$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft File: F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft (raw, json) Hash identifier: pR6WT2RUFdcFGRvDs0iixcSoq86aKAZuLMaGmgS2ouA= Subject key identifier: 8A:4C:2E:08:53:5F:8A:0D:A9:B0:74:65:08:0B:C4:F4:6B:12:68:2D Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 Certificate issuer: /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Certificate serial: 77FCE32420107EE1187EFC9128D5FD08704AAD76 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft Manifest number: 0524 Signing time: Sat 18 Oct 2025 20:41:08 +0000 Manifest this update: Sat 18 Oct 2025 20:36:08 +0000 Manifest next update: Wed 22 Oct 2025 02:39:08 +0000 Files and hashes: 1: 3130332e3133352e37322e302f32342d3234203d3e203436303236.roa (hash: YN/2s31112uMwq4KT5YT8EMIK9P8Spv9BQ+gu6aYN4g=) 2: 3130332e3133352e37332e302f32342d3234203d3e203436303236.roa (hash: lsw9Lj4TdivwiY9urFVLBPCnaQDyjQIHv9L2rFNGJcY=) 3: 3137352e3131312e3131372e302f32342d3234203d3e203436303236.roa (hash: PAUNyFLoTuXnyzJaaygCGIoZ2kkR7s3iDrCXWwkOWpM=) 4: 3137352e3131312e3131332e302f32342d3234203d3e203436303236.roa (hash: 6tYZRHS1gp6lxrRLkcMQOZpyzT7UZqMxo9oLwoeh2Kk=) 5: 3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa (hash: X871KmxDisPDxaQpNaNmNV8uKTNCiB9DC630xRuhDpo=) 6: 3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa (hash: I9Xm1cEngTYg6WB2t4U5k+twc9OnUGEq5Opc/dfrZDc=) 7: 3130332e3133352e37342e302f32332d3234203d3e203436303236.roa (hash: KXtJmDO4hKKtckmp6/OjWqYrbZ7ZmK12D4CTr8FodJE=) 8: F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl (hash: 5XoBcUE2HrBAJFR6UlsbQzLR3waYfpAvAn2x61Bz0uk=) 9: 3130332e3133352e37342e302f32342d3234203d3e203436303236.roa (hash: qZ2majG5cGcPiPcNAPu4jGy/H5NlD9ILAfwhNapK3KI=) 10: 3130332e3133352e37322e302f32322d3234203d3e203436303236.roa (hash: yzByHbO6Frok5mfNqGJAnbHUvCHTDaMTJ6hmg53mLQI=) 11: 3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa (hash: VSjVNeF6CQhhuIMP9VzYdgPpAyYTICUyURNkkRPZvf0=) 12: 3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa (hash: ThbbDvKhsxoAnPUKtdbY/FsPIfXpLzxzoe4gZ4SwG7I=) 13: 3130332e3133352e37322e302f32332d3234203d3e203436303236.roa (hash: rEgIPgrk+DS47tvTK2+eEPfHUVseXsnwTUUBVtEyooc=) 14: 3137352e3131312e3131342e302f32342d3234203d3e203436303236.roa (hash: +kWoeqncIsg2yG08LA8FNhnez+6IikrA0zXpF5e1dxk=) 15: 3137352e3131312e3131322e302f32342d3234203d3e203436303236.roa (hash: addoLGX7l1qN9yrFfHEwbDZZ1vggnAx8LkSg4qCXPoA=) 16: 3130332e3133352e37352e302f32342d3234203d3e203436303236.roa (hash: dn2LxIR2i9f98oBHTTzMm7c0l11yZxH5BdOjGXs/ET8=) 17: 3137352e3131312e3131362e302f32342d3234203d3e203436303236.roa (hash: yvTVsKwfMbm9/tZX55oqWjXKQNBRGzzlj+jV8XkeY/A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 02:39:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:fc:e3:24:20:10:7e:e1:18:7e:fc:91:28:d5:fd:08:70:4a:ad:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Validity Not Before: Oct 18 20:36:08 2025 GMT Not After : Oct 22 02:39:08 2025 GMT Subject: CN=8A4C2E08535F8A0DA9B07465080BC4F46B12682D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9d:b1:ff:e8:f5:f2:d7:a6:e9:e7:14:cc:e9: e9:a9:6d:0f:a2:12:94:af:80:5c:0c:cf:a8:66:c2: 1a:df:49:f1:17:3a:be:b9:60:a8:47:6d:0b:cd:d7: 12:bd:93:4c:f4:f7:b5:97:b8:f5:46:86:84:97:ff: 