$ rpki-client -vvf repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft File: 3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft (raw, json) Hash identifier: 1Qfo5FPvQj9qygOZMV77E+vFVy7M+Qgo9ExwiOG0sx8= Subject key identifier: 04:D0:8A:AA:94:B1:DE:65:26:D1:84:5C:3A:D8:1C:43:FA:F7:0C:22 Authority key identifier: 33:66:CD:55:73:BB:4B:11:69:4D:BC:F0:F1:50:2C:E2:B4:6B:FD:51 Certificate issuer: /CN=3366CD5573BB4B11694DBCF0F1502CE2B46BFD51 Certificate serial: 1F71D25E8B7F4AE28B661418FBF3A9C5CA7023DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft Manifest number: 020F Signing time: Sun 19 Oct 2025 03:30:05 +0000 Manifest this update: Sun 19 Oct 2025 03:25:05 +0000 Manifest next update: Wed 22 Oct 2025 03:33:05 +0000 Files and hashes: 1: 3130332e3132302e3233332e302f32342d3234203d3e20313338303435.roa (hash: wUN0Izu+1jvS2QJEMcI/REBlf+WT4oRYhW3TrlPnH1I=) 2: 3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl (hash: fAaxj7w9Wcgy1TyCuYjsstpSLeKfPkLaWkgyroozkT8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 03:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:71:d2:5e:8b:7f:4a:e2:8b:66:14:18:fb:f3:a9:c5:ca:70:23:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3366CD5573BB4B11694DBCF0F1502CE2B46BFD51 Validity Not Before: Oct 19 03:25:05 2025 GMT Not After : Oct 22 03:33:05 2025 GMT Subject: CN=04D08AAA94B1DE6526D1845C3AD81C43FAF70C22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b8:e3:f4:fa:7e:73:c7:9e:cf:86:8e:ee:31: 99:76:b8:50:8e:aa:b2:98:7d:f7:2d:de:80:82:dd: a1:6c:40:74:60:c0:4f:16:dd:63:bb:35:3b:d6:50: 9e:54:8d:bf:11:0f:48:fb:f8:97:54:9c:90:f5:01: 6a:be:fb:1e:03:8f:a3:e7:76:60:18:ef:ff:78:b2: e4:a6:58:d5:0c:10:1a:93:f4:e2:1e:19:6b:b9:c6: 22:aa:f2:24:9a:78:3f:00:e7:f0:bb:0c:35:04:ff: 65:4c:5a:a7:ae:df:2f:93:77:58:6c:5c:a3:6b:f7: 85:e4:bc:55:bd:45:c0:91:0c:43:5f:6b:da:7a:0f: 70:20:fb:52:67:74:e3:5f:e2:5c:45:7e:75:5a:25: 1c:bb:35:91:12:c6:0d:ec:75:d6:d5:98:54:c2:31: 62:8a:08:83:d1:99:df:b9:25:fa:ee:d2:2e:43:7c: c9:4e:78:66:40:44:b1:d2:ca:c2:4a:1a:07:08:17: 3d:18:05:3c:e4:44:c4:b5:48:be:a2:a2:35:90:a7: b4:7e:1b:61:e7:94:78:71:6f:20:dd:7e:8e:7e:62: e4:03:ee:ee:2b:4a:8e:1e:8e:71:e9:51:61:ce:3b: 77:b3:e5:dd:41:c4:17:9f:15:58:e4:bd:ef:89:2d: 2a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D0:8A:AA:94:B1:DE:65:26:D1:84:5C:3A:D8:1C:43:FA:F7:0C:22 X509v3 Authority Key Identifier: keyid:33:66:CD:55:73:BB:4B:11:69:4D:BC:F0:F1:50:2C:E2:B4:6B:FD:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:e1:42:eb:79:74:2d:a2:f7:33:e1:57:27:28:64:16:71:fa: 