$ rpki-client -vvf repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft File: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft (raw, json) Hash identifier: fNW9J0Psjs1rHNSd3fNpSdC1iNMsipH6EQsG3LQcCXo= Subject key identifier: 2B:F9:66:0C:4C:23:0E:F4:1D:EF:86:08:E3:84:E1:54:39:0F:95:4B Authority key identifier: 3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A Certificate issuer: /CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A Certificate serial: 538E44B87ABDDE053EB3EBEBDA75B30CB0949F33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft Manifest number: CC Signing time: Sun 19 Oct 2025 18:12:21 +0000 Manifest this update: Sun 19 Oct 2025 18:07:21 +0000 Manifest next update: Thu 23 Oct 2025 06:06:21 +0000 Files and hashes: 1: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl (hash: EXIGeeJAXNonnMqgizGYbSIue6f5pJz3xYiXoLM7OFk=) 2: 3136302e32322e3233342e302f32342d3234203d3e20313533303631.roa (hash: NaC6OjHEbkMsjBRQmR8Tqmru4zPhSmsJN/hiJNkC18Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:8e:44:b8:7a:bd:de:05:3e:b3:eb:eb:da:75:b3:0c:b0:94:9f:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A Validity Not Before: Oct 19 18:07:21 2025 GMT Not After : Oct 23 06:06:21 2025 GMT Subject: CN=2BF9660C4C230EF41DEF8608E384E154390F954B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7d:66:2b:a8:5f:82:8c:56:ca:d5:b7:5a:3c: 2b:46:61:90:bf:c6:88:a8:27:d3:fc:84:b2:6a:f5: 0f:95:99:e2:95:9f:7e:14:c8:3f:44:0f:f6:78:03: cf:7f:a3:81:fe:d5:89:a7:0e:9c:d6:f3:5c:7a:15: 9c:16:cc:a7:97:cb:73:08:6c:f5:47:f4:f7:b1:bc: ea:4a:98:73:b5:f3:ff:79:8d:3a:ce:0b:d5:70:71: 7c:34:5a:8b:56:f4:4f:c8:2f:5e:fe:e1:fe:48:82: 97:e1:60:7b:0a:a4:20:43:e8:92:89:f5:55:64:d2: 93:9b:2a:0a:a9:61:f4:da:8d:68:87:c9:9c:3b:7e: 08:b4:73:03:2b:c3:37:85:c4:76:cf:b7:5c:82:a9: ad:01:fb:72:c2:6d:32:da:a3:ce:3f:3a:a8:e3:33: 39:e5:54:da:0b:1a:5d:76:2d:ef:03:c3:c6:9d:e0: 77:2f:fc:6e:b3:d5:c8:bb:c8:86:9e:f1:0f:53:fc: 7b:ac:1a:90:7a:6f:97:62:46:80:7e:82:ce:5f:ae: ad:3c:62:8e:0d:70:c4:a9:27:99:b9:17:f2:7e:bc: 22:65:65:3b:ae:0d:d6:73:05:7b:d8:17:9c:30:84: c2:37:77:10:c8:99:95:6e:38:3b:e8:3d:e4:83:8a: 66:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F9:66:0C:4C:23:0E:F4:1D:EF:86:08:E3:84:E1:54:39:0F:95:4B X509v3 Authority Key Identifier: keyid:3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:fc:e0:23:33:24:c0:8e:2a:38:7b:c4:79:61:c2:d3:73:33: 