$ rpki-client -vvf repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft File: 3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft (raw, json) Hash identifier: slmITn+blltrN9Fd37KQEjXWhs9TWDmDEUa80wzFJFs= Subject key identifier: CD:A6:A0:FB:4D:9E:C2:F3:38:AE:B8:9D:06:87:A1:7E:75:25:1E:55 Authority key identifier: 3E:DD:CA:40:C3:F0:CF:91:2B:00:3B:B1:9F:9C:03:E4:8B:43:F7:27 Certificate issuer: /CN=3EDDCA40C3F0CF912B003BB19F9C03E48B43F727 Certificate serial: 3EDE2B10FF2A7217D3EAD19B090960FCD8DCE25D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft Manifest number: 01E9 Signing time: Sun 19 Oct 2025 11:40:04 +0000 Manifest this update: Sun 19 Oct 2025 11:35:04 +0000 Manifest next update: Wed 22 Oct 2025 20:22:04 +0000 Files and hashes: 1: 3130332e31392e3135382e302f32332d3234203d3e20313530323339.roa (hash: 2pmnEjpV6xKfD9pUClZgIAGRZy9Yz1iTckvB+l+9+U4=) 2: 3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl (hash: qWyCRfzoidGj3OO3MVO9gNKSPR6zXpdcN3J3dVmgVJU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 20:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:de:2b:10:ff:2a:72:17:d3:ea:d1:9b:09:09:60:fc:d8:dc:e2:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EDDCA40C3F0CF912B003BB19F9C03E48B43F727 Validity Not Before: Oct 19 11:35:04 2025 GMT Not After : Oct 22 20:22:04 2025 GMT Subject: CN=CDA6A0FB4D9EC2F338AEB89D0687A17E75251E55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9b:a8:39:bc:6e:48:d8:42:56:4b:27:93:df: 1c:35:a9:f6:e9:e4:b0:a5:7a:37:1f:8f:e5:46:3c: 8d:9f:4f:37:a0:0f:46:44:59:24:28:74:8c:7b:31: 24:cb:36:35:9d:56:f8:76:b9:45:00:3e:29:73:b6: b5:78:d9:02:35:01:23:de:1f:24:c6:9d:86:90:3b: c0:4b:ec:4c:d3:d1:82:48:e2:f2:82:e4:e9:5c:fe: c2:7f:2a:b0:bb:37:8b:8b:a9:48:dc:34:f4:3f:7e: cb:c6:b3:77:92:59:23:60:61:5b:66:25:99:c1:4a: 11:1d:49:fd:3b:22:39:b3:c7:bd:19:9f:71:a3:ee: 47:ed:4f:42:9f:95:11:05:71:a3:80:32:a0:1e:0f: 7f:dd:d3:a4:5d:b2:71:dd:f1:d8:14:dc:40:1a:80: c4:50:a9:77:39:d8:e1:3b:a6:3c:61:5b:27:95:b5: b0:b7:ed:0a:16:fc:ab:76:1a:87:e4:34:b6:91:a0: 9e:a0:6e:c8:cc:8d:f1:84:e7:fa:7a:3f:58:8b:06: 3a:cf:c5:6f:ec:84:fe:ed:02:3c:15:e1:3b:5b:9e: 2c:dd:d5:91:b2:af:9e:07:09:e3:ec:26:91:6c:be: fb:d5:b9:59:b2:55:40:38:df:3a:63:a8:e3:35:f1: 9d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A6:A0:FB:4D:9E:C2:F3:38:AE:B8:9D:06:87:A1:7E:75:25:1E:55 X509v3 Authority Key Identifier: keyid:3E:DD:CA:40:C3:F0:CF:91:2B:00:3B:B1:9F:9C:03:E4:8B:43:F7:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:18:fc:ca:a7:e2:0b:0c:ea:39:30:8e:56:4d:0b:75:b6:1c: 