$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft File: F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft (raw, json) Hash identifier: vPGSRe9S+S6OyGN8nCx24+UyQIxM/HqjO+OzCRpoTZQ= Subject key identifier: 90:4C:EE:1D:69:C1:2B:4C:F3:E6:70:D2:32:93:F4:E3:39:85:92:5D Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A Certificate issuer: /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A Certificate serial: 04CDB5F41E225C10B8461C55573599B7E543E9A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft Manifest number: 0368 Signing time: Sat 18 Oct 2025 11:51:55 +0000 Manifest this update: Sat 18 Oct 2025 11:46:55 +0000 Manifest next update: Tue 21 Oct 2025 14:04:55 +0000 Files and hashes: 1: 3131392e31352e3132382e302f32342d3234203d3e203435333036.roa (hash: 3mPJMmSU87HxOCz1kx2GnX89IU0Xnf2eTb3lccTca1k=) 2: 3230322e39312e33302e302f32342d3234203d3e203435333036.roa (hash: iVDcw4VWeIm+2P88WlNlsUnSdlz4j+TUs0HnjdSVZLM=) 3: 3131392e31352e3133322e302f32342d3234203d3e203435333036.roa (hash: FgWk4lEb+N8VyrkhQkA7AsDgO4pzlnxAR+so0eMn0MM=) 4: 3131392e31352e3133332e302f32342d3234203d3e203435333036.roa (hash: tGztSZAQJ35/hLuECvtTcpELlM1IpNOZ8zjyOffPPVE=) 5: 3230322e39312e32362e302f32342d3234203d3e203234353238.roa (hash: 6Gn2L5Gc0xaArWW6fS4YuSQAyW4Nw2vh1NIUwUVsqyA=) 6: 3131392e31352e3133342e302f32342d3234203d3e203435333036.roa (hash: nSNHUbZiqo6P3F9SIZ9EN5nCLPpwycyYrfB+M+PV3zw=) 7: 3230322e39312e32372e302f32342d3234203d3e203234353238.roa (hash: sxphp4GIGCV7hhFuUuJXQKH7CdkIoeuJ+Uc7gPS1Oeo=) 8: F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl (hash: AKM3s1imBBrgOZeyDOc0Gs/Vjz9onFLVfIX+t40K5l8=) 9: 3230322e39312e32342e302f32342d3234203d3e203234353238.roa (hash: nikRTC901Bllan4GreFOs5fithEDsAsxTQDrjRSiako=) 10: 3131392e31352e3133302e302f32342d3234203d3e203435333036.roa (hash: WLK6N6lYU6j7qmPlWLYHBoNW0CsjIHOLp3K/3Jfw78k=) 11: 3230322e39312e33312e302f32342d3234203d3e203435333036.roa (hash: PY8IzktNPbChQTjp51gYrr+QVTCLUqVhsoMbpojKabc=) 12: 3230322e39312e32392e302f32342d3234203d3e203234353238.roa (hash: p6w84x+sTkId9KJBAsf0out+ASQwEBO6MAkMqXPQJmY=) 13: 3230322e39312e32352e302f32342d3234203d3e203234353238.roa (hash: f+5HOc/sgnjP7t42vcbumcmwD5c7eyke5qlw/e0UPsk=) 14: 3131392e31352e3133352e302f32342d3234203d3e203435333036.roa (hash: od2C/ltQ6m1xjAT8szqDpHM3qB6Kr8NBlMw+dYe1JvU=) 15: 3230322e39312e32382e302f32342d3234203d3e203234353238.roa (hash: aOzMI9PHIaU1+JYfqj3PgTWOSMZrS1G3wjVf+KJcQuA=) 16: 3131392e31352e3132392e302f32342d3234203d3e203435333036.roa (hash: 8CMqMpoCs6b6HNia3ifuD/WpzvcJj1kVCsO8zPSQ7wc=) 17: 3131392e31352e3133312e302f32342d3234203d3e203435333036.roa (hash: KiKi/4BGJg0K48DdjCfOcOBa77JCOo4OxuIg38BvrXI=) 18: 3230322e39312e33302e302f32332d3233203d3e203435333036.roa (hash: S4VjJzUTHACCCOjZ/BfmC0eI6K01Te/G4hTr22Yp9oE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 14:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:cd:b5:f4:1e:22:5c:10:b8:46:1c:55:57:35:99:b7:e5:43:e9:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A Validity Not Before: Oct 18 11:46:55 2025 GMT Not After : Oct 21 14:04:55 2025 GMT Subject: CN=904CEE1D69C12B4CF3E670D23293F4E33985925D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3b:7f:09:d1:b2:15:c0:e5:82:5b:3e:ef:39: 18:05:d9:42:a0:37:32:d6:ce:83:53:5a:bd:3e:ac: 53:a0:e5:b5:fb:ad:d9:75:46:9f:51:09:a3:d3:4d: 