$ rpki-client -vvf repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft File: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft (raw, json) Hash identifier: dBqAniyU4EvLbZuo0DSQZ41ohIK+QRM3DGZPXIaXYfQ= Subject key identifier: B3:63:1D:02:9F:32:4F:72:C6:0E:99:41:D4:5E:D0:B0:4A:B4:EA:BD Authority key identifier: CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D Certificate issuer: /CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Certificate serial: 2E3FBE1FD0C30847D275DAC77A5B55ADFF763044 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft Manifest number: 02C5 Signing time: Sun 19 Oct 2025 09:51:18 +0000 Manifest this update: Sun 19 Oct 2025 09:46:18 +0000 Manifest next update: Wed 22 Oct 2025 19:28:18 +0000 Files and hashes: 1: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl (hash: ihR3VgOynaEnQ4u+tDPyiYauGjuVqVzbkQxhrla6MAA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:3f:be:1f:d0:c3:08:47:d2:75:da:c7:7a:5b:55:ad:ff:76:30:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Validity Not Before: Oct 19 09:46:18 2025 GMT Not After : Oct 22 19:28:18 2025 GMT Subject: CN=B3631D029F324F72C60E9941D45ED0B04AB4EABD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8f:ba:95:c1:26:aa:cc:b3:6e:8f:c8:ea:f5: 93:b0:d8:4f:ea:dd:62:df:0f:1b:64:6d:71:ae:27: 8f:fc:a0:c1:8f:ca:60:90:9b:7e:63:01:25:cc:6b: 81:c0:1b:3d:d5:56:96:2a:34:28:37:93:7a:8b:f6: b5:b7:fc:68:de:48:c6:10:61:10:f5:8d:d7:9c:24: 02:24:52:7f:29:56:19:1d:d6:73:30:7d:6b:64:b1: e2:73:86:52:19:e9:e1:fb:e5:e7:ef:0e:d3:0d:a6: 9a:5b:eb:3a:7b:04:58:61:b4:05:17:4b:e9:3e:e3: 03:77:2c:4f:0a:5f:bf:79:53:03:67:4f:68:83:f7: 50:cf:b1:71:8a:43:c9:80:c5:2e:99:79:76:5f:c4: 99:8a:aa:1d:14:e6:5a:ae:10:2e:23:db:b4:bd:2b: 7b:36:79:da:51:15:d1:cd:07:97:ba:bd:16:70:bb: 7b:ff:44:8d:a9:36:5c:f9:08:ec:dc:d9:ce:58:a5: fc:90:38:14:a3:16:6f:d4:b8:97:d0:36:cc:be:a8: 31:2c:9c:16:b8:51:88:bc:f7:82:d6:a0:b5:fd:b2: 71:2e:de:a4:91:fb:7c:39:3a:7d:b7:91:28:3d:ca: 49:39:ba:e9:09:cc:91:40:08:36:cc:f7:8e:17:fd: 2a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:63:1D:02:9F:32:4F:72:C6:0E:99:41:D4:5E:D0:B0:4A:B4:EA:BD X509v3 Authority Key Identifier: keyid:CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:cc:d8:b5:1e:60:fb:73:7b:68:09:92:72:1d:31:9f:02:b4: f3:f1:fc:bd:7b:6b:b8:15:77:89:ed:f3:ae:72:0c:cd:e5:69: b3:07:70:ad:22:9d:9a:52:fb:11:66:db:b1:00:a8:69:79:32: be:b3:56:f8:42:bc:b8:9c:2b:15:f4:53:bf:27:3f:bc:6c:56: 96:32:70:40:cf:e6:4c:2d:49:5f:7c:18:d1:e8:2d:13:53:42: b8:3a:0f:bb:f3:26:80:da:6c:3a:91:9d:48:69:5b:c3:16:54: 57:ad:a0:1a:93:5c:93:89:d6:98:20:09:30:c8:ca:2f:01:9d: 99:24:dd:ea:87:1f:3d:bc:d6:0f:d9:a5:b8:f9:38:0a:c7:73: 15:55:80:a8:24:20:d8:80:5f:26:fe:80:66:ac:fa:b1:2a:a0: d4:d8:3c:ef:d3:44:27:a2:d0:35:16:9c:37:83:61:9f:77:7f: 12:c5:0c:19:37:e2:87:18:c0:e7:1b:23:0f:14:60:6f:59:31: f4:b5:9e:9a:26:e2:cf:de:83:75:c9:a2:f2:7b:4d:20:5f:c0: 95:57:e7:d5:31:67:b8:56:ea:ff:21:29:8b:94:47:60:f8:7c: 07:49:d2:de:55:f3:55:e9:fd:d0:f5:a4:be:2b:98:5f:37:37: 73:e9:b5:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULj++H9DDCEfSddrHeltVrf92MEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdC RThDNzkwRDAeFw0yNTEwMTkwOTQ2MThaFw0yNTEwMjIxOTI4MThaMDMxMTAvBgNV BAMTKEIzNjMxRDAyOUYzMjRGNzJDNjBFOTk0MUQ0NUVEMEIwNEFCNEVBQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGj7qVwSaqzLNuj8jq9ZOw2E/q 3WLfDxtkbXGuJ4/8oMGPymCQm35jASXMa4HAGz3VVpYqNCg3k3qL9rW3/GjeSMYQ YRD1jdecJAIkUn8pVhkd1nMwfWtkseJzhlIZ6eH75efvDtMNpppb6zp7BFhhtAUX S+k+4wN3LE8KX795UwNnT2iD91DPsXGKQ8mAxS6ZeXZfxJmKqh0U5lquEC4j27S9 K3s2edpRFdHNB5e6vRZwu3v/RI2pNlz5COzc2c5YpfyQOBSjFm/UuJfQNsy+qDEs nBa4UYi894LWoLX9snEu3qSR+3w5On23kSg9ykk5uukJzJFACDbM944X/SqfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs2MdAp8yT3LGDplB1F7QsEq06r0wHwYDVR0j BBgwFoAUyjw1qTsUwN9su8JGgfW/l76MeQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGMyODI5My1iNmZiLTRmZjQtOWNlMi0wNjY2M2NiZTY4MTkvMC9DQTNDMzVBOTNC MTRDMERGNkNCQkMyNDY4MUY1QkY5N0JFOEM3OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdCRThD NzkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjMjgyOTMtYjZmYi00ZmY0LTlj ZTItMDY2NjNjYmU2ODE5LzAvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJG OTdCRThDNzkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG7M2LUeYPtze2gJknIdMZ8CtPPx/L17a7gV d4nt865yDM3labMHcK0inZpS+xFm27EAqGl5Mr6zVvhCvLicKxX0U78nP7xsVpYy cEDP5kwtSV98GNHoLRNTQrg6D7vzJoDabDqRnUhpW8MWVFetoBqTXJOJ1pggCTDI yi8BnZkk3eqHHz281g/Zpbj5OArHcxVVgKgkINiAXyb+gGas+rEqoNTYPO/TRCei 0DUWnDeDYZ93fxLFDBk34ocYwOcbIw8UYG9ZMfS1npom4s/eg3XJovJ7TSBfwJVX 59UxZ7hW6v8hKYuUR2D4fAdJ0t5V81Xp/dD1pL4rmF83N3PpteQ= -----END CERTIFICATE-----Generated at Mon Oct 20 12:26:12 2025 by rpki-client