$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft File: 935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft (raw, json) Hash identifier: lIMDhLmuy4+BC/M3JzD/bZ7hLQkk5LfvBFjs3ZNFyDI= Subject key identifier: BD:CD:28:D0:4D:EC:A6:73:57:6E:E5:67:33:34:63:59:03:ED:9A:94 Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3 Certificate issuer: /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3 Certificate serial: 301D55FF0ADAA838BAF72FDF52AB9346E9E21442 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft Manifest number: 0529 Signing time: Sun 19 Oct 2025 14:01:06 +0000 Manifest this update: Sun 19 Oct 2025 13:56:06 +0000 Manifest next update: Wed 22 Oct 2025 17:30:06 +0000 Files and hashes: 1: 323430323a3630303a62313a3a2f34382d3438203d3e203338353135.roa (hash: YPCHB9+pVaURl8+dAGmuKHWAAYIp9zXHQ5RNjAvQlWA=) 2: 3131372e37342e3132342e302f32342d3234203d3e203338353135.roa (hash: nL5h7t1uvPTY7j/fOmJJBHbseWsW8Xn8jUveWxlnXWs=) 3: 3130332e3130372e3234382e302f32322d3232203d3e203338353135.roa (hash: HLVBD979pS8wg1hMg/z3bLcZUZBMG19OyH8qnmPOiEQ=) 4: 3131372e37342e3132312e302f32342d3234203d3e203338353135.roa (hash: UiXaStQAKJGueqgS6CXK/3jB9NOQ2r7CCSqgVa6KSp8=) 5: 323430323a3630303a643030303a3a2f34382d3438203d3e203338353135.roa (hash: lmN8CKwnpjABLBKuKVDCz9e5H4GmlgOLsUei3+Y0saA=) 6: 323430323a3630303a643a3a2f34382d3438203d3e203338353135.roa (hash: jfQj9Xe+FFUAvRMk0Cart8oc9Moe7xONTWgrujdxqvw=) 7: 3131372e37342e3132302e302f32342d3234203d3e203338353135.roa (hash: 89A2hU4ZNeLlTQWFk//hToBFYmlDJWFVlljqu9huGYU=) 8: 3131372e37342e3132322e302f32342d3234203d3e203338353135.roa (hash: 3SF0bAW+7rz1kqWvQ04ZAo3EXSDUW7WAvx83Y52xCYs=) 9: 323430323a3630303a633162313a3a2f34382d3438203d3e203338353135.roa (hash: hBCdf6MQ44EMODLH0goT5EgLIomwJ27fDjdA8l3goK8=) 10: 323430323a3630303a633030303a3a2f34382d3438203d3e203338353135.roa (hash: lR+WSBiL7cOFUb1JcRW+5/d+PDThjLOWPJrqzwsQquY=) 11: 323430323a3630303a633a3a2f34382d3438203d3e203338353135.roa (hash: MHLvNBBDeKLXnh9zpHXyspbjmbbkMSXMU/LUFMRRAKk=) 12: 3130332e3130372e3235302e302f32342d3234203d3e203338353135.roa (hash: Cz55zbo2bg8BQ/A4k8o5Tsse3KPVQaX+P2Zyl0kj47o=) 13: 3130332e3130372e3234382e302f32342d3234203d3e203338353135.roa (hash: MZkAsgI1LK8w1LPPO7mrWaTwnV05X/ESMWLzLbTQIP0=) 14: 3131372e37342e3132362e302f32342d3234203d3e203338353135.roa (hash: x/FofJeZNxkVPOa1E9HkT3zXzpIkigVr7Dyocx4wMZs=) 15: 935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl (hash: Pvdzrjmpd7OnI2iUdbe/3yIKdRi4TAu7Rran6P+ZONE=) 16: 3130332e3130372e3234392e302f32342d3234203d3e203338353135.roa (hash: