0VPdo1vzAlW+UZ6yrctqElG0s=) 9: 3132332e3235352e3230302e302f32312d3234203d3e203234353231.roa (hash: 6LyyJJeV4MUKQUmSmy0p8Z51yI1Vj4eAExDWuf2DxM8=) 10: 3137352e3138342e3232342e302f32312d3234203d3e203234353231.roa (hash: trFC+pX4oMn7rw9va8+zapompho+fZFvfIyOd+ou6p0=) 11: 3137352e3138342e3233322e302f32322d3234203d3e2039333431.roa (hash: /NJYIz5c5OxCtCzAI9eMSZnnK2DRsoEPFpGekXPN3/Y=) 12: 3131392e38322e3234302e302f32312d3234203d3e203234353231.roa (hash: UQj5o2r9jrF7gwD6zEDeivAaIC1EoryECU1Z4pufDeg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:f0:12:43:4e:0b:a7:ee:c9:bb:15:72:d0:1b:d8:1f:d2:6b:c2:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E Validity Not Before: Oct 20 06:16:56 2025 GMT Not After : Oct 23 14:25:56 2025 GMT Subject: CN=3A057B5A9DCC97AE6B80441E0427D402CB3C57D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fe:8b:e0:4c:7d:7f:58:c2:2c:8a:21:aa:1a: 7e:df:33:1f:91:70:8e:64:6f:0a:b4:d5:38:3e:56: aa:c8:4e:47:6e:7d:ae:ae:bb:0b:16:82:c8:a0:cb: 67:33:b9:6f:bd:06:b5:bf:bb:14:56:bb:5a:1b:d0: 2c:1c:e9:72:ae:2c:96:f9:eb:c8:47:14:e8:b9:84: 7e:94:1b:52:52:81:30:a7:3b:49:5e:c2:44:0d:c3: 3a:3d:ce:57:dd:0e:13:e7:2f:9a:7b:68:27:38:b6: 29:45:80:70:07:05:43:f8:fd:a9:68:62:d6:27:db: ed:a1:95:3c:ea:55:19:1d:55:9e:d8:dd:bd:74:1e: 5d:63:58:4c:cc:cc:ad:74:c3:41:81:bd:66:d6:a2: 08:73:ab:b4:d9:ae:60:da:2f:52:bb:f8:40:ed:a1: ac:3c:1c:fc:82:34:28:8d:1b:87:01:5e:10:df:d4: 4b:5b:1b:0b:46:5a:17:5b:26:75:d4:87:a4:05:58: cc:b3:97:2c:d4:85:89:8e:3c:94:4b:1e:70:11:b3: 01:68:f4:1c:50:f4:cb:97:77:74:3d:ed:96:41:ff: da:27:c1:12:fc:3a:cb:72:c5:e2:03:50:22:30:2a: 31:b8:05:a5:6b:c2:13:8a:81:93:36:5d:d4:7a:9f: eb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:05:7B:5A:9D:CC:97:AE:6B:80:44:1E:04:27:D4:02:CB:3C:57:D0 X509v3 Authority Key Identifier: keyid:C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a8:c6:18:94:29:53:88:17:6b:2f:ff:88:66:7d:42:4c:b9: 6c:b1:08:42:9c:63:6b:84:3a:b1:9b:de:53:fc:85:cc:9b:dc: da:14:ce:75:3d:ad:28:96:db:31:4d:33:a8:71:a8:e7:2c:8d: da:7a:4e:3a:ab:e6:cc:6c:31:6e:0d:96:cf:89:72:22:43:8b: 28:b2:86:3f:a4:ab:ab:ea:ca:dc:78:b5:cc:79:7a:f3:83:c3: 05:b6:37:81:1b:30:43:17:e2:4f:01:a3:19:4d:ed:33:11:37: a7:64:df:b6:7f:8c:d0:c2:a5:4e:36:cf:45:ac:f5:e3:c0:19: ae:59:07:2a:42:08:3b:f1:25:a5:ad:04:c8:8e:de:74:4c:26: 2a:ab:f8:b7:b1:bc:f4:26:65:9f:24:a7:1f:cc:c9:30:59:2c: 45:78:93:fc:b0:fa:88:da:d9:04:ac:49:5c:23:dc:82:25:a6: fd:fe:65:d8:1c:b2:6f:cd:3f:15:6a:ed:dc:e3:27:2e:44:3c: 85:36:33:0b:11:ae:44:3f:41:c0:20:8b:1d:fd:52:3d:f0:7e: dd:3a:1d:c3:f4:6a:f5:6f:81:57:a9:06:52:c4:19:cf:cd:2b: 90:da:67:25:ee:95:c4:f4:8c:df:47:29:9f:aa:e7:9d:ee:9b: 3b:3b:dd:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYPASQ04Lp+7JuxVy0BvYH9JrwrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgz QjI3MUUzRTAeFw0yNTEwMjAwNjE2NTZaFw0yNTEwMjMxNDI1NTZaMDMxMTAvBgNV BAMTKDNBMDU3QjVBOURDQzk3QUU2QjgwNDQxRTA0MjdENDAyQ0IzQzU3RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv/ovgTH1/WMIsiiGqGn7fMx+R cI5kbwq01Tg+VqrITkdufa6uuwsWgsigy2czuW+9BrW/uxRWu1ob0Cwc6XKuLJb5 68hHFOi5hH6UG1JSgTCnO0lewkQNwzo9zlfdDhPnL5p7aCc4tilFgHAHBUP4/alo YtYn2+2hlTzqVRkdVZ7Y3b10Hl1jWEzMzK10w0GBvWbWoghzq7TZrmDaL1K7+EDt oaw8HPyCNCiNG4cBXhDf1EtbGwtGWhdbJnXUh6QFWMyzlyzUhYmOPJRLHnARswFo 9BxQ9MuXd3Q97ZZB/9onwRL8OstyxeIDUCIwKjG4BaVrwhOKgZM2XdR6n+vtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOgV7Wp3Ml65rgEQeBCfUAss8V9AwHwYDVR0j BBgwFoAUw/dF7ef0wNjlZ0lltSCACDsnHj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDljMjJiMS0xYjdiLTQ2NzEtYWI5NC01YzVlNzQ4ODI1NDcvMC9DM0Y3NDVFREU3 RjRDMEQ4RTU2NzQ5NjVCNTIwODAwODNCMjcxRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgzQjI3 MUUzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA5YzIyYjEtMWI3Yi00NjcxLWFi OTQtNWM1ZTc0ODgyNTQ3LzAvQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgw MDgzQjI3MUUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADuoxhiUKVOIF2sv/4hmfUJMuWyxCEKcY2uE OrGb3lP8hcyb3NoUznU9rSiW2zFNM6hxqOcsjdp6Tjqr5sxsMW4Nls+JciJDiyiy hj+kq6vqytx4tcx5evODwwW2N4EbMEMX4k8BoxlN7TMRN6dk37Z/jNDCpU42z0Ws 9ePAGa5ZBypCCDvxJaWtBMiO3nRMJiqr+LexvPQmZZ8kpx/MyTBZLEV4k/yw+oja 2QSsSVwj3IIlpv3+Zdgcsm/NPxVq7dzjJy5EPIU2MwsRrkQ/QcAgix39Uj3wft06 HcP0avVvgVepBlLEGc/NK5DaZyXulcT0jN9HKZ+q553umzs73fM= -----END CERTIFICATE-----Generated at Mon Oct 20 23:35:41 2025 by rpki-client