$ rpki-client -vvf repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft File: 2993EFF92300988A33773DD8C4B502F74B907112.mft (raw, json) Hash identifier: 57v/BmFm7WPhGdAUg+axFX1ieaWy7Dj1GWfU8wyRKlM= Subject key identifier: E9:71:18:EA:90:D4:A5:D6:7D:5D:D1:A5:24:C5:F6:A7:3C:18:DD:13 Authority key identifier: 29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12 Certificate issuer: /CN=2993EFF92300988A33773DD8C4B502F74B907112 Certificate serial: 5D841137BC61778DDE42777091C94C838EB187C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer Subject info access: rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft Manifest number: 01F7 Signing time: Sat 18 Oct 2025 23:52:14 +0000 Manifest this update: Sat 18 Oct 2025 23:47:14 +0000 Manifest next update: Wed 22 Oct 2025 08:06:14 +0000 Files and hashes: 1: 323430323a326334303a3a2f34382d3438203d3e203535363736.roa (hash: Cry5tI26ZFq+xJIM45fHnqWQpQQD1hwh8FhbwaGJxgw=) 2: 3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa (hash: dcc/bwTW1oTsN+Z0h/Aw94q6mQUdzuyzIAdCoesD/EQ=) 3: 323430323a326334303a3a2f34382d3438203d3e20313336383734.roa (hash: u1/FWvhkUX8NdpjOfCEzIQ83rh9KfgiQw+mbq+Uaf5Y=) 4: 3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa (hash: MQCiIDyqzNBQYpoR0MRnkXubNFQEv31SOdbwjwRhFAI=) 5: 2993EFF92300988A33773DD8C4B502F74B907112.crl (hash: agCFR5XVH3F9+UU36pyxfB9ty/MiHIAUf5GIA8rU4SI=) 6: 3130332e3130352e37362e302f32342d3234203d3e203535363736.roa (hash: UUqUhVxo4riOoAS8LfSUq3H3CWxdpGF4ZToXB6Mfx1U=) 7: 3130332e3130352e37372e302f32342d3234203d3e203535363736.roa (hash: /T3q0aKMlccwCqwpvQMGCHEcfpAgRAD32J67j3q+a2M=) 8: 3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa (hash: JCzAZhJKrjcnXPRUzXNAKrf8B2XJvFX+OCG60Nl0Dgk=) 9: 3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa (hash: 8FISrQYbnFOpjiQHBztskExqHRou9e+XROYZoHoylq0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 08:06:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:84:11:37:bc:61:77:8d:de:42:77:70:91:c9:4c:83:8e:b1:87:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2993EFF92300988A33773DD8C4B502F74B907112 Validity Not Before: Oct 18 23:47:14 2025 GMT Not After : Oct 22 08:06:14 2025 GMT Subject: CN=E97118EA90D4A5D67D5DD1A524C5F6A73C18DD13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:60:39:e8:b2:1f:37:0b:4c:06:a1:e9:06:0a: c4:2e:fb:ba:c8:8e:6d:81:c5:91:f8:f7:a8:56:1b: 34:84:6a:cc:58:be:09:b2:a6:0b:c3:14:c3:bc:08: b3:98:74:64:16:82:a7:e9:f6:18:88:6d:cc:8e:af: 00:a2:31:28:69:af:4b:74:3f:1e:e0:69:7e:81:23: 0b:54:a4:72:f8:6a:bb:a3:e6:94:45:fe:9d:8b:c8: 99:ae:40:10:2d:86:30:fb:d5:16:a0:e6:e9:2b:dd: f8:6a:f5:ef:50:81:cf:97:18:c3:26:fa:37:10:7e: 42:e1:ce:93:e0:18:55:d3:80:e7:4a:8d:6f:1a:24: f8:22:15:fb:9a:0c:58:89:29:12:9e:ce:c3:66:bf: a0:fb:04:21:ea:02:88:ca:23:d5:4d:a9:03:6d:7a: 9c:a6:12:08:3d:26:14:74:9b:1d:c1:60:79:1f:59: c0:25:fe:36:54:40:45:2f:77:71:a3:10:5d:bc:6f: 