58:d9:f2:81:82:2d:0c:c4:aa:b3:cf:cc:d5:8f:00:22:40:5a: e4:a4:65:62:0a:75:f9:67:65:32:ca:be:0d:ae:af:35:17:6b: a3:71:31:d9:34:f9:d0:3b:39:57:77:63:fb:9c:bf:05:21:46: 7b:fd:1a:c4:49:2b:f7:86:03:10:58:da:d8:ea:b2:cf:42:db: 21:d2:de:a3:2c:de:ad:43:3c:fe:d9:10:28:9a:df:ea:84:97: 51:93:0d:03:5f:75:ba:59:f4:0e:1f:c8:81:d9:7e:b6:b5:48: 4a:c0:ad:54:0e:11:b8:d7:96:8b:a5:37:a3:93:16:19:10:22: 3f:8f:bf:0d:e0:22:c5:18:6f:f7:63:4d:60:31:e0:62:f6:62: d6:a9:d5:80:b4:5a:19:08:f5:14:70:2d:a0:8f:81:5b:62:ed: 62:ac:f9:e4:16:8f:2e:70:79:04:89:71:d9:dc:3b:33:ed:65: 90:8f:57:04:de:d8:36:86:45:d8:c6:e4:1f:4c:8b:ad:fb:8b: 1a:e9:93:77:37:65:2d:e2:9b:e8:24:ae:b2:84:b9:3a:a0:6d: 7d:96:fd:ef:9c:92:a9:a4:e8:82:7f:7e:83:db:6b:d9:31:be: 29:eb:66:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPt4rEP8qchfT6tGbCQlg/Njc4l0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAzRTQ4 QjQzRjcyNzAeFw0yNTEwMTkxMTM1MDRaFw0yNTEwMjIyMDIyMDRaMDMxMTAvBgNV BAMTKENEQTZBMEZCNEQ5RUMyRjMzOEFFQjg5RDA2ODdBMTdFNzUyNTFFNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGm6g5vG5I2EJWSyeT3xw1qfbp 5LClejcfj+VGPI2fTzegD0ZEWSQodIx7MSTLNjWdVvh2uUUAPilztrV42QI1ASPe HyTGnYaQO8BL7EzT0YJI4vKC5Olc/sJ/KrC7N4uLqUjcNPQ/fsvGs3eSWSNgYVtm JZnBShEdSf07Ijmzx70Zn3Gj7kftT0KflREFcaOAMqAeD3/d06RdsnHd8dgU3EAa gMRQqXc52OE7pjxhWyeVtbC37QoW/Kt2GofkNLaRoJ6gbsjMjfGE5/p6P1iLBjrP xW/shP7tAjwV4Ttbnizd1ZGyr54HCePsJpFsvvvVuVmyVUA43zpjqOM18Z1FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzaag+02ewvM4rridBoehfnUlHlUwHwYDVR0j BBgwFoAUPt3KQMPwz5ErADuxn5wD5ItD9ycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Y2RlOGVjZS05N2EyLTRiMGQtYTA2NC0xN2NlYTYxZjQ1Y2MvMC8zRUREQ0E0MEMz RjBDRjkxMkIwMDNCQjE5RjlDMDNFNDhCNDNGNzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAzRTQ4QjQz RjcyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWNkZThlY2UtOTdhMi00YjBkLWEw NjQtMTdjZWE2MWY0NWNjLzAvM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAz RTQ4QjQzRjcyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIwY/Mqn4gsM6jkwjlZNC3W2HFjZ8oGCLQzE qrPPzNWPACJAWuSkZWIKdflnZTLKvg2urzUXa6NxMdk0+dA7OVd3Y/ucvwUhRnv9 GsRJK/eGAxBY2tjqss9C2yHS3qMs3q1DPP7ZECia3+qEl1GTDQNfdbpZ9A4fyIHZ fra1SErArVQOEbjXloulN6OTFhkQIj+Pvw3gIsUYb/djTWAx4GL2Ytap1YC0WhkI 9RRwLaCPgVti7WKs+eQWjy5weQSJcdncOzPtZZCPVwTe2DaGRdjG5B9Mi637ixrp k3c3ZS3im+gkrrKEuTqgbX2W/e+ckqmk6IJ/foPba9kxvinrZtI= -----END CERTIFICATE-----Generated at Mon Oct 20 18:02:54 2025 by rpki-client