$ rpki-client -vvf repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft File: 3C3C868A5674B425FAE567426BCB238E23AE20AC.mft (raw, json) Hash identifier: utpVW7eQg1vx+/bLvMxsHSTd4rbijHr/4aZQbGqPQmA= Subject key identifier: D3:80:8E:19:B0:E7:77:97:46:9F:EE:E0:63:0E:C2:F0:BA:7B:3E:35 Authority key identifier: 3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC Certificate issuer: /CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Certificate serial: 41F86E4D55F28B02E8F44E9371288675A06DC330 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft Manifest number: 0220 Signing time: Sat 18 Oct 2025 18:31:54 +0000 Manifest this update: Sat 18 Oct 2025 18:26:54 +0000 Manifest next update: Tue 21 Oct 2025 23:00:54 +0000 Files and hashes: 1: 3C3C868A5674B425FAE567426BCB238E23AE20AC.crl (hash: oqdJeKY0OviKpO+wN9KMdgsYzIBZ20nJG7k0Ur0IJLM=) 2: 3130332e3133352e312e302f32342d3234203d3e203338333230.roa (hash: jxUYJQpEaP8bPhyLYtacTJc3csgAE9Hd2kaadYQz8QA=) 3: 3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (hash: 85V6qA8RHEszjBxF6yv2LBrZ9dlUnY8/+0ZLxd1aOzQ=) 4: 3130332e3133352e302e302f32342d3234203d3e203338333230.roa (hash: ldrGJsy+/TLnpHhOovohV+mReZwkU+jIEX++pOvvnkI=) 5: 3130332e3133352e322e302f32342d3234203d3e203338333230.roa (hash: KZ/BrcpNlnq1GeOoeq+ujqu98XEmwwqQMF5ra78kfE0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:f8:6e:4d:55:f2:8b:02:e8:f4:4e:93:71:28:86:75:a0:6d:c3:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Validity Not Before: Oct 18 18:26:54 2025 GMT Not After : Oct 21 23:00:54 2025 GMT Subject: CN=D3808E19B0E77797469FEEE0630EC2F0BA7B3E35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:60:c7:bf:97:4c:a8:a1:e2:ef:1c:0a:8c:27: e9:e7:e2:2c:5d:1f:48:51:d0:0d:81:8a:9b:6b:86: ac:b9:d0:05:7f:53:13:9c:c4:05:39:e9:d8:ab:b1: 63:fb:74:50:7f:c5:df:5b:1a:a1:85:55:f9:8f:a6: c3:0a:f8:87:8b:12:85:79:bd:42:af:d3:36:b5:90: a7:44:2a:63:8b:90:03:99:29:be:19:fe:64:46:34: 79:0a:0c:93:fb:62:8f:ed:83:a4:1d:b9:c5:39:a2: d3:65:b8:41:1e:86:48:37:38:88:69:3f:58:11:41: 8c:3c:20:07:5a:7d:a2:79:c3:e3:40:37:d2:3a:cb: 6e:0e:9f:30:9d:49:0a:6f:b7:9b:7d:bf:4e:5e:6b: ca:14:77:48:55:20:42:b3:e5:fa:17:e2:dc:5d:6a: 56:f4:0c:03:a3:01:5e:18:7a:0d:67:62:b0:9e:af: 8e:cb:f9:65:8b:fb:c4:08:35:28:15:e6:64:09:46: 13:6e:00:3a:a4:25:90:c4:23:23:2e:68:6a:bb:3d: e1:a9:c0:0f:c7:c4:74:49:a8:7f:f3:41:43:60:e2: 16:dd:fc:b7:9c:b3:66:9d:57:07:58:03:f5:7d:2e: 97:4d:f8:0d:b9:83:16:4f:c8:ce:64:e1:06:f0:1b: 7e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:80:8E:19:B0:E7:77:97:46:9F:EE:E0:63:0E:C2:F0:BA:7B:3E:35 