$ rpki-client -vvf repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft File: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft (raw, json) Hash identifier: yZOXY79qxFWZY+Jl9rNxuMfOlq1eu1YuOr7hBz19YL4= Subject key identifier: 7E:17:76:4F:E7:B4:E6:93:C6:B8:22:2E:31:87:0A:11:F1:55:56:77 Authority key identifier: 3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 Certificate issuer: /CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Certificate serial: 7FF6780E96D5805A1C5228B9496F8242B4B14766 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft Manifest number: 011D Signing time: Mon 20 Oct 2025 04:00:44 +0000 Manifest this update: Mon 20 Oct 2025 03:55:44 +0000 Manifest next update: Thu 23 Oct 2025 08:41:44 +0000 Files and hashes: 1: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl (hash: GahIPlMgjxxjyRi1KcDdUCYyATcZR2j2kNyioBxhyqc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 08:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:f6:78:0e:96:d5:80:5a:1c:52:28:b9:49:6f:82:42:b4:b1:47:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Validity Not Before: Oct 20 03:55:44 2025 GMT Not After : Oct 23 08:41:44 2025 GMT Subject: CN=7E17764FE7B4E693C6B8222E31870A11F1555677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1c:18:53:8c:0a:56:2d:71:61:b7:4c:83:30: 44:ca:99:4a:2f:9a:1f:57:91:f1:d7:d3:8b:56:e4: 62:e9:86:96:28:bf:65:22:74:42:51:c9:84:8a:79: 7a:46:94:7c:be:26:34:4a:d6:d5:07:86:73:5b:b3: 6f:d2:7f:2e:04:f0:1a:56:b5:a2:d5:1a:16:8e:72: de:56:1e:41:84:01:84:c2:fe:25:44:e3:9c:59:f5: 1a:dd:04:38:49:fc:e0:6a:f3:1f:d7:b2:b6:ba:ae: d2:97:2e:87:95:c6:23:a2:53:64:72:4b:74:d3:b4: 61:0b:08:94:b6:82:90:d8:d9:04:cf:e3:e4:61:47: de:38:c3:60:69:92:b1:12:4d:c0:bc:64:47:40:84: db:ac:51:3d:1c:a9:ba:3c:f5:11:53:2e:4f:40:1d: 01:b1:cd:22:21:c5:72:9f:f7:b3:14:f2:b3:34:9e: 9f:9a:be:5f:3b:46:24:1f:de:37:86:d0:72:16:29: e6:31:84:29:48:07:cf:33:2c:53:eb:7a:12:d5:fb: 3b:d9:ca:5d:01:b7:a5:11:c4:2b:27:9e:69:57:27: db:0a:ea:35:a7:e1:92:0c:34:ea:dd:05:c4:6c:bd: 22:f8:39:87:e8:eb:16:e1:6d:98:e9:7d:4f:e5:55: 31:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:17:76:4F:E7:B4:E6:93:C6:B8:22:2E:31:87:0A:11:F1:55:56:77 X509v3 Authority Key Identifier: keyid:3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:cd:f0:4d:81:f6:d9:d5:db:da:66:b8:a4:07:1b:30:22:98: cf:e6:c3:60:ea:3e:29:34:dc:11:b2:a8:09:ac:d7:8f:bc:e6: b1:9b:c7:62:ec:17:0b:9b:2b:d2:d3:b8:02:3e:e7:40:d6:a2: 68:2d:40:2a:a3:e8:12:d9:0d:1c:76:9f:47:b5:bf:07:23:f7: 08:0a:4e:fe:4a:7c:7d:cb:bd:7b:b8:21:34:fc:98:3a:48:5e: ca:3b:0f:42:61:4e:f6:d5:37:ad:b9:9b:50:7f:78:3e:93:11: e9:e5:25:f8:44:c0:67:60:80:29:c7:3d:1e:35:87:a4:c3:f0: dd:f6:d6:b5:7b:ea:56:b3:53:9d:ed:eb:42:d3:27:2e:22:70: de:e3:5f:df:b2:b0:f2:01:53:67:ad:6b:4b:54:05:48:1e:2d: b5:b7:50:b2:7e:c7:0e:ea:6b:43:69:3f:4f:ff:c4:8e:3c:a0: 26:01:c7:fb:cf:18:a1:df:83:e6:f2:7d:67:90:61:85:cb:08: e4:1e:71:c8:18:49:6f:ab:72:58:53:f7:a1:13:07:80:15:6e: 81:a6:ce:ff:c4:51:9c:96:c7:24:88:08:ea:bd:37:82:b2:8a: 84:82:5c:10:4b:cf:22:5f:b2:72:ab:e6:f5:49:9d:29:2f:b1: 70:bc:36:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf/Z4DpbVgFocUii5SW+CQrSxR2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMw M0EwREEwMDAeFw0yNTEwMjAwMzU1NDRaFw0yNTEwMjMwODQxNDRaMDMxMTAvBgNV BAMTKDdFMTc3NjRGRTdCNEU2OTNDNkI4MjIyRTMxODcwQTExRjE1NTU2NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhHBhTjApWLXFht0yDMETKmUov mh9XkfHX04tW5GLphpYov2UidEJRyYSKeXpGlHy+JjRK1tUHhnNbs2/Sfy4E8BpW taLVGhaOct5WHkGEAYTC/iVE45xZ9RrdBDhJ/OBq8x/Xsra6rtKXLoeVxiOiU2Ry S3TTtGELCJS2gpDY2QTP4+RhR944w2BpkrESTcC8ZEdAhNusUT0cqbo89RFTLk9A HQGxzSIhxXKf97MU8rM0np+avl87RiQf3jeG0HIWKeYxhClIB88zLFPrehLV+zvZ yl0Bt6URxCsnnmlXJ9sK6jWn4ZIMNOrdBcRsvSL4OYfo6xbhbZjpfU/lVTElAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfhd2T+e05pPGuCIuMYcKEfFVVncwHwYDVR0j BBgwFoAUPWt9HnGDliz97RifbDb/8wOg2gAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmJkMGU5NC04NjAzLTQ1N2YtYjUzNy05MjMxMDg0YmM0NTAvMC8zRDZCN0QxRTcx ODM5NjJDRkRFRDE4OUY2QzM2RkZGMzAzQTBEQTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMwM0Ew REEwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJiZDBlOTQtODYwMy00NTdmLWI1 MzctOTIzMTA4NGJjNDUwLzAvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZG RjMwM0EwREEwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7N8E2B9tnV29pmuKQHGzAimM/mw2DqPik0 3BGyqAms14+85rGbx2LsFwubK9LTuAI+50DWomgtQCqj6BLZDRx2n0e1vwcj9wgK Tv5KfH3LvXu4ITT8mDpIXso7D0JhTvbVN625m1B/eD6TEenlJfhEwGdggCnHPR41 h6TD8N321rV76lazU53t60LTJy4icN7jX9+ysPIBU2eta0tUBUgeLbW3ULJ+xw7q a0NpP0//xI48oCYBx/vPGKHfg+byfWeQYYXLCOQeccgYSW+rclhT96ETB4AVboGm zv/EUZyWxySICOq9N4KyioSCXBBLzyJfsnKr5vVJnSkvsXC8NmE= -----END CERTIFICATE-----Generated at Mon Oct 20 17:55:41 2025 by rpki-client