4c:2c:dd:f8:6d:28:5f:21:6e:df:80:a7:0e:cd:1c: 67:3d:b0:b5:74:dd:91:d4:ce:73:0f:2a:1c:6e:77: 3c:a4:7c:16:11:70:c2:40:b8:c8:d2:72:35:0a:85: b2:a8:72:ee:75:25:ea:d2:18:d2:eb:3c:36:72:82: 3a:6e:be:ad:74:4f:d2:02:77:bc:f6:d3:88:e8:b1: ae:d5:88:9f:28:76:29:30:3d:fb:cf:28:13:ff:6b: e6:ca:f6:f0:21:80:92:d6:27:f6:8d:de:b0:9e:a0: 38:c6:02:03:9b:c3:69:a8:76:a2:78:89:32:06:2a: 1e:b2:00:5c:92:06:0a:97:8a:9a:a3:c2:ec:4a:26: 27:0f:60:a9:b9:5f:87:50:aa:ed:86:6b:f5:a3:d8: c6:82:ce:e7:5f:84:a5:d2:0a:c0:1d:2d:eb:af:92: 34:50:d7:7f:11:1c:f8:bc:8b:f0:f5:26:d3:d8:c1: 2a:92:97:73:b9:27:a2:f9:59:b2:56:e1:9b:41:1b: 17:34:49:76:a8:4e:84:31:cf:88:63:33:5d:67:c3: 64:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4C:EE:1D:69:C1:2B:4C:F3:E6:70:D2:32:93:F4:E3:39:85:92:5D X509v3 Authority Key Identifier: keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:e1:42:23:a7:24:42:48:e0:fa:bf:34:f1:2f:35:ca:f1:e8: 0d:1b:6d:ff:30:61:43:66:53:80:a3:f9:b7:67:a8:86:8c:56: 16:f5:be:f3:9d:99:71:e2:bd:43:dd:83:45:8a:a5:7a:64:5a: 3e:7a:22:bd:aa:34:18:15:2d:2a:2e:e2:b3:28:b7:96:93:b1: 23:f7:e4:1f:4f:85:80:95:d8:4e:99:f8:47:7e:93:04:df:04: 8b:a2:75:34:0f:f1:62:7d:ff:25:df:0d:79:a1:92:1b:d6:0f: 3a:b5:af:6f:b9:b9:ac:c6:a8:92:26:c7:4e:af:e2:81:96:39: 03:38:f1:ee:b0:0d:e6:2c:02:7b:eb:99:80:f6:e8:01:9c:97: fc:60:ba:36:02:40:22:be:0f:ef:f5:0c:a2:96:5d:de:e9:78: 5e:59:12:39:64:11:f5:69:98:b3:9e:13:c1:8e:09:f9:5a:ba: 47:ae:49:f8:31:75:33:8b:a9:18:34:0a:b9:88:4e:b9:db:e0: c8:a1:a2:30:41:8e:04:b0:67:40:6c:c4:a0:3a:4a:28:89:30: 4a:f8:6a:ab:5a:17:84:99:13:8e:c9:04:dd:bb:6a:8f:ab:ac: 8a:54:ef:02:83:51:69:c7:66:2f:cd:89:57:4d:40:2a:cc:3a: c7:58:a2:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBM219B4iXBC4RhxVVzWZt+VD6aMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZE RDNDNjcxQTAeFw0yNTEwMTgxMTQ2NTVaFw0yNTEwMjExNDA0NTVaMDMxMTAvBgNV BAMTKDkwNENFRTFENjlDMTJCNENGM0U2NzBEMjMyOTNGNEUzMzk4NTkyNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkO38J0bIVwOWCWz7vORgF2UKg NzLWzoNTWr0+rFOg5bX7rdl1Rp9RCaPTTUws3fhtKF8hbt+Apw7NHGc9sLV03ZHU znMPKhxudzykfBYRcMJAuMjScjUKhbKocu51JerSGNLrPDZygjpuvq10T9ICd7z2 04josa7ViJ8odikwPfvPKBP/a+bK9vAhgJLWJ/aN3rCeoDjGAgObw2modqJ4iTIG Kh6yAFySBgqXipqjwuxKJicPYKm5X4dQqu2Ga/Wj2MaCzudfhKXSCsAdLeuvkjRQ 138RHPi8i/D1JtPYwSqSl3O5J6L5WbJW4ZtBGxc0SXaoToQxz4hjM11nw2QFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkEzuHWnBK0zz5nDSMpP04zmFkl0wHwYDVR0j BBgwFoAU8YU6HFweyv4QdvlKYfp3lt08ZxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWFiNjBiMS1hMjQ0LTRhNzgtYjMxYi1mZWNhM2QxNGVkOWYvMC9GMTg1M0ExQzVD MUVDQUZFMTA3NkY5NEE2MUZBNzc5NkREM0M2NzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZERDND NjcxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjlhYjYwYjEtYTI0NC00YTc4LWIz MWItZmVjYTNkMTRlZDlmLzAvRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3 OTZERDNDNjcxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzhQiOnJEJI4Pq/NPEvNcrx6A0bbf8wYUNm U4Cj+bdnqIaMVhb1vvOdmXHivUPdg0WKpXpkWj56Ir2qNBgVLSou4rMot5aTsSP3 5B9PhYCV2E6Z+Ed+kwTfBIuidTQP8WJ9/yXfDXmhkhvWDzq1r2+5uazGqJImx06v 4oGWOQM48e6wDeYsAnvrmYD26AGcl/xgujYCQCK+D+/1DKKWXd7peF5ZEjlkEfVp mLOeE8GOCflaukeuSfgxdTOLqRg0CrmITrnb4MihojBBjgSwZ0BsxKA6SiiJMEr4 aqtaF4SZE47JBN27ao+rrIpU7wKDUWnHZi/NiVdNQCrMOsdYolY= -----END CERTIFICATE-----Generated at Mon Oct 20 14:58:32 2025 by rpki-client