95:88:fa:6e:f7:4c:9d:26:65:cb:5f:78:c8:75:d5: 7a:82:f0:37:e6:87:1e:0a:e3:29:09:df:b0:ed:04: c9:e0:f6:1f:e5:4f:04:55:b5:22:43:3e:76:e0:bf: 40:b2:d0:45:60:86:07:29:95:92:64:be:d1:85:d6: 5d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:71:18:EA:90:D4:A5:D6:7D:5D:D1:A5:24:C5:F6:A7:3C:18:DD:13 X509v3 Authority Key Identifier: keyid:29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d8:08:58:79:8e:6f:c3:62:38:08:ca:3b:bb:6d:f3:86:17: dc:26:47:0e:65:15:ca:40:b7:72:c3:06:1d:05:1a:bb:06:5f: 42:37:ba:51:70:ca:cb:c5:4a:c2:44:54:4c:1a:68:0b:8d:b6: c2:a2:3c:61:49:67:6d:96:80:d5:93:a8:84:42:ed:d3:65:5f: 32:82:3a:40:19:df:98:d3:4f:19:42:63:bf:29:90:ba:30:e2: 14:be:3c:64:91:99:53:22:40:34:10:ff:5a:d3:1c:b7:e0:df: 30:96:54:2f:05:32:53:82:8b:ee:5e:5e:ac:46:e5:b1:c9:73: c5:92:21:df:d8:95:1e:5c:0d:65:0f:2d:bc:60:c0:ca:b4:df: ef:78:cb:4c:7c:5e:92:a2:9b:b0:f4:5d:48:6f:11:f4:a6:d6: 83:f9:7b:83:48:25:c8:4b:d0:76:8d:36:47:e1:d5:8a:81:9d: 98:d2:51:b3:43:e9:9c:b6:f9:b9:10:b8:c2:fa:c7:0f:5d:6a: ee:7e:d9:cf:31:5d:86:9b:8b:5c:7f:25:2f:48:35:b2:80:08: 34:13:6f:85:1d:0d:34:d6:9d:58:38:27:6c:80:e8:ea:96:a6: 4b:ce:b9:ba:68:2b:7d:16:88:23:49:b6:c2:2d:ef:4a:69:d1: 58:a2:6d:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXYQRN7xhd43eQndwkclMg46xh8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAyRjc0 QjkwNzExMjAeFw0yNTEwMTgyMzQ3MTRaFw0yNTEwMjIwODA2MTRaMDMxMTAvBgNV BAMTKEU5NzExOEVBOTBENEE1RDY3RDVERDFBNTI0QzVGNkE3M0MxOEREMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZYDnosh83C0wGoekGCsQu+7rI jm2BxZH496hWGzSEasxYvgmypgvDFMO8CLOYdGQWgqfp9hiIbcyOrwCiMShpr0t0 Px7gaX6BIwtUpHL4aruj5pRF/p2LyJmuQBAthjD71Rag5ukr3fhq9e9Qgc+XGMMm +jcQfkLhzpPgGFXTgOdKjW8aJPgiFfuaDFiJKRKezsNmv6D7BCHqAojKI9VNqQNt epymEgg9JhR0mx3BYHkfWcAl/jZUQEUvd3GjEF28b5WI+m73TJ0mZctfeMh11XqC 8Dfmhx4K4ykJ37DtBMng9h/lTwRVtSJDPnbgv0Cy0EVghgcplZJkvtGF1l0BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6XEY6pDUpdZ9XdGlJMX2pzwY3RMwHwYDVR0j BBgwFoAUKZPv+SMAmIozdz3YxLUC90uQcRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzdiYzNkMi00YWIzLTRjZmItOTIyMi02NmM2ZWE5NDQ3ZTMvMC8yOTkzRUZGOTIz MDA5ODhBMzM3NzNERDhDNEI1MDJGNzRCOTA3MTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAyRjc0Qjkw NzExMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc3YmMzZDItNGFiMy00Y2ZiLTky MjItNjZjNmVhOTQ0N2UzLzAvMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAy Rjc0QjkwNzExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/YCFh5jm/DYjgIyju7bfOGF9wmRw5lFcpA t3LDBh0FGrsGX0I3ulFwysvFSsJEVEwaaAuNtsKiPGFJZ22WgNWTqIRC7dNlXzKC OkAZ35jTTxlCY78pkLow4hS+PGSRmVMiQDQQ/1rTHLfg3zCWVC8FMlOCi+5eXqxG 5bHJc8WSId/YlR5cDWUPLbxgwMq03+94y0x8XpKim7D0XUhvEfSm1oP5e4NIJchL 0HaNNkfh1YqBnZjSUbND6Zy2+bkQuML6xw9dau5+2c8xXYabi1x/JS9INbKACDQT b4UdDTTWnVg4J2yA6OqWpkvOubpoK30WiCNJtsIt70pp0ViibTA= -----END CERTIFICATE-----Generated at Mon Oct 20 12:01:46 2025 by rpki-client