X509v3 Authority Key Identifier: keyid:3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:66:e6:c9:de:79:6c:f1:bc:dd:c9:c1:aa:3b:44:0a:18:30: f4:04:91:b9:b8:51:ea:be:f1:d5:40:75:4c:76:fb:68:cf:76: a2:c5:3b:13:81:6b:5d:87:8b:1a:7c:7f:f2:12:17:4c:c4:18: 78:1b:c5:42:d4:c6:b4:b6:36:f9:0c:fc:08:5e:0e:dc:cf:da: 2a:ca:c0:ea:d2:39:9a:b9:f2:ad:fe:16:9a:2b:cb:11:f8:ca: b8:6c:a5:05:61:32:ba:f2:e1:a0:72:d2:04:f7:84:ae:5a:74: 3c:a4:bb:0d:7d:8d:25:a9:e3:ca:a8:1b:ec:10:9f:33:ec:50: 1a:2c:0f:f7:16:ef:6d:d2:44:ef:86:d2:1c:88:5e:c5:c5:65: 82:e4:f6:ba:67:d0:d7:c0:d2:e7:7a:05:b3:11:e6:2e:0d:fd: a8:73:09:c9:46:02:ff:7c:91:3b:91:1f:61:52:81:2c:b0:cf: ab:9c:f9:67:eb:24:51:a2:e5:37:09:e1:e9:5e:06:c5:bf:83: 3c:94:51:2d:fc:bf:6b:dc:f8:d6:3e:01:de:6a:7d:67:87:80: cd:e8:f4:7a:1c:cf:dc:54:29:13:29:14:7f:62:14:41:44:e7: 7f:11:70:09:ed:91:9e:c1:24:d1:40:11:e3:e2:a0:c8:31:a6: db:f1:b7:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQfhuTVXyiwLo9E6TcSiGdaBtwzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUy M0FFMjBBQzAeFw0yNTEwMTgxODI2NTRaFw0yNTEwMjEyMzAwNTRaMDMxMTAvBgNV BAMTKEQzODA4RTE5QjBFNzc3OTc0NjlGRUVFMDYzMEVDMkYwQkE3QjNFMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzYMe/l0yooeLvHAqMJ+nn4ixd H0hR0A2Biptrhqy50AV/UxOcxAU56dirsWP7dFB/xd9bGqGFVfmPpsMK+IeLEoV5 vUKv0za1kKdEKmOLkAOZKb4Z/mRGNHkKDJP7Yo/tg6QducU5otNluEEehkg3OIhp P1gRQYw8IAdafaJ5w+NAN9I6y24OnzCdSQpvt5t9v05ea8oUd0hVIEKz5foX4txd alb0DAOjAV4Yeg1nYrCer47L+WWL+8QINSgV5mQJRhNuADqkJZDEIyMuaGq7PeGp wA/HxHRJqH/zQUNg4hbd/Lecs2adVwdYA/V9LpdN+A25gxZPyM5k4QbwG34RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU04COGbDnd5dGn+7gYw7C8Lp7PjUwHwYDVR0j BBgwFoAUPDyGilZ0tCX65WdCa8sjjiOuIKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Mjk5ZTZmMC1mMjNjLTQxZmYtYjY3Yy00MWFmMDUxMzM5ZDEvMC8zQzNDODY4QTU2 NzRCNDI1RkFFNTY3NDI2QkNCMjM4RTIzQUUyMEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUyM0FF MjBBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5OWU2ZjAtZjIzYy00MWZmLWI2 N2MtNDFhZjA1MTMzOWQxLzAvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIz OEUyM0FFMjBBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhm5sneeWzxvN3Jwao7RAoYMPQEkbm4Ueq+ 8dVAdUx2+2jPdqLFOxOBa12Hixp8f/ISF0zEGHgbxULUxrS2NvkM/AheDtzP2irK wOrSOZq58q3+FporyxH4yrhspQVhMrry4aBy0gT3hK5adDykuw19jSWp48qoG+wQ nzPsUBosD/cW723SRO+G0hyIXsXFZYLk9rpn0NfA0ud6BbMR5i4N/ahzCclGAv98 kTuRH2FSgSywz6uc+WfrJFGi5TcJ4eleBsW/gzyUUS38v2vc+NY+Ad5qfWeHgM3o 9Hocz9xUKRMpFH9iFEFE538RcAntkZ7BJNFAEePioMgxptvxt+8= -----END CERTIFICATE-----Generated at Mon Oct 20 09:29:11 2025 by rpki-client