$ rpki-client -vvf repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft File: A3969B26389933D7D21F3A8D757CB9C5687740E4.mft (raw, json) Hash identifier: zdLYqInPxud1DNbrP4xlxdWD1+6fs5vGGLoNPciDPjU= Subject key identifier: 42:A5:CB:45:B7:F6:2E:2F:94:E5:29:E9:97:95:77:A5:6D:A3:15:07 Authority key identifier: A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 Certificate issuer: /CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Certificate serial: 3B789E1B7AC83363BD846899EEC33B33D25473A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft Manifest number: 0228 Signing time: Sun 19 Oct 2025 19:00:03 +0000 Manifest this update: Sun 19 Oct 2025 18:55:03 +0000 Manifest next update: Wed 22 Oct 2025 19:39:03 +0000 Files and hashes: 1: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: NSGM9TUDBLgn7kcSNJpmMZxpHG9VLSqJuwmSL+bAMEQ=) 2: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: wVefZUkFDr2RBqD4UPWhwrEjzDTX8ZVDe5YAYTdiEdo=) 3: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: 4MEAYppP3Kf6rajqc79fnAA8c3MS4YwlbMABho8ytVM=) 4: A3969B26389933D7D21F3A8D757CB9C5687740E4.crl (hash: g/gl944UyRgs4Ti77/LmWGVjJDz1z3Fl8AfF0hAOfYU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:39:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:78:9e:1b:7a:c8:33:63:bd:84:68:99:ee:c3:3b:33:d2:54:73:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Validity Not Before: Oct 19 18:55:03 2025 GMT Not After : Oct 22 19:39:03 2025 GMT Subject: CN=42A5CB45B7F62E2F94E529E9979577A56DA31507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:68:ad:ff:65:6a:65:49:1e:75:c8:e8:4f:2f: ab:b4:85:9e:f4:8d:68:e2:23:04:1e:45:a0:e7:cd: d7:e2:8f:25:b6:38:3b:35:ac:61:03:06:5e:26:99: f6:43:72:9d:a5:dc:8a:14:bd:ca:ea:ed:1c:7b:f3: 25:9b:b3:6d:4c:85:6e:1b:24:04:e4:37:6d:83:53: 39:50:5b:a3:21:73:94:bf:ad:00:9f:cd:6b:2b:ae: 80:33:2c:6b:30:18:b9:ef:46:e9:c9:b4:2f:fd:0f: 1a:17:02:a2:d1:55:75:3a:d9:5e:71:3e:6b:cc:ac: 90:dd:20:89:9f:67:78:0e:74:3d:16:1e:ca:03:08: 12:35:da:22:f4:30:95:13:2d:3f:7c:7b:ba:ca:43: ed:c0:16:76:2f:28:5b:f3:76:aa:7f:4a:aa:c6:5f: 1f:c4:85:4f:a3:40:dc:b1:60:cf:50:a5:ce:ee:3d: 19:21:d0:b0:58:86:d7:c2:c6:3b:ac:ef:a9:dc:cd: ae:e4:2e:e2:d4:18:19:53:dd:12:75:1a:1f:f3:04: 00:c6:ed:41:d5:58:6f:9f:84:fc:30:28:82:06:8d: 9e:d0:7a:94:28:03:46:12:d1:92:54:3a:d5:60:0c: a5:c7:40:ab:83:d9:25:3f:ae:cb:9a:0f:44:34:28: fe:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A5:CB:45:B7:F6:2E:2F:94:E5:29:E9:97:95:77:A5:6D:A3:15:07 X509v3 Authority Key Identifier: keyid:A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:a2:fd:d7:62:fc:63:eb:c3:52:87:44:71:67:78:32:0e:9e: 1f:2a:27:31:65:21:81:38:39:0b:e3:94:eb:ab:f5:97:9a:16: 73:96:38:c9:cf:ad:26:b5:25:03:40:09:f0:ad:07:62:3b:cb: e4:6a:5c:b4:86:86:f9:61:ba:b6:6a:04:7a:2c:42:d4:fd:31: 0d:f8:05:63:6b:b4:50:22:7b:72:9f:18:6f:be:fb:c1:e1:76: 71:6c:68:74:76:d9:8c:03:f4:dd:1d:25:8b:8a:6a:0f:27:66: 23:6d:24:17:69:f6:24:99:32:c9:29:0f:91:fc:1a:ed:db:c9: 26:0c:5d:ca:be:0a:2d:ae:44:3c:f5:23:27:f4:b1:3e:ea:b3: f2:a7:17:cd:31:60:13:6f:72:40:ab:9f:7b:b1:34:85:2b:cf: da:5d:12:aa:ab:f2:0b:27:59:83:f9:18:cd:9e:89:1d:c9:b7: 04:d7:c6:01:8d:3e:76:9c:3a:15:34:79:1e:2b:31:b9:3e:c0: 49:32:d4:88:28:67:1c:97:df:d8:54:df:66:2c:17:07:31:c1: 08:c8:34:89:4b:71:b0:3a:45:4a:f3:75:23:4c:88:4b:a8:16: 19:e4:c6:13:f0:b0:a8:15:9b:84:ee:5b:01:0d:e7:76:15:23: 1f:cd:be:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO3ieG3rIM2O9hGiZ7sM7M9JUc6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2 ODc3NDBFNDAeFw0yNTEwMTkxODU1MDNaFw0yNTEwMjIxOTM5MDNaMDMxMTAvBgNV BAMTKDQyQTVDQjQ1QjdGNjJFMkY5NEU1MjlFOTk3OTU3N0E1NkRBMzE1MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmaK3/ZWplSR51yOhPL6u0hZ70 jWjiIwQeRaDnzdfijyW2ODs1rGEDBl4mmfZDcp2l3IoUvcrq7Rx78yWbs21MhW4b JATkN22DUzlQW6Mhc5S/rQCfzWsrroAzLGswGLnvRunJtC/9DxoXAqLRVXU62V5x PmvMrJDdIImfZ3gOdD0WHsoDCBI12iL0MJUTLT98e7rKQ+3AFnYvKFvzdqp/SqrG Xx/EhU+jQNyxYM9Qpc7uPRkh0LBYhtfCxjus76ncza7kLuLUGBlT3RJ1Gh/zBADG 7UHVWG+fhPwwKIIGjZ7QepQoA0YS0ZJUOtVgDKXHQKuD2SU/rsuaD0Q0KP6NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQqXLRbf2Li+U5Snpl5V3pW2jFQcwHwYDVR0j BBgwFoAUo5abJjiZM9fSHzqNdXy5xWh3QOQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDMzMzZmOC1lNTQ2LTQ2MmMtODQxMC1iNzczMmI2YzgwMTUvMC9BMzk2OUIyNjM4 OTkzM0Q3RDIxRjNBOEQ3NTdDQjlDNTY4Nzc0MEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2ODc3 NDBFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzMzM2ZjgtZTU0Ni00NjJjLTg0 MTAtYjc3MzJiNmM4MDE1LzAvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5 QzU2ODc3NDBFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6i/ddi/GPrw1KHRHFneDIOnh8qJzFlIYE4 OQvjlOur9ZeaFnOWOMnPrSa1JQNACfCtB2I7y+RqXLSGhvlhurZqBHosQtT9MQ34 BWNrtFAie3KfGG+++8HhdnFsaHR22YwD9N0dJYuKag8nZiNtJBdp9iSZMskpD5H8 Gu3bySYMXcq+Ci2uRDz1Iyf0sT7qs/KnF80xYBNvckCrn3uxNIUrz9pdEqqr8gsn WYP5GM2eiR3JtwTXxgGNPnacOhU0eR4rMbk+wEky1IgoZxyX39hU32YsFwcxwQjI NIlLcbA6RUrzdSNMiEuoFhnkxhPwsKgVm4TuWwEN53YVIx/Nvpw= -----END CERTIFICATE-----Generated at Mon Oct 20 18:06:37 2025 by rpki-client