$ rpki-client -vvf repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft File: DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft (raw, json) Hash identifier: lExlowEnVjKyfDC7b7+Wpe9qoGnEeie4D1IT8b9sevg= Subject key identifier: D9:D6:0D:D1:8A:DE:3B:F6:BF:32:FB:00:51:1F:74:99:36:03:0B:5F Authority key identifier: DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A Certificate issuer: /CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Certificate serial: 16F2B1058D2B0D0592F154510732712F910EE414 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft Manifest number: 035C Signing time: Sun 19 Oct 2025 03:51:15 +0000 Manifest this update: Sun 19 Oct 2025 03:46:15 +0000 Manifest next update: Wed 22 Oct 2025 11:48:15 +0000 Files and hashes: 1: 323430343a326363303a32383a3a2f34362d3436203d3e20313331373336.roa (hash: dl0z7TuYwDUuSU57FfKOeKvhobp1vKvNdUgb56XLczs=) 2: DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl (hash: 8jLFgU1/7FqAOvE6zJilBS33N0H85HktFBR6RkzaYHY=) 3: 3130332e3133322e31322e302f32342d3234203d3e20313331373336.roa (hash: yYY5Xasn+MhbZ/7PqdrXZuQAXqu+qcVQtvVv3ePHTro=) 4: 323430343a326363303a32303a3a2f34362d3436203d3e20313331373336.roa (hash: AL79go4QRK47TgrAmtQGB5fYfJRAvCqPrZVQAqwDWT4=) 5: 323430343a326363303a32343a3a2f34362d3436203d3e20313331373336.roa (hash: pNNOikD6VzRUPv7yZG6Cg3KiGof++IQqkIf9l+Tqx7M=) 6: 3130332e3133322e31352e302f32342d3234203d3e20313331373336.roa (hash: YsQ/6eOY7UY889dueTFqI5fZ9jzbm6RP7AZHDvdYNjo=) 7: 323430343a326363303a32633a3a2f34362d3436203d3e20313331373336.roa (hash: t4c93T36jMt5VZmXd/bp2z8IhiNgox8OFSWiaBbxAhQ=) 8: 323430343a326363303a3a2f34332d3433203d3e20313331373336.roa (hash: FOu7z+lFtPq+cQCxDqirVfbm+xQEfu1NcMOm+058Mco=) 9: 3130332e3133322e31332e302f32342d3234203d3e20313331373336.roa (hash: 2cxxZUWkJsO3oT8bqHDC+csSkm6PFb2gUAHDSh62gR8=) 10: 3130332e3133322e31342e302f32342d3234203d3e20313331373336.roa (hash: XPqP92iiEQWlwXCwRpR2WN8Lt9Zye6dCVSvcRgh/30k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 11:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:f2:b1:05:8d:2b:0d:05:92:f1:54:51:07:32:71:2f:91:0e:e4:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Validity Not Before: Oct 19 03:46:15 2025 GMT Not After : Oct 22 11:48:15 2025 GMT Subject: CN=D9D60DD18ADE3BF6BF32FB00511F749936030B5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9f:93:b6:c5:29:06:ce:e6:d1:8b:1a:67:30: 02:81:ad:3a:e5:1b:b8:fb:c3:0f:e5:12:be:00:e3: 2d:f3:6d:97:53:3c:2f:92:79:a8:76:ed:29:26:53: eb:f0:07:26:4f:6f:35:bc:61:c9:98:bf:a0:53:61: 42:a6:70:f5:b7:4d:64:36:53:fb:ad:38:c1:a1:be: 00:28:32:ee:f6:cc:ef:27:17:97:d9:95:b1:11:ad: 4c:d6:75:5c:0e:81:12:fb:55:4e:0c:0d:33:8f:6d: e7:79:19:e8:7a:e5:d2:d6:3f:c2:8f:f5:d5:3c:6f: b4:a5:07:b9:c3:8c:86:b4:fc:fc:96:b5:20:ee:80: 52:c7:9e:65:49:1b:42:dc:b2:59:ea:a7:1e:e5:66: e1:a2:18:fa:c8:29:55:61:d7:3b:07:89:f5:18:f8: f6:13:fe:48:09:0d:5c:c4:cd:64:79:43:e6:ba:55: 