$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft File: 012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft (raw, json) Hash identifier: xCRZcKReSxduEu8SYPixhPNtb4eievW+q6RkUnVLeUs= Subject key identifier: 99:DA:2D:B4:F8:CB:77:DB:B4:8C:78:7F:75:59:9F:6D:BA:7D:9A:1D Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C Certificate issuer: /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C Certificate serial: 2FE3A977BC5A627AD9BD6CB098C9DDC8249501BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft Manifest number: 051D Signing time: Mon 20 Oct 2025 00:02:16 +0000 Manifest this update: Sun 19 Oct 2025 23:57:16 +0000 Manifest next update: Thu 23 Oct 2025 08:43:16 +0000 Files and hashes: 1: 3230322e39332e3133392e302f32342d3234203d3e2034333832.roa (hash: 2xWfiK5wGmMcUrPcXTeK+FMi4oIrH3FKfxMpAgGIdSQ=) 2: 3230322e39332e3133302e302f32342d3234203d3e2034333832.roa (hash: mk2uuBuKIDHj7rkFbCdRe6jSuAPJ/hDxuUfm/exdaSw=) 3: 323430333a623930303a3a2f33322d3332203d3e2034333832.roa (hash: JWHfZ6w+iObuBrwQGbo/6Xd2nLZuo2KPm5ntS1O1mZA=) 4: 3230322e39332e3133322e302f32342d3234203d3e2034333832.roa (hash: HZhJmMH/Ke4cPS3cjwshrQlxCqO5LSReCzOgD2oJQGE=) 5: 3230322e39332e3133312e302f32342d3234203d3e2034333832.roa (hash: w9IXrLEpnOTvHIWW3gOa5yz7gU/R3agEoOz9SkOzTf8=) 6: 3230322e39332e3133352e302f32342d3234203d3e2034333832.roa (hash: ri1oMn8me80QpVGUqBtvPXHCGV+V3jM8xkbu4T3ytno=) 7: 3130332e3234362e3131392e302f32342d3234203d3e203536323433.roa (hash: iVB5CfMmFrw/1sxkrTtiTl8LrYbLbK8j8toSYOpEOdI=) 8: 3230322e39332e3132382e302f32342d3234203d3e2034333832.roa (hash: Kcq6RiACas78b8uWIYiFOtGS3r3yMXUnaWfx7z/cdEU=) 9: 3230322e39332e3134302e302f32342d3234203d3e2034333832.roa (hash: AxG3Av6Lr1ooWeZ52jFBXjksOOp131HOnOlkyHCdSIY=) 10: 3230322e39332e3134332e302f32342d3234203d3e2034333832.roa (hash: HxTVM3BaA8ke4XmmAmeOxfSVVSVRh0EkdWqpyqwPT1U=) 11: 3230322e39332e3133362e302f32342d3234203d3e2034333832.roa (hash: uZGMmLO+ihx1HauuMCEhDeKUaoZ9Cej3WyjpZuP5mxw=) 12: 3230322e39332e3134322e302f32342d3234203d3e2034333832.roa (hash: /rqrLGb+IkPW8rjy02EXXMaWAA6ibmhWcBGw6CAxGjc=) 13: 3230322e39332e3133342e302f32342d3234203d3e2034333832.roa (hash: XNOVEI3YN45FFKxPdBMlhL4tIvoqWKr9UzQJy69423A=) 14: 3230322e39332e3133372e302f32342d3234203d3e2034333832.roa (hash: bc52vQ8UC2G4/y1ll8Fk+/X4/gPss4cwSVJImtHITIQ=) 15: 3130332e3234362e3131382e302f32342d3234203d3e203536323433.roa (hash: /w7eKmK7IgjbUT0N0MS/xY50UMcyTaRIoyZfbv+wX+Q=) 16: 3230322e39332e3132392e302f32342d3234203d3e2034333832.roa (hash: 0aNy0ETuqhbORaoBLuDRgIvkLNekuqgE5MuIzbIuHu4=) 17: 3130332e3234362e3131372e302f32342d3234203d3e203536323433.roa (hash: qkkJ54NZ40Um3ciYsl/FGUnS4rYZSGlzZD4dWlUI5hM=) 18: 012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl (hash: AIpEOZzVB67mBD7SWp3s8Kwt3zXHu1OoMczfQlHvvzs=) 19: 3230322e39332e3133332e302f32342d3234203d3e2034333832.roa (hash: vkTDe9buXDOgB6kWHFGcwJdVcp2flSZI09Z4kQqjciU=) 20: 3230322e39332e3133382e302f32342d3234203d3e2034333832.roa (hash: 9VqDU3d2jTW23JJ05scMXpgKwNdRFXtjy3WCszDduNE=) 21: 3230322e39332e3134312e302f32342d3234203d3e2034333832.roa (hash: bBONzBtnp5cZgKGGF/WSDLhv6iSsnxnb46nVEQMcaEk=) 22: 3130332e3234362e3131362e302f32342d3234203d3e203536323433.roa (hash: sFm39yL/wE3VY7beJqFDG9gTkKfaNeEukDIdxaa9zRE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 08:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e3:a9:77:bc:5a:62:7a:d9:bd:6c:b0:98:c9:dd:c8:24:95:01:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C Validity Not Before: Oct 19 23:57:16 2025 GMT Not After : Oct 23 08:43:16 2025 GMT Subject: CN=99DA2DB4F8CB77DBB48C787F75599F6DBA7D9A1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0c:d2:0f:f6:66:1f:94:c1:9b:f3:07:19:f1: f1:1d:0a:16:77:b5:6b:12:fa:14:11:6f:9f:8a:5d: 42:6d:88:f9:5a:c0:9d:35:52:e6:4c:f4:a7:1b:6d: 31:ed:ab:3b:45:f5:b9:c5:85:73:5b:d8:2e:6d:9f: ac:d7:c2:2b:19:85:12:bb:94:6c:6d:55:8a:53:09: e1:b4:91:84:da:35:80:7d:06:ba:9d:e4:dd:44:8b: 8b:69:fe:0f:d6:2a:3d:dd:41:3b:5d:f9:44:11:c9: 91:29:7e:b0:1c:f4:28:29:49:94:ee:18:1c:cb:02: 0c:0f:95:49:30:c5:cf:6e:8d:27:9c:a4:28:f4:4a: 90:65:1d:e6:be:86:d2:fb:5f:a5:81:a9:87:0e:27: 32:cf:e2:60:cb:ac:f1:76:55:cb:dc:1f:56:89:a0: 66:e2:c4:7c:24:2e:d3:e9:ef:1c:9c:d3:f9:b0:0c: bb:43:26:84:35:7b:81:05:3b:2e:db:a5:51:86:c2: 39:2a:03:3d:e0:0d:13:26:dd:dc:72:2d:07:7b:fa: 9a:34:98:4d:38:5a:01:0a:02:a9:ee:91:e6:90:fd: 88:ef:d4:a2:6b:20:09:b6:b3:f4:0e:02:2a:79:da: 43:0b:82:04:6c:0f:6a:92:8d:39:8a:c8:1b:19:06: 9b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DA:2D:B4:F8:CB:77:DB:B4:8C:78:7F:75:59:9F:6D:BA:7D:9A:1D X509v3 Authority Key Identifier: keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:18:9a:df:6d:fd:8b:d4:f6:a1:8c:bc:4f:15:d0:8f:b5:cf: f2:b5:04:3c:98:57:51:ee:b4:99:95:96:b7:85:1b:58:db:62: 