$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft File: 10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft (raw, json) Hash identifier: DXTIi61HHantveKRUQk1XftvY8qgUSr4EI295CjEZ0o= Subject key identifier: 93:AF:00:04:E5:4B:36:9F:43:50:4D:DD:E1:6A:6F:02:EE:83:E5:0F Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF Certificate issuer: /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Certificate serial: 6EFBD121D4324458E3F984FFAB6668E66CA2A2F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft Manifest number: 0525 Signing time: Sun 19 Oct 2025 19:12:01 +0000 Manifest this update: Sun 19 Oct 2025 19:07:01 +0000 Manifest next update: Thu 23 Oct 2025 01:08:01 +0000 Files and hashes: 1: 323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa (hash: 85lx2+O0c1Tye1V/YF4G0HFNwN1FRAy3MZlTA2YttNs=) 2: 323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa (hash: u7HIVNgPT8nOMxVXRQicLF9a4KID/8Fh81X51PzO+cY=) 3: 323430323a626538303a3a2f33352d3335203d3e20313331373439.roa (hash: Oqj6PoE4F8AznRA3O47Q/vammp0q4o8hLusJKPdYYNc=) 4: 323430323a626538303a383030303a3a2f33342d3334203d3e20313331373439.roa (hash: lrGsnHWNUUeWw86IHGDadF3wESv1aEvqYzkKNtLSTYI=) 5: 3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (hash: Hah38SlTgCkIbLHq1q3uLH0RNUqGa3DsQKagbnlKgEg=) 6: 323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa (hash: 8yEyL4RD7Qa35m9yx8L60c6viJWD8aIwuREP+x+PT4o=) 7: 3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa (hash: TkM6f8/8bl8VJM/y37L1BIkGsrEx/IcZC/SKW3F/E78=) 8: 323430323a626538303a633030303a3a2f33342d3334203d3e20313331373439.roa (hash: nIo8hwuirVHnHkmWMKJHXedLZK1IsiVp+gI1eB5wIWM=) 9: 323430323a626538303a343030303a3a2f33352d3335203d3e20313331373439.roa (hash: NQhanJjaDTGlHqgVpp7WZk1oBiHC9a8024nRDhFHB5U=) 10: 3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa (hash: SjzDmLz46qIS/nJ0zn3gr3kiE+RR+H/5PGnqBHKVams=) 11: 3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa (hash: jQaUGbMnprmPG29gShaOC88VLFUYJfQ53uR+ITg6jLM=) 12: 323430323a626538303a3a2f33332d3333203d3e20313331373439.roa (hash: wXhkK7uiuOpjHC2A0NMyoBCjpeit4b5RIwLk/h9wbpQ=) 13: 323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa (hash: wPrR/CuGOoimfu2ESRqwKfIX+XXz6lk/Ile4WLcqwSQ=) 14: 3130332e33312e3133342e302f32332d3233203d3e20313331373439.roa (hash: R5DcBcZsZ/tVTFJsSzzQGY3wUUyH7B2253S6p3vidZI=) 15: 10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl (hash: l3VV5/EcKdeCzL/lOGsIXaSEZhp9Oyhnz9LW9vyQ03g=) 16: 323430323a626538303a383030303a3a2f33352d3335203d3e20313331373439.roa (hash: Htx/fOPObPi6ATUBVsfJbs0qEhGzdpd2T6aHa8E9uiQ=) 17: 323430323a626538303a3a2f33342d3334203d3e20313331373439.roa (hash: qwxYNTh6xKdp2uATuIFR5O42e+8ng5z76v1e121JSWc=) 18: 3130332e33312e3133332e302f32342d3234203d3e20313331373439.roa (hash: C8WKEDh35WX/j3rJi1+NJXVLBziYbBALI4qujCiFsgQ=) 19: 323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa (hash: UmYtyoPy4ZvZZv42ISGmkzTMakpIhylvPVTLu1TKOwE=) 20: 323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa (hash: YJQzg1U9jA4AWFaUYLdryvvEck232YTbH13zq010OFw=) 21: 323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa (hash: noUPhk/lMic4mWf4jKWj6yuqbnoenZnLHoMy6mHYvdE=) 22: 323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa (hash: +XotVkUYpiJ83hc89EWoIGxGRhhZu0xl8ZYTUA6r/r8=) 23: 323430323a626538303a3a2f33322d3332203d3e20313331373439.roa (hash: rAFjuW4Ob+s+8+VX602W+l2HlUbwposeuUvXP5ZI5FU=) 24: 3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa (hash: uDN60ejcwmufdw9lRATsCm8TNe8pbZTXPxEDJDFJrtI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 01:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:fb:d1:21:d4:32:44:58:e3:f9:84:ff:ab:66:68:e6:6c:a2:a2:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Validity