$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft File: 0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft (raw, json) Hash identifier: a7XhD70G7qN1OizqTpftyFrqgD3QyHYipm1JXbYSVW8= Subject key identifier: CA:7F:88:D1:9B:A8:51:C9:33:A3:73:AB:90:2A:94:07:88:60:08:0C Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2 Certificate issuer: /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2 Certificate serial: 0D10E34975A5E1B671E87360623648C24D6BE843 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft Manifest number: 054B Signing time: Sun 19 Oct 2025 04:30:52 +0000 Manifest this update: Sun 19 Oct 2025 04:25:52 +0000 Manifest next update: Wed 22 Oct 2025 13:15:52 +0000 Files and hashes: 1: 3131302e37362e3135312e302f32342d3234203d3e20313333383330.roa (hash: 8rPJ4nXTJ70Up3y89jTvrnK5p5EQ4mjAGK2p65JUucA=) 2: 3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa (hash: QhseuehbmAg1CgvzVHn3OnXvEwbOGfNyxdByQxi2PSM=) 3: 3131302e37362e3134362e302f32332d3233203d3e20313430343831.roa (hash: nj7nwkg4jEji5skSyGq127SyeIEToj2AxAchD/5z7y0=) 4: 323430363a393330303a3a2f33322d3438203d3e203338353036.roa (hash: wSzeEeUlQ9dVeDBBx0XlYcJDAiPM7sQsbdx5J/YQ+rE=) 5: 3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa (hash: l79vjEoCDRYp7Imq4o09nFUUOawBLUlHdvJpjB5kQuE=) 6: 3131372e3130332e3136382e302f32312d3234203d3e203338353036.roa (hash: zHFuXcJsHRS8oU5g73vyR9ezkdJAc6jv+r1NZhBGTU4=) 7: 0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl (hash: RmpFBd7H2is8pxnEkQE4knMcjE3i+H+Qx1G5sk5fcKQ=) 8: 3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (hash: 6L28DKU2IWYtA3lRV3VTpPyJ/UkW+g97L32zaXfZ124=) 9: 3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa (hash: /Pgqw6Rs+ajT828waAS0R/dEt8fu2pWuzGj9i8zT3Rk=) 10: 3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa (hash: ymwaUvhXT8JXSJrNzjbP7gt7yXJ53LxTJX8Voq/f/74=) 11: 3131302e37362e3134382e302f32332d3234203d3e20313430343831.roa (hash: Mo+ywRg/G9o+M5ufzONjfakS+qPVaicNW0HrvAATwhk=) 12: 3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa (hash: eUGLFIbBQXUlbrF2iA2Xszdo9Zh7AGLGsZzJrRkvT6k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:15:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:10:e3:49:75:a5:e1:b6:71:e8:73:60:62:36:48:c2:4d:6b:e8:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2 Validity Not Before: Oct 19 04:25:52 2025 GMT Not After : Oct 22 13:15:52 2025 GMT Subject: CN=CA7F88D19BA851C933A373AB902A94078860080C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:77:98:83:59:02:be:68:ee:ef:5e:8f:7b:29: d1:5f:f1:a0:d2:ff:f8:c7:df:e0:b6:0d:f8:70:0a: bb:ec:16:6b:31:9e:f1:91:12:6c:e4:78:5c:e3:36: a1:dc:43:fb:67:39:67:b7:44:3a:fe:c3:a1:be:86: c1:cf:ac:33:9b:25:83:d2:a0:ca:34:9f:45:8f:2b: a9:1b:58:25:ba:57:4d:dd:db:aa:64:9f:54:62:0c: 2b:b6:ba:56:be:c0:e2:d3:ed:78:da:b5:5b:27:3d: d1:59:ea:d6:46:59:3d:35:df:b8:23:12:9e:66:d8: f4:be:cf:aa:fb:dc:34:ac:d1:ce:5c:b8:e3:f8:4a: b4:5a:32:78:d1:86:53:a4:ab:8c:16:f1:cf:d1:7b: f3:d1:46:f1:94:79:2d:2a:2b:61:5f:c8:46:c6:08: d6:35:30:40:75:b4:69:2f:a8:0f:42:be:10:2b:6c: 4f:3f:39:ae:31:10:af:52:a5:e9:21:ce:35:60:0d: 50:34:c6:5b:c2:1f:63:97:9f:16:a3:29:7f:e3:3d: 67:4a:6f:d8:96:b6:0d:85:c9:c9:13:e6:cf:52:55: 0f:44:7e:24:1f:db:96:39:00:3e:fa:40:39:a4:df: 21:73:cf:97:9d:54:fd:93:f1:35:60:e3:46:2a:43: 73:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7F:88:D1:9B:A8:51:C9:33:A3:73:AB:90:2A:94:07:88:60:08:0C X509v3 Authority Key Identifier: keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:27:33:05:06:40:aa:01:ea:75:70:c6:96:53:20:fc:59:2f: 77:8f:5f:68:94:1a:cc:e8:81:e8:b1:4f:db:c3:9c:8d:a7:62: 58:9d:5d:33:fa:49:34:14:73:a8:bb:dc:ba:f6:55:d8:d2:25: fc:79:19:23:9c:4a:a2:25:91:21:f3:fe:42:fc:9f:dd:da:a1: da:d1:7c:b7:cd:9f:bd:8c:5b:07:41:b7:aa:1b:69:11:da:29: 71:1b:bc:c0:28:a6:15:a5:15:28:3c:87:0f:59:4d:2f:c0:2e: a7:34:86:86:f2:1f:1f:93:cf:9c:28:57:5c:36:11:8a:41:92: f8:f9:8c:53:45:b0:a2:09:e0:b9:c7:8a:64:59:f2:c7:8b:2a: a2:8d:8c:fd:6e:d9:be:ca:9f:e3:66:06:12:37:05:d3:c6:c3: c8:66:95:3f:1e:a1:34:45:4d:df:37:49:2e:bf:24:43:44:4a: df:2a:ef:d9:95:0a:87:cd:ad:16:c0:c3:a8:13:62:fd:cb:61: 5f:53:28:df:05:cc:74:c0:c9:be:ed:e5:7e:8f:d9:3f:80:58: 4b:ed:20:89:54:98:ac:b8:f5:e8:bf:a5:78:b5:68:a9:00:ef: 36:7c:d3:65:ec:23:0e:66:d4:84:5b:5d:4b:a2:f5:2e:a6:3d: 58:c2:cf:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDRDjSXWl4bZx6HNgYjZIwk1r6EMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1 MUJDMTdBMjAeFw0yNTEwMTkwNDI1NTJaFw0yNTEwMjIxMzE1NTJaMDMxMTAvBgNV BAMTKENBN0Y4OEQxOUJBODUxQzkzM0EzNzNBQjkwMkE5NDA3ODg2MDA4MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqd5iDWQK+aO7vXo97KdFf8aDS //jH3+C2DfhwCrvsFmsxnvGREmzkeFzjNqHcQ/tnOWe3RDr+w6G+hsHPrDObJYPS oMo0n0WPK6kbWCW6V03d26pkn1RiDCu2ula+wOLT7XjatVsnPdFZ6tZGWT0137gj Ep5m2PS+z6r73DSs0c5cuOP4SrRaMnjRhlOkq4wW8c/Re/PRRvGUeS0qK2FfyEbG CNY1MEB1tGkvqA9CvhArbE8/Oa4xEK9SpekhzjVgDVA0xlvCH2OXnxajKX/jPWdK b9iWtg2FyckT5s9SVQ9EfiQf25Y5AD76QDmk3yFzz5edVP2T8TVg40YqQ3OzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyn+I0ZuoUckzo3OrkCqUB4hgCAwwHwYDVR0j BBgwFoAUD9BE1hNIyI3c/8Tzwzv7xFG8F6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjU0OGJhZC03ZmVkLTQxZmQtYjQyZS03ODAzNzJjNDUyNTUvMC8wRkQwNDRENjEz NDhDODhERENGRkM0RjNDMzNCRkJDNDUxQkMxN0EyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1MUJD MTdBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGI1NDhiYWQtN2ZlZC00MWZkLWI0 MmUtNzgwMzcyYzQ1MjU1LzAvMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZC QzQ1MUJDMTdBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAnMwUGQKoB6nVwxpZTIPxZL3ePX2iUGszo geixT9vDnI2nYlidXTP6STQUc6i73Lr2VdjSJfx5GSOcSqIlkSHz/kL8n93aodrR fLfNn72MWwdBt6obaRHaKXEbvMAophWlFSg8hw9ZTS/ALqc0hobyHx+Tz5woV1w2 EYpBkvj5jFNFsKIJ4LnHimRZ8seLKqKNjP1u2b7Kn+NmBhI3BdPGw8hmlT8eoTRF Td83SS6/JENESt8q79mVCofNrRbAw6gTYv3LYV9TKN8FzHTAyb7t5X6P2T+AWEvt IIlUmKy49ei/pXi1aKkA7zZ802XsIw5m1IRbXUui9S6mPVjCz0I= -----END CERTIFICATE-----Generated at Mon Oct 20 12:34:28 2025 by rpki-client