$ rpki-client -vvf repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft File: 882209E37356E0512FBE4E81B00E4F2481865087.mft (raw, json) Hash identifier: 5oHSZwGKbrzwJLj85LDhUXMXDjK8lmKWHRGRwOWgonM= Subject key identifier: 64:EA:8A:1C:EC:70:04:F7:FE:FA:A6:B4:44:6D:D4:A8:80:C5:78:3B Authority key identifier: 88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87 Certificate issuer: /CN=882209E37356E0512FBE4E81B00E4F2481865087 Certificate serial: 4D6184A072F185E95483AEBC3A378AF4300B25C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft Manifest number: 0517 Signing time: Mon 20 Oct 2025 01:22:02 +0000 Manifest this update: Mon 20 Oct 2025 01:17:02 +0000 Manifest next update: Thu 23 Oct 2025 10:27:02 +0000 Files and hashes: 1: 34352e3131382e3131322e302f32322d3232203d3e20313331373137.roa (hash: 4exgwdcQ1exTycgJCK/gqBNOkO+g3t+MeUPzY4BXBs4=) 2: 34352e3131382e3131352e302f32342d3234203d3e20313331373137.roa (hash: sxL8WI3UrWSTsLdgL4krtb4YzuPS2/H7rwpNl9kG2s8=) 3: 34352e3131382e3131342e302f32342d3234203d3e20313331373137.roa (hash: yQorJw+u2n8BFPvZbej71Ji8nM/16g2mSwkEj1PF54g=) 4: 323430313a313063303a633030303a3a2f33342d3334203d3e20313331373137.roa (hash: upfq/Ll023pCAPQGTeGs2hbSXasfCV07dRWvMTFoCJY=) 5: 323430313a313063303a343030303a3a2f33342d3334203d3e20313331373137.roa (hash: sH9AL8idt6oa1DBw1y1K2NRJOkrnep4hXxdB09oly/A=) 6: 3130332e31342e32302e302f32332d3233203d3e20313331373137.roa (hash: RohtMVPp7ZjWT76AR25hywvAjC+yVkxy154FLnUsdBk=) 7: 3130332e32352e3136362e302f32342d3234203d3e20313331373137.roa (hash: ae/dG+5qLBYT7KzQliS37oy8tODqNSMPLH4vHatbgLA=) 8: 3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa (hash: ILfqmoxfXPHlh8GmZbUT7jZa6GPfE6TlAFjcXTufWHY=) 9: 3130332e31342e32312e302f32342d3234203d3e20313331373137.roa (hash: 5In45d5yPgAgu4EKrWednA3s/tNDYrqkLBEAtmGlKjI=) 10: 3130332e32352e3136362e302f32332d3233203d3e20313331373137.roa (hash: GuM7P7x/u39aCvmJkxVuMlpYCmbP89xnoCs5WogcWI4=) 11: 882209E37356E0512FBE4E81B00E4F2481865087.crl (hash: U6l2UuLKpLlFVL98HsTUakT7KBPU1bhC0UmRngQLnxo=) 12: 323430313a313063303a3a2f33342d3334203d3e20313331373137.roa (hash: njg/qVMnSFnXNm23LFJOAC9Brxk9FM9096rC9yQ0CXk=) 13: 34352e3131382e3131322e302f32332d3233203d3e20313331373137.roa (hash: GNr97+CgZOUFbCIDGfnRBjjUL8CMyp0MB4VIgO96YwM=) 14: 