$ rpki-client -vvf repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft File: 3E6F306418455683DBA0AC95B4FD41E1846476AB.mft (raw, json) Hash identifier: sMwwYQoLatc6oD3usy0D+MVrbZBlSX8uGFSzeC7nltE= Subject key identifier: DF:B7:5E:6D:44:7D:93:F1:9E:3A:75:60:4D:3F:DE:47:93:64:C1:0D Authority key identifier: 3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB Certificate issuer: /CN=3E6F306418455683DBA0AC95B4FD41E1846476AB Certificate serial: 6F41F8DA7292DF3D78EA490543B5C680210ABEED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft Manifest number: 0506 Signing time: Mon 20 Oct 2025 03:20:50 +0000 Manifest this update: Mon 20 Oct 2025 03:15:50 +0000 Manifest next update: Thu 23 Oct 2025 08:04:50 +0000 Files and hashes: 1: 3E6F306418455683DBA0AC95B4FD41E1846476AB.crl (hash: 0J0P7MXiBerwig+mLc4WEbvC5Ygv0QNa0ybl3Ce7y1Y=) 2: 3230322e34362e3134342e302f32322d3234203d3e203138303536.roa (hash: +zMuF2d6C36Qn9OFjFhter7f0zvIprv5Kce2a+7KyYs=) 3: 323430323a383263303a3a2f33322d3438203d3e203138303536.roa (hash: kYbld2hWxaqdjy59r1rp8P7rlOtH3HOAxyt3iwa4uDg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.crl rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 08:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:41:f8:da:72:92:df:3d:78:ea:49:05:43:b5:c6:80:21:0a:be:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E6F306418455683DBA0AC95B4FD41E1846476AB Validity Not Before: Oct 20 03:15:50 2025 GMT Not After : Oct 23 08:04:50 2025 GMT Subject: CN=DFB75E6D447D93F19E3A75604D3FDE479364C10D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e5:f2:ed:c7:2d:ef:a6:8d:ef:de:2a:0c:9e: b8:82:7a:33:35:76:5b:ba:93:ae:8b:78:3b:c1:36: 96:42:ae:c1:f3:db:58:1e:5d:d2:52:6d:1f:6d:f6: 7e:d8:fe:05:b2:eb:71:63:fe:7c:ef:82:7a:0e:78: 36:07:89:57:d8:89:36:38:fa:c1:5b:1a:c1:8e:de: 09:14:a3:d5:ec:7f:9b:5e:e7:4a:05:79:33:b8:cc: a8:bf:55:62:d9:de:9e:7e:25:0b:eb:16:4c:1c:2f: 36:8c:1a:c9:c6:70:60:b0:67:ae:a7:04:79:b7:08: 5e:4d:d8:bd:24:ac:8a:1f:17:5b:e3:b6:a4:c3:b0: 4e:07:b5:3f:07:98:73:4a:80:bb:2f:83:56:01:c3: e1:f8:0b:81:65:0c:de:37:a7:a9:9f:b8:3d:5e:1a: fc:69:5b:a3:d5:07:77:34:40:57:99:7e:5f:26:28: 19:cf:78:05:ac:4c:7e:89:94:67:c5:03:db:15:24: a8:86:f5:09:a5:a3:42:ea:6a:2c:5d:38:14:7b:b0: 82:11:4f:fe:cc:97:d3:3f:fd:3f:27:6b:80:a9:43: 62:08:22:09:40:ee:1a:0d:35:9b:f5:16:b2:0f:8f: e9:8e:24:e9:f4:72:da:64:d1:03:ad:e3:ad:71:36: cd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B7:5E:6D:44:7D:93:F1:9E:3A:75:60:4D:3F:DE:47:93:64:C1:0D X509v3 Authority Key Identifier: keyid:3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:5a:ab:62:ad:29:99:6e:f4:cd:81:0e:fb:91:1e:78:d3:e4: cf:c4:e7:c4:77:fd:a9:b9:8c:9a:32:ea:70:45:3c:85:5f:27: 9c:71:2b:0a:eb:93:37:c0:b0:5c:61:45:78:73:49:99:56:98: 4b:bd:81:cf:2e:72:1f:7b:ff:ef:d0:83:c4:76:df:b8:07:75: 46:7b:b5:d1:5c:c3:ff:02:9e:89:e7:5b:3e:9e:50:a5:19:b6: 95:f0:d8:1b:72:c8:47:40:ff:ac:24:e9:5e:69:4a:65:53:43: 3c:6c:e7:f7:bb:13:3a:72:ef:8c:22:45:31:b3:86:07:56:16: 0c:25:70:11:e0:90:fc:ab:03:5b:3a:8e:a5:83:42:e7:02:67: 0a:bc:1b:c7:47:75:d2:40:22:4a:b4:ae:0e:64:15:a9:c6:14: 43:8a:e5:a9:6f:19:60:2b:c8:90:8e:e2:14:da:a4:c2:13:e0: c6:70:2b:fa:f3:1b:d6:77:86:25:d5:3e:a4:0f:3b:8e:5c:44: a7:f2:6a:2a:02:d9:14:91:00:9b:f6:82:d1:f3:ed:ea:14:dd: 72:92:c1:ef:6a:21:c4:54:fb:50:3b:b3:29:30:49:60:92:8f: 62:88:9e:0c:32:50:0e:bd:84:85:33:2b:8b:1c:ba:f6:2c:d2: 6a:4b:14:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb0H42nKS3z146kkFQ7XGgCEKvu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2RjMwNjQxODQ1NTY4M0RCQTBBQzk1QjRGRDQxRTE4 NDY0NzZBQjAeFw0yNTEwMjAwMzE1NTBaFw0yNTEwMjMwODA0NTBaMDMxMTAvBgNV BAMTKERGQjc1RTZENDQ3RDkzRjE5RTNBNzU2MDREM0ZERTQ3OTM2NEMxMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK5fLtxy3vpo3v3ioMnriCejM1 dlu6k66LeDvBNpZCrsHz21geXdJSbR9t9n7Y/gWy63Fj/nzvgnoOeDYHiVfYiTY4 +sFbGsGO3gkUo9Xsf5te50oFeTO4zKi/VWLZ3p5+JQvrFkwcLzaMGsnGcGCwZ66n BHm3CF5N2L0krIofF1vjtqTDsE4HtT8HmHNKgLsvg1YBw+H4C4FlDN43p6mfuD1e GvxpW6PVB3c0QFeZfl8mKBnPeAWsTH6JlGfFA9sVJKiG9Qmlo0LqaixdOBR7sIIR T/7Ml9M//T8na4CpQ2IIIglA7hoNNZv1FrIPj+mOJOn0ctpk0QOt461xNs1tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU37debUR9k/GeOnVgTT/eR5NkwQ0wHwYDVR0j BBgwFoAUPm8wZBhFVoPboKyVtP1B4YRkdqswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGY3ZWI0Zi03OTI0LTRkYjYtYjZkNi0zOTRkODNiMzkyZmMvMC8zRTZGMzA2NDE4 NDU1NjgzREJBMEFDOTVCNEZENDFFMTg0NjQ3NkFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2RjMwNjQxODQ1NTY4M0RCQTBBQzk1QjRGRDQxRTE4NDY0 NzZBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRmN2ViNGYtNzkyNC00ZGI2LWI2 ZDYtMzk0ZDgzYjM5MmZjLzAvM0U2RjMwNjQxODQ1NTY4M0RCQTBBQzk1QjRGRDQx RTE4NDY0NzZBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5aq2KtKZlu9M2BDvuRHnjT5M/E58R3/am5 jJoy6nBFPIVfJ5xxKwrrkzfAsFxhRXhzSZlWmEu9gc8uch97/+/Qg8R237gHdUZ7 tdFcw/8CnonnWz6eUKUZtpXw2BtyyEdA/6wk6V5pSmVTQzxs5/e7Ezpy74wiRTGz hgdWFgwlcBHgkPyrA1s6jqWDQucCZwq8G8dHddJAIkq0rg5kFanGFEOK5alvGWAr yJCO4hTapMIT4MZwK/rzG9Z3hiXVPqQPO45cRKfyaioC2RSRAJv2gtHz7eoU3XKS we9qIcRU+1A7sykwSWCSj2KIngwyUA69hIUzK4scuvYs0mpLFO0= -----END CERTIFICATE-----Generated at Mon Oct 20 12:40:33 2025 by rpki-client