$ rpki-client -vvf repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft File: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft (raw, json) Hash identifier: MUGgMn/tQVJ1JcaLF+N5MwCb+ygrQIcnwcazD6FPVGo= Subject key identifier: 67:13:F0:70:D6:CD:9B:6E:D6:33:C2:E4:34:A6:BE:5F:66:F8:24:DC Authority key identifier: 3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 Certificate issuer: /CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Certificate serial: 79E8820FC0FC9E44534121AD959C837B500CB840 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft Manifest number: 04EA Signing time: Sun 19 Oct 2025 07:50:47 +0000 Manifest this update: Sun 19 Oct 2025 07:45:47 +0000 Manifest next update: Wed 22 Oct 2025 16:31:47 +0000 Files and hashes: 1: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl (hash: tPKMxswAoVj+h27YiN9S5mzH8TPn2pEzKfhqgH3jFr4=) 2: 3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa (hash: IK+u+i97z9eMvyQxyRqv23SPg6t3j5oWeOL0K/ItAE0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 16:31:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:e8:82:0f:c0:fc:9e:44:53:41:21:ad:95:9c:83:7b:50:0c:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Validity Not Before: Oct 19 07:45:47 2025 GMT Not After : Oct 22 16:31:47 2025 GMT Subject: CN=6713F070D6CD9B6ED633C2E434A6BE5F66F824DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:6f:dc:e1:ad:7b:76:f0:4a:46:25:0a:d7:c7: 20:19:08:9b:6e:ba:0c:01:17:29:68:03:d9:70:0e: c6:0a:0a:45:ff:26:b4:13:63:be:02:f7:15:3b:39: 43:04:10:fb:00:65:21:06:70:a1:25:2b:68:46:31: f2:a2:91:05:6a:e7:93:a9:9a:f4:f7:98:b7:5e:af: 76:ff:6e:01:9c:8c:61:f8:b4:a1:04:0c:e5:32:22: a5:18:bd:da:47:fc:8b:f6:6d:59:47:1f:6e:b2:d4: b9:a1:6f:37:fb:7d:2f:6c:b2:4c:c7:09:37:24:89: 01:f8:81:72:d2:21:f9:3a:31:bf:3f:48:3b:ec:b0: f9:b3:4a:63:bf:f5:e6:e7:1d:60:05:2f:32:7d:35: db:03:e6:d4:46:4a:62:1f:64:32:b7:f5:bc:87:46: 9f:d6:ad:4e:b8:44:b0:e3:4a:a2:5d:4d:a6:e2:1a: 70:58:28:dc:0b:dd:db:ec:af:1c:02:66:b6:f1:dd: 31:42:1f:75:31:ea:6b:68:50:50:59:0d:e7:4a:07: 24:d4:f1:6f:cd:71:bc:78:ef:24:b2:f0:4d:41:15: 4f:60:1e:a6:81:70:bb:42:5c:54:8e:b2:1d:2e:ae: f3:1a:14:9a:48:59:c8:b9:3f:82:11:2f:fd:2b:59: 0b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:13:F0:70:D6:CD:9B:6E:D6:33:C2:E4:34:A6:BE:5F:66:F8:24:DC X509v3 Authority Key Identifier: keyid:3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ff:6b:9b:9b:87:5f:dc:ff:6b:0a:05:63:6d:cb:26:9b:9b: f7:97:6c:9e:ba:a2:97:41:7e:fb:47:57:00:07:77:ae:b2:9b: 6e:f0:b3:c7:a7:eb:09:a6:b9:17:42:4f:c4:f8:1e:83:07:94: 00:66:bf:a9:eb:ec:86:aa:86:69:f0:0a:ef:b8:a2:3b:d6:f2: 8e:03:7a:b8:9d:a0:50:0e:87:a7:f2:1d:a3:7e:7c:3c:90:3b: b8:5e:a4:1b:03:af:8a:95:fa:a1:d6:19:ee:46:d3:96:91:50: 9b:80:e3:20:bb:a3:45:12:03:07:96:ae:99:d8:9b:58:10:b0: 30:98:ca:70:6c:19:e7:e4:4d:f1:88:45:87:f4:70:70:90:2a: 0f:44:4e:cd:df:2a:c2:0e:44:e4:40:12:22:82:c5:5e:a4:e6: 80:3d:bc:92:68:5a:e7:ba:14:31:17:15:6c:9f:56:c3:02:23: 0e:bb:3f:9d:63:42:23:8a:80:eb:f3:e1:4e:42:81:ab:4a:94: 6e:4a:79:f6:30:89:b0:4b:6b:d6:9f:d1:69:13:53:e7:6c:25: 10:51:bf:af:ae:cf:cb:b0:f2:bd:bb:1d:37:cd:5b:d0:b5:a9: 18:c1:4c:cf:7d:5f:74:27:f3:60:66:1a:3f:a6:a0:0d:41:96: c9:36:1a:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeeiCD8D8nkRTQSGtlZyDe1AMuEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEy QzlBRDRBMjAeFw0yNTEwMTkwNzQ1NDdaFw0yNTEwMjIxNjMxNDdaMDMxMTAvBgNV BAMTKDY3MTNGMDcwRDZDRDlCNkVENjMzQzJFNDM0QTZCRTVGNjZGODI0REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvb9zhrXt28EpGJQrXxyAZCJtu ugwBFyloA9lwDsYKCkX/JrQTY74C9xU7OUMEEPsAZSEGcKElK2hGMfKikQVq55Op mvT3mLder3b/bgGcjGH4tKEEDOUyIqUYvdpH/Iv2bVlHH26y1Lmhbzf7fS9sskzH CTckiQH4gXLSIfk6Mb8/SDvssPmzSmO/9ebnHWAFLzJ9NdsD5tRGSmIfZDK39byH Rp/WrU64RLDjSqJdTabiGnBYKNwL3dvsrxwCZrbx3TFCH3Ux6mtoUFBZDedKByTU 8W/Ncbx47ySy8E1BFU9gHqaBcLtCXFSOsh0urvMaFJpIWci5P4IRL/0rWQvHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZxPwcNbNm27WM8LkNKa+X2b4JNwwHwYDVR0j BBgwFoAUOg6iohzkI6JNTQitwQhp8Sya1KIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjYxZmFiYi1kNDZmLTRmOGMtODEwMC03MTRjMjBlN2IzY2EvMC8zQTBFQTJBMjFD RTQyM0EyNEQ0RDA4QURDMTA4NjlGMTJDOUFENEEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEyQzlB RDRBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI2MWZhYmItZDQ2Zi00ZjhjLTgx MDAtNzE0YzIwZTdiM2NhLzAvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5 RjEyQzlBRDRBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3/a5ubh1/c/2sKBWNtyyabm/eXbJ66opdB fvtHVwAHd66ym27ws8en6wmmuRdCT8T4HoMHlABmv6nr7IaqhmnwCu+4ojvW8o4D eridoFAOh6fyHaN+fDyQO7hepBsDr4qV+qHWGe5G05aRUJuA4yC7o0USAweWrpnY m1gQsDCYynBsGefkTfGIRYf0cHCQKg9ETs3fKsIORORAEiKCxV6k5oA9vJJoWue6 FDEXFWyfVsMCIw67P51jQiOKgOvz4U5CgatKlG5KefYwibBLa9af0WkTU+dsJRBR v6+uz8uw8r27HTfNW9C1qRjBTM99X3Qn82BmGj+moA1Blsk2GuM= -----END CERTIFICATE-----Generated at Mon Oct 20 12:26:06 2025 by rpki-client