34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa (hash: fWpUZJchVDwudRJxgK1oYcEU6iSSZ9RgPdltpwuInA8=) 15: 3130332e31342e32302e302f32342d3234203d3e20313331373137.roa (hash: 4YSDNpw3vRi1ZpYELRMW9RHjucU5y6DLjYnJw7lk5Lw=) 16: 34352e3131382e3131322e302f32342d3234203d3e20313331373137.roa (hash: TUhhdvGp1LOiLtnysRzIGChLZFMNnT5PF4OEU6rQz1g=) 17: 323430313a313063303a383030303a3a2f33342d3334203d3e20313331373137.roa (hash: s/GWk0rnx1fQe+9N5/NiE2vZ64ixoUOqYZCvVVS5fa4=) 18: 34352e3131382e3131342e302f32332d3233203d3e20313331373137.roa (hash: MdJ8RxR8ZYDVXBT9P8fF751Cc4xL7JgxekzcB9xdKx0=) 19: 323430313a313063303a3a2f33322d3332203d3e20313331373137.roa (hash: UtJFn8cjB9oRRuew5QEOrcUcIRIAJ+KfKoJMwxwZf1I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:61:84:a0:72:f1:85:e9:54:83:ae:bc:3a:37:8a:f4:30:0b:25:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=882209E37356E0512FBE4E81B00E4F2481865087 Validity Not Before: Oct 20 01:17:02 2025 GMT Not After : Oct 23 10:27:02 2025 GMT Subject: CN=64EA8A1CEC7004F7FEFAA6B4446DD4A880C5783B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0b:30:cc:93:28:3d:0b:ef:b9:32:f1:8d:bd: 7d:90:2e:e3:83:ad:86:51:86:a8:19:6f:53:5e:d5: 6a:90:38:7c:80:ae:4f:9a:6b:f4:15:27:2d:91:04: 5d:d5:da:08:b8:3d:8b:ec:e8:b1:cd:ca:79:58:0f: 4f:a4:fe:ce:0b:91:e3:5d:64:95:f2:b5:d6:15:be: bf:9f:7b:dc:bc:d1:75:90:e1:2f:43:0f:ca:c6:50: 56:3a:b4:a0:8f:45:d5:79:95:57:54:85:2c:ca:56: 11:e6:bc:21:af:35:7b:d8:7b:89:7c:58:ae:96:79: 89:28:8c:83:6b:a1:64:d2:24:a5:24:5b:fa:2e:21: af:f6:e3:ce:e6:e7:8e:b2:2a:97:ac:47:9a:74:7d: 68:f2:91:eb:45:4a:02:9b:25:b2:c2:b7:73:f8:84: cf:2f:59:60:a1:68:d9:1c:c9:58:8b:c2:44:74:e0: 47:ec:b2:6b:54:2e:03:ca:f8:4a:0c:f1:f5:c7:b3: 3c:a2:26:bf:2b:8c:f7:83:17:86:d3:a8:0b:7d:30: 3c:a5:4f:3b:e0:5e:5b:93:55:27:56:30:00:d2:ad: d4:4e:af:71:36:90:f0:3b:c9:e8:05:5e:7d:d3:77: 91:02:50:d9:50:0d:cd:7f:af:64:3d:f9:59:72:b7: d0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EA:8A:1C:EC:70:04:F7:FE:FA:A6:B4:44:6D:D4:A8:80:C5:78:3B X509v3 Authority Key Identifier: keyid:88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:f0:3b:8c:cb:98:8b:12:b5:62:97:b5:43:9e:d0:82:95:f2: 33:57:4f:36:32:83:ca:0f:7d:26:d3:c8:e7:b2:f1:c6:2a:11: 6b:bf:d5:ae:8d:76:96:e7:4e:fa:cc:4e:f0:88:c4:d6:77:e6: 69:d6:6e:b4:77:ea:8e:65:2e:29:d3:36:3b:1a:e4:19:3a:3a: 