$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft File: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft (raw, json) Hash identifier: EAmPiRkESaCsT/YzkTzwLod5KZOAwasvtQRQIzfYD4U= Subject key identifier: 6C:3F:8E:B3:3A:CC:D8:17:5B:CF:EB:D9:93:EF:0C:3B:AC:25:92:AA Authority key identifier: 3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 Certificate issuer: /CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Certificate serial: 7E5AC8D6303C93B726D6F2F30C8E9F36B01ADB42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft Manifest number: D8 Signing time: Sun 19 Oct 2025 19:02:22 +0000 Manifest this update: Sun 19 Oct 2025 18:57:22 +0000 Manifest next update: Wed 22 Oct 2025 23:52:22 +0000 Files and hashes: 1: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl (hash: F7lTHCCnNG+/OJsG11Nl7i78B8LtuHvrgye0oMABrPY=) 2: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: Sfdp2ETmAB6FU1WSvmecpTzRs2Nz0Rf6LLcGShnuuzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 23:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:5a:c8:d6:30:3c:93:b7:26:d6:f2:f3:0c:8e:9f:36:b0:1a:db:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Validity Not Before: Oct 19 18:57:22 2025 GMT Not After : Oct 22 23:52:22 2025 GMT Subject: CN=6C3F8EB33ACCD8175BCFEBD993EF0C3BAC2592AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2a:36:88:49:f5:34:03:c6:36:86:65:66:c4: 51:4e:aa:33:5f:10:dc:59:3f:f0:b1:fb:df:be:8e: 65:a4:c0:6b:fd:9a:d8:5e:12:b0:67:e3:bd:f5:0b: a7:0e:98:70:62:a7:78:4e:a9:b0:ec:77:e1:08:cf: 53:14:02:c2:8c:2b:2b:d7:70:85:32:30:41:bb:ac: 14:b0:e3:1b:62:5e:53:6f:30:06:ec:36:43:85:1b: d5:1d:f1:73:26:5f:b9:90:03:97:68:f3:c9:4a:bd: f3:e7:96:7c:4d:fb:bb:98:77:0c:10:6e:4b:c8:9d: 7e:d7:06:4e:ff:44:d9:95:19:b0:9a:be:bb:22:87: e3:89:b2:9c:30:d7:f0:2d:ba:5b:93:c1:77:e7:e1: e6:df:64:a5:17:43:b7:c2:ce:9b:d7:4f:bb:55:08: a4:9a:cb:b6:3b:fb:55:45:1c:df:8d:83:48:f6:7c: 1a:a4:f9:d0:1d:89:68:22:86:74:ae:a6:80:e3:64: 04:6d:5a:9a:b8:51:86:2a:2b:c9:83:08:95:65:4a: 48:51:33:91:20:a8:44:a7:67:0e:a3:b9:b3:7f:e8: 54:5b:ad:fd:46:b6:06:1e:ed:d0:41:91:5f:b1:77: 0f:22:4d:72:98:c6:b6:dc:5a:a4:ab:f5:cd:84:78: 57:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:3F:8E:B3:3A:CC:D8:17:5B:CF:EB:D9:93:EF:0C:3B:AC:25:92:AA X509v3 Authority Key Identifier: keyid:3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c2:41:4d:5d:4e:17:9c:9e:8b:24:34:56:d1:0b:66:94:10: 87:af:fb:95:db:ec:03:10:0f:da:a0:98:7d:e5:ee:4e:1d:23: bc:6d:09:60:73:5d:3e:a4:94:27:bd:70:08:d6:65:c9:2d:2b: d7:6f:ec:28:1e:a2:38:b3:74:6f:0b:8f:69:c5:7e:bc:24:1a: a3:27:eb:d2:b6:bc:a3:9d:80:b5:8b:f4:3a:51:35:57:c4:cf: 20:af:e2:78:52:a1:44:15:47:33:10:cd:9e:0c:02:43:18:9c: 3b:26:9d:2f:bf:3d:9a:c3:30:4d:e3:13:f0:c8:07:3d:c4:8f: fb:1a:6b:97:54:54:fe:87:63:fd:ad:72:c4:7c:1c:dc:d0:61: 76:0c:a3:be:e1:b0:5f:0b:01:38:ff:a4:ce:5c:8f:b9:f2:19: b6:9f:8c:0d:f2:44:2f:86:dd:40:aa:1b:86:97:b5:19:1c:c4: bd:d7:44:70:5d:46:c7:7a:1e:d8:d5:ae:bd:6c:17:fe:e9:8e: c1:be:df:82:75:58:6a:98:10:97:8d:f4:b2:b4:b7:1c:88:86: a1:04:26:17:ae:9d:d9:f3:9f:fe:d4:7b:31:9c:a0:04:21:6a: c9:31:d1:67:6b:2a:7e:6c:db:70:8b:6e:af:3c:78:9a:c2:86: cb:a9:a8:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUflrI1jA8k7cm1vLzDI6fNrAa20IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4 RjM4QkFBNjAeFw0yNTEwMTkxODU3MjJaFw0yNTEwMjIyMzUyMjJaMDMxMTAvBgNV BAMTKDZDM0Y4RUIzM0FDQ0Q4MTc1QkNGRUJEOTkzRUYwQzNCQUMyNTkyQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgKjaISfU0A8Y2hmVmxFFOqjNf ENxZP/Cx+9++jmWkwGv9mtheErBn4731C6cOmHBip3hOqbDsd+EIz1MUAsKMKyvX cIUyMEG7rBSw4xtiXlNvMAbsNkOFG9Ud8XMmX7mQA5do88lKvfPnlnxN+7uYdwwQ bkvInX7XBk7/RNmVGbCavrsih+OJspww1/AtuluTwXfn4ebfZKUXQ7fCzpvXT7tV CKSay7Y7+1VFHN+Ng0j2fBqk+dAdiWgihnSupoDjZARtWpq4UYYqK8mDCJVlSkhR M5EgqESnZw6jubN/6FRbrf1GtgYe7dBBkV+xdw8iTXKYxrbcWqSr9c2EeFd1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbD+OszrM2Bdbz+vZk+8MO6wlkqowHwYDVR0j BBgwFoAUP/3FAukK+OZv3c0KbfMdFo84uqYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMS8zRkZEQzUwMkU5 MEFGOEU2NkZERENEMEE2REYzMUQxNjhGMzhCQUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4RjM4 QkFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzEvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFE MTY4RjM4QkFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/CQU1dThecnoskNFbRC2aUEIev+5Xb7AMQ D9qgmH3l7k4dI7xtCWBzXT6klCe9cAjWZcktK9dv7CgeojizdG8Lj2nFfrwkGqMn 69K2vKOdgLWL9DpRNVfEzyCv4nhSoUQVRzMQzZ4MAkMYnDsmnS+/PZrDME3jE/DI Bz3Ej/saa5dUVP6HY/2tcsR8HNzQYXYMo77hsF8LATj/pM5cj7nyGbafjA3yRC+G 3UCqG4aXtRkcxL3XRHBdRsd6HtjVrr1sF/7pjsG+34J1WGqYEJeN9LK0txyIhqEE Jheundnzn/7UezGcoAQhaskx0WdrKn5s23CLbq88eJrChsupqIw= -----END CERTIFICATE-----Generated at Mon Oct 20 14:58:19 2025 by rpki-client