$ rpki-client -vvf repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft File: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft (raw, json) Hash identifier: lCWCVDijivP/VgvwrmnpCUoh+6/A189J8lNzoy8gO64= Subject key identifier: D2:9B:60:31:83:A0:59:48:27:18:5F:29:4C:AC:BE:2D:A8:81:ED:11 Authority key identifier: 3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE Certificate issuer: /CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Certificate serial: 6F2CABED9781FC07B318E43F7A051CBCA2E2BBAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft Manifest number: 0519 Signing time: Sun 19 Oct 2025 09:20:37 +0000 Manifest this update: Sun 19 Oct 2025 09:15:37 +0000 Manifest next update: Wed 22 Oct 2025 18:57:37 +0000 Files and hashes: 1: 3132342e3135382e3134342e302f32302d3234203d3e203137393935.roa (hash: zsg0MYUUul8ZWAz6HoeSnMP9CkNtx4CP6l+n2iyt5ns=) 2: 3230322e35312e39362e302f31392d3234203d3e203137393935.roa (hash: VPDdfzNp/Tnip1mpiin5tv4VXeLj0MdK1eiLLlQll+Q=) 3: 3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (hash: CAAPflKpErYbCedoGMTZLOsCI6lepdBfa5oWuKRRZqA=) 4: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl (hash: o/NXgEReVzYCW5rKKSFd6wpZ0uieNeg88RG++6NmMwo=) 5: 3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (hash: /Wu0u/CMc+T4gs0PJO0n7WC2osLR58ve83c3OfRxI5E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 18:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:2c:ab:ed:97:81:fc:07:b3:18:e4:3f:7a:05:1c:bc:a2:e2:bb:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Validity Not Before: Oct 19 09:15:37 2025 GMT Not After : Oct 22 18:57:37 2025 GMT Subject: CN=D29B603183A0594827185F294CACBE2DA881ED11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c3:4b:91:ad:7c:24:e7:75:cb:5f:34:cd:95: 1c:de:aa:a2:eb:ad:7c:93:e6:b0:fc:5d:5e:21:ad: af:de:26:26:78:2a:21:8d:7b:b1:f0:4d:7f:09:63: de:35:f8:79:bb:62:a1:ce:33:bc:57:b5:84:a6:82: 8b:02:2f:96:d7:f8:ce:a2:20:2f:56:fb:60:19:86: d6:06:c5:8e:a9:3f:e7:f6:7d:ba:08:f6:cd:2a:89: c1:ea:20:37:20:89:7f:eb:11:b8:3f:e6:6e:90:bb: 84:5b:da:e5:a9:c2:cc:2f:be:87:55:98:0d:af:4b: cd:c0:56:be:ea:97:e2:ed:28:1e:9a:21:c3:c5:20: d4:88:18:f5:3e:4b:88:f7:c9:29:18:01:42:a6:8f: 7f:cf:ba:95:a7:e2:ae:67:5d:ab:14:17:99:7f:8c: ad:0b:3f:9a:7d:df:fb:42:08:62:32:95:0f:28:73: e4:a1:40:8f:35:07:08:38:69:59:c8:b1:ba:88:58: 65:05:68:74:5a:ee:c6:3f:9c:12:ca:f1:21:ff:47: de:a5:67:a6:cb:13:55:44:e5:db:d7:39:29:f0:1d: dd:18:7a:45:63:38:ca:24:2f:a8:36:4a:89:4b:67: df:25:1e:f5:3b:44:99:93:03:02:85:14:1a:3b:b3: d2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9B:60:31:83:A0:59:48:27:18:5F:29:4C:AC:BE:2D:A8:81:ED:11 