$ rpki-client -vvf repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft File: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft (raw, json) Hash identifier: 37UsvFjJMI95O1fm77MrmD3QUX4XBt5c3MZoLt4Phww= Subject key identifier: D9:04:E4:3F:E7:E0:48:AB:D7:3C:B7:D8:5E:12:C3:7A:CB:3C:44:60 Authority key identifier: 3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 Certificate issuer: /CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Certificate serial: 1FBC1AC4E334FF2A51AA4AA6D719A37F189DBD70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft Manifest number: 0125 Signing time: Mon 20 Oct 2025 13:11:10 +0000 Manifest this update: Mon 20 Oct 2025 13:06:10 +0000 Manifest next update: Thu 23 Oct 2025 17:26:10 +0000 Files and hashes: 1: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl (hash: B83YBqjnlUJQeHHuWzpOhV+5jtjHeB2ZEtdaRzAF850=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:bc:1a:c4:e3:34:ff:2a:51:aa:4a:a6:d7:19:a3:7f:18:9d:bd:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Validity Not Before: Oct 20 13:06:10 2025 GMT Not After : Oct 23 17:26:10 2025 GMT Subject: CN=D904E43FE7E048ABD73CB7D85E12C37ACB3C4460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ce:54:a9:49:0e:0f:2f:86:4e:bc:f4:73:88: 2d:e9:04:33:a2:41:78:14:41:bc:29:82:41:c5:e9: b1:76:3b:16:09:93:c1:8c:03:d9:04:69:93:b2:e4: 45:a6:c5:5b:18:7d:ac:ef:55:c7:c0:62:60:51:ff: 56:87:47:04:99:92:6d:cb:49:5d:55:d2:b1:79:f3: c5:dd:60:dd:b8:23:91:9b:76:08:23:8e:29:8d:0a: a4:bf:11:a1:93:29:91:5e:0b:7f:a0:7d:ea:db:d9: 9c:2a:14:ae:3d:23:db:92:dd:b7:d1:f2:0b:bd:61: fe:03:e8:ff:a7:f9:e7:61:d3:23:b3:29:d3:bd:fb: d7:eb:56:ac:66:8d:16:b7:5c:10:0e:e1:64:72:43: 36:6e:21:4d:32:78:df:16:8a:f0:56:df:48:73:50: 47:56:4a:89:e9:16:59:12:4c:4f:89:34:db:d0:c1: db:93:c7:da:ff:61:44:60:11:2b:91:e8:aa:1f:d6: bf:85:b5:ed:30:73:35:7a:43:43:12:df:57:7e:19: 0b:ea:62:c0:9f:a3:3c:dd:3a:d1:59:32:be:ec:32: 9d:42:09:96:c2:50:49:22:d2:d3:e8:12:ba:4d:ce: d3:20:11:09:eb:d7:6e:ab:10:bf:74:1d:b2:6b:a7: d4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:04:E4:3F:E7:E0:48:AB:D7:3C:B7:D8:5E:12:C3:7A:CB:3C:44:60 X509v3 Authority Key Identifier: keyid:3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:fe:ed:ba:97:d6:ef:a0:22:dc:5f:e8:cc:b6:f1:81:cb:8f: 89:2a:ae:da:b6:5c:41:34:bb:f5:a4:67:2d:6a:30:47:48:32: e3:e6:24:88:3f:e1:eb:99:c4:9d:e4:03:da:ff:34:bf:4e:81: c3:12:5c:1a:54:4f:a8:58:82:d7:85:9a:3a:6f:36:80:d9:ba: 6f:f4:f5:96:35:dd:52:8c:0c:28:ff:24:0e:2d:b1:77:4a:86: 4e:26:91:45:88:85:fd:9e:84:bd:55:d4:e3:46:e0:c2:20:02: ff:31:43:71:17:3c:bc:5e:06:16:4a:27:fb:e7:65:40:35:87: 1b:00:4d:64:76:6d:b5:1f:8b:54:ce:e2:3c:b8:3f:7f:c4:44: 38:ae:88:4d:77:78:3c:03:ae:cc:25:47:69:8c:0b:84:3b:62: 75:c2:ce:05:99:58:05:93:f9:fe:1a:98:9a:ae:ab:76:17:33: e6:08:7b:3b:5a:e3:6f:80:90:0a:06:8a:8f:12:7b:a3:6d:38: c5:e3:52:4b:f5:4b:e9:87:6d:c4:00:d4:dc:07:25:f5:7f:95: 73:13:bc:24:c7:39:2a:52:45:73:38:ff:ce:a3:ca:72:56:c8: 0a:be:39:6a:25:30:03:77:7c:d9:9c:30:aa:f1:9b:5c:3b:cb: d3:00:5a:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH7waxOM0/ypRqkqm1xmjfxidvXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0My Rjc4REU4NTAeFw0yNTEwMjAxMzA2MTBaFw0yNTEwMjMxNzI2MTBaMDMxMTAvBgNV BAMTKEQ5MDRFNDNGRTdFMDQ4QUJENzNDQjdEODVFMTJDMzdBQ0IzQzQ0NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGzlSpSQ4PL4ZOvPRziC3pBDOi QXgUQbwpgkHF6bF2OxYJk8GMA9kEaZOy5EWmxVsYfazvVcfAYmBR/1aHRwSZkm3L SV1V0rF588XdYN24I5GbdggjjimNCqS/EaGTKZFeC3+gferb2ZwqFK49I9uS3bfR 8gu9Yf4D6P+n+edh0yOzKdO9+9frVqxmjRa3XBAO4WRyQzZuIU0yeN8WivBW30hz UEdWSonpFlkSTE+JNNvQwduTx9r/YURgESuR6Kof1r+Fte0wczV6Q0MS31d+GQvq YsCfozzdOtFZMr7sMp1CCZbCUEki0tPoErpNztMgEQnr126rEL90HbJrp9RHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2QTkP+fgSKvXPLfYXhLDess8RGAwHwYDVR0j BBgwFoAUPZW3Kf+SPNJEJUm3cCptfC943oUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzhjNDZmYi1iNmMxLTRhNjktODNmYi05MGU3ZDVjMzI2ZGUvMC8zRDk1QjcyOUZG OTIzQ0QyNDQyNTQ5Qjc3MDJBNkQ3QzJGNzhERTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0MyRjc4 REU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M4YzQ2ZmItYjZjMS00YTY5LTgz ZmItOTBlN2Q1YzMyNmRlLzAvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZE N0MyRjc4REU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFn+7bqX1u+gItxf6My28YHLj4kqrtq2XEE0 u/WkZy1qMEdIMuPmJIg/4euZxJ3kA9r/NL9OgcMSXBpUT6hYgteFmjpvNoDZum/0 9ZY13VKMDCj/JA4tsXdKhk4mkUWIhf2ehL1V1ONG4MIgAv8xQ3EXPLxeBhZKJ/vn ZUA1hxsATWR2bbUfi1TO4jy4P3/ERDiuiE13eDwDrswlR2mMC4Q7YnXCzgWZWAWT +f4amJquq3YXM+YIezta42+AkAoGio8Se6NtOMXjUkv1S+mHbcQA1NwHJfV/lXMT vCTHOSpSRXM4/86jynJWyAq+OWolMAN3fNmcMKrxm1w7y9MAWt4= -----END CERTIFICATE-----Generated at Mon Oct 20 22:20:06 2025 by rpki-client