We1k3RElK9GB1JUpvlgdlEhaIFsMFI9pBQlBnBG9xm0=) 17: 323430323a3630303a353431343a3a2f34382d3438203d3e203338353135.roa (hash: vdW3QTcBsIPY6dF/jSl1kcP+cWlLsmSjo55p09Ujwos=) 18: 3131372e37342e3132302e302f32322d3232203d3e203338353135.roa (hash: CdtTtCGcqTSKprBM/SSCJUpSOUzh3lZ3WFYK1XycLjs=) 19: 3131372e37342e3132332e302f32342d3234203d3e203338353135.roa (hash: 5lJDAspWdkYKRvft5YJv1y1oL5whXpt3WUE0fOXTEtQ=) 20: 323430323a3630303a313a3a2f34382d3438203d3e203338353135.roa (hash: uXjjFF8r0bZTRb9FAMyxiQMT6f66pjylh6TLVp8RaRI=) 21: 323430323a3630303a3a2f33322d3438203d3e203338353135.roa (hash: Pzi7GR8j0R6wiVbVAxvFIEhEVNaHRMjCobhRay+uqBw=) 22: 3131372e37342e3132302e302f32312d3231203d3e203338353135.roa (hash: AnoAXlk+ZznXZQFLclniCilxBvQYCPfhm7aj/ofKMUY=) 23: 3131372e37342e3132342e302f32322d3232203d3e203338353135.roa (hash: OqpoVOVJpUhsB4C42PcVh81+Ms4dKWfSDdEhcsKwE60=) 24: 3131372e37342e3132352e302f32342d3234203d3e203338353135.roa (hash: SXRbQUacdI0gdlDCMDP1QFPdIAK9kHRg+ZOPQumVqeM=) 25: 3131372e37342e3132372e302f32342d3234203d3e203338353135.roa (hash: /vW/TSbog9WsObuCC1lgKjgijK+Dod2mciJtHHUezKU=) 26: 3130332e3130372e3235312e302f32342d3234203d3e203338353135.roa (hash: xgt5xEDp+XFwH8hLX8aUiO3xy0s9+XFKXBjJZ88c3KE=) 27: 323430323a3630303a313030303a3a2f34382d3438203d3e203338353135.roa (hash: 7dk3+UbgX607IlNTst1WKsK+D+Kfaq5vP3vfslx3Dv8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:1d:55:ff:0a:da:a8:38:ba:f7:2f:df:52:ab:93:46:e9:e2:14:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3 Validity Not Before: Oct 19 13:56:06 2025 GMT Not After : Oct 22 17:30:06 2025 GMT Subject: CN=BDCD28D04DECA673576EE5673334635903ED9A94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f2:ed:90:67:ee:62:b1:dc:2d:1f:28:62:e7: 26:1e:98:48:df:e8:47:d4:3d:83:fa:03:66:eb:c4: 66:8a:1c:56:2f:b9:89:07:99:98:a8:4c:c8:50:2a: e2:91:63:7e:3a:36:05:a2:9a:69:42:d7:6b:24:3a: ae:6b:8e:7e:33:ba:d0:9c:e0:88:88:e1:c7:5b:2b: 01:52:ea:76:3d:ca:3e:f7:45:0a:b8:91:4b:73:04: 86:86:f3:1d:85:ee:ba:5a:51:1b:75:b5:db:91:ad: 20:98:69:65:3f:81:75:13:b9:e2:d0:39:b8:90:22: a4:f8:c6:61:7e:7a:77:69:95:92:e0:b3:b2:f0:b1: 41:ed:df:25:bc:95:f5:9b:1e:26:b3:7b:c9:09:0a: 08:75:d0:69:5d:16:26:ff:67:3e:4e:b8:5b:47:5f: 69:9b:42:64:2a:4d:27:48:89:e6:e3:76:f7:a2:0c: 93:d2:29:c7:0a:c4:54:1f:59:ab:5a:85:6a:9b:b0: 0c:cf:58:5d:37:bd:ae:30:a6:2c:45:5d:c4:ff:0d: 9c:36:f7:c0:99:ab:39:28:78:2d:7f:e8:7c:66:71: 6f:4d:31:57:e7:1f:f1:81:b9:b3:e1:8b:64:f6:2e: 42:3f:17:da:c3:0d:41:18:ef:f5:60:5b:6d:b2:ad: a1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:CD:28:D0:4D:EC:A6:73:57:6E:E5:67:33:34:63:59:03:ED:9A:94 