36:ce:a2:ae:d1:e9:31:75:6e:2c:92:88:50:42:e0:d7:b6:1b: c0:db:a8:ed:2e:6a:86:1c:0e:74:4d:8e:69:a4:78:fa:c3:ba: 45:a1:5b:cc:60:9c:01:fa:b9:1f:31:0b:40:b4:67:3b:4f:45: ac:4f:f1:7a:ab:2a:78:90:d3:79:29:97:26:ef:f4:58:32:68: a4:aa:37:eb:cd:a0:7a:3a:7d:60:ba:ec:16:eb:c5:bb:fe:f5: 4d:ea:fd:7a:3a:a5:29:8c:47:88:9d:88:ba:a6:65:6a:94:78: e7:43:f5:66:39:07:13:3e:29:8a:1b:c3:84:bd:08:99:70:26: 54:60:c5:a2:ab:77:b8:d7:70:0e:31:b0:69:3a:bc:08:36:ae: 4d:3d:51:51:42:99:15:ae:a6:ac:31:dc:9f:de:3e:22:7a:62: c5:79:22:da:30:b3:a8:5a:a5:69:8c:e6:93:06:02:a1:7b:39: 6c:80:fa:64:0d:a4:0b:bf:94:1a:cf:86:8e:c1:10:c7:62:4e: fd:ac:c6:f5:4c:0e:1a:ec:17:8b:32:84:f1:21:93:25:8e:3f: af:b1:cf:b7:ad:ef:a9:37:b6:0f:0a:ab:c6:21:53:c4:21:de: 2b:5a:98:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU45EuHq93gU+s+vr2nWzDLCUnzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRFQzVG ODlCQUI5QTAeFw0yNTEwMTkxODA3MjFaFw0yNTEwMjMwNjA2MjFaMDMxMTAvBgNV BAMTKDJCRjk2NjBDNEMyMzBFRjQxREVGODYwOEUzODRFMTU0MzkwRjk1NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjfWYrqF+CjFbK1bdaPCtGYZC/ xoioJ9P8hLJq9Q+VmeKVn34UyD9ED/Z4A89/o4H+1YmnDpzW81x6FZwWzKeXy3MI bPVH9PexvOpKmHO18/95jTrOC9VwcXw0WotW9E/IL17+4f5IgpfhYHsKpCBD6JKJ 9VVk0pObKgqpYfTajWiHyZw7fgi0cwMrwzeFxHbPt1yCqa0B+3LCbTLao84/Oqjj MznlVNoLGl12Le8Dw8ad4Hcv/G6z1ci7yIae8Q9T/HusGpB6b5diRoB+gs5frq08 Yo4NcMSpJ5m5F/J+vCJlZTuuDdZzBXvYF5wwhMI3dxDImZVuODvoPeSDima9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK/lmDEwjDvQd74YI44ThVDkPlUswHwYDVR0j BBgwFoAUPdzEykO0kvQMjLBuSZNOxfibq5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWI1MzQyMC04YzU5LTQ5Y2YtYjNiMi1mNTVlOTg5MGRkY2QvMC8zRERDQzRDQTQz QjQ5MkY0MEM4Q0IwNkU0OTkzNEVDNUY4OUJBQjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRFQzVGODlC QUI5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjliNTM0MjAtOGM1OS00OWNmLWIz YjItZjU1ZTk4OTBkZGNkLzAvM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRF QzVGODlCQUI5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIn84CMzJMCOKjh7xHlhwtNzMzbOoq7R6TF1 biySiFBC4Ne2G8DbqO0uaoYcDnRNjmmkePrDukWhW8xgnAH6uR8xC0C0ZztPRaxP 8XqrKniQ03kplybv9FgyaKSqN+vNoHo6fWC67Bbrxbv+9U3q/Xo6pSmMR4idiLqm ZWqUeOdD9WY5BxM+KYobw4S9CJlwJlRgxaKrd7jXcA4xsGk6vAg2rk09UVFCmRWu pqwx3J/ePiJ6YsV5Itows6hapWmM5pMGAqF7OWyA+mQNpAu/lBrPho7BEMdiTv2s xvVMDhrsF4syhPEhkyWOP6+xz7et76k3tg8Kq8YhU8Qh3itamGc= -----END CERTIFICATE-----Generated at Mon Oct 20 21:32:27 2025 by rpki-client