61:eb:07:41:79:20:73:92:77:f6:70:5f:23:25:81:c4:cf:43: 85:28:72:4f:12:55:f7:ee:bc:34:54:2a:d5:d2:cf:a0:24:2a: 01:92:78:ae:8c:1f:77:ba:7d:17:b0:0d:b4:73:f9:2a:ae:5a: e9:0b:ec:03:93:62:1d:8f:fb:ab:b7:65:95:44:f6:a0:ea:cb: 23:95:10:4d:ae:4a:c4:0c:ac:30:4d:ac:24:f4:78:f6:65:68: f3:a6:9c:46:a7:8f:64:c7:07:02:52:b3:f2:9c:7d:e5:46:ef: e6:eb:f5:21:d1:98:19:dd:3b:97:90:db:6b:71:da:90:1e:84: ee:bc:26:10:be:c2:20:40:e7:d3:c5:5d:9f:ad:6e:af:eb:9c: 20:10:69:c0:dc:e5:e9:14:33:9c:18:80:43:a7:dc:e0:ee:f3: 9c:c1:83:53:01:ec:82:d3:40:e4:87:85:80:02:f8:3f:91:20: 6a:fb:52:f3:45:d8:97:50:a9:26:69:cf:e5:a2:02:13:3f:ba: a3:74:17:1f:72:0f:66:19:f3:c9:67:f4:9f:2a:21:a1:e6:34: 2c:35:6e:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL+Opd7xaYnrZvWywmMndyCSVAbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMx RUZEQTkzQzAeFw0yNTEwMTkyMzU3MTZaFw0yNTEwMjMwODQzMTZaMDMxMTAvBgNV BAMTKDk5REEyREI0RjhDQjc3REJCNDhDNzg3Rjc1NTk5RjZEQkE3RDlBMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzDNIP9mYflMGb8wcZ8fEdChZ3 tWsS+hQRb5+KXUJtiPlawJ01UuZM9KcbbTHtqztF9bnFhXNb2C5tn6zXwisZhRK7 lGxtVYpTCeG0kYTaNYB9Brqd5N1Ei4tp/g/WKj3dQTtd+UQRyZEpfrAc9CgpSZTu GBzLAgwPlUkwxc9ujSecpCj0SpBlHea+htL7X6WBqYcOJzLP4mDLrPF2VcvcH1aJ oGbixHwkLtPp7xyc0/mwDLtDJoQ1e4EFOy7bpVGGwjkqAz3gDRMm3dxyLQd7+po0 mE04WgEKAqnukeaQ/Yjv1KJrIAm2s/QOAip52kMLggRsD2qSjTmKyBsZBptXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmdottPjLd9u0jHh/dVmfbbp9mh0wHwYDVR0j BBgwFoAUAS0vWZN/2+ZQlbnrSXHZ0x79qTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODZiMzg4OS02OTY2LTQ1ZWYtOTA3My1hZDE0MDExYWMzYjIvMC8wMTJEMkY1OTkz N0ZEQkU2NTA5NUI5RUI0OTcxRDlEMzFFRkRBOTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMxRUZE QTkzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg2YjM4ODktNjk2Ni00NWVmLTkw NzMtYWQxNDAxMWFjM2IyLzAvMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5 RDMxRUZEQTkzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACoYmt9t/YvU9qGMvE8V0I+1z/K1BDyYV1Hu tJmVlreFG1jbYmHrB0F5IHOSd/ZwXyMlgcTPQ4Uock8SVffuvDRUKtXSz6AkKgGS eK6MH3e6fRewDbRz+SquWukL7AOTYh2P+6u3ZZVE9qDqyyOVEE2uSsQMrDBNrCT0 ePZlaPOmnEanj2THBwJSs/KcfeVG7+br9SHRmBndO5eQ22tx2pAehO68JhC+wiBA 59PFXZ+tbq/rnCAQacDc5ekUM5wYgEOn3ODu85zBg1MB7ILTQOSHhYAC+D+RIGr7 UvNF2JdQqSZpz+WiAhM/uqN0Fx9yD2YZ88ln9J8qIaHmNCw1bmU= -----END CERTIFICATE-----Generated at Mon Oct 20 15:21:50 2025 by rpki-client