$ rpki-client -vvf repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft File: 3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft (raw, json) Hash identifier: u9/5x63ASzaKDduyP3b/XRO4724FZykoJlwy1q8Md8Q= Subject key identifier: DB:98:9D:86:57:F0:B5:2F:C4:9C:84:32:6E:62:24:F1:76:86:8B:45 Authority key identifier: 3A:5E:DA:CC:61:BD:7D:05:EB:D4:24:BB:DB:F5:1D:4C:50:85:2A:67 Certificate issuer: /CN=3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67 Certificate serial: 5531B9849653DC63921DE7AF4FB05A16B02820D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft Manifest number: 0179 Signing time: Mon 20 Oct 2025 10:01:01 +0000 Manifest this update: Mon 20 Oct 2025 09:56:01 +0000 Manifest next update: Thu 23 Oct 2025 17:11:01 +0000 Files and hashes: 1: 3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa (hash: vmw9bcS7HYiEIqjVICRaVcatSeJQ8ZNuTTgtgTfawew=) 2: 3130332e3232372e3138362e302f32332d3233203d3e20313432333730.roa (hash: D5hukbaY+N3AjWmkuBGFFTwqc+CzamYmFL0amMEyMMM=) 3: 3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl (hash: KYpFNpCHQw23xHNDvsoMAPgEvzsKg1NtBFLDXer4Voo=) 4: 3130332e3232372e3138362e302f32342d3234203d3e20313432333730.roa (hash: Ew2OSWEohUTuvmIQMM4jLPYBjKqzXCpLNwLiyPu5TfM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:31:b9:84:96:53:dc:63:92:1d:e7:af:4f:b0:5a:16:b0:28:20:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67 Validity Not Before: Oct 20 09:56:01 2025 GMT Not After : Oct 23 17:11:01 2025 GMT Subject: CN=DB989D8657F0B52FC49C84326E6224F176868B45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:90:34:a8:b7:a1:07:cb:bf:2d:3e:64:99:de: 2f:c5:f1:e5:a4:86:9e:00:f8:8a:41:66:9c:45:62: e3:bd:99:c9:d3:9b:c9:6d:00:3c:32:9b:4b:ba:48: d8:4e:0c:d1:65:a3:82:46:1c:df:fb:1a:7d:9a:f7: cf:bb:b2:e5:14:36:50:ca:2a:1d:02:b3:70:a9:35: ce:4e:18:cd:91:6a:f1:1b:ae:c4:41:84:7c:f7:14: ea:b1:d1:31:f0:ad:0e:48:fe:22:4c:fb:42:23:61: 1a:19:ea:e1:e8:dd:7d:87:fb:14:a9:62:9a:88:fa: 50:1e:3f:59:75:c7:c7:29:a9:72:09:60:ba:af:c3: 61:bc:03:4e:4d:7d:49:6b:c3:04:81:0b:af:5d:9e: a9:5e:23:03:23:f6:9a:2f:8d:33:d0:c4:2d:cd:da: 41:20:6f:14:37:b4:85:f4:52:40:3c:fd:b4:9f:05: 30:5d:c9:37:db:2d:b6:11:bd:d5:75:f7:65:46:80: 0e:60:99:ed:31:58:5d:29:93:a0:93:2d:12:a0:84: 14:f2:a4:e8:65:e4:94:99:c6:ee:a1:5a:af:30:a5: 5a:a4:f2:ac:74:fc:7a:11:21:c4:7d:d4:3a:a9:8d: 58:bc:65:0d:3d:54:3c:0b:6e:81:d9:0e:88:33:2c: 8d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:98:9D:86:57:F0:B5:2F:C4:9C:84:32:6E:62:24:F1:76:86:8B:45 X509v3 Authority Key Identifier: keyid:3A:5E:DA:CC:61:BD:7D:05:EB:D4:24:BB:DB:F5:1D:4C:50:85:2A:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:1e:a8:2a:1d:c1:ab:ab:3f:a7:b7:e5:b3:4d:d4:04:7c:26: dd:61:21:9d:d3:bb:86:2d:58:06:3d:31:dc:80:6d:ad:48:67: b7:7b:39:48:5f:ce:ce:9e:b3:24:a7:1d:3c:8e:01:0b:f1:0b: 84:62:b3:89:a3:75:50:ed:ac:84:ab:57:bf:09:09:fa:22:bf: d3:93:a6:62:71:05:e7:a5:74:b6:8a:ff:29:7c:29:f3:f8:2d: a4:5a:72:62:38:c7:37:76:b8:48:2a:2b:53:87:aa:2e:70:10: d6:af:77:c6:a7:b9:c3:2e:c4:16:67:e2:64:92:f8:50:c7:d6: ac:8c:4b:40:36:76:6f:16:e5:55:16:00:1c:60:c3:bd:97:f4: b7:04:a5:e6:85:8b:a4:9b:ad:e8:1a:84:ec:a4:61:b9:e9:ef: 73:7d:78:4f:f3:3b:41:6f:65:cd:23:43:2f:6b:1f:e0:c7:13: f2:6f:c2:2c:3a:94:38:76:9d:4d:cc:25:4d:f9:ef:0c:69:6f: 0f:52:2f:2c:2d:9f:8d:97:a8:49:c7:5b:63:eb:44:3f:44:c1: 34:99:34:2a:c5:3b:c4:e8:a8:e5:44:4e:da:05:c5:88:d5:3e: 1d:23:df:ee:af:2e:11:52:a8:e6:7f:81:58:c2:b2:b3:4d:20: 4b:d5:e4:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVTG5hJZT3GOSHeevT7BaFrAoINQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFENEM1 MDg1MkE2NzAeFw0yNTEwMjAwOTU2MDFaFw0yNTEwMjMxNzExMDFaMDMxMTAvBgNV BAMTKERCOTg5RDg2NTdGMEI1MkZDNDlDODQzMjZFNjIyNEYxNzY4NjhCNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMkDSot6EHy78tPmSZ3i/F8eWk hp4A+IpBZpxFYuO9mcnTm8ltADwym0u6SNhODNFlo4JGHN/7Gn2a98+7suUUNlDK Kh0Cs3CpNc5OGM2RavEbrsRBhHz3FOqx0THwrQ5I/iJM+0IjYRoZ6uHo3X2H+xSp YpqI+lAeP1l1x8cpqXIJYLqvw2G8A05NfUlrwwSBC69dnqleIwMj9povjTPQxC3N 2kEgbxQ3tIX0UkA8/bSfBTBdyTfbLbYRvdV192VGgA5gme0xWF0pk6CTLRKghBTy pOhl5JSZxu6hWq8wpVqk8qx0/HoRIcR91DqpjVi8ZQ09VDwLboHZDogzLI03AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU25idhlfwtS/EnIQybmIk8XaGi0UwHwYDVR0j BBgwFoAUOl7azGG9fQXr1CS72/UdTFCFKmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjM4OGY2ZS05OTc0LTQ0NTctYWY0Yi01YzljODJmNTBlOTcvMC8zQTVFREFDQzYx QkQ3RDA1RUJENDI0QkJEQkY1MUQ0QzUwODUyQTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFENEM1MDg1 MkE2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIzODhmNmUtOTk3NC00NDU3LWFm NGItNWM5YzgyZjUwZTk3LzAvM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFE NEM1MDg1MkE2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF8eqCodwaurP6e35bNN1AR8Jt1hIZ3Tu4Yt WAY9MdyAba1IZ7d7OUhfzs6esySnHTyOAQvxC4Ris4mjdVDtrISrV78JCfoiv9OT pmJxBeeldLaK/yl8KfP4LaRacmI4xzd2uEgqK1OHqi5wENavd8anucMuxBZn4mSS +FDH1qyMS0A2dm8W5VUWABxgw72X9LcEpeaFi6SbregahOykYbnp73N9eE/zO0Fv Zc0jQy9rH+DHE/Jvwiw6lDh2nU3MJU357wxpbw9SLywtn42XqEnHW2PrRD9EwTSZ NCrFO8ToqOVETtoFxYjVPh0j3+6vLhFSqOZ/gVjCsrNNIEvV5Kc= -----END CERTIFICATE-----Generated at Mon Oct 20 20:22:42 2025 by rpki-client