$ rpki-client -vvf repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft File: 284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft (raw, json) Hash identifier: uFMJtGLtbiVH6g2CdVK6tu1T6xUiBwfs0O8/V0miQ/8= Subject key identifier: CF:97:C2:6A:BC:4A:DF:23:FC:A0:AB:E5:73:03:8F:80:1A:36:5B:82 Authority key identifier: 28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA Certificate issuer: /CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA Certificate serial: 5E58E39E533AC55006D8ADF42EF882AFC5B3EFCB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft Manifest number: 0260 Signing time: Mon 20 Oct 2025 04:01:50 +0000 Manifest this update: Mon 20 Oct 2025 03:56:49 +0000 Manifest next update: Thu 23 Oct 2025 10:47:49 +0000 Files and hashes: 1: 323430343a356434303a353a3a2f34382d3438203d3e20313338353938.roa (hash: Lbx56bi7U9t4V4gIX7m4fulkNS6DqtlvmzQW0U2Yss4=) 2: 323430343a356434303a373a3a2f34382d3438203d3e20313338353938.roa (hash: 2JoT7M7m37m0xJyrGZ0XzlMJ4mVcLTVKVu699zp/2U0=) 3: 323430343a356434303a363a3a2f34382d3438203d3e20313338353938.roa (hash: BMaPZKd4S9fQAuwU5kc5O93/vGGp5sulKN1fvWKFFuE=) 4: 323430343a356434303a3a2f34382d3438203d3e20313338353938.roa (hash: XQn6RBqlg6RuaEoPTX1Jp1jRKOhAgtTrK3uAW566Uwk=) 5: 323430343a356434303a393a3a2f34382d3438203d3e20313338353938.roa (hash: s7BQD7yLxj5kSwHPL3ObyjKROEx8KemxAu+k28dACKE=) 6: 323430343a356434303a343a3a2f34382d3438203d3e20313338353938.roa (hash: /selJRjYRY2RXdacberK6RXbNBqDD4h8KJuD+6tSmiM=) 7: 284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl (hash: af9m2xAyOz6NDEfZp2Bm5UwmZaVwTqEQqi2uLtWc6BE=) 8: 3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa (hash: DY64pprFnHFOaGNLsgUuWKWN2nPg3FOgN/Io+biTvOM=) 9: 3130332e3133342e35312e302f32342d3234203d3e20313338353938.roa (hash: rzmqH60uJRn3sGzkNJLLdHpbEepRCB0kAM+v2dcsYmc=) 10: 323430343a356434303a313a3a2f34382d3438203d3e20313338353938.roa (hash: 7Ra3Fe83WVldtrwmBn6CcKZZT+lK+aCd/JbT64/wrRw=) 11: 323430343a356434303a383a3a2f34382d3438203d3e20313338353938.roa (hash: LCHOag0uJb1cjVFsg2v6UKKoMu1dXnSpGeS35y1AH+w=) 12: 323430343a356434303a323a3a2f34382d3438203d3e20313338353938.roa (hash: vUuh6v5PPRzVvuwUZOwe6R6chuRFULbcu3aLCW2qA2Y=) 13: 3130332e3133342e34382e302f32342d3234203d3e20313338353938.roa (hash: vdRaqu+ifEWqE1r8nytgBjN36IR5VUDio5Qen7pybes=) 14: 3130332e3133342e35302e302f32342d3234203d3e20313332383239.roa (hash: 7HCsscFWHwPhWZMbOcuZYtCZgWu1kaGruUGGQu1z3Bg=) 15: 323430343a356434303a333a3a2f34382d3438203d3e20313338353938.roa (hash: xTc48z78x2hTWAz50fsj2u48rca6GyIeaspfgC6Ied0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:58:e3:9e:53:3a:c5:50:06:d8:ad:f4:2e:f8:82:af:c5:b3:ef:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA Validity Not Before: Oct 20 03:56:49 2025 GMT Not After : Oct 23 10:47:49 2025 GMT Subject: CN=CF97C26ABC4ADF23FCA0ABE573038F801A365B82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:70:82:2e:ed:ab:5d:61:8c:ed:1e:64:c9:7c: 69:5f:10:c9:57:0b:f7:1d:4b:ee:d7:da:79:ba:ea: cc:fc:6f:64:a1:9a:9e:84:5d:ec:b2:26:49:ed:5b: b0:db:4e:33:9b:ea:3e:44:0f:3f:97:45:eb:80:7d: 0c:68:9f:61:8a:e5:de:6e:03:3c:e0:78:0d:50:31: 61:53:c5:16:9a:97:9d:de:cd:2a:7b:df:d1:28:9b: f7:98:84:aa:4a:cc:fe:28:0d:cc:6a:99:71:94:01: c2:09:f0:fc:dc:73:8d:13:1d:ba:e9:3d:69:09:59: eb:d0:79:db:2c:56:e9:9e:4f:cd:0c:cf:c4:ff:71: 22:09:a0:ed:7b:63:0c:06:7d:e4:70:37:42:3c:63: 57:0e:76:a9:d7:ab:eb:ff:93:13:53:2b:b4:6e:30: 0f:96:47:75:55:e2:59:46:b8:75:3a:73:aa:ff:2c: 5c:a5:c4:16:1a:d3:55:b8:0a:44:36:cc:0a:ec:30: 9a:26:85:3a:8e:4c:c1:07:e8:68:b0:a3:a2:ac:cb: e5:be:42:64:4b:21:87:a6:13:c0:75:15:ff:57:99: 9c:18:c9:bf:65:d6:79:f4:e1:86:55:9a:f0:75:a1: 56:2d:22:0c:b0:b6:82:7b:09:ca:22:e3:61:17:1c: b1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:97:C2:6A:BC:4A:DF:23:FC:A0:AB:E5:73:03:8F:80:1A:36:5B:82 X509v3 Authority Key Identifier: keyid:28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:41:a6:a6:b0:32:40:1b:a9:dd:2c:c0:a2:16:53:5a:97:24: 34:03:24:b6:ca:5b:c6:32:ea:0b:86:b7:43:71:63:64:94:d4: 92:8a:35:95:f3:b8:0b:ba:cd:c4:a1:ad:1a:92:49:84:04:de: 33:d7:78:ca:da:76:b8:4e:3e:53:97:c8:9e:97:cb:6d:33:e4: 84:cc:7a:42:ec:93:bf:12:85:05:c6:9b:98:18:b2:82:a8:de: e1:0f:fb:e7:f4:33:f5:25:9e:17:9f:f6:02:e7:cf:33:57:03: 3f:68:6e:b2:d3:2f:dd:43:db:07:c2:f7:fd:82:fc:a0:8e:7c: 5d:57:5b:72:6c:d9:2f:30:25:d5:85:9c:84:31:2c:de:d0:c1: 44:85:28:fd:0a:1d:ab:86:50:7c:9f:28:76:49:b2:d7:31:5b: 89:02:26:78:36:98:36:ab:36:6e:0a:f9:4f:88:a2:5d:6e:48: 42:61:ca:9a:3b:f3:ba:15:a0:8a:4f:e5:49:45:83:00:ef:e2: 96:a2:3c:df:c9:d4:9e:84:c3:4e:86:5f:24:08:f6:73:1f:45: 3b:83:48:91:9a:7b:61:26:1e:16:33:20:07:7b:2b:5b:a0:90: f7:57:d8:70:c6:e0:37:88:10:ac:98:98:a8:b3:20:b6:74:9d: 5c:16:1c:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXljjnlM6xVAG2K30LviCr8Wz78swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVGQTY0 NDRERjJFQTAeFw0yNTEwMjAwMzU2NDlaFw0yNTEwMjMxMDQ3NDlaMDMxMTAvBgNV BAMTKENGOTdDMjZBQkM0QURGMjNGQ0EwQUJFNTczMDM4RjgwMUEzNjVCODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVcIIu7atdYYztHmTJfGlfEMlX C/cdS+7X2nm66sz8b2Shmp6EXeyyJkntW7DbTjOb6j5EDz+XReuAfQxon2GK5d5u AzzgeA1QMWFTxRaal53ezSp739Eom/eYhKpKzP4oDcxqmXGUAcIJ8Pzcc40THbrp PWkJWevQedssVumeT80Mz8T/cSIJoO17YwwGfeRwN0I8Y1cOdqnXq+v/kxNTK7Ru MA+WR3VV4llGuHU6c6r/LFylxBYa01W4CkQ2zArsMJomhTqOTMEH6Giwo6Ksy+W+ QmRLIYemE8B1Ff9XmZwYyb9l1nn04YZVmvB1oVYtIgywtoJ7Ccoi42EXHLEpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz5fCarxK3yP8oKvlcwOPgBo2W4IwHwYDVR0j BBgwFoAUKEuK2tPgmOm/vqxqkSnvpkRN8uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Yzg1YzZiOS0zNGY5LTRhODUtOWNlYS1jMTZlOThhOGI1ZTAvMC8yODRCOEFEQUQz RTA5OEU5QkZCRUFDNkE5MTI5RUZBNjQ0NERGMkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVGQTY0NDRE RjJFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM4NWM2YjktMzRmOS00YTg1LTlj ZWEtYzE2ZTk4YThiNWUwLzAvMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVG QTY0NDRERjJFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1BpqawMkAbqd0swKIWU1qXJDQDJLbKW8Yy 6guGt0NxY2SU1JKKNZXzuAu6zcShrRqSSYQE3jPXeMradrhOPlOXyJ6Xy20z5ITM ekLsk78ShQXGm5gYsoKo3uEP++f0M/Ulnhef9gLnzzNXAz9obrLTL91D2wfC9/2C /KCOfF1XW3Js2S8wJdWFnIQxLN7QwUSFKP0KHauGUHyfKHZJstcxW4kCJng2mDar Nm4K+U+Iol1uSEJhypo787oVoIpP5UlFgwDv4paiPN/J1J6Ew06GXyQI9nMfRTuD SJGae2EmHhYzIAd7K1ugkPdX2HDG4DeIEKyYmKizILZ0nVwWHAw= -----END CERTIFICATE-----Generated at Mon Oct 20 23:07:45 2025 by rpki-client