$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft File: 639473CD2054A78B39F9AC7A83232462F00E71AA.mft (raw, json) Hash identifier: +m5NVPjthBTTf4ZQsWK7+0sN14IJDx1G3VYPpInpzL0= Subject key identifier: 79:43:C6:40:47:0F:DC:DE:74:86:96:05:3D:DB:1C:80:69:FC:60:04 Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA Certificate serial: 6188B3AF2D56E0C24BE5F3FCE14731C8F3AD59F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft Manifest number: 0D5B Signing time: Sun 19 Oct 2025 18:41:50 +0000 Manifest this update: Sun 19 Oct 2025 18:36:50 +0000 Manifest next update: Thu 23 Oct 2025 01:39:50 +0000 Files and hashes: 1: 323430303a643638303a353a3a2f34382d3438203d3e203539323832.roa (hash: /8HKOKl3PxMMPopAmXJsDfZHfFoo7wkQ81V5TqWB1uE=) 2: 323430303a643638303a3a2f33322d3438203d3e203539323832.roa (hash: SgqLAGcMTNBEKnSS7cpl5WafnRLBI8WCT5GxxXyN0zA=) 3: 3130332e3232382e3234362e302f32342d3234203d3e203539323832.roa (hash: XZ4OJKWgYbKu4ak8HWaN9bEJfkYQKh79GGoEWm0kS2Q=) 4: 3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa (hash: /sujTtwH0ddwmWj6UyMseljhgpcNLVkP8+vtS5y3rGg=) 5: 3130332e3232382e3234342e302f32342d3234203d3e203539323832.roa (hash: esxHqUt3Xq6PKKXsfFgfUEYi1fJUgVnC6F8M6sDPUJM=) 6: 3131362e3230362e3231332e302f32342d3234203d3e203539323832.roa (hash: JPYapDBTyTePbdwtE88+heXxGhufXE50JBbJ2fq7FKo=) 7: 3130332e3232382e3234372e302f32342d3234203d3e203539323832.roa (hash: 4gtV8ZXJhBLgP6alnZmazQL9Du+oKvqI/MvatS0Bbyw=) 8: 323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa (hash: 5B7v2ShhK5C4wbhQiHatQFgCi8oUxqkoPlhjyp+Rnaw=) 9: 3130332e3232382e3234342e302f32322d3234203d3e203539323832.roa (hash: kkZ5080z9oUs+jW8iHX1Tzr1MG5R0/keiimPL4Y7DMk=) 10: 323430303a643638303a35393a3a2f34382d3438203d3e203539323832.roa (hash: 0AzZnlQLCCzpiwYH8VB91hQfBqmdrJ+ok40Qb8sCeko=) 11: 3131362e3230362e3231342e302f32342d3234203d3e203539323832.roa (hash: mgdd33inbho0w/YafQxmlb4mn2645LWgbd4GjzvqC5g=) 12: 3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa (hash: QsDPs2mlZqyMZXfjf6Zh+NWMXGWy1j4R+YaYRxdbecQ=) 13: 639473CD2054A78B39F9AC7A83232462F00E71AA.crl (hash: UgX6jMXp9zP1Jp53eiUiyEO7Twxt2SR6VSGTPCi9b08=) 14: 323430303a643638303a323a3a2f34382d3438203d3e203539323832.roa (hash: qLkIroWnbqSVivBGqvgi5oF8E8eNhXgrJocCdlawdNk=) 15: 323430303a643638303a666163653a3a2f34382d3438203d3e203539323832.roa (hash: u5dDjhuBvBzcqNjKEeW7vizdTx58v6wY4rfkMiHiI5I=) 16: 3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa (hash: 7JHZWmtz01hYjYbLRHq9pCZCM42A/jGx+qscoYZR+8M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 01:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:88:b3:af:2d:56:e0:c2:4b:e5:f3:fc:e1:47:31:c8:f3:ad:59:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA Validity Not Before: Oct 19 18:36:50 2025 GMT Not After : Oct 23 01:39:50 2025 GMT Subject: CN=7943C640470FDCDE748696053DDB1C8069FC6004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:74:6d:0e:90:2e:30:e5:b9:50:33:da:24:3c: 44:f0:36:37:9f:1b:99:65:18:10:01:4b:de:2c:93: ad:af:a8:a7:cb:65:f6:77:35:b7:8a:27:c9:93:c5: a1:62:d5:c7:99:50:07:97:12:52:50:89:36:b9:2a: b4:db:bd:5a:5d:e4:46:d2:b3:83:b3:e1:8d:2a:ad: df:f3:8e:31:68:4a:a6:0c:02:21:bc:ca:b2:2d:be: d1:41:e1:9f:f3:b9:a4:1e:76:33:ee:df:88:8e:7e: 06:1b:f9:31:4a:54:cc:dd:af:36:bc:5b:70:2f:c3: 1e:c1:72:ea:bd:bd:e6:54:7a:27:cc:ee:56:46:3f: 1e:c7:f4:e0:1b:fb:7b:b2:93:1f:36:85:86:15:f1: ab:7d:0f:12:2e:be:3f:af:2e:af:f2:c8:02:ba:3a: e1:13:3d:da:52:ff:44:3a:6b:dc:08:6d:84:5e:5a: 36:0f:af:b3:29:27:0f:ee:f5:ad:98:03:7d:2c:1e: fc:bc:90:de:31:58:ad:7b:12:4a:57:12:1a:c5:49: ec:83:a0:9a:0e:4a:ad:3e:9a:dd:9d:15:c8:2c:34: d8:42:cb:ed:c6:73:18:b9:a8:53:8d:2b:f9:31:17: 0c:3e:b6:2e:86:05:31:35:f8:8c:82:7e:5f:32:f0: ea:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:43:C6:40:47:0F:DC:DE:74:86:96:05:3D:DB:1C:80:69:FC:60:04 X509v3 Authority Key Identifier: keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:75:8f:c6:a0:ec:3b:54:a1:a7:99:34:03:38:84:9b:65:e4: 85:40:77:87:2e:35:5a:7f:d0:a4:7c:04:eb:79:5c:11:10:f1: 4b:9d:34:89:0a:d4:24:f7:bf:76:6e:bc:0a:71:50:d2:53:3a: ca:d1:a1:c2:41:43:ba:ad:e8:7b:b6:a7:06:8c:f3:b4:0d:04: 3f:11:f9:1c:c1:39:34:90:be:7b:14:30:07:e2:8a:5d:3b:66: 6a:e3:df:c2:5a:51:6f:7f:b7:ab:55:66:8d:5f:90:f7:45:fe: 56:16:15:63:ce:c3:41:e9:56:7b:c1:1e:05:4a:f4:a1:40:79: ee:19:ef:a4:83:bb:ac:1b:3c:78:06:20:14:7a:3c:df:9b:fa: 7b:02:75:a4:db:e0:b5:7e:af:2f:79:60:f1:99:fe:37:37:70: fa:44:90:39:f2:81:7d:35:f0:83:c6:5a:8d:57:1f:59:5f:09: 19:ad:fd:01:61:48:e1:95:2e:21:b7:4a:eb:26:7f:44:78:ac: bf:12:b2:e5:46:79:44:1f:c8:68:03:7d:a4:1d:52:4b:02:bf: 1c:02:db:49:d4:d0:b6:98:8b:66:82:fd:59:5f:b0:3d:2c:e6: e9:7c:a4:46:2d:13:a6:a8:fe:4f:42:df:a4:36:cc:1a:2c:b1: 0e:51:32:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYYizry1W4MJL5fP84UcxyPOtWfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG MDBFNzFBQTAeFw0yNTEwMTkxODM2NTBaFw0yNTEwMjMwMTM5NTBaMDMxMTAvBgNV BAMTKDc5NDNDNjQwNDcwRkRDREU3NDg2OTYwNTNEREIxQzgwNjlGQzYwMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5dG0OkC4w5blQM9okPETwNjef G5llGBABS94sk62vqKfLZfZ3NbeKJ8mTxaFi1ceZUAeXElJQiTa5KrTbvVpd5EbS s4Oz4Y0qrd/zjjFoSqYMAiG8yrItvtFB4Z/zuaQedjPu34iOfgYb+TFKVMzdrza8 W3Avwx7Bcuq9veZUeifM7lZGPx7H9OAb+3uykx82hYYV8at9DxIuvj+vLq/yyAK6 OuETPdpS/0Q6a9wIbYReWjYPr7MpJw/u9a2YA30sHvy8kN4xWK17EkpXEhrFSeyD oJoOSq0+mt2dFcgsNNhCy+3Gcxi5qFONK/kxFww+ti6GBTE1+IyCfl8y8OohAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeUPGQEcP3N50hpYFPdscgGn8YAQwHwYDVR0j BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF NzFBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg0NjRhNWItMmZjZS00N2RhLTgw NDctNjhkMmJkNjNjOWMzLzAvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0 NjJGMDBFNzFBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHN1j8ag7DtUoaeZNAM4hJtl5IVAd4cuNVp/ 0KR8BOt5XBEQ8UudNIkK1CT3v3ZuvApxUNJTOsrRocJBQ7qt6Hu2pwaM87QNBD8R +RzBOTSQvnsUMAfiil07Zmrj38JaUW9/t6tVZo1fkPdF/lYWFWPOw0HpVnvBHgVK 9KFAee4Z76SDu6wbPHgGIBR6PN+b+nsCdaTb4LV+ry95YPGZ/jc3cPpEkDnygX01 8IPGWo1XH1lfCRmt/QFhSOGVLiG3Susmf0R4rL8SsuVGeUQfyGgDfaQdUksCvxwC 20nU0LaYi2aC/VlfsD0s5ul8pEYtE6ao/k9C36Q2zBossQ5RMlI= -----END CERTIFICATE-----Generated at Mon Oct 20 18:04:44 2025 by rpki-client