$ rpki-client -vvf repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft File: 03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft (raw, json) Hash identifier: kXHz2/8hBvmkZF6prKX3X1rmvI+IBWt6KaV2fSBqy7M= Subject key identifier: 3C:20:89:29:EB:68:4E:D9:81:BD:ED:4B:58:13:33:4A:1C:2A:4B:65 Authority key identifier: 03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE Certificate issuer: /CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE Certificate serial: 46EE6FCAA11B72D08922FFEB8E757FDABFFA8237 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft Manifest number: 0397 Signing time: Sun 19 Oct 2025 04:01:00 +0000 Manifest this update: Sun 19 Oct 2025 03:55:59 +0000 Manifest next update: Wed 22 Oct 2025 10:36:59 +0000 Files and hashes: 1: 3130332e3136362e36362e302f32332d3234203d3e203137393935.roa (hash: LeAX921PuFORgks79ePG8mv8iLwlKYZRHuQBuRA29no=) 2: 03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl (hash: 6/2spHXcgmIGlVjEfDozS897LNCMHy70Bc4JgNNpsFE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 10:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ee:6f:ca:a1:1b:72:d0:89:22:ff:eb:8e:75:7f:da:bf:fa:82:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE Validity Not Before: Oct 19 03:55:59 2025 GMT Not After : Oct 22 10:36:59 2025 GMT Subject: CN=3C208929EB684ED981BDED4B5813334A1C2A4B65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dc:df:d3:6f:4f:d7:a2:24:1a:ee:e0:31:f8: 7f:83:03:fe:4f:1a:a9:0f:ac:b6:a9:3b:1e:0b:9e: 91:4d:f8:e8:b6:10:1a:44:fb:6d:8d:92:1b:a1:87: ef:a7:32:f6:02:0e:40:0f:b1:e1:46:79:88:c4:6e: 3f:f7:a1:d8:00:0a:b4:c9:10:3e:7c:44:b4:93:90: eb:f0:61:62:30:29:bd:6e:81:ae:cd:8c:34:0e:38: cb:e8:0e:45:7e:16:f0:71:9c:ed:48:39:a4:1c:b5: 6f:2d:60:23:79:77:42:d6:d7:4c:2c:36:e0:e9:4f: d4:25:75:69:53:07:91:85:c0:49:97:25:b7:5c:d2: c8:80:68:98:c7:83:d4:34:f6:f7:5f:c5:61:95:4b: 4d:54:16:8d:9a:c3:78:8f:e8:30:fe:fc:4e:f2:ea: ab:ca:50:19:fe:2f:b1:64:d4:59:8a:c8:19:87:95: 88:fe:5f:b5:2a:16:a2:c5:68:47:5d:ba:fc:f9:ea: 98:cc:2f:8e:95:be:a4:db:68:32:84:0b:7b:42:5b: a4:fd:c9:4f:9c:76:11:1b:3e:be:cf:22:1b:e3:64: ef:d5:b9:57:2d:2e:47:e4:9b:72:ce:3a:d8:9d:09: a5:df:a2:24:e4:b6:d1:4b:13:33:27:50:2e:e3:b5: c2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:20:89:29:EB:68:4E:D9:81:BD:ED:4B:58:13:33:4A:1C:2A:4B:65 X509v3 Authority Key Identifier: keyid:03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:cc:6b:f8:f5:b7:b4:92:8e:8e:d2:2d:21:8b:4b:ba:89:ac: e5:4f:cf:d7:2a:c6:38:aa:2c:91:3f:e7:35:b8:6e:72:eb:d0: b4:df:cd:e6:e4:d6:b0:5f:d7:51:4c:71:68:6b:95:38:22:37: a2:85:f5:e1:4a:a9:8e:d6:d9:dc:94:1e:22:88:19:37:e8:8f: 66:e9:13:72:f3:e0:fb:49:a3:62:c3:fa:b6:d9:11:e5:8c:42: c9:0d:e3:db:99:84:ce:e1:23:31:ea:4d:83:47:20:7b:fa:b1: e6:b7:1e:b5:94:84:e4:ed:df:f3:dd:07:86:04:d9:3e:59:19: a5:d3:e4:f1:d9:82:f4:cd:cb:21:85:f5:ea:47:bc:aa:13:80: 62:68:dd:55:b9:68:5e:e4:9f:07:30:a0:b3:6a:b0:00:ca:99: 0a:00:84:2f:65:fa:77:12:60:be:23:9a:05:bf:f7:b6:ca:1c: f0:0f:6a:85:95:c3:03:cd:a4:98:05:42:10:d8:d0:f9:5a:da: cd:48:3d:61:a3:df:97:f5:0d:4f:3a:ed:66:d5:eb:9b:0b:96: 48:b6:de:84:53:30:86:3f:7e:70:fb:10:bf:d7:4e:2b:ab:67: 7b:75:d2:27:56:77:73:21:09:c3:5d:36:f6:96:c8:4f:f7:c7: 8c:63:63:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURu5vyqEbctCJIv/rjnV/2r/6gjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJEREQ5 NzE0MjZGRTAeFw0yNTEwMTkwMzU1NTlaFw0yNTEwMjIxMDM2NTlaMDMxMTAvBgNV BAMTKDNDMjA4OTI5RUI2ODRFRDk4MUJERUQ0QjU4MTMzMzRBMUMyQTRCNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB3N/Tb0/XoiQa7uAx+H+DA/5P GqkPrLapOx4LnpFN+Oi2EBpE+22Nkhuhh++nMvYCDkAPseFGeYjEbj/3odgACrTJ ED58RLSTkOvwYWIwKb1uga7NjDQOOMvoDkV+FvBxnO1IOaQctW8tYCN5d0LW10ws NuDpT9QldWlTB5GFwEmXJbdc0siAaJjHg9Q09vdfxWGVS01UFo2aw3iP6DD+/E7y 6qvKUBn+L7Fk1FmKyBmHlYj+X7UqFqLFaEdduvz56pjML46VvqTbaDKEC3tCW6T9 yU+cdhEbPr7PIhvjZO/VuVctLkfkm3LOOtidCaXfoiTkttFLEzMnUC7jtcI1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPCCJKetoTtmBve1LWBMzShwqS2UwHwYDVR0j BBgwFoAUA+9BScXbB6w0jljk2jm93ZcUJv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTdlNWIwZS01OTY0LTQ2M2YtODA0MS0zMzdmODA1NTY0M2MvMC8wM0VGNDE0OUM1 REIwN0FDMzQ4RTU4RTREQTM5QkRERDk3MTQyNkZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJEREQ5NzE0 MjZGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU3ZTViMGUtNTk2NC00NjNmLTgw NDEtMzM3ZjgwNTU2NDNjLzAvMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJE REQ5NzE0MjZGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKzMa/j1t7SSjo7SLSGLS7qJrOVPz9cqxjiq LJE/5zW4bnLr0LTfzebk1rBf11FMcWhrlTgiN6KF9eFKqY7W2dyUHiKIGTfoj2bp E3Lz4PtJo2LD+rbZEeWMQskN49uZhM7hIzHqTYNHIHv6sea3HrWUhOTt3/PdB4YE 2T5ZGaXT5PHZgvTNyyGF9epHvKoTgGJo3VW5aF7knwcwoLNqsADKmQoAhC9l+ncS YL4jmgW/97bKHPAPaoWVwwPNpJgFQhDY0Pla2s1IPWGj35f1DU867WbV65sLlki2 3oRTMIY/fnD7EL/XTiurZ3t10idWd3MhCcNdNvaWyE/3x4xjY9Q= -----END CERTIFICATE-----Generated at Mon Oct 20 09:45:22 2025 by rpki-client