$ rpki-client -vvf repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft File: 3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft (raw, json) Hash identifier: FfMla3cTiwSP4oOJC6XJDxQSfTZcQl2Li+D0Nm0b5i0= Subject key identifier: 50:5F:A0:61:CC:50:8C:45:2B:C2:1E:E9:20:3E:A1:86:72:81:DA:92 Authority key identifier: 3E:64:8E:6A:86:23:C5:C5:DD:F0:01:52:6D:0F:DC:0F:F2:00:F6:13 Certificate issuer: /CN=3E648E6A8623C5C5DDF001526D0FDC0FF200F613 Certificate serial: 1B1F8E92CE2DB21561D26F798EB6394F308C3566 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer Subject info access: rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft Manifest number: 0209 Signing time: Sat 18 Oct 2025 04:01:25 +0000 Manifest this update: Sat 18 Oct 2025 03:56:25 +0000 Manifest next update: Tue 21 Oct 2025 11:52:25 +0000 Files and hashes: 1: 3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl (hash: 6aUhQ8oKxV21BzhRjSm8N7bJ6j1Ui2er2d9VQLQsPEk=) 2: 3130332e3139312e3134312e302f32342d3234203d3e20313439393232.roa (hash: QZrvNrtpXCKPjhSgsC8kdyvVzWQ/ADZleC5w3ZKWFT4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 11:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:1f:8e:92:ce:2d:b2:15:61:d2:6f:79:8e:b6:39:4f:30:8c:35:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E648E6A8623C5C5DDF001526D0FDC0FF200F613 Validity Not Before: Oct 18 03:56:25 2025 GMT Not After : Oct 21 11:52:25 2025 GMT Subject: CN=505FA061CC508C452BC21EE9203EA1867281DA92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bf:d9:1c:71:df:2a:93:d2:35:56:ee:d1:04: de:f2:54:6b:c0:38:fa:a5:2c:a1:45:12:97:26:55: 7a:58:5c:97:48:d1:76:23:dc:06:f1:93:cb:a0:20: e7:35:9a:9e:c9:43:5b:6a:0e:c9:6b:cc:f1:b7:4b: e6:bc:25:12:b0:3d:02:d0:4c:c6:38:48:19:a0:5d: f3:36:f8:5a:c1:64:d3:5c:00:ad:4d:f5:29:a5:45: 73:6f:23:9f:fd:8a:a3:78:97:22:ad:b5:1a:87:98: 6d:bc:39:36:fd:71:5c:18:4c:56:78:45:89:74:ad: 03:d0:41:fb:2c:b8:51:87:c3:df:0f:a8:b7:66:1f: 0d:af:9f:64:27:f9:de:e3:ef:c5:1b:52:43:56:24: 9c:ad:9d:fd:93:0c:bf:fa:6c:4f:35:fb:9c:78:bb: 93:26:02:ef:fe:67:69:dd:d5:bf:6e:06:5d:ad:92: 76:e2:26:fe:1f:11:ca:32:56:43:39:a0:b7:dc:4f: 86:b7:c1:21:9a:e6:75:a4:7f:1f:a9:ac:26:3e:ec: 74:6f:30:1b:98:0f:ec:39:17:ff:82:53:0b:2e:df: 48:a6:41:1b:79:96:5b:9d:07:95:26:d9:df:65:56: 9a:82:ea:17:f0:a4:d1:d1:6d:50:3b:9b:f0:48:58: 78:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5F:A0:61:CC:50:8C:45:2B:C2:1E:E9:20:3E:A1:86:72:81:DA:92 X509v3 Authority Key Identifier: keyid:3E:64:8E:6A:86:23:C5:C5:DD:F0:01:52:6D:0F:DC:0F:F2:00:F6:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:a6:54:fb:d6:90:5c:34:73:c7:2d:6f:6e:ec:bb:6a:f3:ea: 