$ rpki-client -vvf repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft File: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft (raw, json) Hash identifier: gv5u11E64CO0xZxereOQVcsaU8iv2PqLiEuzvcJLvdg= Subject key identifier: 62:E8:1C:01:CA:51:6B:E7:0F:1B:9F:59:7D:6A:E0:43:D5:0B:EF:95 Authority key identifier: 3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4 Certificate issuer: /CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4 Certificate serial: 789CDD6B8E2D706F567D8938D421A4233B65FA85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft Manifest number: A0 Signing time: Mon 20 Oct 2025 08:20:55 +0000 Manifest this update: Mon 20 Oct 2025 08:15:55 +0000 Manifest next update: Thu 23 Oct 2025 18:05:55 +0000 Files and hashes: 1: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl (hash: XqWKiCwrT5rejBa+CDy5OJDF/v3eGWZnQPZbDlh0XC0=) 2: 33362e35302e34342e302f32332d3234203d3e20313532303130.roa (hash: homg5w1o8Ac7RkByH0/Fbb96kiXTeJPDkxjgg7Q4x1k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:9c:dd:6b:8e:2d:70:6f:56:7d:89:38:d4:21:a4:23:3b:65:fa:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4 Validity Not Before: Oct 20 08:15:55 2025 GMT Not After : Oct 23 18:05:55 2025 GMT Subject: CN=62E81C01CA516BE70F1B9F597D6AE043D50BEF95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:19:dc:03:84:46:ab:ff:f8:f3:df:32:e6:5b: 85:e3:f4:4f:1f:8d:ce:e3:dc:52:e7:a0:b6:b7:e5: 45:67:4d:03:bd:1a:a6:de:10:cf:ca:85:c1:a8:e8: e4:df:eb:3c:a9:02:e2:f3:7c:ae:49:33:76:5c:f2: 49:c5:5c:50:ba:78:01:0d:09:6e:90:dc:95:6d:b2: 8a:cf:d5:89:fb:e4:fc:14:ce:a9:46:b0:56:9d:28: b4:1a:31:65:0e:45:a5:0a:ef:a6:6c:ae:94:3c:e5: f3:aa:ab:3f:4c:2a:f9:0b:6d:e0:4d:02:17:11:fe: 00:65:ae:54:57:ea:d5:e4:22:fe:40:49:bd:82:17: 8e:10:12:96:e8:50:a4:ab:51:42:a4:a6:e2:d2:8a: 5a:c3:48:2a:4f:d7:81:7f:54:c5:fc:d9:4c:0f:c5: 35:c1:c2:2e:f6:21:c0:ec:e9:b2:db:61:37:37:82: a7:e3:ba:7b:f1:a2:12:35:92:ca:09:cf:aa:13:bc: e4:a1:2e:b1:0f:2b:c1:39:df:49:8e:c7:44:ce:7c: ea:b3:b3:e1:d8:66:f8:64:9b:bf:f8:98:81:2f:f1: a4:6c:bb:3e:25:a9:64:5f:e9:a7:15:c9:e8:1a:4b: ca:fc:07:ad:ea:b9:e9:11:71:43:a3:98:94:f9:22: 56:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E8:1C:01:CA:51:6B:E7:0F:1B:9F:59:7D:6A:E0:43:D5:0B:EF:95 X509v3 Authority Key Identifier: keyid:3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:d9:39:b9:7e:2d:96:84:6c:34:45:03:8b:8d:76:e9:4e:0d: 