$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft File: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft (raw, json) Hash identifier: QquclSewM4Kvwxnre6OGAuHacbEC+EeHMosEP4TgtAw= Subject key identifier: 25:EB:EF:92:2C:00:77:F7:0E:2E:DE:5E:42:98:F3:C0:E3:7E:E0:E5 Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 7EDE8A00767013C0A4B113F6A25A7266C12002E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft Manifest number: 0522 Signing time: Sun 19 Oct 2025 19:42:17 +0000 Manifest this update: Sun 19 Oct 2025 19:37:17 +0000 Manifest next update: Wed 22 Oct 2025 23:47:17 +0000 Files and hashes: 1: 323430323a616134303a31313a3a2f34382d3438203d3e20313337333330.roa (hash: BBYTiuzRjYx15TfoXkETOVppXlE7UGzNaI5UpnCSg40=) 2: 323430323a616134303a313a3a2f34382d3438203d3e20313337333330.roa (hash: sfX//sKOJiEuG3MX815fs00hBV5qvYrVSNOlry6c+5c=) 3: 323430323a616134303a3a2f33322d3332203d3e20313337333330.roa (hash: vtCuldzUtylI5t9/fCW+s++nz3SUBB8oSaeAOGcN8rI=) 4: 3130332e3131322e3133362e302f32342d3234203d3e203633383638.roa (hash: pkEXO9z6ueQK4Zfm+Nf2SnX0XqqCEAzcqWTKKEbP/J8=) 5: 323430323a616134303a31343a3a2f34382d3438203d3e20313337333330.roa (hash: ra0Qf+ys3TjTOOjzu7G6xBCVp6PgE8NBjiFHNgjZfy0=) 6: 323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa (hash: EtS1eZLUTwWRZJ7Ml0izUQhw9pv4Am/WahNfvxjKTrc=) 7: 323430323a616134303a31323a3a2f34382d3438203d3e20313337333330.roa (hash: QFubIhbbL6UEYuVrgh+b+Oy9CvlVLee6F9ADT2A6kec=) 8: 323430323a616134303a343a3a2f34382d3438203d3e20313337333330.roa (hash: 1oWczp9RZm7lezuDVU+ofnA0tfj2lVP+IvFgjT0dOg4=) 9: 3130332e3131322e3133382e302f32332d3233203d3e20313337333330.roa (hash: lnP9wyN4FGjoTooiZljkgDbdrrgpwmvbLCRV3A9O9bs=) 10: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl (hash: Gelt/2eay78l3LSe7cnjOIms7DypvFSotpnClqN6B3c=) 11: 323430323a616134303a373a3a2f34382d3438203d3e20313337333330.roa (hash: Z1axM0kuScQ1wsgtnc4QX9GvMZLuIsV8v/ScHLgFtiU=) 12: 323430323a616134303a353a3a2f34382d3438203d3e20313337333330.roa (hash: Pt4kHivj/+/IoSa7PGPfSPyAlm/DgqrXfAGO9WlCDqE=) 13: 323430323a616134303a31353a3a2f34382d3438203d3e20313337333330.roa (hash: cplcGCMTKNbyST3IWkDxcP/n/AeMzarnQF1LNyGc5EY=) 14: 323430323a616134303a31303a3a2f34382d3438203d3e20313337333330.roa (hash: JdwC9cZZayLXOr62V5QKdUDNIE+2Jw/cXMDWMiK/ID0=) 15: 3130332e3131322e3133382e302f32342d3234203d3e20313337333330.roa (hash: qD+tdFcsBae2pBPyr+Tro6gACvBJoa3YOj9Qz84vK3I=) 16: 323430323a616134303a31333a3a2f34382d3438203d3e20313337333330.roa (hash: w4rnLSoK9Ogry5Be/7bEeNtK/st8upmlmof3uHLSQS4=) 17: 323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa (hash: tQTDeuCAhgIHqT4JvN+SYFcrP542mVZbW7Uy9er1rk4=) 18: 323430323a616134303a383a3a2f34382d3438203d3e20313337333330.roa (hash: vAnV4g431JCqkwtUthm0ie5OhAW6+m/w0zGsqm8XSOo=) 19: 323430323a616134303a323a3a2f34382d3438203d3e20313337333330.roa (hash: vTpYTNK2Iedt3x6MQB/Xrh13AhkarFJV4HWTUjcGM/Y=) 20: 323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa (hash: SFCF3eZAfaB4k234A4Mal+M9wtz6OMi0W08cO5CL2c4=) 21: 3130332e3131322e3133372e302f32342d3234203d3e203633383638.roa (hash: RepflhJLBvu2zVpJCecwi2+RZYpN1UHaxDcpF0oO+gg=) 22: 3130332e3131322e3133392e302f32342d3234203d3e20313337333330.roa (hash: ez+ePcTWbQX/d2w/ZnqmBFZpP0RLqT3Vp1bcQw3nNm4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 23:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:de:8a:00:76:70:13:c0:a4:b1:13:f6:a2:5a:72:66:c1:20:02:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Oct 19 19:37:17 2025 GMT Not After : Oct 22 23:47:17 2025 GMT Subject: CN=25EBEF922C0077F70E2EDE5E4298F3C0E37EE0E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:15:24:7f:ed:4e:4a:36:c2:2a:13:7a:3c:b9: 5f:74:13:0d:66:1a:16:68:87:29:05:08:71:00:9d: 45:b8:b5:57:ce:2d:c6:2b:37:a4:98:03:75:12:dc: 84:cb:a1:d5:28:f1:1a:00:c6:fe:e4:48:8a:b4:bd: 27:18:e5:75:d4:0a:7b:94:07:06:6a:f5:5c:48:39: b2:19:7e:6a:b3:e8:12:d4:79:46:94:05:09:69:a7: e1:89:7a:ce:04:e4:20:79:6d:6a:1b:ea:59:fe:89: 68:9b:7d:ae:9b:ce:d5:3e:8e:8d:c1:a9:cd:9f:f8: b2:59:3a:8d:cf:3d:d5:2c:51:f6:00:da:ed:e9:f4: fb:05:98:c5:d0:a0:68:bf:9f:56:c5:29:87:e0:bb: e8:c0:49:46:ab:be:ef:f9:63:b6:61:d1:94:28:42: ff:61:53:c1:67:38:15:de:32:46:50:40:d1:c7:23: eb:51:fa:67:0e:89:06:72:b6:fc:b6:e7:81:e4:b5: 64:e1:e1:10:78:92:f9:a3:6b:44:e1:a1:65:98:99: b8:7a:09:15:df:80:f3:00:d8:ce:5d:1e:8d:0d:de: 56:0c:59:10:a7:cd:3b:4c:cc:80:54:3d:fc:4a:70: 74:f7:0a:8d:d7:55:42:12:ea:35:4d:47:96:08:53: eb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:EB:EF:92:2C:00:77:F7:0E:2E:DE:5E:42:98:F3:C0:E3:7E:E0:E5 X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:97:ab:d2:6d:d6:7e:ac:86:89:cc:3d:4b:8e:b6:12:a2:89: f3:bd:5f:4e:65:fc:e9:d2:28:2a:12:7a:d1:a6:42:2a:4f:c8: f4:b6:1e:a5:fd:26:c0:10:99:54:01:2a:db:06:50:ef:18:85: 1f:dd:06:a7:cf:05:37:b3:b9:d6:a9:29:e0:dd:97:b6:f1:dc: 09:b9:5b:f7:2a:ac:01:3f:5b:df:e6:9b:9a:8e:3e:dc:4b:3c: d5:fe:db:b0:95:68:f6:c0:95:da:af:71:d2:71:fd:16:5c:27: d8:22:c1:15:2e:5c:4c:77:e2:6f:22:bf:d9:1f:3f:d5:c9:f7: 6f:69:23:8a:fe:3e:37:5b:38:3b:79:b4:cf:dc:77:06:8b:4c: 9e:a8:08:d8:02:d6:e3:0c:47:d0:59:8f:f6:72:ad:6c:6b:a1: db:c2:ad:22:6f:53:38:5f:97:47:ab:2a:d1:72:bd:f0:bb:23: ef:ff:4b:84:22:93:c4:0c:45:34:0b:bf:00:c4:03:46:dc:ab: 1d:03:1f:a6:48:01:e0:d0:82:db:85:96:e6:4f:86:05:ed:a8: 48:62:d0:f5:38:a3:d1:40:42:32:d2:4f:57:49:d4:3d:4c:0a: 81:6f:0c:f8:56:25:13:47:ca:68:47:2d:53:dc:58:a2:c2:0f: ee:4f:0c:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUft6KAHZwE8CksRP2olpyZsEgAuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNTEwMTkxOTM3MTdaFw0yNTEwMjIyMzQ3MTdaMDMxMTAvBgNV BAMTKDI1RUJFRjkyMkMwMDc3RjcwRTJFREU1RTQyOThGM0MwRTM3RUUwRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSFSR/7U5KNsIqE3o8uV90Ew1m GhZohykFCHEAnUW4tVfOLcYrN6SYA3US3ITLodUo8RoAxv7kSIq0vScY5XXUCnuU BwZq9VxIObIZfmqz6BLUeUaUBQlpp+GJes4E5CB5bWob6ln+iWibfa6bztU+jo3B qc2f+LJZOo3PPdUsUfYA2u3p9PsFmMXQoGi/n1bFKYfgu+jASUarvu/5Y7Zh0ZQo Qv9hU8FnOBXeMkZQQNHHI+tR+mcOiQZytvy254HktWTh4RB4kvmja0ThoWWYmbh6 CRXfgPMA2M5dHo0N3lYMWRCnzTtMzIBUPfxKcHT3Co3XVUIS6jVNR5YIU+t1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJevvkiwAd/cOLt5eQpjzwON+4OUwHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGMzNGZmMDgtZDIxZi00MjBiLTg3 ZGYtNTMxMDNiNmRjMjUzLzAvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUx MkZFNEMxRDAwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGXq9Jt1n6shonMPUuOthKiifO9X05l/OnS KCoSetGmQipPyPS2HqX9JsAQmVQBKtsGUO8YhR/dBqfPBTezudapKeDdl7bx3Am5 W/cqrAE/W9/mm5qOPtxLPNX+27CVaPbAldqvcdJx/RZcJ9giwRUuXEx34m8iv9kf P9XJ929pI4r+PjdbODt5tM/cdwaLTJ6oCNgC1uMMR9BZj/ZyrWxrodvCrSJvUzhf l0erKtFyvfC7I+//S4Qik8QMRTQLvwDEA0bcqx0DH6ZIAeDQgtuFluZPhgXtqEhi 0PU4o9FAQjLST1dJ1D1MCoFvDPhWJRNHymhHLVPcWKLCD+5PDHs= -----END CERTIFICATE-----Generated at Mon Oct 20 07:28:06 2025 by rpki-client