$ rpki-client -vvf repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft File: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft (raw, json) Hash identifier: kv4tGQkATK8UUhivRuCI/kDQxVijbqxYbyGCTNk9OB8= Subject key identifier: BE:3C:F8:CA:CE:1A:D6:8B:73:0D:52:9D:DC:F5:D6:F7:5B:55:AC:F9 Authority key identifier: 3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30 Certificate issuer: /CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530 Certificate serial: 2CFA50AA34EF0B37190CB0B0DE748214186B2A97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft Manifest number: 01A2 Signing time: Mon 20 Oct 2025 00:22:16 +0000 Manifest this update: Mon 20 Oct 2025 00:17:16 +0000 Manifest next update: Thu 23 Oct 2025 02:12:16 +0000 Files and hashes: 1: 3130332e3232352e39372e302f32342d3234203d3e20313339343332.roa (hash: rwWXLno549FvBCR7UqrdCi7giNmOD5uuZTisrjvVg1w=) 2: 3130332e35312e3130332e302f32342d3234203d3e20313339343332.roa (hash: pMd2fLZ8G56ZDvxTI0R0016ec0byrXQ6BSiilyfhyHw=) 3: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl (hash: SJBYYVoaFY0bq5PMZqLrGBMS6nrCYdqo9e7ffEc8ZXU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 02:12:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:fa:50:aa:34:ef:0b:37:19:0c:b0:b0:de:74:82:14:18:6b:2a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530 Validity Not Before: Oct 20 00:17:16 2025 GMT Not After : Oct 23 02:12:16 2025 GMT Subject: CN=BE3CF8CACE1AD68B730D529DDCF5D6F75B55ACF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9a:df:c5:0e:1f:23:40:81:87:6f:81:7f:5a: 29:5e:41:70:1c:1d:3f:90:0d:35:be:42:d4:c4:c6: f1:77:2f:6e:11:b7:f4:37:f5:28:de:8c:a1:00:ea: d1:fb:9e:b1:19:1b:05:9f:78:28:b7:14:a6:ae:f5: cb:aa:cc:42:bc:77:a9:59:7c:62:41:80:c1:ce:56: ce:98:92:bb:5b:dd:6d:53:50:ed:d0:8d:d8:5a:a1: 75:f9:fb:2d:a4:e1:d4:61:40:25:2a:8d:9c:df:5c: 3e:b4:9d:e0:0c:c1:07:10:82:47:bf:2e:73:3e:61: 73:ce:e7:90:e1:92:35:1f:f8:de:12:79:6a:0d:57: 63:f1:0e:d5:5a:1a:2f:37:9b:b3:c6:2e:bd:64:7a: aa:f5:10:ce:d7:25:37:ea:c6:c3:29:3e:86:73:2e: 17:a7:53:7d:0b:bd:b7:ba:a9:2a:32:0f:a7:16:88: 05:2b:62:6b:20:76:ad:4a:d2:76:34:47:57:1f:09: b9:b1:c3:13:4b:fb:ae:10:9a:c0:36:77:2c:6d:9a: 3a:5f:26:39:d6:46:de:e4:bc:0f:c8:aa:02:f1:d0: be:0d:01:e5:46:31:bc:05:1f:6d:1f:4b:f5:a2:21: 4c:37:1e:4d:4d:30:0b:61:6a:ee:1a:80:4b:11:60: 55:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3C:F8:CA:CE:1A:D6:8B:73:0D:52:9D:DC:F5:D6:F7:5B:55:AC:F9 X509v3 Authority Key Identifier: keyid:3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:ff:ec:1e:45:53:74:56:39:d0:43:83:a4:41:af:44:da:1e: b0:8f:8f:f4:27:80:24:15:27:73:a1:b3:08:7d:8a:a8:91:46: 71:6b:fd:38:bb:b5:83:45:22:72:34:65:d5:ff:9c:35:a4:28: 20:3a:fb:b2:de:7c:12:d9:9d:6d:65:0e:5f:eb:eb:39:84:6b: fa:58:71:54:89:4e:60:b1:42:1a:b6:50:13:cc:c6:7d:99:c8: 9f:bc:f7:05:7e:6c:86:39:04:5e:98:36:a1:2d:26:3c:d7:b8: d9:1c:75:91:6b:c5:18:9b:cd:2c:72:82:1b:20:2e:a9:b5:fc: b3:04:4a:54:79:59:13:99:92:42:38:34:81:9a:d7:e3:74:39: 01:f8:31:1b:97:e6:9a:c9:4b:61:da:17:f6:1c:50:62:7d:f9: 6e:c3:50:7f:62:98:5d:0a:9b:89:e3:fa:ba:21:66:25:0f:53: f1:a4:d7:ea:27:3f:e4:6d:af:f7:bc:ad:0f:91:fe:e0:07:94: 15:ed:e5:24:64:18:f3:e5:42:f3:d4:84:27:11:a7:33:03:b3: 17:21:ce:df:85:4d:d0:20:f1:8e:40:5f:79:f7:55:36:9f:52: aa:66:65:bc:c6:ec:ac:84:32:c5:d9:84:2d:5b:b5:cb:08:32: 5a:df:24:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULPpQqjTvCzcZDLCw3nSCFBhrKpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1 MTMwRDUzMDAeFw0yNTEwMjAwMDE3MTZaFw0yNTEwMjMwMjEyMTZaMDMxMTAvBgNV BAMTKEJFM0NGOENBQ0UxQUQ2OEI3MzBENTI5RERDRjVENkY3NUI1NUFDRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXmt/FDh8jQIGHb4F/WileQXAc HT+QDTW+QtTExvF3L24Rt/Q39SjejKEA6tH7nrEZGwWfeCi3FKau9cuqzEK8d6lZ fGJBgMHOVs6Ykrtb3W1TUO3QjdhaoXX5+y2k4dRhQCUqjZzfXD60neAMwQcQgke/ LnM+YXPO55DhkjUf+N4SeWoNV2PxDtVaGi83m7PGLr1keqr1EM7XJTfqxsMpPoZz LhenU30Lvbe6qSoyD6cWiAUrYmsgdq1K0nY0R1cfCbmxwxNL+64QmsA2dyxtmjpf JjnWRt7kvA/IqgLx0L4NAeVGMbwFH20fS/WiIUw3Hk1NMAthau4agEsRYFXtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvjz4ys4a1otzDVKd3PXW91tVrPkwHwYDVR0j BBgwFoAUP/X5PNqy9ma5Y8QbuD7T41Ew1TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzgzZWQyOC01ODgxLTQ3ZGEtYWU2Ni1lMWRiNjc5NDJlYjEvMC8zRkY1RjkzQ0RB QjJGNjY2Qjk2M0M0MUJCODNFRDNFMzUxMzBENTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1MTMw RDUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc4M2VkMjgtNTg4MS00N2RhLWFl NjYtZTFkYjY3OTQyZWIxLzAvM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQz RTM1MTMwRDUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJT/7B5FU3RWOdBDg6RBr0TaHrCPj/QngCQV J3Ohswh9iqiRRnFr/Ti7tYNFInI0ZdX/nDWkKCA6+7LefBLZnW1lDl/r6zmEa/pY cVSJTmCxQhq2UBPMxn2ZyJ+89wV+bIY5BF6YNqEtJjzXuNkcdZFrxRibzSxyghsg Lqm1/LMESlR5WROZkkI4NIGa1+N0OQH4MRuX5prJS2HaF/YcUGJ9+W7DUH9imF0K m4nj+rohZiUPU/Gk1+onP+Rtr/e8rQ+R/uAHlBXt5SRkGPPlQvPUhCcRpzMDsxch zt+FTdAg8Y5AX3n3VTafUqpmZbzG7KyEMsXZhC1btcsIMlrfJJg= -----END CERTIFICATE-----Generated at Mon Oct 20 14:37:08 2025 by rpki-client