57:9e:74:01:e1:7a:a1:f2:36:fb:16:48:aa:f5:7c:a2:21:c6: 35:06:22:45:48:f0:46:11:bb:5f:e7:41:f6:30:01:b8:27:cf: cd:d2:57:79:cc:ba:ad:e7:3d:b8:00:bd:5e:a3:98:17:ff:9f: 8e:66:ac:dc:21:6d:f9:89:dc:41:8c:86:65:bf:29:88:3e:76: 20:3f:87:91:22:14:25:b0:76:bb:07:eb:b4:c8:6a:f1:ba:46: 6c:39:49:cc:ab:6e:e3:f8:bb:66:dd:88:48:70:2d:1a:6a:74: 09:a0:8e:50:cf:da:65:08:f1:a7:80:6a:0e:9e:c2:c4:54:fb: bd:80:f9:41:8d:8e:8a:36:8c:b8:87:6b:43:4f:ba:f3:37:78: c8:34:ce:6f:43:04:ae:f6:8c:9b:4c:69:6e:c8:eb:34:7e:0c: 82:a2:e2:b0:ec:99:55:f3:66:76:6d:db:82:72:2e:51:2c:4e: da:59:16:0b:47:50:44:fe:72:9e:2b:95:ff:11:d7:d1:78:35: 08:64:03:0d:aa:9b:3f:b0:96:8c:ce:b9:06:82:94:81:c3:80: fc:9f:c2:1d:db:ba:80:6e:f8:27:af:a2:ee:ca:2c:c0:d6:20: 5b:b4:8d:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH3HSXot/SuKLZhQY+/OpxcpwI9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJDRTJC NDZCRkQ1MTAeFw0yNTEwMTkwMzI1MDVaFw0yNTEwMjIwMzMzMDVaMDMxMTAvBgNV BAMTKDA0RDA4QUFBOTRCMURFNjUyNkQxODQ1QzNBRDgxQzQzRkFGNzBDMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzuOP0+n5zx57Pho7uMZl2uFCO qrKYffct3oCC3aFsQHRgwE8W3WO7NTvWUJ5Ujb8RD0j7+JdUnJD1AWq++x4Dj6Pn dmAY7/94suSmWNUMEBqT9OIeGWu5xiKq8iSaeD8A5/C7DDUE/2VMWqeu3y+Td1hs XKNr94XkvFW9RcCRDENfa9p6D3Ag+1JndONf4lxFfnVaJRy7NZESxg3sddbVmFTC MWKKCIPRmd+5Jfru0i5DfMlOeGZARLHSysJKGgcIFz0YBTzkRMS1SL6iojWQp7R+ G2HnlHhxbyDdfo5+YuQD7u4rSo4ejnHpUWHOO3ez5d1BxBefFVjkve+JLSrBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBNCKqpSx3mUm0YRcOtgcQ/r3DCIwHwYDVR0j BBgwFoAUM2bNVXO7SxFpTbzw8VAs4rRr/VEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h M2EyNmJmYi02NzVmLTQ0NGYtOTBjOS01ZDNhOWIxOGMzNGMvMC8zMzY2Q0Q1NTcz QkI0QjExNjk0REJDRjBGMTUwMkNFMkI0NkJGRDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJDRTJCNDZC RkQ1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTNhMjZiZmItNjc1Zi00NDRmLTkw YzktNWQzYTliMThjMzRjLzAvMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJD RTJCNDZCRkQ1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLhQut5dC2i9zPhVycoZBZx+leedAHheqHy NvsWSKr1fKIhxjUGIkVI8EYRu1/nQfYwAbgnz83SV3nMuq3nPbgAvV6jmBf/n45m rNwhbfmJ3EGMhmW/KYg+diA/h5EiFCWwdrsH67TIavG6Rmw5ScyrbuP4u2bdiEhw LRpqdAmgjlDP2mUI8aeAag6ewsRU+72A+UGNjoo2jLiHa0NPuvM3eMg0zm9DBK72 jJtMaW7I6zR+DIKi4rDsmVXzZnZt24JyLlEsTtpZFgtHUET+cp4rlf8R19F4NQhk Aw2qmz+wlozOuQaClIHDgPyfwh3buoBu+Cevou7KLMDWIFu0jds= -----END CERTIFICATE-----Generated at Mon Oct 20 09:57:19 2025 by rpki-client