$ rpki-client -vvf repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft File: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft (raw, json) Hash identifier: jcAQ8MKtk6znEoUmRNm3ID7HKTaSASp+IKt0RejIPoE= Subject key identifier: 1F:16:BD:9F:5E:52:41:F3:48:8D:80:03:46:6D:00:AE:2D:B2:92:76 Authority key identifier: 32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA Certificate issuer: /CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Certificate serial: 6183C883FAFB4628644E0F734A6AE5DA1F4405E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft Manifest number: 010C Signing time: Sat 18 Oct 2025 19:52:00 +0000 Manifest this update: Sat 18 Oct 2025 19:47:00 +0000 Manifest next update: Wed 22 Oct 2025 01:24:00 +0000 Files and hashes: 1: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: BKEcpM9Kg8YYx8TIl17vcpfRH/iW4wyrIws7bh1p6GE=) 2: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl (hash: kdlZSSLlHwS01goNH6mj4pVByfPMgvEwvryIFdL56hA=) 3: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: OPMqecBKKIwGMsBY4Yx/lNhDxmjNFnVBd5dNPmXkTCQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 01:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:83:c8:83:fa:fb:46:28:64:4e:0f:73:4a:6a:e5:da:1f:44:05:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Validity Not Before: Oct 18 19:47:00 2025 GMT Not After : Oct 22 01:24:00 2025 GMT Subject: CN=1F16BD9F5E5241F3488D8003466D00AE2DB29276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d1:25:83:17:16:64:26:a2:e9:e3:68:20:31: f6:25:94:eb:2f:e2:fd:71:c1:8d:91:62:e9:0b:74: 34:78:5a:f4:09:0c:4c:47:00:30:cc:1b:7a:1f:f4: 60:74:d9:dc:0d:02:a5:02:fa:47:8e:9a:81:2c:38: 29:1f:e6:00:d0:91:47:55:b0:87:f8:95:ed:a8:07: 2b:e8:26:1c:3e:c4:28:72:ca:76:c2:ba:6b:6c:e8: 79:37:11:ad:51:55:e5:3c:0b:dc:6b:81:93:17:6f: fd:39:8e:49:dc:9c:6d:f9:8c:c4:c4:a6:d9:6a:2a: 3f:21:34:68:0d:11:d6:03:48:45:17:30:7a:5f:02: 0b:84:69:ad:da:ef:42:ab:3c:75:97:bc:15:95:d6: e0:31:f0:a4:8f:dc:2b:2b:ca:05:e4:12:39:e2:f4: 0d:ce:67:13:cb:51:90:4a:e1:bb:ad:b4:f1:2e:0a: 39:5a:c2:ad:6d:d8:39:e0:e6:13:ed:76:25:d2:41: 58:c2:f2:df:b8:81:5a:0d:2c:cf:67:6a:91:18:f0: f0:85:22:58:10:01:5a:ea:53:fa:6f:2d:d4:a6:94: 2d:bf:c8:15:b4:d0:b5:c0:99:c6:96:cb:70:87:6b: 0c:88:91:55:3c:2c:ac:1d:79:91:e5:ba:3d:97:25: bf:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:16:BD:9F:5E:52:41:F3:48:8D:80:03:46:6D:00:AE:2D:B2:92:76 X509v3 Authority Key Identifier: keyid:32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:e6:1c:c6:7d:67:cf:aa:99:d3:72:ef:c9:41:a4:a1:70:9b: 2a:30:f0:4d:2e:bb:44:82:10:7e:e1:75:9a:35:db:4b:ad:70: dc:f5:d9:cf:89:de:70:f3:73:f4:bf:e7:2a:a7:e3:4b:0b:32: bb:bc:8d:f4:93:70:35:0d:0b:fb:8d:8e:b6:7b:18:e4:26:90: 2d:6e:7f:a8:37:3e:64:1a:c8:c5:3b:6f:1d:06:9d:4a:32:96: 7e:1b:b4:46:9d:41:cc:72:b0:83:1f:5b:b7:03:56:00:22:07: e9:91:5f:2e:64:f4:ce:d8:8b:48:7a:86:bd:25:65:f7:c2:48: e5:ca:90:8c:b0:05:42:fa:10:72:27:fb:31:eb:ba:34:77:17: a4:9b:08:d7:dc:26:cd:5d:01:ca:81:0e:fd:96:58:35:2c:0c: ac:70:f5:31:54:16:b6:47:ac:94:dd:ff:9a:dd:1b:4c:04:95: 3b:3b:26:66:0d:92:49:f9:38:55:59:90:c9:cf:20:64:a3:aa: e6:e0:25:66:4d:84:18:1b:63:f7:14:78:1a:ce:4c:03:b7:40: 69:e9:5c:3c:6c:5d:82:1e:4a:1d:01:52:be:54:47:55:b9:57: 9a:76:57:05:18:00:41:ff:43:c3:27:b5:cd:f7:9b:52:9d:ed: c4:57:10:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYYPIg/r7RihkTg9zSmrl2h9EBekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0 ODRCM0ZEQTAeFw0yNTEwMTgxOTQ3MDBaFw0yNTEwMjIwMTI0MDBaMDMxMTAvBgNV BAMTKDFGMTZCRDlGNUU1MjQxRjM0ODhEODAwMzQ2NkQwMEFFMkRCMjkyNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe0SWDFxZkJqLp42ggMfYllOsv 4v1xwY2RYukLdDR4WvQJDExHADDMG3of9GB02dwNAqUC+keOmoEsOCkf5gDQkUdV sIf4le2oByvoJhw+xChyynbCumts6Hk3Ea1RVeU8C9xrgZMXb/05jkncnG35jMTE ptlqKj8hNGgNEdYDSEUXMHpfAguEaa3a70KrPHWXvBWV1uAx8KSP3CsrygXkEjni 9A3OZxPLUZBK4buttPEuCjlawq1t2Dng5hPtdiXSQVjC8t+4gVoNLM9napEY8PCF IlgQAVrqU/pvLdSmlC2/yBW00LXAmcaWy3CHawyIkVU8LKwdeZHluj2XJb+rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHxa9n15SQfNIjYADRm0Ari2yknYwHwYDVR0j BBgwFoAUMkHYk3H/PTr8C6kR4xaoJUhLP9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGMwNzQ0MS1jZDlkLTRkODUtYWFiNC02NWY1ZGQ0ZWQ3ZTAvMC8zMjQxRDg5Mzcx RkYzRDNBRkMwQkE5MTFFMzE2QTgyNTQ4NEIzRkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0ODRC M0ZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhjMDc0NDEtY2Q5ZC00ZDg1LWFh YjQtNjVmNWRkNGVkN2UwLzAvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4 MjU0ODRCM0ZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHfmHMZ9Z8+qmdNy78lBpKFwmyow8E0uu0SC EH7hdZo120utcNz12c+J3nDzc/S/5yqn40sLMru8jfSTcDUNC/uNjrZ7GOQmkC1u f6g3PmQayMU7bx0GnUoyln4btEadQcxysIMfW7cDVgAiB+mRXy5k9M7Yi0h6hr0l ZffCSOXKkIywBUL6EHIn+zHrujR3F6SbCNfcJs1dAcqBDv2WWDUsDKxw9TFUFrZH rJTd/5rdG0wElTs7JmYNkkn5OFVZkMnPIGSjqubgJWZNhBgbY/cUeBrOTAO3QGnp XDxsXYIeSh0BUr5UR1W5V5p2VwUYAEH/Q8Mntc33m1Kd7cRXEJ4= -----END CERTIFICATE-----Generated at Mon Oct 20 04:57:48 2025 by rpki-client