$ rpki-client -vvf repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft File: 3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft (raw, json) Hash identifier: PbPJzboqMWAwZRXDSCMS8DdSOH9Tli/jFvN1xgnLvXI= Subject key identifier: A5:6D:29:C7:3D:CB:A4:8A:69:65:99:26:EA:9E:18:9D:D8:BD:D9:69 Authority key identifier: 3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 Certificate issuer: /CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Certificate serial: 5F1EEC4D6B87C3328E881A28AF2DFAF5F7DDE0DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer Subject info access: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft Manifest number: 023A Signing time: Sun 19 Oct 2025 06:42:02 +0000 Manifest this update: Sun 19 Oct 2025 06:37:02 +0000 Manifest next update: Wed 22 Oct 2025 08:33:02 +0000 Files and hashes: 1: 3132302e32392e3233312e302f32342d3234203d3e203139393035.roa (hash: r2yKO3KrSmkrfjQ84qnMxwLYCnCinVawrYAR52ueF/A=) 2: 3132302e32392e3233312e302f32342d3234203d3e203338373634.roa (hash: 3zNl9QPxwFV4edQhVMCJxnLjianzmdRSes5SZUBTIJM=) 3: 3132302e32392e3232382e302f32342d3234203d3e203139393035.roa (hash: qnWaLPQKCclL3KbhPyWf5fv4NRd/K4sQGvE8/3c+X3Y=) 4: 3132302e32392e3232352e302f32342d3234203d3e203338373634.roa (hash: iVloZrBIKi8lO+ez3IilhigHeiC4/XBak2SIy/5eYbE=) 5: 3132302e32392e3232362e302f32342d3234203d3e203338373634.roa (hash: mysGAJlaNM3q0YL8uE3Xz1GWVqbaXG+zqdMdDsNe4Gc=) 6: 3132302e32392e3232382e302f32342d3234203d3e203338373634.roa (hash: RPYaZow5ZwQZRWzcXVmYwaCDDEvxoHSoWyb9lPO3JzQ=) 7: 3132302e32392e3233302e302f32342d3234203d3e203139393035.roa (hash: eJhmyhXXadCdmI4sMr9QqAto/qcSNuimAa2ijC8e73Y=) 8: 3132302e32392e3232362e302f32342d3234203d3e203139393035.roa (hash: 3HF7GKrMWvA2HVJvaEA0TLWlABe/FvvXdYdd308g/bM=) 9: 3132302e32392e3232392e302f32342d3234203d3e203338373634.roa (hash: qDCFFlpgV3kLnT4aXYTKC6LV3pb8e9ELxOyK+x211n0=) 10: 3132302e32392e3233302e302f32342d3234203d3e203338373634.roa (hash: 8F55uNQoN3zi97DtY0Vq2ak+DmYZUOFPxOyq8OUlCl0=) 11: 3132302e32392e3232392e302f32342d3234203d3e203139393035.roa (hash: VUbT8SHEyKOKmASLTaMwWEhd8ggbwmzz2pEnc4bB2PQ=) 12: 3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl (hash: aKZi8oM2e0EbeIWRXijsGKgjW8NCToLAkrhg01PhZTo=) 13: 3132302e32392e3232372e302f32342d3234203d3e203338373634.roa (hash: kizpm5pMXSzgoWrppvdtyhcaCD0lO2EdJCuHJxptLZU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 08:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:1e:ec:4d:6b:87:c3:32:8e:88:1a:28:af:2d:fa:f5:f7:dd:e0:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Validity Not Before: Oct 19 06:37:02 2025 GMT Not After : Oct 22 08:33:02 2025 GMT Subject: CN=A56D29C73DCBA48A69659926EA9E189DD8BDD969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e8:ef:87:12:34:b5:18:d7:b6:31:83:d5:1e: 05:81:10:31:eb:f2:e8:52:f1:fd:9c:6c:c1:f0:6f: 8b:f4:68:39:fc:25:df:be:da:3b:13:74:88:f4:87: cb:b0:0b:e3:99:72:a6:6b:7f:8f:d1:5d:59:e0:b0: 4a:7b:80:37:bd:d1:e3:47:e7:00:a1:ad:14:c6:4c: 7d:4f:d4:65:00:85:e9:19:d8:b2:d9:96:40:0e:a4: 3f:44:94:91:a0:1f:03:04:79:46:5c:ff:c6:96:5f: 