$ rpki-client -vvf repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft File: 8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft (raw, json) Hash identifier: AWWvSduDmWLbczekHfBSiYiqBJpbFfO0IKj1VaMDfpY= Subject key identifier: A3:18:51:5C:B4:93:F0:AA:82:D9:03:18:2B:1F:B2:81:E7:F6:76:94 Authority key identifier: 8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA Certificate issuer: /CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA Certificate serial: 53908AE50BB7B727452011E5504FF68212508564 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft Manifest number: 0521 Signing time: Sat 18 Oct 2025 11:52:14 +0000 Manifest this update: Sat 18 Oct 2025 11:47:14 +0000 Manifest next update: Tue 21 Oct 2025 13:01:14 +0000 Files and hashes: 1: 3130332e3234322e3138312e302f32342d3234203d3e203338373838.roa (hash: i565en58aZkxitE/Cu7dj7vQtPe24rOc0XFo1zdj2pA=) 2: 3130332e3234322e3138302e302f32342d3234203d3e203338373838.roa (hash: J6znwF/VIOIQq7nf+/cVdXFnP4yNGPdAl3m1qZHQzpE=) 3: 3130332e372e302e302f32342d3234203d3e203338373838.roa (hash: IvhePbxETJJ1An12hekeGcMrYJecR0U54GWOfDVzXpo=) 4: 34332e3233302e372e302f32342d3234203d3e203338373838.roa (hash: i3HQaU7A5T+hugQmUCoVWplcF5RYtJ+OjDq/WGotyFM=) 5: 34332e3233312e3132382e302f32332d3233203d3e203338373838.roa (hash: HFx27am61y/dC1xdTadXPgOw5A9a+PEjL0futSZShAU=) 6: 8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl (hash: p83HFjZyB6+1+iVcMkDK+bOpmedr+JHdl0p1I2sJXsk=) 7: 34332e3233302e342e302f32342d3234203d3e203338373838.roa (hash: Myo0yUY2zYBlmDu7ifkTtwfEDTywRzZJiBzIgMz4kyk=) 8: 34332e3233312e3132382e302f32342d3234203d3e203338373838.roa (hash: lmYVrCn9BeJjLwZ83vYZIK3fLJEIHwntZ3WH1J4i7Cc=) 9: 3130332e3234322e3138302e302f32332d3233203d3e203338373838.roa (hash: Q4FCJx2xdQyXWuG/Mkdlbm+EYQuJWHSMRXEQhaDwxBc=) 10: 3130332e372e302e302f32332d3233203d3e203338373838.roa (hash: eYJSZ6BNvJdcwOjXxyxNY4HDMCsMbaLoRNn+0CbiAds=) 11: 34332e3233312e3132392e302f32342d3234203d3e203338373838.roa (hash: W5Zb76xYohKVMN4oDjg1HwPWp43mgnWE5orvLBb5SkM=) 12: 3130332e372e312e302f32342d3234203d3e203338373838.roa (hash: HfReQfR8KQgqYxrjCjLONRll8cJTpbYph9s5PnSext8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:90:8a:e5:0b:b7:b7:27:45:20:11:e5:50:4f:f6:82:12:50:85:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA Validity Not Before: Oct 18 11:47:14 2025 GMT Not After : Oct 21 13:01:14 2025 GMT Subject: CN=A318515CB493F0AA82D903182B1FB281E7F67694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:91:0b:04:8c:31:39:60:39:07:4f:ca:76:92: 0f:f3:99:c6:a8:e9:37:49:e7:c2:c3:3a:df:bf:ff: 02:a9:37:53:00:b4:cf:19:89:a0:0f:95:e5:fb:53: 26:0d:62:70:db:73:25:7c:e0:4a:96:b2:da:d1:45: 4e:7f:2a:2a:24:07:8d:03:26:bf:32:91:9c:7f:2f: 38:bf:2c:84:09:51:92:2b:f6:b1:3e:ea:37:fe:7d: 13:88:a7:fc:fe:21:a8:22:e0:42:95:e8:12:4c:f7: 11:3b:f7:84:b1:f6:af:ff:58:0f:d2:de:50:a8:93: ff:8a:a3:3f:d4:2c:30:b1:0d:90:7d:a4:68:80:70: 71:9b:a9:d7:36:14:39:2d:07:4d:90:e1:07:cf:00: d5:90:ee:18:aa:d8:49:01:82:74:55:84:c1:31:d8: 16:c8:95:aa:de:d5:40:cb:fa:d0:7b:df:98:09:9e: 32:da:75:69:03:6c:f5:06:e9:15:f2:b2:64:be:81: b9:2d:86:f6:e2:d6:76:bc:1f:b9:f0:5a:d2:1e:1a: 03:7a:64:67:95:00:2f:d7:b3:e0:99:cf:3f:82:21: 1e:6d:91:90:bc:a1:7b:16:92:ef:ad:6c:9f:24:1d: a8:45:63:8e:15:5b:5a:d7:df:d7:bf:67:a8:27:ec: 2b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:18:51:5C:B4:93:F0:AA:82:D9:03:18:2B:1F:B2:81:E7:F6:76:94 X509v3 Authority Key Identifier: keyid:8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:8a:20:8f:03:39:bf:cf:a0:cc:1e:e6:79:86:e2:15:78:b2: 92:f0:ef:ca:ad:e7:d6:cd:0f:f9:8e:78:a8:9c:21:0d:f7:4a: ea:77:30:1e:f0:21:41:44:2a:70:9e:e9:26:3e:3c:9e:d4:bb: ba:bc:40:18:eb:66:b2:2a:a0:cc:41:ee:4f:ed:1e:95:98:d6: 38:03:8e:50:88:19:cf:b0:52:20:bd:bd:fa:c5:cf:8f:35:72: 6f:73:f4:3c:68:00:44:53:96:2e:f1:fe:2b:a8:06:25:4d:5b: 6b:7a:38:f2:b0:a6:62:a1:e9:4a:9c:0e:66:1b:e5:ab:4c:bc: 21:b0:92:fa:9b:8f:4e:72:34:8b:23:44:b6:b6:81:55:f8:1c: bc:48:59:f4:ab:1e:ca:a6:3c:17:ed:a8:9b:c1:6f:c8:a7:1c: c8:4f:10:ba:ec:84:4d:55:e0:74:e6:a1:1b:0a:6f:62:36:dc: fc:8d:65:13:d2:87:41:30:61:f5:dc:64:be:8f:1d:ac:fc:e0: 1e:f6:af:b1:ee:3a:97:a6:15:f0:96:20:63:f1:40:98:4d:c3: ec:bc:d3:f9:12:2a:f6:4a:3c:39:b9:c2:54:72:34:96:2e:1d: 32:8a:ec:93:88:6f:8a:59:84:6a:79:5b:5f:0d:4b:28:48:ae: 57:9f:0c:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU5CK5Qu3tydFIBHlUE/2ghJQhWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5MDAw MUZFRkVDQTAeFw0yNTEwMTgxMTQ3MTRaFw0yNTEwMjExMzAxMTRaMDMxMTAvBgNV BAMTKEEzMTg1MTVDQjQ5M0YwQUE4MkQ5MDMxODJCMUZCMjgxRTdGNjc2OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMkQsEjDE5YDkHT8p2kg/zmcao 6TdJ58LDOt+//wKpN1MAtM8ZiaAPleX7UyYNYnDbcyV84EqWstrRRU5/KiokB40D Jr8ykZx/Lzi/LIQJUZIr9rE+6jf+fROIp/z+Iagi4EKV6BJM9xE794Sx9q//WA/S 3lCok/+Koz/ULDCxDZB9pGiAcHGbqdc2FDktB02Q4QfPANWQ7hiq2EkBgnRVhMEx 2BbIlare1UDL+tB735gJnjLadWkDbPUG6RXysmS+gbkthvbi1na8H7nwWtIeGgN6 ZGeVAC/Xs+CZzz+CIR5tkZC8oXsWku+tbJ8kHahFY44VW1rX39e/Z6gn7CufAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoxhRXLST8KqC2QMYKx+ygef2dpQwHwYDVR0j BBgwFoAUjD5EouK0ddXPSkjlLRcpAAH+/sowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGUyYmYwOS01ZjQyLTRiNjUtYTQyZC02M2QwNzk2ZDIwNmMvMC84QzNFNDRBMkUy QjQ3NUQ1Q0Y0QTQ4RTUyRDE3MjkwMDAxRkVGRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5MDAwMUZF RkVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRlMmJmMDktNWY0Mi00YjY1LWE0 MmQtNjNkMDc5NmQyMDZjLzAvOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5 MDAwMUZFRkVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGKII8DOb/PoMwe5nmG4hV4spLw78qt59bN D/mOeKicIQ33Sup3MB7wIUFEKnCe6SY+PJ7Uu7q8QBjrZrIqoMxB7k/tHpWY1jgD jlCIGc+wUiC9vfrFz481cm9z9DxoAERTli7x/iuoBiVNW2t6OPKwpmKh6UqcDmYb 5atMvCGwkvqbj05yNIsjRLa2gVX4HLxIWfSrHsqmPBftqJvBb8inHMhPELrshE1V 4HTmoRsKb2I23PyNZRPSh0EwYfXcZL6PHaz84B72r7HuOpemFfCWIGPxQJhNw+y8 0/kSKvZKPDm5wlRyNJYuHTKK7JOIb4pZhGp5W18NSyhIrlefDLI= -----END CERTIFICATE-----Generated at Mon Oct 20 12:07:53 2025 by rpki-client