$ rpki-client -vvf repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft File: 3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft (raw, json) Hash identifier: 90gIRFVQ0bOTDl0DnKe3n6zUsJGxvUeLZt37MsiOWpY= Subject key identifier: 3D:AA:AC:19:C7:67:85:93:65:56:42:7C:E5:F8:F6:68:D2:3B:CE:3C Authority key identifier: 3D:1D:44:97:31:55:6F:8E:14:51:DE:65:BB:2E:0F:88:EF:CE:0C:A0 Certificate issuer: /CN=3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0 Certificate serial: 395C7A2CF6A6171CB13EF0477A9A7AAB75C2568E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft Manifest number: 0515 Signing time: Sun 19 Oct 2025 05:11:18 +0000 Manifest this update: Sun 19 Oct 2025 05:06:18 +0000 Manifest next update: Wed 22 Oct 2025 11:29:18 +0000 Files and hashes: 1: 3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl (hash: oWkLONC2RrVZA5ZvoaYYFoYVRyga6Gv+9/RttnaV0/I=) 2: 3230322e39332e3131322e302f32302d3234203d3e203233363936.roa (hash: LtScTHZoxOHSbHhuqbZIrkhW+lipK1u0xCr0E9aMFWE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 11:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:5c:7a:2c:f6:a6:17:1c:b1:3e:f0:47:7a:9a:7a:ab:75:c2:56:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0 Validity Not Before: Oct 19 05:06:18 2025 GMT Not After : Oct 22 11:29:18 2025 GMT Subject: CN=3DAAAC19C76785936556427CE5F8F668D23BCE3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bc:48:6f:29:21:44:86:42:7a:a2:21:7d:88: c9:41:67:48:ff:9d:da:91:df:ce:22:11:c8:a8:c0: cf:aa:a0:9c:4c:b9:52:60:e1:82:fd:d9:95:c6:f9: 09:08:70:0c:a8:32:ef:72:9d:8c:22:a0:48:61:5c: 1f:b5:cf:2c:5a:e8:34:aa:5e:07:0c:31:27:06:00: b9:ce:32:c8:02:76:90:10:9b:ac:49:f4:96:da:f5: 59:0a:ac:51:5a:72:bd:a5:0c:a4:fc:4a:70:80:72: d7:46:8c:86:1c:ad:42:9d:22:3e:7f:32:ba:76:95: 9f:ec:25:54:21:04:56:7e:45:1a:cc:63:b7:2b:fd: 40:6a:b2:98:38:2f:81:0f:30:33:bf:38:6f:06:d6: 94:76:91:39:52:9a:96:aa:aa:59:04:77:d6:e5:8e: 34:a9:0e:05:34:fc:53:06:80:c3:15:d9:44:15:0a: ca:52:b7:85:f1:2a:55:04:47:47:52:ba:af:90:5b: 12:28:d9:08:02:e9:22:c4:81:45:c4:05:79:f0:e1: b6:4b:34:bc:57:c1:ef:98:71:fc:da:c5:ca:b8:c4: 22:b3:2a:3b:72:fa:8d:8c:e1:0f:ee:72:a0:ee:24: 23:68:79:4a:82:a9:5e:3d:eb:37:12:64:c4:d9:40: b4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AA:AC:19:C7:67:85:93:65:56:42:7C:E5:F8:F6:68:D2:3B:CE:3C X509v3 Authority Key Identifier: keyid:3D:1D:44:97:31:55:6F:8E:14:51:DE:65:BB:2E:0F:88:EF:CE:0C:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:18:9e:32:9d:e3:cc:e2:de:3d:93:1f:d8:1d:be:c5:8e:a4: 