$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft File: D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft (raw, json) Hash identifier: dTsVMvSEfCtOPq8NtI7UkwMg4p6Gs28bz9JBJlk0q4Y= Subject key identifier: D3:1C:88:47:B3:13:69:52:97:4C:4F:44:75:BE:95:77:04:54:60:A9 Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F Certificate issuer: /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Certificate serial: 1F552CCE79FC5C769A900FE2E3D782CC0CE7AD94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft Manifest number: 0520 Signing time: Sun 19 Oct 2025 05:10:58 +0000 Manifest this update: Sun 19 Oct 2025 05:05:58 +0000 Manifest next update: Wed 22 Oct 2025 06:59:58 +0000 Files and hashes: 1: 3130332e38372e3232382e302f32342d3234203d3e20313336303838.roa (hash: kQuHiDr0EacrTshG7dHgP6puMqC4eSM0VYASsjgtGzA=) 2: 323430303a643934303a3130303a3a2f34382d3438203d3e20313336303838.roa (hash: buNXmMusUG2kwKSmAQu3isavGdpbNW0SL5z8JYEY7qc=) 3: 323430303a643934303a3630303a3a2f34382d3438203d3e20313336303838.roa (hash: oPagBimqhudPYpPJNbFjZ2B6yoqYzPSrxyN2XBm/wsE=) 4: 323430303a643934303a626163613a3a2f34382d3438203d3e20313336303838.roa (hash: TTh2GTDjmWSaoJl188YHUmBX+BSZHYyGpQm/zpjZNWw=) 5: 323430303a643934303a636162653a3a2f34382d3438203d3e20313336303838.roa (hash: V3W/3hcFKl4/DOk4z/ipZIeDt+GJvtUyOIrpUDtwmvw=) 6: 323430303a643934303a3330303a3a2f34382d3438203d3e20313336303838.roa (hash: jnP7c+pGP7PrVIikM4daA4hESYwCEHPqKerxGkWW0Ys=) 7: 323430303a643934303a3730303a3a2f34382d3438203d3e20313336303838.roa (hash: jo1KBhyVAdW9OA6F09uw8oWD6mwExSlA3+C7KIHuN6Q=) 8: 323430303a643934303a3a2f33322d3332203d3e20313336303838.roa (hash: amR4nrg/9FRneM1hYFFEXvekiDFUlRRKM/5Rs+DhOGs=) 9: 323430303a643934303a633030303a3a2f34382d3438203d3e20313336303838.roa (hash: /9+wQDA/pPBkivDuenKeLQSITF6OhmVLuuy1cGgfjlw=) 10: 323430303a643934303a626162613a3a2f34382d3438203d3e20313336303838.roa (hash: z/2LdyQoJ/vUvRAoMVBjAtXimeSSxsGynq/LixqHwBo=) 11: 323430303a643934303a36303a3a2f34382d3438203d3e20313336303838.roa (hash: oy0y83CTwZgxshL7I//54BVUyro1yeEXDZHxRWdB8m4=) 12: 323430303a643934303a35303a3a2f34382d3438203d3e20313336303838.roa (hash: /8JBKRuOu3HmoBk4eXsCkAe6KkGAWuZP1vMK8BDuQfk=) 13: 323430303a643934303a31303a3a2f34382d3438203d3e20313336303838.roa (hash: cxt1Yq/IKja1ffWBBrz4GZsuAGipucxRXhH3AmwoEWs=) 14: 323430303a643934303a3430303a3a2f34382d3438203d3e20313336303838.roa (hash: 5O6lNVyD/C/5OKP6UYKpCdBH3i5ncEPG5K/VMMXfd54=) 15: 323430303a643934303a39303a3a2f34382d3438203d3e20313336303838.roa (hash: 7VOIfqkhYV7A27hR2M6TBmFMxRIbI/EYr5T6urcxa98=) 16: 323430303a643934303a32303a3a2f34382d3438203d3e20313336303838.roa (hash: u3+Gv4d4/BRtcFioQ3iXkvS00ZPXgNATtZCq1qGFDDg=) 17: 3130332e38372e3233302e302f32342d3234203d3e20313336303838.roa (hash: qOHmsXxOnT/77ezyNoXktCRxuQDt7aEAeLXvslUNW+I=) 18: 323430303a643934303a34303a3a2f34382d3438203d3e20313336303838.roa (hash: OPgctcDdxT8SYsP0oUqZFX65ifax+hBFU+ZED4ybb5M=) 