$ rpki-client -vvf repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft File: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft (raw, json) Hash identifier: am5kjHZeDMal4f+R3zDJGVG6Sln/gxFV2Drnv9U2v0A= Subject key identifier: B4:A3:5C:BC:2B:E3:55:5B:5D:9E:79:DF:5B:B8:F2:88:76:83:A4:F9 Authority key identifier: 3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 Certificate issuer: /CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Certificate serial: 28CEC3EAABD2340F840643F7F08EB8CCCD1BCDA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft Manifest number: 0217 Signing time: Sat 18 Oct 2025 18:41:32 +0000 Manifest this update: Sat 18 Oct 2025 18:36:32 +0000 Manifest next update: Tue 21 Oct 2025 22:23:32 +0000 Files and hashes: 1: 3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa (hash: Zm0hpNa3KzjUY5ugGNSToALOnFgESrmbArm+FZK1Qzs=) 2: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl (hash: nYpq/RRXfZ5ea3T3ZihNqwFGsXXPwTcOu38xv0wUTyY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 22:23:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:ce:c3:ea:ab:d2:34:0f:84:06:43:f7:f0:8e:b8:cc:cd:1b:cd:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Validity Not Before: Oct 18 18:36:32 2025 GMT Not After : Oct 21 22:23:32 2025 GMT Subject: CN=B4A35CBC2BE3555B5D9E79DF5BB8F2887683A4F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ee:f1:35:68:75:85:17:5e:84:d7:06:c0:4c: cd:a2:6a:37:49:38:94:11:00:c2:b6:7f:51:a5:e7: 0f:19:35:b8:e4:43:f8:28:5b:b2:63:e4:40:da:4c: 50:38:00:68:d6:d5:2c:48:a6:34:3b:13:05:f9:69: 2a:a7:59:c3:92:8e:23:6f:22:1d:4c:1c:d0:57:9d: 55:68:2f:c1:6e:57:36:4b:c1:e9:67:55:9f:9a:be: 06:04:ce:3d:db:17:ac:3f:1b:62:fc:3b:00:6f:a7: b4:d2:7d:af:ce:fb:aa:1a:0d:48:07:c4:ce:dc:c8: dd:93:ab:68:90:dd:a2:84:e8:da:2a:8b:67:af:40: be:08:54:65:06:df:fe:4d:f3:65:f2:fb:0f:d2:53: f7:17:56:4b:10:fb:34:22:3f:ef:ed:67:0e:16:13: a2:af:f9:47:59:1e:53:d6:96:3d:95:50:59:73:b1: cf:f8:77:20:1e:fa:1f:2d:d4:7b:20:a0:17:05:5a: 46:78:6d:ac:88:52:2e:47:a4:84:e4:bd:2e:66:6a: 80:86:87:70:bb:00:59:7f:ce:01:8a:3c:23:cd:71: e0:e0:7a:7a:ac:05:9b:c6:3b:24:eb:d4:8d:b7:28: 64:43:ab:17:75:f9:c1:6f:19:4f:d8:36:1d:c7:47: b4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A3:5C:BC:2B:E3:55:5B:5D:9E:79:DF:5B:B8:F2:88:76:83:A4:F9 X509v3 Authority Key Identifier: keyid:3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:5a:b4:4c:6f:41:38:71:29:07:93:db:d7:69:83:d0:c5:2b: 02:45:a6:a1:6c:1b:2f:2f:ca:ed:ac:e2:8c:d9:0c:44:d8:30: 4a:2b:06:e9:7a:c1:71:04:63:5b:ed:ca:de:76:f5:d4:13:40: b7:75:b8:24:54:0e:32:d3:3b:08:98:e9:cd:0d:8a:18:76:6d: 00:04:2b:de:08:66:6c:c3:00:69:25:36:53:6e:f4:71:70:ac: f7:fa:47:5d:71:61:d1:5c:f1:57:f4:69:c6:7b:fc:51:41:c8: a2:c7:64:af:d9:07:b2:8b:e7:d9:a4:4d:e5:0f:f4:e8:c3:01: 98:d1:f9:7a:84:56:5c:f2:b1:95:c7:1c:98:ee:11:48:a0:d9: cd:80:2a:73:47:62:86:a5:e5:d7:bc:13:e9:9a:73:d9:cf:ea: 79:27:45:c3:b4:84:37:17:82:46:07:b6:b2:9c:c4:1d:d6:d7: 92:81:f3:43:4f:d0:20:97:db:ec:bd:b9:f0:a4:23:b2:da:ce: 1e:e7:a5:8a:80:9e:dd:b6:88:fc:03:c4:23:5f:ff:f5:f3:7f: 50:ee:f0:78:bf:03:66:5d:6b:1e:e6:c9:4f:c9:80:5c:c7:5d: d6:d4:e4:15:de:df:8b:d7:93:5c:75:81:16:e9:7c:98:11:39: 8c:b9:94:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKM7D6qvSNA+EBkP38I64zM0bzacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0 N0IwMzRDMjAeFw0yNTEwMTgxODM2MzJaFw0yNTEwMjEyMjIzMzJaMDMxMTAvBgNV BAMTKEI0QTM1Q0JDMkJFMzU1NUI1RDlFNzlERjVCQjhGMjg4NzY4M0E0RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe7vE1aHWFF16E1wbATM2iajdJ OJQRAMK2f1Gl5w8ZNbjkQ/goW7Jj5EDaTFA4AGjW1SxIpjQ7EwX5aSqnWcOSjiNv Ih1MHNBXnVVoL8FuVzZLwelnVZ+avgYEzj3bF6w/G2L8OwBvp7TSfa/O+6oaDUgH xM7cyN2Tq2iQ3aKE6Noqi2evQL4IVGUG3/5N82Xy+w/SU/cXVksQ+zQiP+/tZw4W E6Kv+UdZHlPWlj2VUFlzsc/4dyAe+h8t1HsgoBcFWkZ4bayIUi5HpITkvS5maoCG h3C7AFl/zgGKPCPNceDgenqsBZvGOyTr1I23KGRDqxd1+cFvGU/YNh3HR7TxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtKNcvCvjVVtdnnnfW7jyiHaDpPkwHwYDVR0j BBgwFoAUPX6neI4CXhLe/RjusnivbUewNMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzcwZmVlYi0yY2FhLTQ3NmEtYWI0My1mNjUyYTExZmQwOGMvMC8zRDdFQTc3ODhF MDI1RTEyREVGRDE4RUVCMjc4QUY2RDQ3QjAzNEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0N0Iw MzRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3MGZlZWItMmNhYS00NzZhLWFi NDMtZjY1MmExMWZkMDhjLzAvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFG NkQ0N0IwMzRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZatExvQThxKQeT29dpg9DFKwJFpqFsGy8v yu2s4ozZDETYMEorBul6wXEEY1vtyt529dQTQLd1uCRUDjLTOwiY6c0Nihh2bQAE K94IZmzDAGklNlNu9HFwrPf6R11xYdFc8Vf0acZ7/FFByKLHZK/ZB7KL59mkTeUP 9OjDAZjR+XqEVlzysZXHHJjuEUig2c2AKnNHYoal5de8E+mac9nP6nknRcO0hDcX gkYHtrKcxB3W15KB80NP0CCX2+y9ufCkI7Lazh7npYqAnt22iPwDxCNf//Xzf1Du 8Hi/A2Zdax7myU/JgFzHXdbU5BXe34vXk1x1gRbpfJgROYy5lKI= -----END CERTIFICATE-----Generated at Mon Oct 20 12:40:31 2025 by rpki-client