16:24:29:5c:f4:06:bc:1e:96:e2:fd:ae:53:35:e6: a8:68:ee:5d:4f:65:dc:8d:11:54:1f:f2:fc:e0:29: eb:5f:5c:fe:f4:74:1b:2b:69:42:32:05:47:17:67: 8c:db:03:05:88:11:c7:ab:4d:2f:1c:57:26:55:d7: 12:38:d6:bc:f7:f9:15:d2:69:55:9d:74:47:77:74: fb:12:07:00:d2:92:71:29:44:8d:19:92:94:9b:7e: e3:24:53:97:6d:55:e0:ae:c6:03:df:90:b0:62:ef: d8:9e:ef:a0:08:97:a3:cc:61:64:7e:c0:a1:b4:fd: ef:40:53:45:e9:41:37:83:70:1f:63:23:b0:6d:6d: f9:05:d6:e7:26:26:b6:b6:e2:8c:cc:02:e6:51:d0: 46:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:6D:29:C7:3D:CB:A4:8A:69:65:99:26:EA:9E:18:9D:D8:BD:D9:69 X509v3 Authority Key Identifier: keyid:3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:1c:7b:c2:85:df:2e:a9:45:0c:7b:79:08:43:cd:f3:70:6c: d2:e4:4e:ca:f8:3c:d1:2c:d5:2a:7c:33:00:57:9b:e4:d1:ac: c6:e8:e5:97:4d:d6:94:a2:5e:57:9b:41:df:29:72:be:41:cf: 08:13:a9:6d:b4:f9:0a:f7:aa:e8:d2:69:9d:44:d6:3d:7e:0d: 79:81:09:30:55:91:75:5d:12:5d:fe:2a:f8:0f:ea:36:d1:18: 13:d3:fb:d9:5a:32:c4:f5:7a:c9:fc:a5:30:26:87:50:9f:24: 35:2f:4f:3b:d8:06:be:18:fc:63:97:83:5b:a4:d3:41:3b:88: 98:67:2a:e0:72:0e:6b:e9:82:c4:2b:00:25:3c:c4:3e:e7:af: 4c:e3:cc:fa:a2:00:ec:a8:4d:78:cb:54:fa:7e:79:7f:48:fd: d4:cd:99:25:d4:53:6c:50:91:ca:55:02:b7:4c:6c:60:71:de: ab:2f:e3:90:df:00:5a:cc:b5:f7:48:e5:00:be:b1:56:40:87: 6b:91:1a:4b:e5:9c:df:96:f7:02:27:7d:f9:ba:94:22:1d:f8: 4d:7d:22:20:69:7b:82:9f:12:12:6a:5c:b9:16:4c:17:48:ee: e0:74:e9:45:d9:15:3c:63:d9:c7:85:bb:e1:91:aa:27:b0:ad: aa:22:64:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXx7sTWuHwzKOiBoory369ffd4N8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdB MzVCMDI1MTAeFw0yNTEwMTkwNjM3MDJaFw0yNTEwMjIwODMzMDJaMDMxMTAvBgNV BAMTKEE1NkQyOUM3M0RDQkE0OEE2OTY1OTkyNkVBOUUxODlERDhCREQ5NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY6O+HEjS1GNe2MYPVHgWBEDHr 8uhS8f2cbMHwb4v0aDn8Jd++2jsTdIj0h8uwC+OZcqZrf4/RXVngsEp7gDe90eNH 5wChrRTGTH1P1GUAhekZ2LLZlkAOpD9ElJGgHwMEeUZc/8aWXxYkKVz0BrweluL9 rlM15qho7l1PZdyNEVQf8vzgKetfXP70dBsraUIyBUcXZ4zbAwWIEcerTS8cVyZV 1xI41rz3+RXSaVWddEd3dPsSBwDSknEpRI0ZkpSbfuMkU5dtVeCuxgPfkLBi79ie 76AIl6PMYWR+wKG0/e9AU0XpQTeDcB9jI7BtbfkF1ucmJra24ozMAuZR0EZ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpW0pxz3LpIppZZkm6p4Yndi92WkwHwYDVR0j BBgwFoAUPmZijAPKuMbW/N7b4HAFV6NbAlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjFjOWNhZC1jM2I5LTQ1YTAtYmViNi1iY2U0OGUyYjIyNzIvMC8zRTY2NjI4QzAz Q0FCOEM2RDZGQ0RFREJFMDcwMDU1N0EzNUIwMjUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdBMzVC MDI1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjIxYzljYWQtYzNiOS00NWEwLWJl YjYtYmNlNDhlMmIyMjcyLzAvM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1 NTdBMzVCMDI1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALIce8KF3y6pRQx7eQhDzfNwbNLkTsr4PNEs 1Sp8MwBXm+TRrMbo5ZdN1pSiXlebQd8pcr5BzwgTqW20+Qr3qujSaZ1E1j1+DXmB CTBVkXVdEl3+KvgP6jbRGBPT+9laMsT1esn8pTAmh1CfJDUvTzvYBr4Y/GOXg1uk 00E7iJhnKuByDmvpgsQrACU8xD7nr0zjzPqiAOyoTXjLVPp+eX9I/dTNmSXUU2xQ kcpVArdMbGBx3qsv45DfAFrMtfdI5QC+sVZAh2uRGkvlnN+W9wInffm6lCId+E19 IiBpe4KfEhJqXLkWTBdI7uB06UXZFTxj2ceFu+GRqiewraoiZAM= -----END CERTIFICATE-----Generated at Mon Oct 20 02:28:20 2025 by rpki-client