$ rpki-client -vvf repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft File: CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft (raw, json) Hash identifier: AagqUU7lkPMw0WL4KyRucHU6ArKZSaZZ9HfKUAJ+pJc= Subject key identifier: 68:A1:57:9A:E6:FA:A6:79:62:38:31:93:5A:E5:9A:B0:16:06:6D:C2 Authority key identifier: CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA Certificate issuer: /CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA Certificate serial: 1D8C8D4F6D4FE5FCEE91C56D35276BCB4403C188 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft Manifest number: 0525 Signing time: Sun 19 Oct 2025 19:02:22 +0000 Manifest this update: Sun 19 Oct 2025 18:57:22 +0000 Manifest next update: Wed 22 Oct 2025 22:24:22 +0000 Files and hashes: 1: 34332e3235342e3132372e302f32342d3234203d3e203538343832.roa (hash: QBHhnk1VzpNswo5xP4biYnK0qXDI4z1xHEPaP9wifbk=) 2: 34332e3235342e3132342e302f32342d3234203d3e203538343832.roa (hash: q6ov1LjBJ1C3MscONi3jd31fdQpeg7xo73ISZgsB13M=) 3: 34332e3235342e3132342e302f32322d3232203d3e203538343832.roa (hash: hBuj8wbQYmHqntGj0o/eUNV+3o0v8DMJLG22gmNYBVk=) 4: 3130332e32382e3232362e302f32342d3234203d3e203538343832.roa (hash: znVQQu+fIshyxf4G9mODoMFhYbJt3eH/0GuMVl8IwkA=) 5: 34332e3235342e3132362e302f32332d3233203d3e203538343832.roa (hash: eZci8ugTs0KdDJxBSy4Gimtbte6tWVKKsSs87Z+r/R0=) 6: 34332e3235342e3132352e302f32342d3234203d3e203538343832.roa (hash: 9k0Dch7Ak/Z6QMfcr+CZARJzHwZAuvWS8RON6gwZ8+8=) 7: CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl (hash: 8GQct8cFn94+di23BDH+wshyy/2ufvn9q29TYQbd2j8=) 8: 3130332e32382e3232362e302f32332d3233203d3e203538343832.roa (hash: 4fMJzq8Nq1YJP9z1+S+a93o7lbnttq7OojId/hUDTmM=) 9: 34332e3235342e3132362e302f32342d3234203d3e203538343832.roa (hash: DbGnB1DqBC848hiKo1po0MqE4Gsa4J0OUdCykpEG2OQ=) 10: 3130332e32382e3232342e302f32342d3234203d3e203538343832.roa (hash: 6xVTWVhJwHlTuupRqckmEH+2N+SG40cJCesUx/LAQVI=) 11: 3130332e32382e3232342e302f32322d3234203d3e203538343832.roa (hash: oU26K1WNdmD4+eVmiwc4bkVkpstGiJjSdrNC9yEyagk=) 12: 3130332e32382e3232372e302f32342d3234203d3e203538343832.roa (hash: 9Ew1E8zQmp44/WcA6xsjn9DG+Pj2XFS0Nowbj2INal8=) 13: 3130332e32382e3232342e302f32332d3233203d3e203538343832.roa (hash: 6VLiq/I44WcMCT+b35Hhj3WDvps84mPpDnwbEu/ZNyQ=) 14: 34332e3235342e3132342e302f32332d3233203d3e203538343832.roa (hash: iXtClCML1N9IxFKEnUu67jBHGm8QPJyw41HrxTVVN1g=) 15: 323430343a663930303a3a2f33322d3438203d3e203538343832.roa (hash: P1hzEQwjHdVhS7I0LLckp0JkbGZXIWU/KqIoWLVRQrY=) 16: 3130332e32382e3232352e302f32342d3234203d3e203538343832.roa (hash: BGVByiTWnar+G9klrtY285yoFDo2RjE2YjBcwnHtPF0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 22:24:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:8c:8d:4f:6d:4f:e5:fc:ee:91:c5:6d:35:27:6b:cb:44:03:c1:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA Validity Not Before: Oct 19 18:57:22 2025 GMT Not After : Oct 22 22:24:22 2025 GMT Subject: CN=68A1579AE6FAA679623831935AE59AB016066DC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:7b:11:df:5d:06:f2:21:ef:f1:7e:a4:9c:e1: 9f:61:44:7c:de:c6:d5:19:1d:72:bc:8d:d8:24:c9: af:86:8a:d6:cf:bd:25:c8:c0:8f:2f:a5:5a:6e:ab: 0f:6a:4a:95:11:e1:a5:62:ee:47:cc:cc:e3:df:0a: 02:5a:f9:ed:c5:f7:bb:cc:1d:eb:71:b8:c8:d1:4c: b6:55:38:80:bf:17:4d:12:b9:a9:a7:38:a8:d0:d9: fe:98:2d:71:85:3c:2f:9d:65:47:ed:2f:fe:44:0c: 40:eb:63:41:93:94:cb:f4:a8:0b:50:23:de:2e:0c: 32:e7:a9:a7:6b:b2:65:27:64:6e:9e:a5:95:98:f8: 6d:d3:96:d5:95:15:44:2e:cb:3b:12:5b:5c:4c:96: d4:5a:e8:7a:a5:4e:3e:37:4a:0b:76:2e:f0:48:7c: d9:53:54:69:2e:26:8a:32:09:f8:2c:5e:9c:93:6d: 83:66:15:3c:87:1c:2b:fc:31:a3:ba:66:96:31:3e: fe:59:63:ae:ca:f3:5d:fc:f8:31:b1:1e:a1:dc:a6: e8:28:f4:1c:91:1c:e0:6e:71:4b:3e:2e:3d:e8:77: 9e:27:c2:60:0b:60:d9:f2:ce:fd:b3:eb:7a:3e:89: 89:1e:03:c1:8d:de:46:96:d9:73:99:8c:9a:db:84: 93:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A1:57:9A:E6:FA:A6:79:62:38:31:93:5A:E5:9A:B0:16:06:6D:C2 X509v3 Authority Key Identifier: keyid:CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:c0:0a:7d:7f:b7:67:df:b9:d7:23:e5:8a:d1:c5:fa:cf:23: b4:20:45:25:08:13:59:c5:bf:06:1b:52:71:6d:5f:83:b8:78: 76:7c:93:d6:9a:8d:5d:4f:c6:a1:50:21:21:f7:af:0a:49:8e: b8:d2:43:66:6e:a0:e1:a5:65:95:6f:4b:4f:c1:e1:5a:7a:0a: a4:bb:91:a0:0b:80:29:3f:95:5b:53:ed:6a:92:93:46:b2:cf: 6d:c8:21:b4:40:3d:64:d4:25:6d:40:66:6f:28:bd:92:8b:24: c8:0c:bb:07:df:8e:e3:0a:16:5d:54:ad:97:c1:c5:50:38:a2: 9d:c4:8c:43:02:25:64:f6:20:61:58:87:ed:6f:9e:e3:4a:de: 1f:b8:de:71:1b:8f:a1:78:ae:2b:4a:2d:a3:b2:d6:58:10:38: 9e:f8:c7:07:81:76:ea:0a:2c:f5:be:f1:b5:59:5c:99:c2:e7: a8:6f:55:50:8e:89:90:43:04:bf:55:ad:fa:64:2c:45:89:5a: f2:d9:69:71:84:0c:44:2d:c1:68:1c:9e:b8:89:c1:2b:89:a9: b9:f1:8d:cf:99:ec:86:3c:e1:d1:8d:74:1e:58:52:99:c4:45: 71:c0:a8:a9:29:e7:f5:45:d2:73:ac:f2:0f:1d:04:8e:cd:ea: 27:4b:3e:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHYyNT21P5fzukcVtNSdry0QDwYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDODY3NDMyNjIzOEJFMzU1MzI5MDEyRTFDRkREQjk5 RUM1QjZCQTAeFw0yNTEwMTkxODU3MjJaFw0yNTEwMjIyMjI0MjJaMDMxMTAvBgNV BAMTKDY4QTE1NzlBRTZGQUE2Nzk2MjM4MzE5MzVBRTU5QUIwMTYwNjZEQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvexHfXQbyIe/xfqSc4Z9hRHze xtUZHXK8jdgkya+GitbPvSXIwI8vpVpuqw9qSpUR4aVi7kfMzOPfCgJa+e3F97vM HetxuMjRTLZVOIC/F00SuamnOKjQ2f6YLXGFPC+dZUftL/5EDEDrY0GTlMv0qAtQ I94uDDLnqadrsmUnZG6epZWY+G3TltWVFUQuyzsSW1xMltRa6HqlTj43Sgt2LvBI fNlTVGkuJooyCfgsXpyTbYNmFTyHHCv8MaO6ZpYxPv5ZY67K8138+DGxHqHcpugo 9ByRHOBucUs+Lj3od54nwmALYNnyzv2z63o+iYkeA8GN3kaW2XOZjJrbhJOZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaKFXmub6pnliODGTWuWasBYGbcIwHwYDVR0j BBgwFoAUzchnQyYji+NVMpAS4c/duZ7FtrowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWUyZjNiZC1kNGVjLTQyY2ItYWFjZi1hZGMyODI1YzE4NGIvMC9DREM4Njc0MzI2 MjM4QkUzNTUzMjkwMTJFMUNGRERCOTlFQzVCNkJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RDODY3NDMyNjIzOEJFMzU1MzI5MDEyRTFDRkREQjk5RUM1 QjZCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjllMmYzYmQtZDRlYy00MmNiLWFh Y2YtYWRjMjgyNWMxODRiLzAvQ0RDODY3NDMyNjIzOEJFMzU1MzI5MDEyRTFDRkRE Qjk5RUM1QjZCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLACn1/t2ffudcj5YrRxfrPI7QgRSUIE1nF vwYbUnFtX4O4eHZ8k9aajV1PxqFQISH3rwpJjrjSQ2ZuoOGlZZVvS0/B4Vp6CqS7 kaALgCk/lVtT7WqSk0ayz23IIbRAPWTUJW1AZm8ovZKLJMgMuwffjuMKFl1UrZfB xVA4op3EjEMCJWT2IGFYh+1vnuNK3h+43nEbj6F4ritKLaOy1lgQOJ74xweBduoK LPW+8bVZXJnC56hvVVCOiZBDBL9VrfpkLEWJWvLZaXGEDEQtwWgcnriJwSuJqbnx jc+Z7IY84dGNdB5YUpnERXHAqKkp5/VF0nOs8g8dBI7N6idLPug= -----END CERTIFICATE-----Generated at Mon Oct 20 06:24:37 2025 by rpki-client