$ rpki-client -vvf repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft File: 1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft (raw, json) Hash identifier: dyCi/wK+5ZUHzFqN33Ji/vx6aIP55haTnCYsoqJtlHE= Subject key identifier: 92:19:BA:AC:EF:2D:5E:0B:CF:79:37:03:66:77:5C:9B:FE:51:BF:6E Authority key identifier: 16:61:A1:BC:89:CC:AD:D4:C7:BE:72:30:52:AE:59:00:DE:18:1E:06 Certificate issuer: /CN=1661A1BC89CCADD4C7BE723052AE5900DE181E06 Certificate serial: 744528F7D547F1237903792CE69D3DD3FA8CA984 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft Manifest number: 04E8 Signing time: Sun 19 Oct 2025 15:42:18 +0000 Manifest this update: Sun 19 Oct 2025 15:37:18 +0000 Manifest next update: Wed 22 Oct 2025 16:21:18 +0000 Files and hashes: 1: 3230332e3136312e3138342e302f32332d3234203d3e203436303530.roa (hash: QmUK5t+kPBhbRYikNscX9LWrBhBp5pP7CeGdlMn53Do=) 2: 3230322e35322e3134362e302f32332d3234203d3e203435333234.roa (hash: fr5BMGMZ4/JWAtuc82Bwpon8VOaBOapImuPEr/qDXGY=) 3: 3130332e33302e3134372e302f32342d3234203d3e203436303530.roa (hash: sZ7Y9HidNwNbLqaWtw5ljbRqMh/n0NpDyP/tNJF266g=) 4: 1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl (hash: YGusxmeVLdAcA6r+/1OUg+CMFKiqQ8iRDFq9/jWL7Ko=) 5: 3130332e33302e3134342e302f32322d3234203d3e203436303530.roa (hash: AqVeGkcCeQqSSxTzFMHfgh7oeb2WJE9ZcEpymir7iqI=) 6: 323030313a6466353a643230303a3a2f34382d3438203d3e203436303530.roa (hash: rdX2P/62Fs2A7bSHrzzBOblACv/dlOvxDsyqbDOTmes=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 16:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:45:28:f7:d5:47:f1:23:79:03:79:2c:e6:9d:3d:d3:fa:8c:a9:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1661A1BC89CCADD4C7BE723052AE5900DE181E06 Validity Not Before: Oct 19 15:37:18 2025 GMT Not After : Oct 22 16:21:18 2025 GMT Subject: CN=9219BAACEF2D5E0BCF79370366775C9BFE51BF6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cb:01:f5:58:c4:dd:b2:41:10:db:80:d4:fa: e6:71:c6:23:d6:b8:9d:51:01:30:15:4a:18:5f:0c: d3:5b:30:42:7f:06:dd:b4:0b:bf:de:9c:37:52:9f: e6:a7:d4:35:4c:0b:29:26:2f:3a:74:13:c5:3e:04: 63:7d:fc:e0:09:39:17:bc:7f:a5:49:0b:0b:9f:2c: 2e:f3:aa:29:2c:7e:95:dc:60:3c:52:f5:c6:1c:16: 17:a5:0a:0d:39:80:0f:1a:a2:38:7e:8f:ed:28:90: fd:04:8d:ed:38:96:73:17:34:a7:06:d2:65:63:82: ff:b6:8f:63:65:86:bc:82:43:b4:a8:cb:1f:9a:c9: 00:1e:2b:76:6f:4b:c0:28:75:cc:bf:fb:a2:fc:be: 9b:0c:d5:c1:67:15:fe:09:db:e2:fe:03:4a:77:b7: f4:fd:a9:03:59:fd:55:98:39:14:a3:26:86:d3:7f: ec:c1:38:c9:1e:53:22:0d:f2:56:34:49:b1:73:5c: ca:17:98:2a:1c:14:0c:32:2d:15:db:b5:d4:9f:0e: f9:ca:a0:e9:b5:cc:31:89:53:e8:67:19:f8:5b:6f: 7e:4d:4a:71:90:cd:be:7f:bc:63:a1:f5:e3:e9:c5: 13:ec:a1:0d:08:ac:46:73:26:ee:01:6b:1e:a2:ce: fd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:19:BA:AC:EF:2D:5E:0B:CF:79:37:03:66:77:5C:9B:FE:51:BF:6E X509v3 Authority Key Identifier: keyid:16:61:A1:BC:89:CC:AD:D4:C7:BE:72:30:52:AE:59:00:DE:18:1E:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:f6:06:da:c1:16:93:0d:a9:60:ec:9c:40:ed:b8:4e:a5:9f: 2a:ad:94:51:69:09:a2:41:72:5c:ae:19:f1:0d:bf:31:1f:ef: 51:95:73:a9:ef:17:3b:05:3a:87:67:a9:fb:fe:63:58:d6:87: 56:46:60:c4:66:a8:78:98:ae:90:f7:2f:7b:50:38:eb:98:cf: 5c:3c:11:2f:aa:72:eb:2c:15:7b:c0:43:13:bf:68:8f:c1:60: 6e:2e:23:66:76:36:8e:ef:eb:7f:bb:2e:1b:3b:bc:79:c8:f7: 4c:dd:ad:98:e0:fb:03:d0:e1:7f:6d:3d:c2:ce:1d:7e:04:f0: 20:3f:6c:f6:cc:cb:1a:c9:45:9b:97:d7:26:f7:ee:71:e2:46: 1a:07:65:40:ef:b6:f1:90:ca:48:1f:eb:26:f0:e9:d5:ab:4c: 74:d6:4a:02:3a:dc:d7:1a:36:58:96:6b:8e:aa:15:63:33:38: e4:d1:3e:e3:aa:ba:19:59:f0:c0:57:85:97:ec:50:dc:b8:4b: 26:75:99:2a:63:1a:9c:d6:96:8a:65:0a:2a:d5:b2:c7:e3:79: 69:08:46:bb:b7:e5:39:eb:11:2f:36:a2:2d:19:e8:85:4a:7d: d6:1d:4e:90:f4:da:5b:18:0f:68:37:87:56:d2:f3:f9:1b:6a: 1b:74:83:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdEUo99VH8SN5A3ks5p090/qMqYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5MDBE RTE4MUUwNjAeFw0yNTEwMTkxNTM3MThaFw0yNTEwMjIxNjIxMThaMDMxMTAvBgNV BAMTKDkyMTlCQUFDRUYyRDVFMEJDRjc5MzcwMzY2Nzc1QzlCRkU1MUJGNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMywH1WMTdskEQ24DU+uZxxiPW uJ1RATAVShhfDNNbMEJ/Bt20C7/enDdSn+an1DVMCykmLzp0E8U+BGN9/OAJORe8 f6VJCwufLC7zqiksfpXcYDxS9cYcFhelCg05gA8aojh+j+0okP0Eje04lnMXNKcG 0mVjgv+2j2NlhryCQ7Soyx+ayQAeK3ZvS8Aodcy/+6L8vpsM1cFnFf4J2+L+A0p3 t/T9qQNZ/VWYORSjJobTf+zBOMkeUyIN8lY0SbFzXMoXmCocFAwyLRXbtdSfDvnK oOm1zDGJU+hnGfhbb35NSnGQzb5/vGOh9ePpxRPsoQ0IrEZzJu4Bax6izv2NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkhm6rO8tXgvPeTcDZndcm/5Rv24wHwYDVR0j BBgwFoAUFmGhvInMrdTHvnIwUq5ZAN4YHgYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MGQyZDNlMy00YzIwLTRhOTAtODMzZS1lYWQ0M2MzMzk5MWUvMC8xNjYxQTFCQzg5 Q0NBREQ0QzdCRTcyMzA1MkFFNTkwMERFMTgxRTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5MDBERTE4 MUUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDBkMmQzZTMtNGMyMC00YTkwLTgz M2UtZWFkNDNjMzM5OTFlLzAvMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5 MDBERTE4MUUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABL2BtrBFpMNqWDsnEDtuE6lnyqtlFFpCaJB clyuGfENvzEf71GVc6nvFzsFOodnqfv+Y1jWh1ZGYMRmqHiYrpD3L3tQOOuYz1w8 ES+qcussFXvAQxO/aI/BYG4uI2Z2No7v63+7Lhs7vHnI90zdrZjg+wPQ4X9tPcLO HX4E8CA/bPbMyxrJRZuX1yb37nHiRhoHZUDvtvGQykgf6ybw6dWrTHTWSgI63Nca NliWa46qFWMzOOTRPuOquhlZ8MBXhZfsUNy4SyZ1mSpjGpzWloplCirVssfjeWkI Rru35TnrES82oi0Z6IVKfdYdTpD02lsYD2g3h1bS8/kbaht0g6A= -----END CERTIFICATE-----Generated at Tue Oct 21 01:36:32 2025 by rpki-client