$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft File: 9A52B6405ED406A7B17C4478D516DF3E37282980.mft (raw, json) Hash identifier: WNwzmvcHhsm9ZXlKMYqmBfVVrsL9gvlMaRciLVPcp2U= Subject key identifier: AF:46:9D:D0:FD:0B:AF:10:1F:1D:94:52:33:6E:6D:18:93:1A:F8:F4 Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Certificate serial: 3DE4FAC9E874054C754C2B3E747DB288891D5CBC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft Manifest number: 02B8 Signing time: Sat 18 Oct 2025 23:10:59 +0000 Manifest this update: Sat 18 Oct 2025 23:05:59 +0000 Manifest next update: Wed 22 Oct 2025 10:54:59 +0000 Files and hashes: 1: 3130332e3137372e392e302f32342d3234203d3e20313437313337.roa (hash: kbuURMx081wdwMkjcRHHCXRBMB09bh+YCCGTym9STe8=) 2: 323430303a343661303a32323a3a2f34382d3438203d3e20313437313337.roa (hash: KAxv+bcTcqGpScOTMbFMveWIpWOPxpJEwT7ajRyz6mM=) 3: 323430303a343661303a3a2f33322d3438203d3e20313437313337.roa (hash: 9D15ranZ4YwNSLaXFD5FAq+pNZxj9EjBiBFXk+HdqAc=) 4: 323430303a343661303a3a2f34382d3438203d3e20313437313337.roa (hash: uA6xDa7IvgkDp22R6G6BTJTUnQ6z5ZPc+c5h8RXJlMc=) 5: 323430303a343661303a33313a3a2f34382d3438203d3e20313437313337.roa (hash: 9MFeAvNjxRA9vbUf2UgXcthdxQ5XENOLt4Ao9GHoHp4=) 6: 323430303a343661303a343a3a2f34382d3438203d3e20313437313337.roa (hash: iK23Ih7KgC4OjnO9UHJglzhRasd3vRLpYeuOhNGE5hk=) 7: 323430303a343661303a353a3a2f34382d3438203d3e20313437313337.roa (hash: kS9+afwSiaTp9TelPiQ0ILiNOqNp/k8Ib68mizaidfE=) 8: 323430303a343661303a31363a3a2f34382d3438203d3e20313437313337.roa (hash: OgrUIPRU4hlKsLPwGuGpe/ivo5VWBIS7QYpm7Sxho2I=) 9: 323430303a343661303a323a3a2f34382d3438203d3e20313437313337.roa (hash: 23/idCqUx8EPa7QGFdtUC3If9YW7mCjrP46bOrSKS5Q=) 10: 323430303a343661303a31393a3a2f34382d3438203d3e20313437313337.roa (hash: 5FcZQWvOh6pLwsoaD4YTIG17OJilGjN+93omVyyFOZM=) 11: 323430303a343661303a31303a3a2f34382d3438203d3e20313437313337.roa (hash: h0oH/3iLu1unRW/jZRg6pYTlxoghvh0aIr1dQ6X1C3o=) 12: 323430303a343661303a32393a3a2f34382d3438203d3e20313437313337.roa (hash: IEucjhXv8bAa5eR/7We292E0AjQSxt/nxsHzEY0hsao=) 13: 323430303a343661303a31353a3a2f34382d3438203d3e20313437313337.roa (hash: 6i3UMACzodtWNujjB7HjZ1wIY9Wkv8kYqdabcGyF3UA=) 14: 323430303a343661303a33323a3a2f34382d3438203d3e20313437313337.roa (hash: pifjJjTcE6PeDdv2QBGHsCyyOypnfnj2TzyiuJpYoi0=) 15: 323430303a343661303a31333a3a2f34382d3438203d3e20313437313337.roa (hash: INC+aAdBEWi58gMud2WYkmc5AYB/cZKH3D/b7vcKvsA=) 16: 323430303a343661303a32313a3a2f34382d3438203d3e20313437313337.roa (hash: +gPgp8QYiU/daLpgrvM/5BELV5q0+mYrJuLKheezSV0=) 17: 323430303a343661303a33333a3a2f34382d3438203d3e20313437313337.roa (hash: s3Xjjbohn1CufgneBaEZY/bwLMOk5+UIxmZaor+mssg=) 18: 323430303a343661303a32363a3a2f34382d3438203d3e20313437313337.roa (hash: z2k28a+6ZI3VAF075Ex5TSmy7XYBAGjTmBdcFap9YJg=) 19: 323430303a343661303a363a3a2f34382d3438203d3e20313437313337.roa (hash: 0k545OOwyj9NvbehxX+QV0g5xQmQQnbTNP95f97h71M=) 20: 3130332e3137372e382e302f32332d3233203d3e20313437313337.roa (hash: uHzq3FI/OUse3guEAZ2X3n26c+18IEz5AqEGOSkyu60=) 21: 