X509v3 Authority Key Identifier: keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:e8:ed:17:33:d1:76:75:00:6e:59:03:df:e4:a8:1e:36:29: 59:62:6d:1f:d2:f0:49:aa:d1:24:2d:3f:39:d9:60:a0:a9:d1: b2:6c:da:37:42:cd:6d:b7:81:58:a6:8c:0e:3d:31:48:a0:30: 91:e0:7c:e9:bc:41:f9:fa:42:7a:6c:e6:aa:11:3f:a6:e2:3c: bc:dd:cb:59:22:d7:97:7f:82:81:e1:fd:8a:1c:3a:fa:cc:80: cc:35:1e:12:fb:9b:53:35:5f:56:dc:49:26:59:87:5a:0c:cd: 44:97:ef:77:73:06:d7:00:5f:13:f1:96:a0:8f:b2:b6:54:6c: 63:a8:9f:c2:6b:e2:9f:75:4c:8b:be:05:25:2b:2b:13:0a:e5: f8:b3:16:c3:ea:80:ea:86:b1:0b:73:68:64:9c:63:72:ea:8c: 8b:97:0d:a3:0c:2f:24:5a:97:ca:df:ce:dc:c8:6e:c4:7c:53: 83:a5:70:02:b5:a2:93:b6:e9:df:46:12:0b:7a:2a:7f:ee:15: 27:cf:f1:32:98:d1:dc:1b:c0:25:3c:16:c6:2e:4e:2b:79:f6: 5d:66:03:1e:87:59:21:0d:b2:5d:1b:c2:2c:f5:d8:15:cf:50: ca:a4:18:18:5f:a5:65:38:d1:e2:b8:d0:2d:07:73:d8:f3:d7: a7:58:cb:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMB1V/wraqDi69y/fUquTRuniFEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEy RERGRDhGMzAeFw0yNTEwMTkxMzU2MDZaFw0yNTEwMjIxNzMwMDZaMDMxMTAvBgNV BAMTKEJEQ0QyOEQwNERFQ0E2NzM1NzZFRTU2NzMzMzQ2MzU5MDNFRDlBOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe8u2QZ+5isdwtHyhi5yYemEjf 6EfUPYP6A2brxGaKHFYvuYkHmZioTMhQKuKRY346NgWimmlC12skOq5rjn4zutCc 4IiI4cdbKwFS6nY9yj73RQq4kUtzBIaG8x2F7rpaURt1tduRrSCYaWU/gXUTueLQ ObiQIqT4xmF+endplZLgs7LwsUHt3yW8lfWbHiaze8kJCgh10GldFib/Zz5OuFtH X2mbQmQqTSdIiebjdveiDJPSKccKxFQfWatahWqbsAzPWF03va4wpixFXcT/DZw2 98CZqzkoeC1/6HxmcW9NMVfnH/GBubPhi2T2LkI/F9rDDUEY7/VgW22yraHTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvc0o0E3spnNXbuVnMzRjWQPtmpQwHwYDVR0j BBgwFoAUk12y1EiPriwR4b873yDYKi3f2PMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzRjNjRhOS0zNTM3LTRiYzctODYxMy04ZTk4MTYyOWU0Y2EvMC85MzVEQjJENDQ4 OEZBRTJDMTFFMUJGM0JERjIwRDgyQTJEREZEOEYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEyRERG RDhGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0YzY0YTktMzUzNy00YmM3LTg2 MTMtOGU5ODE2MjllNGNhLzAvOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4 MkEyRERGRDhGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKro7Rcz0XZ1AG5ZA9/kqB42KVlibR/S8Emq 0SQtPznZYKCp0bJs2jdCzW23gVimjA49MUigMJHgfOm8Qfn6Qnps5qoRP6biPLzd y1ki15d/goHh/YocOvrMgMw1HhL7m1M1X1bcSSZZh1oMzUSX73dzBtcAXxPxlqCP srZUbGOon8Jr4p91TIu+BSUrKxMK5fizFsPqgOqGsQtzaGScY3LqjIuXDaMMLyRa l8rfztzIbsR8U4OlcAK1opO26d9GEgt6Kn/uFSfP8TKY0dwbwCU8FsYuTit59l1m Ax6HWSENsl0bwiz12BXPUMqkGBhfpWU40eK40C0Hc9jz16dYy5U= -----END CERTIFICATE-----Generated at Mon Oct 20 20:18:01 2025 by rpki-client