$ rpki-client -vvf repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft File: 3A594744F1BEA2F04C7437AD77133DD4423F2302.mft (raw, json) Hash identifier: 0ohTqoI35B4f29Jep/Q/0qj3tnaYI7xENG099q0ha/s= Subject key identifier: 4B:FB:0A:7A:23:89:49:39:C4:D4:D3:93:2B:64:D4:25:4D:CF:ED:B8 Authority key identifier: 3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 Certificate issuer: /CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Certificate serial: 20EA717B87C64BB5C776F346615EA1F5CA6ED135 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft Manifest number: 018B Signing time: Sat 18 Oct 2025 10:51:54 +0000 Manifest this update: Sat 18 Oct 2025 10:46:54 +0000 Manifest next update: Tue 21 Oct 2025 13:27:54 +0000 Files and hashes: 1: 3130332e3134362e3134342e302f32342d3234203d3e20313530313836.roa (hash: znZGLIjUzURgum/jx4W0HoiMuO981vr9z87dACOch+4=) 2: 3130332e3134362e3134352e302f32342d3234203d3e20313530313836.roa (hash: wZ4FpNzX3drEBgShz+olo2TjY92RiWtb59UljgCmsAs=) 3: 3A594744F1BEA2F04C7437AD77133DD4423F2302.crl (hash: ogU/H4cPANL0A0hTIJmD7fb2TvaSIgLUkjO6yl/6zkw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 13:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ea:71:7b:87:c6:4b:b5:c7:76:f3:46:61:5e:a1:f5:ca:6e:d1:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Validity Not Before: Oct 18 10:46:54 2025 GMT Not After : Oct 21 13:27:54 2025 GMT Subject: CN=4BFB0A7A23894939C4D4D3932B64D4254DCFEDB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:11:dc:d8:e4:c6:7c:f7:71:1c:c7:0e:5f:e2: 12:46:50:91:fe:0e:70:48:5a:0d:3d:49:b8:9e:c0: 7a:3d:24:40:f0:b6:6e:72:da:9a:47:b8:c7:33:5a: 67:69:5d:3d:8f:9c:7c:c7:6d:26:ae:f8:b3:59:48: 2c:ce:c6:00:88:31:1d:70:bc:da:53:d4:f8:c6:8e: 6d:eb:d8:d0:e1:65:6c:47:86:32:f0:9c:32:eb:50: 02:b1:e4:3b:17:b9:54:b5:42:a3:07:f9:a0:1c:e6: d0:0e:91:bb:67:1e:53:6a:a4:a8:6d:d8:bf:bf:cf: 89:ba:9b:70:58:0f:43:5f:6a:5b:ba:f5:71:32:04: 60:5c:00:5e:13:1e:60:fd:e6:bb:43:49:23:5b:18: f7:87:e6:e4:88:80:ce:ba:f4:65:44:b0:2b:68:b8: 3d:9f:df:2d:e0:5d:14:12:06:08:e4:6c:aa:77:07: 35:df:ee:71:94:b8:0a:eb:2a:32:6f:ed:18:80:07: ad:0c:17:76:f9:76:29:bd:75:0b:c0:4e:84:09:7d: 7c:67:91:2e:38:05:4a:22:e2:a7:07:b6:92:c1:be: 11:f6:09:69:1d:5c:af:e7:22:c1:3d:a0:4d:91:52: 99:45:c8:35:a3:6d:4e:df:36:11:b4:16:9a:7e:57: 88:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FB:0A:7A:23:89:49:39:C4:D4:D3:93:2B:64:D4:25:4D:CF:ED:B8 X509v3 Authority Key Identifier: keyid:3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:7c:5a:c4:c6:d2:1f:ce:22:d6:88:40:2a:33:13:09:ce:a7: ef:95:ca:2c:b7:f4:13:e7:f0:b0:06:48:ef:e8:8c:c7:23:52: 6f:d9:3e:8d:45:a8:ba:8a:0f:8f:ef:57:23:05:3d:64:72:1c: 3c:94:56:ee:dc:8d:7f:98:7d:31:1e:b4:ea:fb:fa:3b:8d:36: 12:c4:c0:02:47:b9:49:6f:1b:b6:41:ec:6f:31:57:7e:e1:29: fd:b0:cc:ef:3b:85:c8:e3:85:46:4d:5d:fb:f1:c2:4b:02:7a: 26:ea:8d:3e:b2:8e:48:1e:de:ac:1d:94:02:47:79:1f:64:88: 33:81:b0:01:23:8c:fd:4e:83:85:e4:58:9b:30:f4:33:0c:44: b5:aa:b2:5d:f6:dc:46:3d:ee:54:21:dc:ab:b5:fc:90:bb:01: fe:69:f6:9e:90:25:99:1e:82:bd:e7:31:38:e4:a7:3c:1a:b1: 98:ee:be:50:ae:fe:3f:9b:c3:c0:76:cb:5f:8d:30:8d:c3:9a: ad:ef:e8:fa:e4:ac:00:61:0a:fc:48:70:82:69:93:33:7f:c6: 22:1c:79:15:13:80:c9:65:64:31:0e:3a:8e:4b:ee:d8:a3:96: 3d:bb:e2:24:7d:4a:0a:cc:0a:6c:df:57:9e:7f:14:fc:4f:02: d3:74:d7:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIOpxe4fGS7XHdvNGYV6h9cpu0TUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0 MjNGMjMwMjAeFw0yNTEwMTgxMDQ2NTRaFw0yNTEwMjExMzI3NTRaMDMxMTAvBgNV BAMTKDRCRkIwQTdBMjM4OTQ5MzlDNEQ0RDM5MzJCNjRENDI1NERDRkVEQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQEdzY5MZ893Ecxw5f4hJGUJH+ DnBIWg09SbiewHo9JEDwtm5y2ppHuMczWmdpXT2PnHzHbSau+LNZSCzOxgCIMR1w vNpT1PjGjm3r2NDhZWxHhjLwnDLrUAKx5DsXuVS1QqMH+aAc5tAOkbtnHlNqpKht 2L+/z4m6m3BYD0Nfalu69XEyBGBcAF4THmD95rtDSSNbGPeH5uSIgM669GVEsCto uD2f3y3gXRQSBgjkbKp3BzXf7nGUuArrKjJv7RiAB60MF3b5dim9dQvAToQJfXxn kS44BUoi4qcHtpLBvhH2CWkdXK/nIsE9oE2RUplFyDWjbU7fNhG0Fpp+V4hLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS/sKeiOJSTnE1NOTK2TUJU3P7bgwHwYDVR0j BBgwFoAUOllHRPG+ovBMdDetdxM91EI/IwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDYxNDE2My00Y2E0LTQ5MzYtYmY4Yi04NGQ4YzJkMWYwMmQvMC8zQTU5NDc0NEYx QkVBMkYwNEM3NDM3QUQ3NzEzM0RENDQyM0YyMzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0MjNG MjMwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDA2MTQxNjMtNGNhNC00OTM2LWJm OGItODRkOGMyZDFmMDJkLzAvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNE RDQ0MjNGMjMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZ8WsTG0h/OItaIQCozEwnOp++Vyiy39BPn 8LAGSO/ojMcjUm/ZPo1FqLqKD4/vVyMFPWRyHDyUVu7cjX+YfTEetOr7+juNNhLE wAJHuUlvG7ZB7G8xV37hKf2wzO87hcjjhUZNXfvxwksCeibqjT6yjkge3qwdlAJH eR9kiDOBsAEjjP1Og4XkWJsw9DMMRLWqsl323EY97lQh3Ku1/JC7Af5p9p6QJZke gr3nMTjkpzwasZjuvlCu/j+bw8B2y1+NMI3Dmq3v6PrkrABhCvxIcIJpkzN/xiIc eRUTgMllZDEOOo5L7tijlj274iR9SgrMCmzfV55/FPxPAtN01xE= -----END CERTIFICATE-----Generated at Mon Oct 20 10:17:30 2025 by rpki-client