$ rpki-client -vvf repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft File: FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft (raw, json) Hash identifier: ENxNZocZrmCfBqEhPYp0UPZBWgpY5YJegvjPbsLKmHY= Subject key identifier: AB:87:9A:3C:8B:D6:AF:91:25:44:C1:1F:C7:63:70:4F:DC:13:E1:67 Authority key identifier: FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E Certificate issuer: /CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E Certificate serial: 42BC76DBD65D68F87BA93565BDE6B44F4093D137 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft Manifest number: 0524 Signing time: Sat 18 Oct 2025 15:01:41 +0000 Manifest this update: Sat 18 Oct 2025 14:56:41 +0000 Manifest next update: Tue 21 Oct 2025 23:10:41 +0000 Files and hashes: 1: 323430323a393830303a3a2f33322d3438203d3e203338313538.roa (hash: YuhlhGpBa/rvdjFiICmkr20uOyD33Y2ob8cJ0jjldVM=) 2: 323430323a393830303a343031303a3a2f34382d3438203d3e20333937373633.roa (hash: MBiGxv0ZO20HmuL2lUlmVAx4s0nmUR8oNwBPTRWxbyM=) 3: 3137352e3135382e34382e302f32302d3234203d3e20313335343738.roa (hash: 94hNYux8eWZz1uyVT99V5HDegQ13UDwZ7M1KtXnNuOw=) 4: 323430323a393830303a343030333a3a2f34382d3438203d3e203338353038.roa (hash: kVCBdk2VmpyopZqVmrScI5B0Mvq/xa323JLB5pEhsQA=) 5: 323430323a393830303a343030343a3a2f34382d3438203d3e203436303235.roa (hash: 7Zt9Qo2CwU5k43ZU/bzxQ7yO/llsHySgXleKYAIqOl0=) 6: 323430323a393830303a343030353a3a2f34382d3438203d3e20313336313038.roa (hash: ONp4B01vgh7iWIU+RoQbzYAR3JD5eNkfucFDErVtZKQ=) 7: FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl (hash: xven+2JHb6gfg7dqifIl580ZDu+7ZLpJMiDUjZu2ADA=) 8: 323430323a393830303a343030303a3a2f34382d3438203d3e20313331313137.roa (hash: EhLhnkz+tJZEa0MJMT1YkNCBA4ZvjDWQMMMtcKGynfI=) 9: 323430323a393830303a343030323a3a2f34382d3438203d3e20313331313139.roa (hash: romvh4P9a79Pr4J569XqtgjdGIrqpQXhEG/K5DHlLes=) 10: 323430323a393830303a343030313a3a2f34382d3438203d3e20313331313138.roa (hash: d5986EOySqOf25Kh0+1S+OCcFuFk0+QM0Sd3IiA6baE=) 11: 3137352e3135382e33322e302f32322d3234203d3e2034373837.roa (hash: TuVqDXW8MpVE10vVBcu9sQVQsL0l/kEvRxGqJqvUgn0=) 12: 323430323a393830303a343030363a3a2f34382d3438203d3e20313338313338.roa (hash: qLMS5n6MICGX7jMIWrfU1gynyNSBdRm2V/YFupb8Gq4=) 13: 3132312e3130302e302e302f32312d3234203d3e203338313538.roa (hash: R/eJpCGlRI/zV/XFrfuap+1qh+BYzQ+18W4bHCKPljo=) 14: 3137352e3135382e33322e302f32302d3234203d3e20313335343738.roa (hash: 7pDLsHgOcZwn1eSxA+Npm2ov2bKnIJgWI3SSJl41Zls=) 15: 3137352e3135382e33322e302f31392d3234203d3e20313335343738.roa (hash: atmaN7VfuZGEAxBx3mBciW1u2N3hThOAJ46HBH8lQC0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 23:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:bc:76:db:d6:5d:68:f8:7b:a9:35:65:bd:e6:b4:4f:40:93:d1:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E Validity Not Before: Oct 18 14:56:41 2025 GMT Not After : Oct 21 23:10:41 2025 GMT Subject: CN=AB879A3C8BD6AF912544C11FC763704FDC13E167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5b:c9:d6:4c:a1:11:ea:a4:6a:65:3a:de:fa: d1:b3:4b:30:e2:b7:97:ee:77:76:60:34:e3:91:e1: b3:92:be:38:0e:e0:54:4d:a5:5e:07:b4:1f:98:8b: 2e:35:52:40:3c:8e:b4:00:5d:9a:61:24:c7:19:6d: 00:20:df:92:f9:eb:4e:3a:eb:98:77:93:30:5a:7b: c0:d2:f5:74:8a:fd:5c:5d:6a:1d:3a:c1:b6:33:73: 