19: 323430303a643934303a3830303a3a2f34382d3438203d3e20313336303838.roa (hash: 2Mq27Z4GY+v9moCxeCYZL1fUogW3fFAswHd6GqXUVIg=) 20: 323430303a643934303a33303a3a2f34382d3438203d3e20313336303838.roa (hash: lBBQyFRPhNcF77tjvxke5+xF3Cs16rylkx1CIl6we88=) 21: 323430303a643934303a646561643a3a2f34382d3438203d3e20313336303838.roa (hash: /5tB0DAJa4sen7YCfad9KHCwDszSFMjEl56O7fFNIMo=) 22: 323430303a643934303a666163653a3a2f34382d3438203d3e20313336303838.roa (hash: yS1IVsiEnwbOnSqpJEXN10El0v2hiAqhJMpyuNOQA9k=) 23: 3130332e38372e3232392e302f32342d3234203d3e20313336303838.roa (hash: pJsTkpfzo7xE3BJVA5XsGXVaKZmkODwYxkUzqV/Mjn8=) 24: 323430303a643934303a626563613a3a2f34382d3438203d3e20313336303838.roa (hash: sx7Ai/XKUoWhDvvqEtGwymbGQ4Y2JINv0ygpz/5KsWo=) 25: 323430303a643934303a37303a3a2f34382d3438203d3e20313336303838.roa (hash: YmPVLnSWobx5YhLdzaTVU3ly0HHNz0UejiZ/btj52uk=) 26: 323430303a643934303a3930303a3a2f34382d3438203d3e20313336303838.roa (hash: Qw0+ysqj1KVf5j9DqaI7K+MxmgUrT3GSkvMgHW/v67k=) 27: 323430303a643934303a626162653a3a2f34382d3438203d3e20313336303838.roa (hash: t8xpmwGTwBIEy+kGSQyDv0b1KxVpoPSxkwa6NrrmDaA=) 28: 323430303a643934303a646564653a3a2f34382d3438203d3e20313336303838.roa (hash: pGI4/Kwvdhil44H0XWJAjsDRNFz8v7WG9O+CZDRu6VE=) 29: 323430303a643934303a3230303a3a2f34382d3438203d3e20313336303838.roa (hash: 38Z8RhmOGwuZZ8bo8ApZ8Vt6uHkxh6jkggk/GIF6j2w=) 30: 323430303a643934303a646164613a3a2f34382d3438203d3e20313336303838.roa (hash: pZ5vmt3P3V8uH/pHzOPkvbypUprjrLuGJdhlSVtPm9g=) 31: D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl (hash: cCKkDJg1v2rmC6XFA4ib3kwOV4yo1BUbOX6TsAZ9p9Q=) 32: 3130332e38372e3233312e302f32342d3234203d3e20313336303838.roa (hash: OIESnpY4oHzRxvi4zbTiBv7LuhxOpAJnAq903LiQaxo=) 33: 323430303a643934303a38303a3a2f34382d3438203d3e20313336303838.roa (hash: MdLxnaQRIgohnJ5EF+rgtm0ISUaZP3ORSkVcAUCFKs8=) 34: 323430303a643934303a3530303a3a2f34382d3438203d3e20313336303838.roa (hash: Tfax70osRa+squxlZvOIKvXWhimgGcgYtiz1uMyhE3E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 06:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:55:2c:ce:79:fc:5c:76:9a:90:0f:e2:e3:d7:82:cc:0c:e7:ad:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Validity Not Before: Oct 19 05:05:58 2025 GMT Not After : Oct 22 06:59:58 2025 GMT Subject: CN=D31C8847B3136952974C4F4475BE9577045460A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a4:1b:70:e7:62:92:ac:45:28:83:81:8d:4f: a2:ce:da:64:39:be:45:30:be:95:0a:53:25:f6:ad: de:d0:99:2f:95:44:c1:b7:00:cf:46:04:2b:7c:25: be:6d:d3:71:23:de:8d:54:18:18:75:a0:2d:4e:c9: 89:e7:e7:d4:5f:73:34:7f:2e:58:c7:6d:32:60:79: a8:71:10:4f:c9:59:42:24:73:92:26:fa:fb:d3:7a: ff:36:5d:10:a7:6d:8f:fa:ea:51:2c:92:22:bb:22: 57:96:26:b7:9a:d0:1f:7a:a8:b4:f2:db:ea:df:f6: fe:ea:da:8c:34:b6:79:b3:6c:63:24:5b:1c:89:be: 99:2e:9b:b3:be:72:22:5a:a1:6a:bd:63:23:09:3c: f0:e7:02:38:da:df:59:17:3c:8e:5b:5d:e6:51:35: ad:b5:40:30:e9:7b:ec:66:68:a6:45:fe:f3:6a:77: 55:6c:7e:e7:6d:84:78:66:9d:24:95:ee:ce:fe:3f: a4:a0:26:29:82:e9:e9:84:e0:5b:4d:8c:e1:69:41: cc:f0:a4:86:75:e4:5c:97:45:62:0f:8b:0b:24:13: 5f:c8:15:ae:23:7e:6e:5c:e7:a7:89:6f:93:06:fa: 43:7e:97:a7:db:bf:85:72:f7:5d:12:48:26:76:ca: 31:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1C:88:47:B3:13:69:52:97:4C:4F:44:75:BE:95:77:04:54:60:A9 X509v3 Authority Key Identifier: keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:fc:52:3e:28:52:c2:b7:b8:60:25:cb:37:89:62:d5:9c:6f: 94:1a:75:e8:93:39:22:d5:ff:cd:7f:b9:6a:94:07:b5:9b:d6: 95:d6:ec:63:c7:a7:60:84:b0:ee:cb:ce:16:c6:b2:7e:e5:e0: 55:a4:2b:a5:6e:49:f2:bf:de:c8:54:0e:3c:90:e6:3c:7a:e7: 0d:ce:93:47:e7:69:9e:45:b1:a6:c1:7f:37:c2:c0:60:ff:87: 72:5e:19:42:34:70:b6:c0:23:88:f0:44:fa:5c:a3:da:70:be: c3:5c:07:78:83:04:5a:e3:00:3f:f9:de:84:49:19:92:6d:6c: c2:73:f2:79:80:65:97:3b:9d:81:3e:c0:d9:cd:e2:c9:e4:7e: 98:87:19:35:0b:bc:94:6a:4e:00:45:ba:bb:a3:50:64:51:86: 69:74:1b:38:d5:de:22:6b:32:46:42:bc:02:f5:a7:0c:99:47: 53:21:d5:64:da:27:2d:94:06:82:c6:df:6a:12:53:c9:e6:aa: 13:b3:28:1c:cb:8b:33:e2:5a:d1:5e:6e:0e:fd:eb:ea:29:6c: a7:2a:c2:57:dc:30:c4:1b:02:ec:e8:cd:83:19:16:eb:c1:46: 9f:41:5b:ab:63:a3:13:c6:36:18:72:71:f7:22:50:10:05:b9: f6:c0:10:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH1Usznn8XHaakA/i49eCzAznrZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhE MEJFOTIzRjAeFw0yNTEwMTkwNTA1NThaFw0yNTEwMjIwNjU5NThaMDMxMTAvBgNV BAMTKEQzMUM4ODQ3QjMxMzY5NTI5NzRDNEY0NDc1QkU5NTc3MDQ1NDYwQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZpBtw52KSrEUog4GNT6LO2mQ5 vkUwvpUKUyX2rd7QmS+VRMG3AM9GBCt8Jb5t03Ej3o1UGBh1oC1OyYnn59RfczR/ LljHbTJgeahxEE/JWUIkc5Im+vvTev82XRCnbY/66lEskiK7IleWJrea0B96qLTy 2+rf9v7q2ow0tnmzbGMkWxyJvpkum7O+ciJaoWq9YyMJPPDnAjja31kXPI5bXeZR Na21QDDpe+xmaKZF/vNqd1VsfudthHhmnSSV7s7+P6SgJimC6emE4FtNjOFpQczw pIZ15FyXRWIPiwskE1/IFa4jfm5c56eJb5MG+kN+l6fbv4Vy910SSCZ2yjHHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0xyIR7MTaVKXTE9Edb6VdwRUYKkwHwYDVR0j BBgwFoAU0/th10akR2fUUY1un9H72NC+kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2Y0ZWMxYy05NTM1LTRjYmYtOWM3YS1mZDMyYzgzMGVkYmEvMC9EM0ZCNjFENzQ2 QTQ0NzY3RDQ1MThENkU5RkQxRkJEOEQwQkU5MjNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhEMEJF OTIzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNmNGVjMWMtOTUzNS00Y2JmLTlj N2EtZmQzMmM4MzBlZGJhLzAvRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZC RDhEMEJFOTIzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAP8Uj4oUsK3uGAlyzeJYtWcb5QadeiTOSLV /81/uWqUB7Wb1pXW7GPHp2CEsO7LzhbGsn7l4FWkK6VuSfK/3shUDjyQ5jx65w3O k0fnaZ5FsabBfzfCwGD/h3JeGUI0cLbAI4jwRPpco9pwvsNcB3iDBFrjAD/53oRJ GZJtbMJz8nmAZZc7nYE+wNnN4snkfpiHGTULvJRqTgBFurujUGRRhml0GzjV3iJr MkZCvAL1pwyZR1Mh1WTaJy2UBoLG32oSU8nmqhOzKBzLizPiWtFebg796+opbKcq wlfcMMQbAuzozYMZFuvBRp9BW6tjoxPGNhhycfciUBAFufbAEDE= -----END CERTIFICATE-----Generated at Mon Oct 20 12:30:23 2025 by rpki-client