$ rpki-client -vvf repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft File: 3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft (raw, json) Hash identifier: PTm2YC1K6EH7eYJusfp5o7Kp4zZxIPESzS+lmm7HUSI= Subject key identifier: 55:99:03:83:28:73:92:CA:F7:B7:28:57:95:27:6E:C8:E5:FD:C5:AE Authority key identifier: 3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 Certificate issuer: /CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Certificate serial: 31ABA337DAD6107BECCBD043A898E853D6054498 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft Manifest number: 01E6 Signing time: Sat 18 Oct 2025 05:41:38 +0000 Manifest this update: Sat 18 Oct 2025 05:36:38 +0000 Manifest next update: Tue 21 Oct 2025 16:12:38 +0000 Files and hashes: 1: 3130332e32382e38302e302f32342d3234203d3e203435373233.roa (hash: IT26BOddfxbCQwV3l1VwMkd/4U8F416/+EJn9EJQonk=) 2: 3230322e312e3233362e302f32342d3234203d3e203435373233.roa (hash: PjOq+FNFeb3w0yAtv/+Tz1G1o/STxOGd/kpIjtd+xeA=) 3: 3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl (hash: a1Wi2CTrrYjPT+oKpKHgIZdt2JifrTnbQmgVlqxkG84=) 4: 3130332e32382e38332e302f32342d3234203d3e203435373233.roa (hash: vkTrRrCDHhU76EnONL3nxnhmmXwfDkffjUohD8cWjx8=) 5: 3130332e32382e38312e302f32342d3234203d3e203435373233.roa (hash: bmUaC8QF2Qe4Z7nZ16NBvJcYRhSFqhjOc2UpYEbn/vA=) 6: 3231382e3130302e37342e302f32342d3234203d3e203535363539.roa (hash: KCBeNM9Sn0PIpboyPHdjgvvuRVmSaWYIbnHGh3xSCK0=) 7: 3130332e32382e38302e302f32322d3232203d3e203435373233.roa (hash: zGHZkU5k291Inw51iFTMWdBZFLAUaohzkgU1ZQwxFDU=) 8: 3130332e32382e38322e302f32342d3234203d3e203435373233.roa (hash: tR60fCiZjd5v06AalA8X8w/5DLly0Afx7eBLVEc/3V8=) 9: 323430333a316130303a343a3a2f34372d3437203d3e203435373233.roa (hash: xiMw3g54rwkg5pTrfUcRFVEPY6CzUbv7I+jMZseSJVM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 16:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ab:a3:37:da:d6:10:7b:ec:cb:d0:43:a8:98:e8:53:d6:05:44:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Validity Not Before: Oct 18 05:36:38 2025 GMT Not After : Oct 21 16:12:38 2025 GMT Subject: CN=55990383287392CAF7B7285795276EC8E5FDC5AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e9:89:62:47:7b:bb:e0:29:7d:2d:82:46:cc: df:9d:5c:a6:98:34:d5:01:f4:ba:dd:6b:49:de:8d: 69:a1:8e:fb:1a:a7:9f:7b:0d:a8:fe:b0:73:28:c1: ad:35:2b:a4:a5:e7:12:e1:6f:b5:4f:ae:47:19:44: 78:c5:52:87:bc:dd:46:fc:d7:cd:77:89:7d:40:ac: 1d:2d:c3:82:f0:09:0b:2e:c9:58:02:ec:6b:85:30: 34:e3:1b:34:30:bf:2b:9e:0c:87:5e:e3:b1:6b:cd: 7e:ed:12:df:ed:16:fb:e8:f0:a2:6d:19:22:30:f1: 32:12:fe:30:24:57:92:55:b5:9d:c5:43:92:cb:d4: 1f:86:d7:21:69:76:bf:c8:42:c4:6e:ff:77:e9:41: 74:16:4a:6e:e3:46:13:08:7e:b4:99:2d:0e:90:b4: 24:16:16:00:9c:64:a9:b1:1d:83:03:28:19:ab:0c: ad:d6:21:39:e0:7f:4b:84:29:b2:8e:4e:a2:28:a9: b0:51:f6:c0:48:8e:5f:76:a4:52:29:a4:51:67:a6: 11:f6:26:7a:19:67:4c:6b:5e:28:86:cc:21:14:5a: 01:83:41:51:6d:70:40:c4:e0:37:79:b5:95:80:39: 4d:65:07:5d:23:7e:51:d0:24:6f:44:50:5e:10:6d: 07:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:99:03:83:28:73:92:CA:F7:B7:28:57:95:27:6E:C8:E5:FD:C5:AE X509v3 Authority Key Identifier: keyid:3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:02:f9:f5:bd:50:d1:8a:d3:0f:f8:8a:f0:9e:75:24:25:b2: 3e:2c:cb:f6:12:ab:01:11:c6:ec:05:06:c3:56:12:a5:52:27: f0:bc:e4:c5:f5:18:0c:f1:9f:53:cc:ea:7c:e3:20:1f:4c:6e: 55:a7:8c:d5:1f:13:30:2a:5a:1a:5a:57:0f:92:d0:e6:71:65: 3b:65:6c:c7:8b:64:d7:9f:21:6f:74:69:dd:96:ed:95:9e:0c: 63:e6:0e:83:ad:cc:b5:89:c3:c8:d5:17:46:18:97:0e:75:18: 9c:78:47:c1:ba:c3:a4:58:ef:03:55:32:18:c4:15:68:80:4b: df:e4:b7:15:e0:8c:7c:8c:df:ff:40:3a:41:15:95:af:ef:d7: e2:b7:8f:e1:aa:4a:8c:20:0e:0e:6b:6f:29:1b:c1:a3:48:bf: 24:93:5c:c1:43:b5:8d:6c:bf:4d:c2:60:93:47:dc:49:26:29: 5e:d0:31:5b:26:c6:53:a6:e0:d3:c0:d3:c9:77:5f:2d:4d:76: a2:e9:02:ba:13:cf:95:2e:e5:ec:4d:f6:8f:65:85:c6:7b:e2: e8:1c:7b:b9:1a:fb:f4:38:d1:8b:61:8f:10:bf:54:8f:40:dc: 74:1a:71:3f:d7:af:76:00:3f:97:4d:8f:08:e8:09:f4:7e:0d: 6b:9f:c2:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMaujN9rWEHvsy9BDqJjoU9YFRJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2 NDg5MkMyNTAeFw0yNTEwMTgwNTM2MzhaFw0yNTEwMjExNjEyMzhaMDMxMTAvBgNV BAMTKDU1OTkwMzgzMjg3MzkyQ0FGN0I3Mjg1Nzk1Mjc2RUM4RTVGREM1QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC06YliR3u74Cl9LYJGzN+dXKaY NNUB9Lrda0nejWmhjvsap597Daj+sHMowa01K6Sl5xLhb7VPrkcZRHjFUoe83Ub8 1813iX1ArB0tw4LwCQsuyVgC7GuFMDTjGzQwvyueDIde47FrzX7tEt/tFvvo8KJt GSIw8TIS/jAkV5JVtZ3FQ5LL1B+G1yFpdr/IQsRu/3fpQXQWSm7jRhMIfrSZLQ6Q tCQWFgCcZKmxHYMDKBmrDK3WITngf0uEKbKOTqIoqbBR9sBIjl92pFIppFFnphH2 JnoZZ0xrXiiGzCEUWgGDQVFtcEDE4Dd5tZWAOU1lB10jflHQJG9EUF4QbQc1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVZkDgyhzksr3tyhXlSduyOX9xa4wHwYDVR0j BBgwFoAUP26bxfFvHDq1/WNufeBv3WSJLCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MWRiMzczMC1mNDk5LTQ0OWYtYjZmMi03YTVkZWI1MzJiMGMvMC8zRjZFOUJDNUYx NkYxQzNBQjVGRDYzNkU3REUwNkZERDY0ODkyQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2NDg5 MkMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDFkYjM3MzAtZjQ5OS00NDlmLWI2 ZjItN2E1ZGViNTMyYjBjLzAvM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZG REQ2NDg5MkMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkC+fW9UNGK0w/4ivCedSQlsj4sy/YSqwER xuwFBsNWEqVSJ/C85MX1GAzxn1PM6nzjIB9MblWnjNUfEzAqWhpaVw+S0OZxZTtl bMeLZNefIW90ad2W7ZWeDGPmDoOtzLWJw8jVF0YYlw51GJx4R8G6w6RY7wNVMhjE FWiAS9/ktxXgjHyM3/9AOkEVla/v1+K3j+GqSowgDg5rbykbwaNIvySTXMFDtY1s v03CYJNH3EkmKV7QMVsmxlOm4NPA08l3Xy1NdqLpAroTz5Uu5exN9o9lhcZ74ugc e7ka+/Q40YthjxC/VI9A3HQacT/Xr3YAP5dNjwjoCfR+DWufwiM= -----END CERTIFICATE-----Generated at Mon Oct 20 10:18:09 2025 by rpki-client