80:c0:50:f3:e9:a1:03:a8:a7:76:86:38:82:d4:a4: 40:cf:8b:9b:92:6c:bb:06:0f:68:d0:a4:2a:90:57: fb:aa:2a:45:d6:f4:bf:34:d5:60:75:c3:16:ab:b1: 1e:a2:58:c2:5c:8a:e5:74:b1:2b:93:98:31:1c:e1: 8b:a6:5f:40:be:4f:e3:43:95:ad:f5:b2:46:da:00: dd:1a:b6:89:66:77:1e:38:62:1e:35:ae:38:d9:54: 44:e5:cc:c3:fd:e6:55:87:1d:93:e1:44:05:78:73: c1:bd:5f:49:85:3c:79:fd:9a:45:46:fd:ac:f4:38: 6b:3b:d3:07:ab:03:2f:b4:8f:ad:aa:fe:77:70:de: f3:73:e0:7f:c3:99:03:fc:b1:ce:82:13:16:b7:b1: fc:a7:f5:6f:d3:71:65:10:cc:f8:2d:5e:93:63:4e: 14:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:87:9A:3C:8B:D6:AF:91:25:44:C1:1F:C7:63:70:4F:DC:13:E1:67 X509v3 Authority Key Identifier: keyid:FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:3f:b2:f3:52:09:c2:94:65:f2:31:71:62:ae:af:3b:3c:45: a5:6e:0e:cf:e9:e4:da:21:42:1e:42:21:dc:8b:ab:78:89:94: ae:80:41:da:80:09:41:98:65:c9:23:eb:f9:2b:d3:a1:88:71: 45:fd:5d:87:91:70:4e:8e:07:1a:b2:66:12:6e:2c:81:d2:02: 7f:66:bc:5f:f1:6c:16:27:b3:c4:1b:e8:da:ef:65:db:e8:cd: 9f:af:64:df:f4:e5:9e:6d:b2:b0:26:f1:cd:d1:45:cd:57:67: 65:50:7e:dd:ba:f8:91:f3:b3:ab:11:47:5c:dc:da:b8:01:e1: e7:e2:49:88:00:cc:15:9f:a7:a7:90:fb:45:56:37:46:71:61: b2:a1:65:58:64:23:79:b6:47:86:9e:49:af:c8:c4:cd:7c:00: c1:a4:07:e7:7e:40:1b:b8:6a:9e:f7:b2:32:25:09:6d:de:f3: 04:6d:f9:e7:a8:99:9e:4c:ea:8d:02:e5:9e:c2:82:0a:c0:7c: 1a:15:90:03:ed:df:e3:6d:c9:87:cf:eb:75:a4:ed:23:5d:f2: 17:c2:af:41:0c:ca:9c:4d:89:19:f6:b4:4c:61:9d:fb:9f:10: a8:15:6c:6f:9d:cc:f7:d0:b6:3b:7a:a2:d5:69:af:31:48:22: a9:9a:c2:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQrx229ZdaPh7qTVlvea0T0CT0TcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNEMDUzODU5MDRFMDBGM0MxMEEzMzlFRTE5RDkyNEQ3 MkZGQUUwRTAeFw0yNTEwMTgxNDU2NDFaFw0yNTEwMjEyMzEwNDFaMDMxMTAvBgNV BAMTKEFCODc5QTNDOEJENkFGOTEyNTQ0QzExRkM3NjM3MDRGREMxM0UxNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1W8nWTKER6qRqZTre+tGzSzDi t5fud3ZgNOOR4bOSvjgO4FRNpV4HtB+Yiy41UkA8jrQAXZphJMcZbQAg35L56046 65h3kzBae8DS9XSK/Vxdah06wbYzc4DAUPPpoQOop3aGOILUpEDPi5uSbLsGD2jQ pCqQV/uqKkXW9L801WB1wxarsR6iWMJciuV0sSuTmDEc4YumX0C+T+NDla31skba AN0atolmdx44Yh41rjjZVETlzMP95lWHHZPhRAV4c8G9X0mFPHn9mkVG/az0OGs7 0werAy+0j62q/ndw3vNz4H/DmQP8sc6CExa3sfyn9W/TcWUQzPgtXpNjThQLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq4eaPIvWr5ElRMEfx2NwT9wT4WcwHwYDVR0j BBgwFoAU/NBThZBOAPPBCjOe4Z2STXL/rg4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzhmZDRhZi1mZTY3LTQ1YzgtODBiNy0wNmZjMTE4ZGY4ZTIvMC9GQ0QwNTM4NTkw NEUwMEYzQzEwQTMzOUVFMTlEOTI0RDcyRkZBRTBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNEMDUzODU5MDRFMDBGM0MxMEEzMzlFRTE5RDkyNEQ3MkZG QUUwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc4ZmQ0YWYtZmU2Ny00NWM4LTgw YjctMDZmYzExOGRmOGUyLzAvRkNEMDUzODU5MDRFMDBGM0MxMEEzMzlFRTE5RDky NEQ3MkZGQUUwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFE/svNSCcKUZfIxcWKurzs8RaVuDs/p5Noh Qh5CIdyLq3iJlK6AQdqACUGYZckj6/kr06GIcUX9XYeRcE6OBxqyZhJuLIHSAn9m vF/xbBYns8Qb6NrvZdvozZ+vZN/05Z5tsrAm8c3RRc1XZ2VQft26+JHzs6sRR1zc 2rgB4efiSYgAzBWfp6eQ+0VWN0ZxYbKhZVhkI3m2R4aeSa/IxM18AMGkB+d+QBu4 ap73sjIlCW3e8wRt+eeomZ5M6o0C5Z7CggrAfBoVkAPt3+NtyYfP63Wk7SNd8hfC r0EMypxNiRn2tExhnfufEKgVbG+dzPfQtjt6otVprzFIIqmawjI= -----END CERTIFICATE-----Generated at Mon Oct 20 12:56:53 2025 by rpki-client