3e:f7:94:a9:dc:a3:96:f8:3f:45:a8:e7:a3:85:28:9a:86:67: 18:09:d2:4a:77:82:60:3e:12:92:48:14:e5:e9:d7:69:30:76: 4c:2c:6e:34:4c:56:09:5c:47:25:04:33:67:40:54:c2:73:66: e6:3b:6e:1b:76:4c:8d:65:83:dd:47:cf:27:d0:3d:7f:82:2e: 55:e0:d1:5a:88:6f:2e:37:e7:81:b5:62:2b:17:32:b0:88:77: 2b:99:26:93:78:66:c2:29:10:85:07:4d:18:3c:b1:df:f0:68: b5:32:3a:f9:1a:d4:47:da:38:c2:db:c9:22:5f:c7:66:3f:43: 69:fd:fb:9f:99:25:7f:9e:a2:2e:b7:5e:c2:60:f7:83:23:f0: 42:db:e7:41:ed:f0:a4:3b:a9:cb:23:8c:4b:8b:66:d8:04:e9: 47:74:cb:4b:ca:78:89:4e:77:b2:70:eb:5e:13:d8:55:16:60: e4:c9:67:04:98:b0:82:7b:2b:5d:6d:95:c3:5c:24:fa:0f:63: db:25:60:58:ab:88:db:cd:3f:c8:e8:7e:90:c4:61:cd:d1:1b: 3a:56:10:1b:ab:6b:d1:e1:5c:43:6b:11:2c:2e:1e:bb:dd:d7: d7:2d:f5:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGx+Oks4tshVh0m95jrY5TzCMNWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2NDhFNkE4NjIzQzVDNURERjAwMTUyNkQwRkRDMEZG MjAwRjYxMzAeFw0yNTEwMTgwMzU2MjVaFw0yNTEwMjExMTUyMjVaMDMxMTAvBgNV BAMTKDUwNUZBMDYxQ0M1MDhDNDUyQkMyMUVFOTIwM0VBMTg2NzI4MURBOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6v9kccd8qk9I1Vu7RBN7yVGvA OPqlLKFFEpcmVXpYXJdI0XYj3Abxk8ugIOc1mp7JQ1tqDslrzPG3S+a8JRKwPQLQ TMY4SBmgXfM2+FrBZNNcAK1N9SmlRXNvI5/9iqN4lyKttRqHmG28OTb9cVwYTFZ4 RYl0rQPQQfssuFGHw98PqLdmHw2vn2Qn+d7j78UbUkNWJJytnf2TDL/6bE81+5x4 u5MmAu/+Z2nd1b9uBl2tknbiJv4fEcoyVkM5oLfcT4a3wSGa5nWkfx+prCY+7HRv MBuYD+w5F/+CUwsu30imQRt5lludB5Um2d9lVpqC6hfwpNHRbVA7m/BIWHjHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUF+gYcxQjEUrwh7pID6hhnKB2pIwHwYDVR0j BBgwFoAUPmSOaoYjxcXd8AFSbQ/cD/IA9hMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjFmM2ZhZS1kMGNiLTRhMTctYTU0OC0xYmE2NjMxYjFlMDkvMC8zRTY0OEU2QTg2 MjNDNUM1RERGMDAxNTI2RDBGREMwRkYyMDBGNjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2NDhFNkE4NjIzQzVDNURERjAwMTUyNkQwRkRDMEZGMjAw RjYxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIxZjNmYWUtZDBjYi00YTE3LWE1 NDgtMWJhNjYzMWIxZTA5LzAvM0U2NDhFNkE4NjIzQzVDNURERjAwMTUyNkQwRkRD MEZGMjAwRjYxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABCmVPvWkFw0c8ctb27su2rz6j73lKnco5b4 P0Wo56OFKJqGZxgJ0kp3gmA+EpJIFOXp12kwdkwsbjRMVglcRyUEM2dAVMJzZuY7 bht2TI1lg91HzyfQPX+CLlXg0VqIby4354G1YisXMrCIdyuZJpN4ZsIpEIUHTRg8 sd/waLUyOvka1EfaOMLbySJfx2Y/Q2n9+5+ZJX+eoi63XsJg94Mj8ELb50Ht8KQ7 qcsjjEuLZtgE6Ud0y0vKeIlOd7Jw614T2FUWYOTJZwSYsIJ7K11tlcNcJPoPY9sl YFiriNvNP8jofpDEYc3RGzpWEBura9HhXENrESwuHrvd19ct9Tc= -----END CERTIFICATE-----Generated at Mon Oct 20 12:09:10 2025 by rpki-client