8b:19:a5:04:8c:90:ff:7e:5c:72:e4:aa:ca:1e:8d:25:41:63: 48:12:c6:13:32:b0:90:af:b8:fc:38:78:ea:84:0c:37:3d:08: bd:a7:55:bb:ae:08:84:fd:11:7d:1e:77:15:24:5c:8f:87:a1: 8f:b2:1b:cb:50:03:9b:14:d3:de:f5:49:09:84:99:8c:ff:44: 9a:58:b8:41:77:99:96:77:de:73:6e:b5:5e:fb:5a:fe:74:7a: 39:6d:b8:60:45:ec:85:20:05:f8:8f:8f:6b:42:6a:f2:fb:1a: 20:d2:5a:72:61:78:b0:4a:97:21:d5:f2:ec:14:99:79:ee:e8: 45:b7:22:64:a7:e4:1c:58:94:76:d6:f0:e7:6c:48:e6:43:c4: 6f:93:4b:a8:80:26:ad:e7:86:3c:69:82:99:2a:ec:21:ae:0a: 7a:74:37:51:78:ee:0a:06:c3:03:6e:4b:b6:61:4a:b7:44:50: f6:d9:c8:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTWGEoHLxhelUg668OjeK9DALJccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgyMjA5RTM3MzU2RTA1MTJGQkU0RTgxQjAwRTRGMjQ4 MTg2NTA4NzAeFw0yNTEwMjAwMTE3MDJaFw0yNTEwMjMxMDI3MDJaMDMxMTAvBgNV BAMTKDY0RUE4QTFDRUM3MDA0RjdGRUZBQTZCNDQ0NkRENEE4ODBDNTc4M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmCzDMkyg9C++5MvGNvX2QLuOD rYZRhqgZb1Ne1WqQOHyArk+aa/QVJy2RBF3V2gi4PYvs6LHNynlYD0+k/s4LkeNd ZJXytdYVvr+fe9y80XWQ4S9DD8rGUFY6tKCPRdV5lVdUhSzKVhHmvCGvNXvYe4l8 WK6WeYkojINroWTSJKUkW/ouIa/2487m546yKpesR5p0fWjyketFSgKbJbLCt3P4 hM8vWWChaNkcyViLwkR04EfssmtULgPK+EoM8fXHszyiJr8rjPeDF4bTqAt9MDyl TzvgXluTVSdWMADSrdROr3E2kPA7yegFXn3Td5ECUNlQDc1/r2Q9+Vlyt9ApAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZOqKHOxwBPf++qa0RG3UqIDFeDswHwYDVR0j BBgwFoAUiCIJ43NW4FEvvk6BsA5PJIGGUIcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDc0NzFhMy1lZTUzLTQ5OWMtOWYyZC1jZjE2YjFlNGEzNTMvMC84ODIyMDlFMzcz NTZFMDUxMkZCRTRFODFCMDBFNEYyNDgxODY1MDg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODgyMjA5RTM3MzU2RTA1MTJGQkU0RTgxQjAwRTRGMjQ4MTg2 NTA4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA3NDcxYTMtZWU1My00OTljLTlm MmQtY2YxNmIxZTRhMzUzLzAvODgyMjA5RTM3MzU2RTA1MTJGQkU0RTgxQjAwRTRG MjQ4MTg2NTA4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTwO4zLmIsStWKXtUOe0IKV8jNXTzYyg8oP fSbTyOey8cYqEWu/1a6NdpbnTvrMTvCIxNZ35mnWbrR36o5lLinTNjsa5Bk6OosZ pQSMkP9+XHLkqsoejSVBY0gSxhMysJCvuPw4eOqEDDc9CL2nVbuuCIT9EX0edxUk XI+HoY+yG8tQA5sU0971SQmEmYz/RJpYuEF3mZZ33nNutV77Wv50ejltuGBF7IUg BfiPj2tCavL7GiDSWnJheLBKlyHV8uwUmXnu6EW3ImSn5BxYlHbW8OdsSOZDxG+T S6iAJq3nhjxpgpkq7CGuCnp0N1F47goGwwNuS7ZhSrdEUPbZyBw= -----END CERTIFICATE-----Generated at Tue Oct 21 00:58:39 2025 by rpki-client