$ rpki-client -vvf repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft File: 3E788037924369AA3B8E52A5857804BE5D285FA2.mft (raw, json) Hash identifier: vvQzG0A1ZVNsBubnPHFRpYxHzjZdJ3/5NyMOCw1tEUM= Subject key identifier: D2:03:68:22:07:3A:E5:0D:64:7A:EF:67:E8:FE:75:F5:1A:A5:58:2C Authority key identifier: 3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 Certificate issuer: /CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Certificate serial: 4B810E48565A2363915BA0AB88C304076D102143 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft Manifest number: 028A Signing time: Sun 19 Oct 2025 09:21:52 +0000 Manifest this update: Sun 19 Oct 2025 09:16:52 +0000 Manifest next update: Wed 22 Oct 2025 15:48:52 +0000 Files and hashes: 1: 3130332e3137392e3131372e302f32342d3234203d3e20313431363435.roa (hash: ilhPhYMwxjxcNC74Yon3xYNd0uQUNUNF+7YCYR6VBOw=) 2: 3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa (hash: T+TvJ8L62bCZqFmpIphffr8c4LXSlLo4atPH9poDMJ0=) 3: 3E788037924369AA3B8E52A5857804BE5D285FA2.crl (hash: woUSg1Vx2Byo/6zhBVhpRC/cZBO/SzTf67P78IelAbo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 15:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:81:0e:48:56:5a:23:63:91:5b:a0:ab:88:c3:04:07:6d:10:21:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Validity Not Before: Oct 19 09:16:52 2025 GMT Not After : Oct 22 15:48:52 2025 GMT Subject: CN=D2036822073AE50D647AEF67E8FE75F51AA5582C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5e:7f:67:fa:7c:d3:c8:c8:65:05:9e:c9:04: 47:db:c6:94:93:a8:06:fb:8a:fe:fb:11:18:43:08: e6:cc:79:04:44:97:93:1a:fc:8a:6c:04:9b:f9:7c: 6a:59:6b:19:b6:38:df:92:75:87:69:33:0c:ff:fe: cb:96:3c:80:e6:60:84:82:e4:49:96:dc:a0:93:c2: a4:29:e3:6c:0a:c8:d2:ea:bd:da:b7:2c:71:ca:81: ba:35:e1:11:85:26:3a:8c:53:36:f5:b7:ee:ce:27: b3:9b:98:4b:be:01:77:52:fd:5b:86:7b:be:0a:b0: 00:f0:0f:aa:28:62:61:19:f5:82:e6:eb:e8:e8:05: 3b:37:9e:e9:67:e8:8c:45:d4:30:de:d8:ae:b6:82: 55:2d:bb:e6:96:f4:65:02:1d:e1:a4:e3:af:0c:ad: 37:2a:f2:04:a3:ec:ce:2e:c2:ac:92:f6:fa:dd:da: c5:4f:af:92:ea:39:e5:6d:49:33:90:81:38:08:32: 7c:85:c6:6b:fd:bc:db:cd:5a:fb:7f:e6:74:e5:05: 14:15:a5:7b:85:b2:7e:4e:5e:ff:d0:a1:50:ea:d4: 0c:1a:19:6e:11:f4:35:cd:28:e5:fb:6a:53:9e:98: 8c:7f:74:9b:f4:bd:a5:bb:f2:91:b4:bc:67:d1:f2: 3f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:03:68:22:07:3A:E5:0D:64:7A:EF:67:E8:FE:75:F5:1A:A5:58:2C X509v3 Authority Key Identifier: keyid:3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:03:25:78:43:20:83:35:c8:6b:8a:bb:4f:e0:39:4d:28:ed: 18:65:0e:97:a3:39:14:68:f5:ca:52:98:dd:d2:d9:dd:1c:02: 7c:de:6f:82:56:e2:21:b3:cd:72:5c:12:f2:f8:ad:4a:20:d4: 57:0a:b6:31:36:bd:fb:9c:be:2f:3f:e1:79:44:03:b3:52:f2: a9:d1:a0:95:90:c3:c4:4b:06:ab:08:9d:fc:18:23:9f:01:74: a1:1e:08:f5:80:ef:0d:d9:a0:3e:e5:57:a9:55:9e:b9:62:a5: bc:76:e1:76:b6:ba:36:03:ac:a8:71:ed:4c:45:35:09:73:87: 8d:b7:0d:5b:94:ce:aa:58:71:2d:f0:49:bc:77:b1:2e:ce:1e: c9:76:26:13:8c:b1:80:35:83:9d:15:46:d3:ec:26:48:3d:56: 70:0e:e3:a2:a0:b0:29:af:48:71:75:fd:d0:26:30:84:51:59: b1:5e:24:11:be:a4:79:3a:8c:54:21:c1:16:cc:aa:85:2b:d9: 57:74:5b:63:71:90:4c:2d:3f:a4:c0:58:8e:48:4b:ad:fc:91: 45:74:ba:51:bb:93:41:45:21:d6:c8:eb:2b:fd:3a:12:8f:c7: 62:a3:65:73:63:88:5e:42:aa:f2:02:7c:d2:17:8c:e0:45:5a: 0b:0c:3d:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS4EOSFZaI2ORW6CriMMEB20QIUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1 RDI4NUZBMjAeFw0yNTEwMTkwOTE2NTJaFw0yNTEwMjIxNTQ4NTJaMDMxMTAvBgNV BAMTKEQyMDM2ODIyMDczQUU1MEQ2NDdBRUY2N0U4RkU3NUY1MUFBNTU4MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoXn9n+nzTyMhlBZ7JBEfbxpST qAb7iv77ERhDCObMeQREl5Ma/IpsBJv5fGpZaxm2ON+SdYdpMwz//suWPIDmYISC 5EmW3KCTwqQp42wKyNLqvdq3LHHKgbo14RGFJjqMUzb1t+7OJ7ObmEu+AXdS/VuG e74KsADwD6ooYmEZ9YLm6+joBTs3nuln6IxF1DDe2K62glUtu+aW9GUCHeGk468M rTcq8gSj7M4uwqyS9vrd2sVPr5LqOeVtSTOQgTgIMnyFxmv9vNvNWvt/5nTlBRQV pXuFsn5OXv/QoVDq1AwaGW4R9DXNKOX7alOemIx/dJv0vaW78pG0vGfR8j8tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0gNoIgc65Q1keu9n6P519RqlWCwwHwYDVR0j BBgwFoAUPniAN5JDaao7jlKlhXgEvl0oX6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODUzYWZkZC0yZTA5LTQ3NzMtOGJlNC02ZmQwZWU5MGIwNDAvMC8zRTc4ODAzNzky NDM2OUFBM0I4RTUyQTU4NTc4MDRCRTVEMjg1RkEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1RDI4 NUZBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg1M2FmZGQtMmUwOS00NzczLThi ZTQtNmZkMGVlOTBiMDQwLzAvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0 QkU1RDI4NUZBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkDJXhDIIM1yGuKu0/gOU0o7RhlDpejORRo 9cpSmN3S2d0cAnzeb4JW4iGzzXJcEvL4rUog1FcKtjE2vfucvi8/4XlEA7NS8qnR oJWQw8RLBqsInfwYI58BdKEeCPWA7w3ZoD7lV6lVnrlipbx24Xa2ujYDrKhx7UxF NQlzh423DVuUzqpYcS3wSbx3sS7OHsl2JhOMsYA1g50VRtPsJkg9VnAO46KgsCmv SHF1/dAmMIRRWbFeJBG+pHk6jFQhwRbMqoUr2Vd0W2NxkEwtP6TAWI5IS638kUV0 ulG7k0FFIdbI6yv9OhKPx2KjZXNjiF5CqvICfNIXjOBFWgsMPZw= -----END CERTIFICATE-----Generated at Tue Oct 21 00:01:28 2025 by rpki-client