$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft File: 981E5677AC602950ABE1A442C2779E7CB0C108A9.mft (raw, json) Hash identifier: Uc3TfVVStfCFP8DLEaia4HIHTIYpdkIDq3ZcqO42w8w= Subject key identifier: 94:87:F3:0C:F3:14:19:07:DA:46:D9:0D:01:44:10:43:C7:96:10:68 Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Certificate serial: 203A0445154142CDD0A0688EED22CB4F31B35E60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft Manifest number: 0582 Signing time: Sun 19 Oct 2025 15:31:19 +0000 Manifest this update: Sun 19 Oct 2025 15:26:19 +0000 Manifest next update: Wed 22 Oct 2025 19:57:19 +0000 Files and hashes: 1: 323430323a616230303a63663a3a2f34382d3438203d3e203234323036.roa (hash: 1MMaA/JALdwU46Gmn5cadR8bFFMn6pjjD2wa0Pe9Aag=) 2: 323430323a616230303a3a2f34382d3438203d3e203234323036.roa (hash: DzgPlEX76YPqKshtrhPz/EVID2lXXaNvCCo/tHgJE8c=) 3: 3230332e38342e3134302e302f32342d3234203d3e203234323036.roa (hash: T9tknLjTeQ+7ZUfv8SNf4lCYZ42qRdSxxizSEJYn0CA=) 4: 323430323a616230303a3a2f33322d3332203d3e203234323036.roa (hash: aaVQCjxDcTZfVP0GXV6UmhAVx/WHjfyhQPMjY9CDL1Y=) 5: 3230332e38342e3133392e302f32342d3234203d3e20313338383433.roa (hash: wu8diV5jdWuux9C39Tvhu1GJ88vcA6Du/7ncHsnVM8k=) 6: 3230332e38342e3134332e302f32342d3234203d3e20323133363037.roa (hash: SU/DxOnFopjxkv8c6HfEkmadSFV8VExLgA9VBa2HuUc=) 7: 3131302e34342e3136382e302f32342d3234203d3e203234323036.roa (hash: H0HlMimCqXAso/aispJtA9+9Apf+w3psosa64aEPhuo=) 8: 3131302e34342e3137302e302f32342d3234203d3e20313338303737.roa (hash: aq3iMOcZU4XVOFPAPd2Nh3J2J2xxy7ZZYh4S2cWkrJY=) 9: 3230332e38342e3133382e302f32342d3234203d3e20313338303737.roa (hash: slxJrksLG/ugoCdz0xpYsZxbcTeP+M/3OR1Tilc8hic=) 10: 323430323a616230303a65663a3a2f34382d3438203d3e203234323036.roa (hash: tmM3oKcQYom0eZ0XNJS+YU7h43ssUwLiYaqon6dfaUY=) 11: 3131302e34342e3136382e302f32332d3233203d3e203234323036.roa (hash: k8TYiHXc6vZmoqXaKgcDXCYwJI5QRLDArVJpzQsFi0s=) 12: 323430323a616230303a613a3a2f34382d3438203d3e203234323036.roa (hash: vmMOC54VRYyQ6zaPWhSxLckPPT+mw9crTtfHlgZPBE8=) 13: 3230332e38342e3134312e302f32342d3234203d3e203234323036.roa (hash: Wij0WNmFzkS7ii03UOjMpVj1DHEK+SaLjmorAVH1mZI=) 14: 3230332e38342e3133362e302f32342d3234203d3e203234323036.roa (hash: 4CIlhDwPBWmO489rSkBL096ATSwuK+FjlEMQtzZL/kc=) 15: 323430323a616230303a636166653a3a2f34382d3438203d3e203234323036.roa (hash: yk2Beo121KKGPqhGrImYDU3EMLdITUqRzn7ocJjo60c=) 16: 981E5677AC602950ABE1A442C2779E7CB0C108A9.crl (hash: /+fBHTuvKXyZX95btDKdU8AHq6rKKptWcoLQ+drNYbM=) 17: 323430323a616230303a61663a3a2f34382d3438203d3e203234323036.roa (hash: lNnryO3KjbjallOCFXPMSeEsKPceLct4DmwTgOEASfo=) 18: 3230332e38342e3133372e302f32342d3234203d3e20323134313433.roa (hash: gGq3gtPXXpT8qmppXJpdYMGRNCe8MtmuCS9LRZ9VUgI=) 19: 3131302e34342e3137322e302f32322d3232203d3e20313338303737.roa (hash: L7B4TlCu6+XGwvVIhFVxD06j+oz/txAbz7A9RLeSSuk=) 20: 3230332e38342e3134322e302f32342d3234203d3e20313338383433.roa (hash: XBonl+MDq5JKpWntnVm6TMfayZbg8tQu2RWN6XgAyJw=) 21: 3131302e34342e3137312e302f32342d3234203d3e203234323036.roa (hash: /Id0ptV6KhbD1snBODkIm970DRe1HBZaO2KQ2jikLRE=) 22: 3131302e34342e3136392e302f32342d3234203d3e203234323036.roa (hash: njKwh9fBki9cQ9S37NNLRAGEY/gEGO5YoV7LWFXK6D8=) 23: 3131302e34342e3136382e302f32322d3232203d3e203234323036.roa (hash: 8Z6QdZAm6ipP1goiFZjslQYb9XOb/wZyuYYrPlulaFM=) 24: 323430323a616230303a64663a3a2f34382d3438203d3e203234323036.roa (hash: 9MSiXUftqD7YwgoDDhRkUOlJfbnaxlrR0kRkqPsHDsM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:3a:04:45:15:41:42:cd:d0:a0:68:8e:ed:22:cb:4f:31:b3:5e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Validity Not Before: Oct 19 15:26:19 2025 GMT Not After : Oct 22 19:57:19 2025 GMT Subject: CN=9487F30CF3141907DA46D90D01441043C7961068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:75:d7:b7:5f:23:6c:fe:45:57:b4:ab:43:ef: df:6a:49:95:4e:40:d8:60:52:9b:f2:45:03:4d:3a: 67:fa:6a:97:12:a3:d0:3e:df:48:fe:8b:b4:92:36: 7e:e3:9b:93:56:ad:dd:04:88:f5:e2:1f:41:55:79: 12:e7:84:2c:6c:3d:a6:1a:f5:a8:be:81:1d:1f:1e: 12:a3:1e:7b:43:d6:3d:82:70:05:43:d3:d0:1e:e5: 05:0c:42:0b:e6:e1:e0:a5:3f:9a:ed:35:91:9c:18: 7f:39:da:ae:0f:09:9e:45:29:84:c7:cc:c5:8c:ee: 73:7e:e1:45:d4:fb:1e:5a:d0:07:59:e3:6b:33:28: c3:62:b1:d0:7c:c5:81:f3:1f:29:0d:f6:34:e9:c5: 7b:f4:c8:38:bc:7c:2e:7d:d1:a5:b8:98:ad:34:27: 84:87:f0:04:90:14:93:04:9d:26:b2:e4:be:bf:8f: 29:fc:c4:c2:6f:83:84:dc:7c:fd:23:d4:1b:94:2c: 67:a3:08:29:b4:5e:95:6a:11:ea:c0:8e:21:6d:3b: bf:ef:b0:8f:25:27:e1:d1:86:9d:02:60:fc:e7:99: 39:a8:29:51:3a:46:62:be:4a:ce:37:46:36:70:6d: a4:8d:b7:0a:03:ab:d9:21:1c:27:3a:76:2c:b6:f7: 25:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:87:F3:0C:F3:14:19:07:DA:46:D9:0D:01:44:10:43:C7:96:10:68 