$ rpki-client -vvf repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft File: 3128E543B078826F9B4F23328CA84782DE7AAE6D.mft (raw, json) Hash identifier: GsugASgUmkXvgEzsHxsbxE2WwvhoWMvhKRlaL8SJv1s= Subject key identifier: 18:A3:D7:CF:EE:32:D8:63:97:E7:A1:D7:9E:6C:A2:D5:B7:7E:D6:3D Authority key identifier: 31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D Certificate issuer: /CN=3128E543B078826F9B4F23328CA84782DE7AAE6D Certificate serial: 094DF9A06D6D0C1569B482EBD119644199FC2AEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft Manifest number: 0519 Signing time: Sun 19 Oct 2025 15:50:02 +0000 Manifest this update: Sun 19 Oct 2025 15:45:02 +0000 Manifest next update: Wed 22 Oct 2025 18:02:02 +0000 Files and hashes: 1: 3130332e3132342e3131322e302f32342d3234203d3e20313331313131.roa (hash: xMhopN6RhUrQr0UoQBGVj4pnpruAcIyICHzqvwrwDho=) 2: 3128E543B078826F9B4F23328CA84782DE7AAE6D.crl (hash: /zG4R+IBGXOugsFE5XT2CFC8XT7YiTLi87lSg6Ldv00=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 18:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:4d:f9:a0:6d:6d:0c:15:69:b4:82:eb:d1:19:64:41:99:fc:2a:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3128E543B078826F9B4F23328CA84782DE7AAE6D Validity Not Before: Oct 19 15:45:02 2025 GMT Not After : Oct 22 18:02:02 2025 GMT Subject: CN=18A3D7CFEE32D86397E7A1D79E6CA2D5B77ED63D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3e:9b:83:96:44:0c:7e:98:ab:5d:a0:4d:49: a5:a9:0e:ac:22:bf:69:46:da:dd:f7:6d:84:ed:b9: e5:6d:53:3e:1d:0f:b1:55:71:3d:cf:0e:9f:8a:ac: cd:14:b7:70:ea:84:00:c6:b5:e6:71:a4:fa:8d:73: 57:3d:93:76:23:11:95:f6:fc:9c:33:1f:1c:0a:33: f9:36:fa:12:e5:cc:1e:70:f1:3c:6f:18:49:58:03: 76:30:1e:d4:cc:7d:8b:5d:e3:5d:ca:f8:f7:1e:d5: 9e:a5:27:4c:a0:24:ea:13:ba:43:ec:cd:45:bc:8c: b6:c6:3d:54:56:f3:63:5a:66:8f:9c:72:ac:af:00: 20:9d:1f:09:88:b9:7d:c3:57:27:fd:9a:b7:9c:76: ba:04:8d:35:5a:b8:d2:92:03:1e:bd:61:80:a4:64: 8e:5d:4c:d9:75:10:70:99:f1:3f:68:9e:83:d7:3e: fd:20:80:55:25:2f:d9:f1:35:73:27:e0:bb:1f:e4: 46:86:a6:6f:5c:cb:29:6c:64:68:32:1e:1b:8b:45: 09:fd:da:df:53:68:f4:10:0a:20:e7:91:9c:c8:08: 6a:f1:cf:71:f5:72:04:bd:a6:13:bb:e9:d6:42:b9: cd:3a:d9:e7:76:a0:54:68:66:a9:56:fd:df:01:74: 8e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A3:D7:CF:EE:32:D8:63:97:E7:A1:D7:9E:6C:A2:D5:B7:7E:D6:3D X509v3 Authority Key Identifier: keyid:31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:95:a9:50:68:3f:a8:9b:0e:63:33:0c:85:1d:0a:b1:bf:c9: dc:15:d6:f0:a4:bc:ff:dc:47:44:c0:0c:a3:1b:f3:f8:a3:0c: 3a:61:01:5f:07:36:00:f1:ca:76:3b:5f:5f:1d:ff:63:ee:31: f7:ef:15:7c:3c:fc:63:44:f1:64:25:5a:6f:1e:95:67:5d:b1: 8b:a2:26:bf:e9:7f:81:63:a1:56:54:0e:f9:29:2b:0d:8b:98: 5e:74:d7:f2:90:10:3b:e8:1c:f4:3d:12:c2:69:7f:bd:5a:0c: b6:d3:ca:81:15:7a:81:17:6d:4c:8f:d2:3f:e9:d9:e5:0f:9f: 99:bc:f9:da:89:5b:42:a6:57:d7:45:e6:ad:41:94:fb:1d:60: 65:86:2a:a6:c6:91:f6:d7:9a:a5:3d:4e:f6:6f:a2:77:a0:c1: a8:92:95:4a:a2:df:9f:63:63:47:2d:52:0f:32:23:ef:a9:77: 55:0c:3a:4f:8c:29:60:92:6c:59:00:c5:0e:99:04:48:40:e2: 3a:ab:4f:65:f9:89:eb:9d:a8:a9:ae:05:d7:0f:b5:38:25:1d: 04:02:8c:f2:0c:ca:a7:09:db:0f:13:76:d4:4e:cb:e5:d1:cb: d0:7d:11:9b:a9:f0:75:07:4f:6f:d0:10:be:7f:da:c4:1e:04: 3f:85:4d:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCU35oG1tDBVptILr0RlkQZn8Ku8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3ODJE RTdBQUU2RDAeFw0yNTEwMTkxNTQ1MDJaFw0yNTEwMjIxODAyMDJaMDMxMTAvBgNV BAMTKDE4QTNEN0NGRUUzMkQ4NjM5N0U3QTFENzlFNkNBMkQ1Qjc3RUQ2M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0PpuDlkQMfpirXaBNSaWpDqwi v2lG2t33bYTtueVtUz4dD7FVcT3PDp+KrM0Ut3DqhADGteZxpPqNc1c9k3YjEZX2 /JwzHxwKM/k2+hLlzB5w8TxvGElYA3YwHtTMfYtd413K+Pce1Z6lJ0ygJOoTukPs zUW8jLbGPVRW82NaZo+ccqyvACCdHwmIuX3DVyf9mrecdroEjTVauNKSAx69YYCk ZI5dTNl1EHCZ8T9onoPXPv0ggFUlL9nxNXMn4Lsf5EaGpm9cyylsZGgyHhuLRQn9 2t9TaPQQCiDnkZzICGrxz3H1cgS9phO76dZCuc062ed2oFRoZqlW/d8BdI5FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGKPXz+4y2GOX56HXnmyi1bd+1j0wHwYDVR0j BBgwFoAUMSjlQ7B4gm+bTyMyjKhHgt56rm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDdmOGY0NC0yNzdkLTQ1ZTEtYjIxMy0wNTExN2ZkZTNjYjAvMC8zMTI4RTU0M0Iw Nzg4MjZGOUI0RjIzMzI4Q0E4NDc4MkRFN0FBRTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3ODJERTdB QUU2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ3ZjhmNDQtMjc3ZC00NWUxLWIy MTMtMDUxMTdmZGUzY2IwLzAvMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3 ODJERTdBQUU2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWVqVBoP6ibDmMzDIUdCrG/ydwV1vCkvP/c R0TADKMb8/ijDDphAV8HNgDxynY7X18d/2PuMffvFXw8/GNE8WQlWm8elWddsYui Jr/pf4FjoVZUDvkpKw2LmF501/KQEDvoHPQ9EsJpf71aDLbTyoEVeoEXbUyP0j/p 2eUPn5m8+dqJW0KmV9dF5q1BlPsdYGWGKqbGkfbXmqU9TvZvonegwaiSlUqi359j Y0ctUg8yI++pd1UMOk+MKWCSbFkAxQ6ZBEhA4jqrT2X5ieudqKmuBdcPtTglHQQC jPIMyqcJ2w8TdtROy+XRy9B9EZup8HUHT2/QEL5/2sQeBD+FTZA= -----END CERTIFICATE-----Generated at Mon Oct 20 12:12:07 2025 by rpki-client