Not Before: Oct 19 19:07:01 2025 GMT Not After : Oct 23 01:08:01 2025 GMT Subject: CN=93AF0004E54B369F43504DDDE16A6F02EE83E50F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c3:bf:3d:bf:08:e1:67:a2:37:e8:74:30:7e: e3:95:71:f5:80:0e:11:84:fc:c1:16:13:36:6f:2e: bb:0c:ed:6a:ea:10:92:73:40:10:23:3c:64:07:55: 70:30:6e:90:39:86:f2:b5:1c:80:31:c4:33:a3:d3: 3b:cd:58:73:98:c9:1b:59:54:c3:95:52:64:4f:d6: 60:ce:86:79:b1:10:39:88:e1:f9:c2:b7:14:ac:a9: 7c:7c:ab:6d:54:cd:ff:6a:8d:57:89:3a:8b:a9:89: 44:cd:f9:28:a6:46:2a:e9:c5:8a:9b:1d:5b:8a:55: 7a:ba:43:c0:a8:ff:5e:9f:21:39:21:2c:bf:c3:8f: 4e:fe:d2:ce:a5:20:08:16:8e:99:a8:d0:ae:dd:d6: 74:6c:93:66:aa:ce:06:ef:85:a6:1e:df:bc:c3:33: a0:87:d1:d7:34:62:5c:73:6b:0e:ba:10:37:07:1b: 7d:ee:a7:85:c5:67:99:31:0d:a4:e7:f0:b6:4f:cf: 31:59:0d:54:91:94:c9:cb:d0:5d:13:07:b3:b1:d9: bc:c0:c9:cd:21:e7:4e:db:c5:1e:f8:be:54:65:bf: 7e:c9:9b:60:26:3c:39:80:13:9f:f9:21:d4:a1:01: c7:60:bc:c8:73:ed:1a:b7:d1:81:10:9a:e1:5e:5c: 9b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:AF:00:04:E5:4B:36:9F:43:50:4D:DD:E1:6A:6F:02:EE:83:E5:0F X509v3 Authority Key Identifier: keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:57:e8:81:80:0f:4d:f4:89:92:c0:4f:f1:a4:90:d5:e2:8b: e3:c2:9b:6d:c0:17:43:57:94:16:68:21:a7:6a:04:de:2a:15: 70:ca:23:76:7f:91:93:8a:df:f0:19:89:d3:26:80:c3:9e:8e: 1d:77:ff:e6:05:d0:69:4b:94:b9:ed:e3:e9:ad:d4:19:0a:82: d5:80:7c:1d:b7:f0:cc:c0:ae:28:c9:89:2a:27:c4:50:30:ab: 92:a9:b1:5d:bd:9c:3f:4f:38:3b:ce:ce:3e:a4:dc:0b:f4:9b: 87:be:bd:98:a2:2d:b1:f8:2b:d9:e3:f8:72:e0:8b:13:ae:43: d0:71:ec:24:29:98:cc:59:7a:c1:39:3b:16:a9:3c:1e:3b:15: 64:8a:7a:fb:97:d1:86:33:88:9c:00:58:1a:d1:73:7c:3b:9e: e3:f6:67:69:fd:66:50:46:03:e8:1a:3a:94:c2:48:dc:5e:87: a5:e4:1b:c8:63:86:55:57:d2:bc:75:e2:b4:41:75:88:80:dd: 66:0f:67:0e:ce:86:41:f0:8d:19:c4:de:df:46:92:86:a9:ac: 84:ff:13:ea:a7:bb:5c:b5:89:94:9f:02:58:b9:0f:81:3a:71: e2:c4:da:23:a0:6c:f9:b0:16:d9:27:f1:67:6e:13:f1:18:fc: 2a:a7:c3:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbvvRIdQyRFjj+YT/q2Zo5myiovUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5 NTIyNDZGRjAeFw0yNTEwMTkxOTA3MDFaFw0yNTEwMjMwMTA4MDFaMDMxMTAvBgNV BAMTKDkzQUYwMDA0RTU0QjM2OUY0MzUwNEREREUxNkE2RjAyRUU4M0U1MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfw789vwjhZ6I36HQwfuOVcfWA DhGE/MEWEzZvLrsM7WrqEJJzQBAjPGQHVXAwbpA5hvK1HIAxxDOj0zvNWHOYyRtZ VMOVUmRP1mDOhnmxEDmI4fnCtxSsqXx8q21Uzf9qjVeJOoupiUTN+SimRirpxYqb HVuKVXq6Q8Co/16fITkhLL/Dj07+0s6lIAgWjpmo0K7d1nRsk2aqzgbvhaYe37zD M6CH0dc0Ylxzaw66EDcHG33up4XFZ5kxDaTn8LZPzzFZDVSRlMnL0F0TB7Ox2bzA yc0h507bxR74vlRlv37Jm2AmPDmAE5/5IdShAcdgvMhz7Rq30YEQmuFeXJstAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk68ABOVLNp9DUE3d4WpvAu6D5Q8wHwYDVR0j BBgwFoAUEP41sEDoo9BeW+m+5PCmNpUiRv8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDBmNGYzNy1jN2ZiLTQ3ZDAtOGE4NS1lY2ZkMTJiOTE1ZjUvMC8xMEZFMzVCMDQw RThBM0QwNUU1QkU5QkVFNEYwQTYzNjk1MjI0NkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5NTIy NDZGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAwZjRmMzctYzdmYi00N2QwLThh ODUtZWNmZDEyYjkxNWY1LzAvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2 MzY5NTIyNDZGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxX6IGAD030iZLAT/GkkNXii+PCm23AF0NX lBZoIadqBN4qFXDKI3Z/kZOK3/AZidMmgMOejh13/+YF0GlLlLnt4+mt1BkKgtWA fB238MzArijJiSonxFAwq5KpsV29nD9PODvOzj6k3Av0m4e+vZiiLbH4K9nj+HLg ixOuQ9Bx7CQpmMxZesE5OxapPB47FWSKevuX0YYziJwAWBrRc3w7nuP2Z2n9ZlBG A+gaOpTCSNxeh6XkG8hjhlVX0rx14rRBdYiA3WYPZw7OhkHwjRnE3t9GkoaprIT/ E+qnu1y1iZSfAli5D4E6ceLE2iOgbPmwFtkn8WduE/EY/Cqnw+g= -----END CERTIFICATE-----Generated at Mon Oct 20 18:42:39 2025 by rpki-client