323430303a343661303a31323a3a2f34382d3438203d3e20313437313337.roa (hash: bH0QRBT1yTn/wCvKxau4plk6nMYBKS98USNjhSr5VTI=) 22: 323430303a343661303a32383a3a2f34382d3438203d3e20313437313337.roa (hash: BASa57B0aeCvQjUkpH58uhcpVnA7zhpchwSCS5nsYmM=) 23: 323430303a343661303a33303a3a2f34382d3438203d3e20313437313337.roa (hash: kEXHj9pv5MWefZu6lpGXP15sPBFvi6JY6eKJO5xEqB4=) 24: 323430303a343661303a32373a3a2f34382d3438203d3e20313437313337.roa (hash: omGcwmDsT8BYpBScz5Bq8p8wjIAMhQE4SKahvN0WhGg=) 25: 323430303a343661303a333a3a2f34382d3438203d3e20313437313337.roa (hash: YdSsGr4BjFrFET1Pgec0CyVOY3w0mCvZYunx96T/HRk=) 26: 323430303a343661303a31313a3a2f34382d3438203d3e20313437313337.roa (hash: ShZcfvOuL7hhFcin6d6C9YZIwo2zOBT3B5csjg2tV64=) 27: 323430303a343661303a373a3a2f34382d3438203d3e20313437313337.roa (hash: Cwh07TkFHSVxFptsS9+W0W6emaGKqX4GCK/GVTdPowA=) 28: 323430303a343661303a32343a3a2f34382d3438203d3e20313437313337.roa (hash: eELtUE44s8kWXW53efaOQB87hQvYKnu+4QWMOO/ldiE=) 29: 323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa (hash: r39b6mOH1IwysZ4h0sWe8of8Eqz81JxpSEnLBmKsOQg=) 30: 323430303a343661303a313a3a2f34382d3438203d3e20313437313337.roa (hash: a4kar+hZC31dN5bmEcyjGudCJwDbez0xQdLphlBrsp8=) 31: 323430303a343661303a32353a3a2f34382d3438203d3e20313437313337.roa (hash: LHnVdcZ5/YfYWNz9EwzLlVaYYhGPyvyomANm7mqWzO0=) 32: 323430303a343661303a31343a3a2f34382d3438203d3e20313437313337.roa (hash: ZlLb/8ABoTMshaPAOuB5oc8hOwpCTBM9+ckE++m8QHc=) 33: 323430303a343661303a32333a3a2f34382d3438203d3e20313437313337.roa (hash: UeQqi6ZVFgPrGYMster+xne64h585Ow3H0IaK3UC2WM=) 34: 323430303a343661303a393a3a2f34382d3438203d3e20313437313337.roa (hash: UbfbQp2UJcWdUXOg3yUdX64d8tTRpxRLmsAiq/gQPtk=) 35: 323430303a343661303a383a3a2f34382d3438203d3e20313437313337.roa (hash: xUscykaPjchZwH98C+3nSOKZLZaGqcecZKinfhX00i4=) 36: 323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa (hash: EvUm4cJBa4C1BImp9thQZ8BX3+SY4YqvKOUkSPQljL0=) 37: 323430303a343661303a33353a3a2f34382d3438203d3e20313437313337.roa (hash: Y3XYf27QnurhdV1CW67C5UxWbak1ZDu532ZjKsBxVtw=) 38: 323430303a343661303a31373a3a2f34382d3438203d3e20313437313337.roa (hash: MQTEtT0TR1f+0V0bndDRXrcOI9gxT90XmU11iLCfrjk=) 39: 323430303a343661303a33343a3a2f34382d3438203d3e20313437313337.roa (hash: WrWbmsZZrPD4tCYkM+PlD88T9/eqy1PkC98c/wYNVkI=) 40: 3130332e3137372e382e302f32342d3234203d3e20313437313337.roa (hash: uhlzYip1Vr9wq1FIVgoBLWnymsgGUspFrO9lWq8rb2g=) 41: 9A52B6405ED406A7B17C4478D516DF3E37282980.crl (hash: sPn2s7l+KbT6CWEeyTNuwWCX1edGWs/1o52Xx68apmo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 10:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:e4:fa:c9:e8:74:05:4c:75:4c:2b:3e:74:7d:b2:88:89:1d:5c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Validity Not Before: Oct 18 23:05:59 2025 GMT Not After : Oct 22 10:54:59 2025 GMT Subject: CN=AF469DD0FD0BAF101F1D9452336E6D18931AF8F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:25:34:d7:f8:ea:3c:d8:5c:e3:19:a9:9f:4b: 11:e6:9d:cc:63:ee:4a:77:90:cd:78:66:3e:0c:ca: 65:65:22:47:74:cc:90:f5:fe:46:2c:53:f1:e8:20: 31:28:e8:24:41:a6:d5:25:d0:16:93:23:e2:47:e3: 