72:b8:f0:0e:96:28:bc:86:03:24:aa:1e:de:b0:d6:83:97:e5: 17:71:8f:9d:57:38:02:ae:de:8a:55:b9:0b:c1:81:0e:03:0a: 53:3d:a0:a1:dd:d2:1f:11:e0:41:6f:3f:4e:da:be:6a:75:fb: b4:3b:af:de:28:5c:6c:37:31:39:ed:cc:ca:07:16:f3:28:c8: 49:8c:c3:39:ac:82:8e:5d:e7:ce:91:f2:6f:4b:97:c2:df:25: 7d:9c:f4:73:56:28:c8:6c:e0:25:43:58:1f:c7:cf:d2:12:7b: d5:1d:6a:50:7e:c1:f1:4b:fa:fb:fe:3b:45:47:63:3a:28:83: a0:13:99:dd:e9:e4:42:96:8b:fb:f8:ad:db:24:57:c9:8f:25: 4e:0c:c8:d2:aa:d7:b6:27:c1:bb:70:43:ce:19:84:45:b7:d3: 0e:6e:47:5e:57:cb:34:a2:52:33:00:4a:0c:3d:af:31:5e:ae: 1f:27:1d:a9:6a:4d:d2:f0:66:ed:c2:6e:e4:4c:9b:83:85:4a: 89:82:93:c0:17:83:d8:c4:49:86:03:0e:aa:a1:1c:4f:38:bc: 7c:7d:a7:47:f6:1c:37:53:74:e6:9b:b2:75:00:ce:99:0b:bc: e6:da:e5:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeJzda44tcG9WfYk41CGkIztl+oUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVF OUUwN0JGNDAeFw0yNTEwMjAwODE1NTVaFw0yNTEwMjMxODA1NTVaMDMxMTAvBgNV BAMTKDYyRTgxQzAxQ0E1MTZCRTcwRjFCOUY1OTdENkFFMDQzRDUwQkVGOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoGdwDhEar//jz3zLmW4Xj9E8f jc7j3FLnoLa35UVnTQO9GqbeEM/KhcGo6OTf6zypAuLzfK5JM3Zc8knFXFC6eAEN CW6Q3JVtsorP1Yn75PwUzqlGsFadKLQaMWUORaUK76ZsrpQ85fOqqz9MKvkLbeBN AhcR/gBlrlRX6tXkIv5ASb2CF44QEpboUKSrUUKkpuLSilrDSCpP14F/VMX82UwP xTXBwi72IcDs6bLbYTc3gqfjunvxohI1ksoJz6oTvOShLrEPK8E530mOx0TOfOqz s+HYZvhkm7/4mIEv8aRsuz4lqWRf6acVyegaS8r8B63quekRcUOjmJT5IlZvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYugcAcpRa+cPG59ZfWrgQ9UL75UwHwYDVR0j BBgwFoAUPOympdKxOPXgXOgV1qnZBenge/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDhlYzVlYi0wMzU0LTRkODctYjJiZS0wOGZmYWQ0YWEwNmEvMC8zQ0VDQTZBNUQy QjEzOEY1RTA1Q0U4MTVENkE5RDkwNUU5RTA3QkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVFOUUw N0JGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ4ZWM1ZWItMDM1NC00ZDg3LWIy YmUtMDhmZmFkNGFhMDZhLzAvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5 MDVFOUUwN0JGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/ZObl+LZaEbDRFA4uNdulODXK48A6WKLyG AySqHt6w1oOX5Rdxj51XOAKu3opVuQvBgQ4DClM9oKHd0h8R4EFvP07avmp1+7Q7 r94oXGw3MTntzMoHFvMoyEmMwzmsgo5d586R8m9Ll8LfJX2c9HNWKMhs4CVDWB/H z9ISe9UdalB+wfFL+vv+O0VHYzoog6ATmd3p5EKWi/v4rdskV8mPJU4MyNKq17Yn wbtwQ84ZhEW30w5uR15XyzSiUjMASgw9rzFerh8nHalqTdLwZu3CbuRMm4OFSomC k8AXg9jESYYDDqqhHE84vHx9p0f2HDdTdOabsnUAzpkLvOba5UY= -----END CERTIFICATE-----Generated at Mon Oct 20 19:01:50 2025 by rpki-client