5c:5c:d1:48:dd:eb:8e:d4:a2:47:30:c3:44:f4:82:70:f9:51: 7c:02:88:62:7b:d0:20:f6:c3:25:82:78:36:3c:68:51:e8:f1: b7:9a:03:cc:3b:fa:54:04:d9:49:b9:3a:51:ed:f6:c2:1f:a5: 7a:4a:56:20:49:37:e8:0a:d8:cd:73:cf:74:64:80:a7:f8:94: a3:54:28:76:1e:7b:a4:e5:81:57:5e:eb:c2:05:cb:be:ff:73: 9b:51:7a:2f:6c:f5:25:b4:f3:95:5a:fa:e4:e3:41:bd:62:ce: bf:df:94:e5:01:3a:50:9a:d3:12:f3:44:65:08:ec:40:b5:81: 70:d8:fd:71:54:a5:ef:68:59:46:3b:5a:49:5d:ee:e1:05:33: 37:a6:17:5b:ef:f4:0e:c9:c9:23:95:1c:17:a8:d2:08:68:37: 9b:4e:47:a1:aa:bd:32:e0:b5:70:82:62:82:bd:a3:20:dc:4f: 17:85:72:c5:64:0f:7a:b4:8f:90:a9:43:aa:cf:df:6e:23:db: 91:b8:0b:c4:67:38:46:56:52:57:15:d4:32:86:eb:79:4c:fe: 1f:c8:59:4b:09:9d:37:56:51:23:e5:ba:c7:2a:e6:6f:eb:23: ac:4e:ad:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOVx6LPamFxyxPvBHepp6q3XCVo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBGODhF RkNFMENBMDAeFw0yNTEwMTkwNTA2MThaFw0yNTEwMjIxMTI5MThaMDMxMTAvBgNV BAMTKDNEQUFBQzE5Qzc2Nzg1OTM2NTU2NDI3Q0U1RjhGNjY4RDIzQkNFM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrvEhvKSFEhkJ6oiF9iMlBZ0j/ ndqR384iEciowM+qoJxMuVJg4YL92ZXG+QkIcAyoMu9ynYwioEhhXB+1zyxa6DSq XgcMMScGALnOMsgCdpAQm6xJ9Jba9VkKrFFacr2lDKT8SnCActdGjIYcrUKdIj5/ Mrp2lZ/sJVQhBFZ+RRrMY7cr/UBqspg4L4EPMDO/OG8G1pR2kTlSmpaqqlkEd9bl jjSpDgU0/FMGgMMV2UQVCspSt4XxKlUER0dSuq+QWxIo2QgC6SLEgUXEBXnw4bZL NLxXwe+Ycfzaxcq4xCKzKjty+o2M4Q/ucqDuJCNoeUqCqV496zcSZMTZQLRlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPaqsGcdnhZNlVkJ85fj2aNI7zjwwHwYDVR0j BBgwFoAUPR1ElzFVb44UUd5luy4PiO/ODKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM3Mzk2Yy00YmJlLTRjNmUtOGY1MC00NDJjMjA1ZTA3MGMvMC8zRDFENDQ5NzMx NTU2RjhFMTQ1MURFNjVCQjJFMEY4OEVGQ0UwQ0EwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBGODhFRkNF MENBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjNzM5NmMtNGJiZS00YzZlLThm NTAtNDQyYzIwNWUwNzBjLzAvM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBG ODhFRkNFMENBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4YnjKd48zi3j2TH9gdvsWOpFxc0Ujd647U okcww0T0gnD5UXwCiGJ70CD2wyWCeDY8aFHo8beaA8w7+lQE2Um5OlHt9sIfpXpK ViBJN+gK2M1zz3RkgKf4lKNUKHYee6TlgVde68IFy77/c5tRei9s9SW085Va+uTj Qb1izr/flOUBOlCa0xLzRGUI7EC1gXDY/XFUpe9oWUY7Wkld7uEFMzemF1vv9A7J ySOVHBeo0ghoN5tOR6GqvTLgtXCCYoK9oyDcTxeFcsVkD3q0j5CpQ6rP324j25G4 C8RnOEZWUlcV1DKG63lM/h/IWUsJnTdWUSPluscq5m/rI6xOrUA= -----END CERTIFICATE-----Generated at Mon Oct 20 19:57:44 2025 by rpki-client