X509v3 Authority Key Identifier: keyid:3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:3c:19:d2:c5:0b:a9:61:5c:88:f8:d9:9b:a8:35:98:90:a4: 05:9b:fe:da:64:f5:6c:d1:22:dc:1c:e2:58:ca:cf:2d:a9:d2: 13:aa:ad:cf:f2:da:5f:19:8a:d8:98:2e:f9:85:84:b9:d0:e9: f0:d9:69:5f:2d:f4:31:70:d7:c4:54:d8:55:bf:44:48:3d:30: ff:69:04:88:67:01:9a:74:9e:34:ae:8e:1e:b1:31:37:86:7c: a2:bc:70:7d:13:c3:4a:12:d6:a1:a1:3a:06:09:d8:3d:ed:2b: ac:56:ee:3f:d0:71:f0:9e:38:f0:6d:db:71:90:ab:c1:0d:b3: 9d:03:30:eb:21:ac:67:06:ba:38:9e:9e:66:5d:9c:e4:c2:fb: cc:9e:10:52:64:b1:d7:a3:1c:b5:e6:6b:92:93:8b:c0:ae:c7: fd:ce:db:57:2c:a6:ea:91:1d:da:af:0d:68:9b:a7:17:1c:c4: 3a:8e:3c:60:72:31:fc:9e:88:09:29:a4:60:08:91:ba:b9:42: c0:2e:18:aa:49:91:e6:94:d0:2a:c9:69:9b:ea:49:c2:dc:3d: d8:73:1a:2d:d9:1e:c7:de:aa:c6:d1:e3:60:e4:b5:e3:2a:ec: 02:9d:ec:8d:01:39:b9:c0:68:d8:61:d4:6b:37:95:eb:17:3f: 2b:41:c4:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbyyr7ZeB/AezGOQ/egUcvKLiu6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0 RUZCNDVFRTAeFw0yNTEwMTkwOTE1MzdaFw0yNTEwMjIxODU3MzdaMDMxMTAvBgNV BAMTKEQyOUI2MDMxODNBMDU5NDgyNzE4NUYyOTRDQUNCRTJEQTg4MUVEMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHw0uRrXwk53XLXzTNlRzeqqLr rXyT5rD8XV4hra/eJiZ4KiGNe7HwTX8JY941+Hm7YqHOM7xXtYSmgosCL5bX+M6i IC9W+2AZhtYGxY6pP+f2fboI9s0qicHqIDcgiX/rEbg/5m6Qu4Rb2uWpwswvvodV mA2vS83AVr7ql+LtKB6aIcPFINSIGPU+S4j3ySkYAUKmj3/PupWn4q5nXasUF5l/ jK0LP5p93/tCCGIylQ8oc+ShQI81Bwg4aVnIsbqIWGUFaHRa7sY/nBLK8SH/R96l Z6bLE1VE5dvXOSnwHd0YekVjOMokL6g2SolLZ98lHvU7RJmTAwKFFBo7s9JLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0ptgMYOgWUgnGF8pTKy+LaiB7REwHwYDVR0j BBgwFoAUPtu3hEcUxUXO1yQSDtDlo077Re4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWQ5NTVjOC1lNmQzLTQ5YzItYWJkOC1lMGY5MmMwODEyNDcvMC8zRURCQjc4NDQ3 MTRDNTQ1Q0VENzI0MTIwRUQwRTVBMzRFRkI0NUVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0RUZC NDVFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVkOTU1YzgtZTZkMy00OWMyLWFi ZDgtZTBmOTJjMDgxMjQ3LzAvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1 QTM0RUZCNDVFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC88GdLFC6lhXIj42ZuoNZiQpAWb/tpk9WzR Itwc4ljKzy2p0hOqrc/y2l8ZitiYLvmFhLnQ6fDZaV8t9DFw18RU2FW/REg9MP9p BIhnAZp0njSujh6xMTeGfKK8cH0Tw0oS1qGhOgYJ2D3tK6xW7j/QcfCeOPBt23GQ q8ENs50DMOshrGcGujienmZdnOTC+8yeEFJksdejHLXma5KTi8Cux/3O21cspuqR HdqvDWibpxccxDqOPGByMfyeiAkppGAIkbq5QsAuGKpJkeaU0CrJaZvqScLcPdhz Gi3ZHsfeqsbR42DkteMq7AKd7I0BObnAaNhh1Gs3lesXPytBxNI= -----END CERTIFICATE-----Generated at Mon Oct 20 12:00:59 2025 by rpki-client