$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft File: 455696A81F434F9A36D66F455F4B3C43855A18E1.mft (raw, json) Hash identifier: BVAjADctZi3QPM8qRo0p0NJUbiD6v0OmuxmFFj2/ehQ= Subject key identifier: 65:C2:A7:95:29:EE:22:AD:FA:29:77:3F:08:91:A6:1E:9F:03:F7:A1 Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1 Certificate issuer: /CN=455696A81F434F9A36D66F455F4B3C43855A18E1 Certificate serial: 087874F871B84BA598A4A98D705D4D11CC0C4E0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft Manifest number: 0533 Signing time: Mon 20 Oct 2025 18:11:40 +0000 Manifest this update: Mon 20 Oct 2025 18:06:40 +0000 Manifest next update: Fri 24 Oct 2025 05:34:40 +0000 Files and hashes: 1: 3130332e33392e35302e302f32342d3234203d3e203633353031.roa (hash: ydTlUGVcKS4lgES6wItbPdSPQhqyiKodHd5qrBXnRwU=) 2: 36312e31342e3234382e302f32322d3232203d3e203633353031.roa (hash: 9yUhWJBW17q/QdaTY2fU9nmONEYGToC2s7IX5p+5PO4=) 3: 323430333a666338303a383030303a3a2f33342d3334203d3e203633353031.roa (hash: Hd3gLKDXIGhO0eZdSkUfCdbmWITohfzJx+eKqy99LCw=) 4: 36312e31342e3235302e302f32332d3233203d3e203633353031.roa (hash: b0iukqTRuvRU1a7eSUs5b+FIBP1+cvhMRAWkNJWN/O8=) 5: 323430333a666338303a3a2f33342d3334203d3e203633353031.roa (hash: gioPA1tL1I5R2uSvArjjITDaHxq2LcT9RBmDMoaTZfs=) 6: 3130332e33392e34382e302f32322d3232203d3e203633353031.roa (hash: fZDt9a5Bml3i+qD7LkBtRpcDmAleju+dsbR1q4FSMw4=) 7: 3130332e33392e34392e302f32342d3234203d3e203633353031.roa (hash: OEBLHuyL5IROg19Rd6fTCNXQysEWyH6x7ERzb5RgAZU=) 8: 3130332e33392e35312e302f32342d3234203d3e203633353031.roa (hash: JH5C1ysIyofYJFDdAetBTcCh1nnZyIwvE4THQXZ6l3g=) 9: 323430333a666338303a3a2f33332d3333203d3e203633353031.roa (hash: 1tl51btakO1tmF3fruOX88w5ei0Cmv3tz+8xpKBuz2U=) 10: 36312e31342e3234382e302f32342d3234203d3e203633353031.roa (hash: rrz9EzLPKdw7dWAvcArV0pHG2vCL4Ps14xnhn3PEhOc=) 11: 455696A81F434F9A36D66F455F4B3C43855A18E1.crl (hash: Hvow5BqCP/zj7xKZ6b6pi0a/09xSUlHJDwFjcPQjJ2k=) 12: 3130332e33392e34382e302f32332d3233203d3e203633353031.roa (hash: SsF/O1gUXDHLKElJcUYri3Mx6ijVNGZFpDm1VnJPenk=) 13: 323430333a666338303a633030303a3a2f33342d3334203d3e203633353031.roa (hash: NXaEo37N/6r6HnF6VCxvms5WsOrIaz0jS79Aj/Fy1Oc=) 14: 36312e31342e3235312e302f32342d3234203d3e203633353031.roa (hash: 9HA8+f1KuEY73x5eI3NyGPnk+prH+pYPMOMdeQF4VZc=) 15: 36312e31342e3234392e302f32342d3234203d3e203633353031.roa (hash: yPzSsHv3SwGQ3fEhiVRqIyqk9kZjo9mnqe2iTT83X9g=) 16: 36312e31342e3234382e302f32332d3233203d3e203633353031.roa (hash: 8Ic/4fgaL4he+8YIPf+e8lFQ10UurrN6RokKwkpyH5g=) 17: 3130332e33392e35302e302f32332d3233203d3e203633353031.roa (hash: KZop+FhSj6+a2cj+ncq6IceeMQZFfFRMm8A5B880EEg=) 18: 3130332e33392e34382e302f32342d3234203d3e203633353031.roa (hash: YLwR3x+9Ktbemo/unDpiFl0Wr9oNKDN+CzK0/aYC+Pw=) 19: 323430333a666338303a3a2f33322d3332203d3e203633353031.roa (hash: Q/RsRX8i7WhRynidtM9vkDe+JbBl3vcKmm5GmcuQCUQ=) 20: 36312e31342e3235302e302f32342d3234203d3e203633353031.roa (hash: wmPtOQD249Jd3Z4yi+/hp7o7IOmozWKplwjuGfgW4+I=) 21: 323430333a666338303a383030303a3a2f33332d3333203d3e203633353031.roa (hash: fju+gxaFPeIwaOTSNCqBv+8eqOAX1OUY7wjCt+CkzuA=) 22: 323430333a666338303a343030303a3a2f33342d3334203d3e203633353031.roa (hash: zHHMz32Wh+n+2u4MNkl1iW+HvK1Rdbgl3v4kn6ORq9U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:78:74:f8:71:b8:4b:a5:98:a4:a9:8d:70:5d:4d:11:cc:0c:4e:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1 Validity Not Before: Oct 20 18:06:40 2025 GMT Not After : Oct 24 05:34:40 2025 GMT Subject: CN=65C2A79529EE22ADFA29773F0891A61E9F03F7A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c1:84:2d:cf:69:ef:5b:74:fa:e2:31:0d:7e: b6:23:70:a6:9c:7c:5b:23:8a:27:a2:69:da:ff:73: ef:88:92:c1:9c:e8:0e:33:3c:ba:a2:a1:1f:d5:62: c5:f3:76:18:8f:c9:49:36:2e:8a:3b:35:1d:53:99: 20:84:59:b2:13:f1:ce:15:c5:29:65:ba:4a:f8:82: 5e:64:f1:fb:2f:58:d0:be:43:35:7b:e7:b2:9c:ac: ab:0e:73:6a:66:74:5f:34:56:8f:8c:0f:22:17:77: 9a:09:9a:c5:41:02:f4:59:53:71:2d:44:3b:38:cc: c6:e6:49:c6:a5:04:9c:b2:bd:34:71:59:26:2b:2c: 20:70:76:97:5b:85:9a:65:56:f6:8d:22:12:a5:59: e9:b1:f2:16:69:da:13:48:5c:be:55:e1:89:04:27: 44:b9:66:55:cf:a7:55:a3:2a:4e:35:62:7e:13:5c: 5e:8a:25:f2:7b:5f:ff:98:c2:4c:cd:02:1d:88:af: b5:75:42:b6:ca:df:4a:07:73:3f:9e:86:40:e4:77: c0:10:80:f5:21:6a:72:c2:af:dc:d0:fd:b3:9b:35: 67:6c:b6:d0:de:97:73:bd:94:60:03:aa:cc:be:92: c0:56:7e:f2:3e:b2:0e:b4:8f:d8:90:9d:9e:dd:31: 87:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C2:A7:95:29:EE:22:AD:FA:29:77:3F:08:91:A6:1E:9F:03:F7:A1 X509v3 Authority Key Identifier: keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:7e:ea:3c:28:4c:11:a5:6c:41:88:b5:f1:4f:e1:f5:d7:63: dc:90:13:77:d3:1e:7d:3d:28:43:9a:3f:17:e3:0f:02:af:82: 