41:74:07:33:c6:d2:d0:57:ca:2c:2b:32:41:32:18: 06:90:89:80:e8:60:ab:57:ca:3e:a9:23:34:49:8e: b3:6f:ff:34:3e:76:6c:41:ca:59:32:ce:34:50:b8: b4:39:8c:39:7c:53:66:4c:0c:d6:6a:63:c4:8c:60: 55:29:d9:52:0e:aa:e1:ab:42:a7:b1:8d:47:ba:4a: d5:ac:9f:b3:52:c4:da:c2:98:51:ee:37:a8:a2:b7: 18:cc:93:75:d9:a8:ef:20:32:a1:fd:e9:3c:62:18: 30:d7:32:55:a5:7f:2c:37:ba:a5:0e:41:75:16:72: bf:b1:14:07:3e:da:6e:94:3b:ec:f3:f5:e0:b2:d4: 65:d6:0a:37:43:9f:ab:20:5c:5e:6a:80:7f:88:1a: f0:2f:e0:0b:55:e7:fc:4d:77:00:49:4c:68:2d:11: b2:5a:d0:3a:4b:e1:57:8a:1e:64:6a:97:f2:3c:f0: 67:b1:c0:78:9b:dc:fb:43:1a:c7:8f:66:db:46:4e: 8a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:46:9D:D0:FD:0B:AF:10:1F:1D:94:52:33:6E:6D:18:93:1A:F8:F4 X509v3 Authority Key Identifier: keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:50:cb:ed:91:8e:e1:db:ad:5f:e8:38:1b:c2:d2:30:98:9a: 56:92:1e:fa:3a:f6:a3:07:59:12:1d:64:0e:cc:71:0a:2b:ed: bb:e9:b4:29:41:4a:f9:88:e7:f2:f5:95:60:f8:83:de:72:55: df:09:0f:90:01:b3:b9:c8:11:98:0e:b2:91:2a:01:b1:4e:66: cd:76:e5:ea:bd:e3:ee:a9:f6:b3:98:aa:35:9d:c1:fe:ed:41: 94:f5:e2:29:1a:b9:8b:3a:50:3b:e0:11:53:09:5e:bd:26:63: cf:9c:0e:b7:1b:84:3e:a2:0d:c9:36:d0:07:95:f6:dd:04:65: c3:4e:dd:10:ae:84:d5:b8:10:7b:4e:24:e8:94:35:cd:fd:cc: e2:9b:01:d4:3f:f9:91:11:26:d2:9c:0c:0b:ed:e0:c4:05:8e: f6:40:3b:32:2b:43:39:81:c6:a0:4b:cc:a6:16:73:1d:91:27: 52:df:e9:a7:1e:44:a6:a9:64:c5:f7:05:c8:b0:08:a3:3c:22: b2:dc:4e:a4:48:ae:ff:7c:9f:49:1e:53:04:4c:3c:d7:9c:9c: c7:07:2e:c7:8b:e6:00:8b:dc:94:74:f1:0d:d7:eb:e8:26:65: a3:8e:a7:88:87:e7:bb:0f:0f:c2:34:97:2b:6f:4c:7a:0a:0a: 1b:4a:25:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPeT6yeh0BUx1TCs+dH2yiIkdXLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz NzI4Mjk4MDAeFw0yNTEwMTgyMzA1NTlaFw0yNTEwMjIxMDU0NTlaMDMxMTAvBgNV BAMTKEFGNDY5REQwRkQwQkFGMTAxRjFEOTQ1MjMzNkU2RDE4OTMxQUY4RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9JTTX+Oo82FzjGamfSxHmncxj 7kp3kM14Zj4MymVlIkd0zJD1/kYsU/HoIDEo6CRBptUl0BaTI+JH40F0BzPG0tBX yiwrMkEyGAaQiYDoYKtXyj6pIzRJjrNv/zQ+dmxBylkyzjRQuLQ5jDl8U2ZMDNZq Y8SMYFUp2VIOquGrQqexjUe6StWsn7NSxNrCmFHuN6iitxjMk3XZqO8gMqH96Txi GDDXMlWlfyw3uqUOQXUWcr+xFAc+2m6UO+zz9eCy1GXWCjdDn6sgXF5qgH+IGvAv 4AtV5/xNdwBJTGgtEbJa0DpL4VeKHmRql/I88GexwHib3PtDGsePZttGTorJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr0ad0P0LrxAfHZRSM25tGJMa+PQwHwYDVR0j BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4 Mjk4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E2NjVjMzItNmRhZi00NzJiLWJj ZTYtMzE3ZDVkNmM3ODllLzAvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRG M0UzNzI4Mjk4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtQy+2RjuHbrV/oOBvC0jCYmlaSHvo69qMH WRIdZA7McQor7bvptClBSvmI5/L1lWD4g95yVd8JD5ABs7nIEZgOspEqAbFOZs12 5eq94+6p9rOYqjWdwf7tQZT14ikauYs6UDvgEVMJXr0mY8+cDrcbhD6iDck20AeV 9t0EZcNO3RCuhNW4EHtOJOiUNc39zOKbAdQ/+ZERJtKcDAvt4MQFjvZAOzIrQzmB xqBLzKYWcx2RJ1Lf6aceRKapZMX3BciwCKM8IrLcTqRIrv98n0keUwRMPNecnMcH LseL5gCL3JR08Q3X6+gmZaOOp4iH57sPD8I0lytvTHoKChtKJRA= -----END CERTIFICATE-----Generated at Mon Oct 20 12:11:32 2025 by rpki-client