82:fb:8b:18:9d:98:79:68:d5:d3:7e:fa:03:b7:a9: 87:ab:b7:06:22:80:a5:a7:9b:82:ae:21:63:24:b0: a0:7a:7c:06:bb:31:d4:c7:3e:b3:57:a2:5b:4d:71: 4a:20:3f:b8:b7:44:b7:5e:e3:ae:08:ec:5f:ef:13: dc:50:6c:27:02:b1:d5:08:bc:35:60:2e:98:a1:23: 3b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D6:0D:D1:8A:DE:3B:F6:BF:32:FB:00:51:1F:74:99:36:03:0B:5F X509v3 Authority Key Identifier: keyid:DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:7f:61:ab:42:5b:7c:62:55:c9:ca:ac:8d:0d:c6:4d:e4:d7: 52:fd:d7:b3:f0:66:87:7a:40:de:78:3f:75:5c:63:f5:31:89: be:69:40:f1:4a:e8:36:df:ff:05:7e:91:2a:17:f6:4a:13:1a: bc:b0:40:23:1b:46:03:ea:a3:c7:b2:b8:be:aa:de:30:43:4e: 3d:e9:f5:a9:21:39:f2:25:2a:7c:39:1c:45:b1:67:52:3c:e7: 07:72:7d:10:4b:57:b1:6b:c7:22:42:02:a5:33:29:64:2d:ee: df:46:f2:28:c3:c1:b3:48:ca:97:78:31:50:29:96:5e:8b:64: 3b:b3:3b:37:a9:cf:ad:54:df:aa:3a:bf:ff:65:7a:20:90:47: 0c:73:7e:fc:e9:d9:cc:aa:fe:15:32:40:9b:69:38:1e:e1:51: 3d:74:48:7e:75:af:95:b4:1c:b0:56:38:d9:58:5b:10:f9:1d: 6b:fa:90:2d:56:73:12:e5:7b:c1:9c:b7:b5:47:64:ec:26:a1: 79:07:f4:45:1d:ed:14:8a:93:ca:00:5d:9a:90:94:69:50:7f: 70:aa:78:57:2a:5a:29:60:a0:7a:96:66:37:57:ec:a5:7f:5a: aa:dc:27:67:63:8f:09:a7:fc:43:90:88:07:9a:2e:0b:83:ce: a2:87:ad:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFvKxBY0rDQWS8VRRBzJxL5EO5BQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBE OUMzNEU0QTAeFw0yNTEwMTkwMzQ2MTVaFw0yNTEwMjIxMTQ4MTVaMDMxMTAvBgNV BAMTKEQ5RDYwREQxOEFERTNCRjZCRjMyRkIwMDUxMUY3NDk5MzYwMzBCNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRn5O2xSkGzubRixpnMAKBrTrl G7j7ww/lEr4A4y3zbZdTPC+Seah27SkmU+vwByZPbzW8YcmYv6BTYUKmcPW3TWQ2 U/utOMGhvgAoMu72zO8nF5fZlbERrUzWdVwOgRL7VU4MDTOPbed5Geh65dLWP8KP 9dU8b7SlB7nDjIa0/PyWtSDugFLHnmVJG0Lcslnqpx7lZuGiGPrIKVVh1zsHifUY +PYT/kgJDVzEzWR5Q+a6VYL7ixidmHlo1dN++gO3qYertwYigKWnm4KuIWMksKB6 fAa7MdTHPrNXoltNcUogP7i3RLde464I7F/vE9xQbCcCsdUIvDVgLpihIzvVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2dYN0YreO/a/MvsAUR90mTYDC18wHwYDVR0j BBgwFoAU347ymUy1QgnywqOae859oNnDTkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjVjZGEzNi02OTNhLTRjMWEtYmE5ZS1lMGUxNzgxMTIxNDAvMC9ERjhFRjI5OTRD QjU0MjA5RjJDMkEzOUE3QkNFN0RBMEQ5QzM0RTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBEOUMz NEU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI1Y2RhMzYtNjkzYS00YzFhLWJh OWUtZTBlMTc4MTEyMTQwLzAvREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdE QTBEOUMzNEU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALN/YatCW3xiVcnKrI0Nxk3k11L917PwZod6 QN54P3VcY/Uxib5pQPFK6Dbf/wV+kSoX9koTGrywQCMbRgPqo8eyuL6q3jBDTj3p 9akhOfIlKnw5HEWxZ1I85wdyfRBLV7FrxyJCAqUzKWQt7t9G8ijDwbNIypd4MVAp ll6LZDuzOzepz61U36o6v/9leiCQRwxzfvzp2cyq/hUyQJtpOB7hUT10SH51r5W0 HLBWONlYWxD5HWv6kC1WcxLle8Gct7VHZOwmoXkH9EUd7RSKk8oAXZqQlGlQf3Cq eFcqWilgoHqWZjdX7KV/WqrcJ2djjwmn/EOQiAeaLguDzqKHre0= -----END CERTIFICATE-----Generated at Mon Oct 20 18:50:58 2025 by rpki-client