X509v3 Authority Key Identifier: keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b8:72:36:34:fc:68:9f:b0:fc:ea:ce:bf:02:e6:2a:bb:e0: 2c:7f:11:df:bf:c6:13:ad:78:4e:a0:78:28:eb:05:5e:84:b3: 54:37:e4:55:29:bd:9b:b7:22:44:f2:f7:14:9f:83:ad:e9:96: 9f:b7:39:f8:ad:ed:44:ec:4e:f6:64:9b:61:a6:cd:e4:aa:e1: 53:dd:2b:64:15:7c:aa:eb:e3:09:f3:e8:c1:e5:ae:65:88:64: 78:f9:8f:a3:ac:37:86:da:41:18:d1:ad:d8:ca:79:bb:f4:10: 9b:fe:02:05:84:89:7a:f6:30:43:50:4b:7d:2d:99:62:ab:11: ba:0c:b1:89:50:94:9f:ed:80:5a:5c:ef:db:8e:89:9f:1a:0c: d0:ca:90:d6:e0:32:82:93:6c:04:61:ae:2a:b4:d9:84:88:08: 17:70:a9:0d:aa:17:80:bf:ad:8b:9b:01:62:c2:09:a9:95:e4: 25:c0:cd:b7:81:92:44:58:31:24:2e:17:36:96:d8:5f:c9:73: df:f8:4a:39:c3:54:74:76:48:9f:9c:03:34:58:dd:de:e0:da: 15:c0:f3:b9:35:b8:9e:e3:d6:c2:05:9c:6f:50:e7:48:fc:61: b2:d0:6f:15:da:0a:f4:ce:0d:e3:b8:b7:58:82:e5:00:f7:8e: d3:ac:72:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIDoERRVBQs3QoGiO7SLLTzGzXmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC MEMxMDhBOTAeFw0yNTEwMTkxNTI2MTlaFw0yNTEwMjIxOTU3MTlaMDMxMTAvBgNV BAMTKDk0ODdGMzBDRjMxNDE5MDdEQTQ2RDkwRDAxNDQxMDQzQzc5NjEwNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0dde3XyNs/kVXtKtD799qSZVO QNhgUpvyRQNNOmf6apcSo9A+30j+i7SSNn7jm5NWrd0EiPXiH0FVeRLnhCxsPaYa 9ai+gR0fHhKjHntD1j2CcAVD09Ae5QUMQgvm4eClP5rtNZGcGH852q4PCZ5FKYTH zMWM7nN+4UXU+x5a0AdZ42szKMNisdB8xYHzHykN9jTpxXv0yDi8fC590aW4mK00 J4SH8ASQFJMEnSay5L6/jyn8xMJvg4TcfP0j1BuULGejCCm0XpVqEerAjiFtO7/v sI8lJ+HRhp0CYPznmTmoKVE6RmK+Ss43RjZwbaSNtwoDq9khHCc6diy29yVVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlIfzDPMUGQfaRtkNAUQQQ8eWEGgwHwYDVR0j BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx MDhBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc5MjJmODktM2U5Yi00YjIxLTkx ODYtYTY0OGMyZGEzZjdiLzAvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlF N0NCMEMxMDhBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACu4cjY0/GifsPzqzr8C5iq74Cx/Ed+/xhOt eE6geCjrBV6Es1Q35FUpvZu3IkTy9xSfg63plp+3Ofit7UTsTvZkm2GmzeSq4VPd K2QVfKrr4wnz6MHlrmWIZHj5j6OsN4baQRjRrdjKebv0EJv+AgWEiXr2MENQS30t mWKrEboMsYlQlJ/tgFpc79uOiZ8aDNDKkNbgMoKTbARhriq02YSICBdwqQ2qF4C/ rYubAWLCCamV5CXAzbeBkkRYMSQuFzaW2F/Jc9/4SjnDVHR2SJ+cAzRY3d7g2hXA 87k1uJ7j1sIFnG9Q50j8YbLQbxXaCvTODeO4t1iC5QD3jtOsciM= -----END CERTIFICATE-----Generated at Mon Oct 20 08:05:07 2025 by rpki-client