9e:01:cd:65:6d:c4:4d:15:62:f1:3c:87:84:41:b3: 28:f4:a8:fa:34:96:57:ce:3e:70:7b:f2:de:b1:81: e3:37:ac:f1:1d:e4:cb:78:cc:6c:48:08:8e:76:59: 5e:71:dd:0a:21:61:92:12:45:6f:66:2f:ca:42:0e: 28:e0:a9:ad:07:4f:50:6b:59:42:0e:d4:9a:b9:12: db:c2:62:e1:b0:7d:db:f9:4a:ea:1b:c6:f3:98:a9: f8:48:98:00:3a:9b:83:f6:c0:18:0b:6e:30:a0:ee: 23:8a:12:ee:7c:09:7c:a5:ef:44:5f:e2:f1:01:3a: 67:a6:19:d5:d5:17:e3:31:cb:5b:3d:0a:ce:3f:2a: be:34:61:4d:11:5e:04:4d:51:18:b9:c5:d4:c2:6a: b8:31:09:d9:3c:ef:52:0f:8f:25:0b:e0:47:c2:a2: 53:78:cb:b7:90:3a:ee:e1:e9:98:56:11:f1:33:87: cc:e1:69:77:8a:97:c3:58:6c:7b:c1:4c:d6:5b:8d: d5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:4C:2E:08:53:5F:8A:0D:A9:B0:74:65:08:0B:C4:F4:6B:12:68:2D X509v3 Authority Key Identifier: keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:c2:3a:74:66:4f:48:7c:7f:d2:d6:16:34:18:71:90:52:99: 1f:a4:eb:34:35:3c:f2:9f:6a:bc:62:db:47:4a:f2:d8:79:0e: 1c:36:8b:98:d1:e2:da:79:a6:95:2e:f6:27:ee:04:db:fd:e5: 38:de:49:70:75:c8:dc:90:50:fe:7a:9f:42:58:83:b6:9b:45: 0a:5f:84:fd:ab:f5:72:0e:4e:a0:bd:35:7b:de:4e:7c:67:44: cf:63:69:d0:97:b0:2b:a7:46:11:68:53:05:bc:7b:0d:57:78: 14:c4:98:a9:9f:bd:d9:ff:f4:be:49:73:ef:8d:50:84:5e:5e: e7:90:7c:8b:95:06:5b:eb:05:c5:1a:b7:67:bb:5c:8c:cb:f5: 01:af:a7:b9:e9:15:04:10:e3:53:e5:b9:9c:6d:f1:aa:c3:f9: 71:2d:3c:46:ea:e1:df:71:66:46:bf:79:e1:e6:1d:fe:ed:df: a4:64:ff:bd:03:84:98:53:f2:a2:a0:01:87:f6:65:b8:d0:ea: bc:28:e8:19:93:f1:08:1f:26:ae:61:59:fe:58:20:1e:d8:f6: 1d:1a:d2:4e:5b:8a:bf:54:41:cb:8a:da:a5:94:35:7d:0b:f3: 43:3b:ac:da:50:09:bf:88:35:cc:bb:c0:ee:f2:25:bd:20:1f: 80:c9:6d:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd/zjJCAQfuEYfvyRKNX9CHBKrXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4 NDkwM0UxNzAeFw0yNTEwMTgyMDM2MDhaFw0yNTEwMjIwMjM5MDhaMDMxMTAvBgNV BAMTKDhBNEMyRTA4NTM1RjhBMERBOUIwNzQ2NTA4MEJDNEY0NkIxMjY4MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDenbH/6PXy16bp5xTM6empbQ+i EpSvgFwMz6hmwhrfSfEXOr65YKhHbQvN1xK9k0z097WXuPVGhoSX/54BzWVtxE0V YvE8h4RBsyj0qPo0llfOPnB78t6xgeM3rPEd5Mt4zGxICI52WV5x3QohYZISRW9m L8pCDijgqa0HT1BrWUIO1Jq5EtvCYuGwfdv5SuobxvOYqfhImAA6m4P2wBgLbjCg 7iOKEu58CXyl70Rf4vEBOmemGdXVF+Mxy1s9Cs4/Kr40YU0RXgRNURi5xdTCargx Cdk871IPjyUL4EfColN4y7eQOu7h6ZhWEfEzh8zhaXeKl8NYbHvBTNZbjdX7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUikwuCFNfig2psHRlCAvE9GsSaC0wHwYDVR0j BBgwFoAU+MGaj4yw3chdHI5VY4+0NYSQPhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmY0ZWJjZC0yOWNmLTRlZWMtYTkyYS1kMTEzNmY1Zjk5MzYvMC9GOEMxOUE4RjhD QjBEREM4NUQxQzhFNTU2MzhGQjQzNTg0OTAzRTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4NDkw M0UxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZmNGViY2QtMjljZi00ZWVjLWE5 MmEtZDExMzZmNWY5OTM2LzAvRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0 MzU4NDkwM0UxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILCOnRmT0h8f9LWFjQYcZBSmR+k6zQ1PPKf arxi20dK8th5Dhw2i5jR4tp5ppUu9ifuBNv95TjeSXB1yNyQUP56n0JYg7abRQpf hP2r9XIOTqC9NXveTnxnRM9jadCXsCunRhFoUwW8ew1XeBTEmKmfvdn/9L5Jc++N UIReXueQfIuVBlvrBcUat2e7XIzL9QGvp7npFQQQ41PluZxt8arD+XEtPEbq4d9x Zka/eeHmHf7t36Rk/70DhJhT8qKgAYf2ZbjQ6rwo6BmT8QgfJq5hWf5YIB7Y9h0a 0k5bir9UQcuK2qWUNX0L80M7rNpQCb+INcy7wO7yJb0gH4DJbfk= -----END CERTIFICATE-----Generated at Mon Oct 20 12:01:40 2025 by rpki-client