52:0e:e7:29:ed:df:25:0a:21:b4:40:e0:89:7b:0e:04:7c:0c: 0a:16:fb:eb:d2:cf:a3:56:bb:b6:70:36:94:94:8a:04:1f:80: c4:74:49:8b:9c:f8:8b:35:1b:b2:44:8c:22:db:83:60:b9:6f: a0:e2:db:47:43:83:82:2a:9b:51:59:e8:cc:c6:f5:10:73:1e: 10:20:98:f4:6c:c7:23:07:be:64:23:ae:f4:b4:da:6d:89:d6: 00:62:7d:d1:f8:60:d9:af:d4:7e:0d:da:ce:7c:99:f7:9c:4f: 69:48:58:c2:58:8a:cd:ea:7d:94:b9:0c:a2:22:45:16:a6:94: 1e:9f:61:4d:82:2b:e0:5f:8e:f0:a9:d7:72:dc:eb:b7:db:64: 15:d2:1e:75:73:f0:ed:de:6f:3a:4c:bc:dd:cc:1d:22:91:f9: bc:59:c6:0c:08:6d:6a:98:6a:c9:67:a7:4b:41:8a:41:f4:0e: 73:6b:bf:07:23:f1:d3:39:98:c3:66:f4:3d:c4:3b:73:75:ba: 60:96:91:f1:2a:b6:8e:fd:0b:04:5f:d2:7f:bd:64:16:75:16: f8:1e:65:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCHh0+HG4S6WYpKmNcF1NEcwMTgowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjNDNDM4 NTVBMThFMTAeFw0yNTEwMjAxODA2NDBaFw0yNTEwMjQwNTM0NDBaMDMxMTAvBgNV BAMTKDY1QzJBNzk1MjlFRTIyQURGQTI5NzczRjA4OTFBNjFFOUYwM0Y3QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJwYQtz2nvW3T64jENfrYjcKac fFsjiieiadr/c++IksGc6A4zPLqioR/VYsXzdhiPyUk2Loo7NR1TmSCEWbIT8c4V xSllukr4gl5k8fsvWNC+QzV757KcrKsOc2pmdF80Vo+MDyIXd5oJmsVBAvRZU3Et RDs4zMbmScalBJyyvTRxWSYrLCBwdpdbhZplVvaNIhKlWemx8hZp2hNIXL5V4YkE J0S5ZlXPp1WjKk41Yn4TXF6KJfJ7X/+YwkzNAh2Ir7V1QrbK30oHcz+ehkDkd8AQ gPUhanLCr9zQ/bObNWdsttDel3O9lGADqsy+ksBWfvI+sg60j9iQnZ7dMYedAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZcKnlSnuIq36KXc/CJGmHp8D96EwHwYDVR0j BBgwFoAURVaWqB9DT5o21m9FX0s8Q4VaGOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDkxOGIxNS1lNjNlLTRiMzgtYTA1Yy02NTBmYjQ5ZjA1OTQvMC80NTU2OTZBODFG NDM0RjlBMzZENjZGNDU1RjRCM0M0Mzg1NUExOEUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjNDNDM4NTVB MThFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ5MThiMTUtZTYzZS00YjM4LWEw NWMtNjUwZmI0OWYwNTk0LzAvNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjND NDM4NTVBMThFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN9+6jwoTBGlbEGItfFP4fXXY9yQE3fTHn09 KEOaPxfjDwKvglIO5ynt3yUKIbRA4Il7DgR8DAoW++vSz6NWu7ZwNpSUigQfgMR0 SYuc+Is1G7JEjCLbg2C5b6Di20dDg4Iqm1FZ6MzG9RBzHhAgmPRsxyMHvmQjrvS0 2m2J1gBifdH4YNmv1H4N2s58mfecT2lIWMJYis3qfZS5DKIiRRamlB6fYU2CK+Bf jvCp13Lc67fbZBXSHnVz8O3ebzpMvN3MHSKR+bxZxgwIbWqYaslnp0tBikH0DnNr vwcj8dM5mMNm9D3EO3N1umCWkfEqto79CwRf0n+9ZBZ1FvgeZfg= -----END CERTIFICATE-----Generated at Tue Oct 21 00:57:08 2025 by rpki-client