$ rpki-client -vvf repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft File: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft (raw, json) Hash identifier: qtLLLhCu5TbJLBzjQal7x44XfcsxHB/kYy7F6jkOwmk= Subject key identifier: 52:33:A0:58:2C:43:B2:9F:4C:79:87:3B:30:35:F7:E3:67:18:99:C2 Authority key identifier: C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 Certificate issuer: /CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Certificate serial: 5496D593A51CA821C3028AC71A9ECEAC27B9CCEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft Manifest number: 010D Signing time: Sat 18 Oct 2025 18:42:04 +0000 Manifest this update: Sat 18 Oct 2025 18:37:04 +0000 Manifest next update: Tue 21 Oct 2025 21:03:04 +0000 Files and hashes: 1: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl (hash: Xy2EVQuQ546cNV9RJAR1s4Vm/MyNBHziUKiMMKcuV+4=) 2: 3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa (hash: Hi9atmKGqBLh80IcI4YfkhZtw64e+ySR+ExhE9rM6A4=) 3: 3231302e37392e3134332e302f32342d3234203d3e20313431363037.roa (hash: jqfTRowotRE9toTW7s6XxuVzWTLvd0wPa0s2vyImrss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 21:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:96:d5:93:a5:1c:a8:21:c3:02:8a:c7:1a:9e:ce:ac:27:b9:cc:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Validity Not Before: Oct 18 18:37:04 2025 GMT Not After : Oct 21 21:03:04 2025 GMT Subject: CN=5233A0582C43B29F4C79873B3035F7E3671899C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:55:e8:fa:67:9a:9e:f5:9b:e6:18:16:1b:62: af:32:ad:2c:29:cc:c9:ac:34:4e:ec:e6:6f:15:e1: 68:86:1e:5b:34:e6:24:eb:d3:bf:5e:db:ab:e7:05: ae:c0:42:f5:f3:92:da:dd:4f:c0:df:f7:04:99:7d: 8d:5c:ca:78:bf:fd:57:2a:7f:53:8e:cf:f0:3d:bb: 5a:61:07:6e:c5:ae:a0:37:a7:72:f5:ab:36:d6:1d: 11:1b:ee:2c:a9:d6:7d:c5:0a:d8:20:02:b2:c0:13: d8:bb:30:a3:32:f3:72:ec:49:e5:a4:36:d0:75:b2: ae:f7:88:65:bf:81:47:15:d7:69:c5:e8:3b:bd:c8: c5:9d:c0:64:a2:e1:51:0a:43:30:91:08:9f:49:21: 8b:8d:66:b8:78:b4:95:75:9a:08:7e:e3:9c:2b:89: e8:39:cc:2b:78:2e:f7:5f:7c:5f:66:6b:ec:3b:82: 6e:a6:2b:6f:2f:43:e0:be:0b:b9:02:4d:6f:0d:03: 6c:e2:23:ce:f4:74:13:9a:b4:33:85:ac:39:23:4c: 02:04:72:3b:c9:4a:39:bf:eb:63:14:00:57:5d:4b: a3:92:88:d6:22:13:67:de:7b:a7:04:34:06:21:43: b7:19:07:c2:98:05:ba:42:d8:fa:57:8c:c6:6e:3e: 94:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:33:A0:58:2C:43:B2:9F:4C:79:87:3B:30:35:F7:E3:67:18:99:C2 X509v3 Authority Key Identifier: keyid:C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:68:e3:38:ff:43:da:62:08:33:00:b0:51:6f:cd:99:c0:1c: e5:84:5c:38:28:49:f9:19:7c:55:39:a4:32:9f:bc:72:6c:63: d0:35:48:c5:5f:69:4a:75:a9:54:62:50:55:91:bd:4d:00:dd: 71:77:b7:48:f3:ea:88:06:01:fb:59:59:a3:ff:69:54:64:a8: 23:5a:7f:bb:c1:22:49:4c:74:1d:ac:7a:55:d0:05:07:48:11: 76:90:ed:d6:a6:f0:00:f0:bd:ea:86:5e:ff:3e:67:8e:1f:ea: e0:99:d1:4e:0d:85:e3:75:fa:4a:80:4c:2c:ae:42:8f:a7:40: 9d:d0:92:69:81:c6:b4:a5:78:01:67:20:8d:f4:da:6d:7c:ab: 16:98:79:8f:89:ce:7f:a3:bf:ce:5b:80:71:c6:e0:52:94:af: 2d:40:d4:5b:eb:82:09:f5:e2:7c:0b:7d:f4:d0:06:55:b0:f8: d1:a3:ef:27:c7:94:48:88:4f:f2:3f:24:d2:3f:1a:d0:a1:af: 6a:0e:42:e5:23:2e:94:48:20:d9:e2:1a:14:eb:bb:b7:69:89: b5:8e:39:4e:11:96:54:56:38:4a:14:7d:e8:ba:84:20:1e:7f: 77:d0:f1:e7:4e:c7:d4:fc:48:bf:74:e4:2d:64:f9:04:8d:28: 7f:32:ae:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVJbVk6UcqCHDAorHGp7OrCe5zOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQx NUE5OTMxMzAeFw0yNTEwMTgxODM3MDRaFw0yNTEwMjEyMTAzMDRaMDMxMTAvBgNV BAMTKDUyMzNBMDU4MkM0M0IyOUY0Qzc5ODczQjMwMzVGN0UzNjcxODk5QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPVej6Z5qe9ZvmGBYbYq8yrSwp zMmsNE7s5m8V4WiGHls05iTr079e26vnBa7AQvXzktrdT8Df9wSZfY1cyni//Vcq f1OOz/A9u1phB27FrqA3p3L1qzbWHREb7iyp1n3FCtggArLAE9i7MKMy83LsSeWk NtB1sq73iGW/gUcV12nF6Du9yMWdwGSi4VEKQzCRCJ9JIYuNZrh4tJV1mgh+45wr ieg5zCt4LvdffF9ma+w7gm6mK28vQ+C+C7kCTW8NA2ziI870dBOatDOFrDkjTAIE cjvJSjm/62MUAFddS6OSiNYiE2fee6cENAYhQ7cZB8KYBbpC2PpXjMZuPpTDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUjOgWCxDsp9MeYc7MDX342cYmcIwHwYDVR0j BBgwFoAUwzWb6/DBXJ1HOc6Iv7IULRWpkxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDM4ZjZhYS1mMjdkLTQ5MDYtOTUxZS1mMDJkODkxYmYxZWQvMC9DMzM1OUJFQkYw QzE1QzlENDczOUNFODhCRkIyMTQyRDE1QTk5MzEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQxNUE5 OTMxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQzOGY2YWEtZjI3ZC00OTA2LTk1 MWUtZjAyZDg5MWJmMWVkLzAvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0 MkQxNUE5OTMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINo4zj/Q9piCDMAsFFvzZnAHOWEXDgoSfkZ fFU5pDKfvHJsY9A1SMVfaUp1qVRiUFWRvU0A3XF3t0jz6ogGAftZWaP/aVRkqCNa f7vBIklMdB2selXQBQdIEXaQ7dam8ADwveqGXv8+Z44f6uCZ0U4NheN1+kqATCyu Qo+nQJ3QkmmBxrSleAFnII302m18qxaYeY+Jzn+jv85bgHHG4FKUry1A1Fvrggn1 4nwLffTQBlWw+NGj7yfHlEiIT/I/JNI/GtChr2oOQuUjLpRIINniGhTru7dpibWO OU4RllRWOEoUfei6hCAef3fQ8edOx9T8SL905C1k+QSNKH8yruo= -----END CERTIFICATE-----Generated at Mon Oct 20 22:21:18 2025 by rpki-client