$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft File: 3E69DE558C030D2041570E32C387F764C38BBBA9.mft (raw, json) Hash identifier: zVWq/Z2oGretK/2KHx5jUMu6yatLYj3IBh/HadPbwAM= Subject key identifier: CF:51:94:AD:92:5A:EA:58:B9:B0:21:0D:95:5A:77:0A:F6:05:F3:C9 Authority key identifier: 3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9 Certificate issuer: /CN=3E69DE558C030D2041570E32C387F764C38BBBA9 Certificate serial: 3F4504AE9C87969AB7681652665CBC24FB1F173A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft Manifest number: 0206 Signing time: Sun 19 Oct 2025 19:22:00 +0000 Manifest this update: Sun 19 Oct 2025 19:17:00 +0000 Manifest next update: Wed 22 Oct 2025 22:58:00 +0000 Files and hashes: 1: 3E69DE558C030D2041570E32C387F764C38BBBA9.crl (hash: DSk8p7D2Ieijiq0SUYfyZOGHlg0LoCQNOcCS9qen/I8=) 2: 3130332e3131372e33302e302f32332d3233203d3e2039333431.roa (hash: rPKEvLXWGWoztExe4HntWPPQ3bNHicZSmrS4LoU+DGA=) 3: 3130332e3131372e33302e302f32342d3234203d3e2039333431.roa (hash: xCOn9NWbt0GGMLt//qaNrgk/Sb/ECXg1/Jw9T03F6gc=) 4: 3130332e3131372e33312e302f32342d3234203d3e2039333431.roa (hash: +aYgV7p1X1TAw32sJQDFPZ5QXQcUqf2Pg9Wsy7Iew4g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 22:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:45:04:ae:9c:87:96:9a:b7:68:16:52:66:5c:bc:24:fb:1f:17:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E69DE558C030D2041570E32C387F764C38BBBA9 Validity Not Before: Oct 19 19:17:00 2025 GMT Not After : Oct 22 22:58:00 2025 GMT Subject: CN=CF5194AD925AEA58B9B0210D955A770AF605F3C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:84:b5:ea:20:1d:1c:d8:b7:53:38:83:8e:39: 74:62:fc:12:e6:38:6f:6d:ef:f8:0d:01:12:3a:55: c2:00:61:c8:5e:c5:64:48:24:fc:4c:7d:db:6f:5e: 20:54:86:71:35:d9:da:6c:01:6a:26:b7:7f:29:df: a6:cd:f5:f1:6f:12:1b:cb:ae:10:d2:19:7e:47:de: 3d:d3:4e:ae:b5:fa:1e:b5:63:56:f9:0e:12:ed:60: fc:cf:5c:37:43:85:51:54:c3:55:85:b5:67:82:e7: 97:69:96:71:00:f5:d4:1e:2d:20:eb:83:a0:5a:f3: 45:33:54:63:52:ad:43:5b:ce:3d:ea:cb:5d:5e:d8: 32:7e:ea:15:9f:bf:02:9e:f7:64:dd:84:f3:91:a6: 50:1c:f8:e8:36:26:95:4a:90:8d:e0:35:6c:40:3e: c8:d9:50:83:95:74:da:b5:a9:cd:d1:fc:fa:e5:be: 6b:7f:9c:a9:15:29:5d:87:2b:36:7a:48:5c:3c:67: e4:02:fa:81:41:5f:f8:e4:1c:e4:80:98:86:30:a4: 96:3b:bc:3a:0a:11:79:06:d0:7e:3b:05:89:4c:42: 0f:dd:71:d4:09:91:e0:69:52:ba:69:4a:bf:c0:bd: c7:40:e0:60:ce:2b:92:3c:1b:6c:d2:f3:d8:40:c2: 6f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:51:94:AD:92:5A:EA:58:B9:B0:21:0D:95:5A:77:0A:F6:05:F3:C9 X509v3 Authority Key Identifier: keyid:3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:08:0b:ab:06:a9:68:5a:64:33:63:1f:a9:a7:e7:fd:68:ce: 35:32:eb:e7:0d:c0:95:62:f8:09:2a:6d:63:7a:6b:89:0b:fc: 29:92:c0:bc:a4:4e:cf:7b:3b:80:1a:e7:f1:46:f5:43:5b:4d: a5:96:77:40:cb:c4:57:df:a6:7c:4b:f1:10:c6:c3:80:fe:bb: 93:47:33:f5:76:e1:87:99:6d:04:11:a9:a4:03:69:31:cc:20: be:f8:e6:92:00:61:ec:94:34:56:f5:8f:e6:cf:8a:70:cb:0b: aa:27:f3:6b:c7:46:f8:45:df:02:94:85:4e:ec:1f:5b:f6:37: cc:0f:c4:72:29:56:78:ad:5f:ef:8e:52:ae:74:26:92:4f:2b: 03:5e:33:12:dd:95:aa:e1:11:35:87:8d:31:d9:79:43:0e:28: 00:c7:37:45:22:0f:a3:a0:e7:34:5a:13:26:f3:f3:85:1e:a0: 17:58:a2:c6:54:9d:46:27:6a:92:4b:b9:e7:fd:4b:6d:b6:8c: 4f:0e:06:92:7f:04:63:e8:2d:3f:59:3e:d5:bc:ad:e7:fd:e2: 5f:bc:40:01:b0:c8:48:56:41:4c:40:3e:a5:a5:0a:64:ce:5c: 9e:e3:9f:8a:94:ec:56:b4:83:5d:27:ab:d7:e1:fd:7e:88:a4: ba:fa:e0:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP0UErpyHlpq3aBZSZly8JPsfFzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3NjRD MzhCQkJBOTAeFw0yNTEwMTkxOTE3MDBaFw0yNTEwMjIyMjU4MDBaMDMxMTAvBgNV BAMTKENGNTE5NEFEOTI1QUVBNThCOUIwMjEwRDk1NUE3NzBBRjYwNUYzQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDohLXqIB0c2LdTOIOOOXRi/BLm OG9t7/gNARI6VcIAYchexWRIJPxMfdtvXiBUhnE12dpsAWomt38p36bN9fFvEhvL rhDSGX5H3j3TTq61+h61Y1b5DhLtYPzPXDdDhVFUw1WFtWeC55dplnEA9dQeLSDr g6Ba80UzVGNSrUNbzj3qy11e2DJ+6hWfvwKe92TdhPORplAc+Og2JpVKkI3gNWxA PsjZUIOVdNq1qc3R/Prlvmt/nKkVKV2HKzZ6SFw8Z+QC+oFBX/jkHOSAmIYwpJY7 vDoKEXkG0H47BYlMQg/dcdQJkeBpUrppSr/AvcdA4GDOK5I8G2zS89hAwm85AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz1GUrZJa6li5sCENlVp3CvYF88kwHwYDVR0j BBgwFoAUPmneVYwDDSBBVw4yw4f3ZMOLu6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIzYmIzNC0xNWUyLTQ0ODctYjUyNy02ZTc1MTI4NmNlN2QvMC8zRTY5REU1NThD MDMwRDIwNDE1NzBFMzJDMzg3Rjc2NEMzOEJCQkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3NjRDMzhC QkJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliM2JiMzQtMTVlMi00NDg3LWI1 MjctNmU3NTEyODZjZTdkLzAvM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3 NjRDMzhCQkJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwIC6sGqWhaZDNjH6mn5/1ozjUy6+cNwJVi +AkqbWN6a4kL/CmSwLykTs97O4Aa5/FG9UNbTaWWd0DLxFffpnxL8RDGw4D+u5NH M/V24YeZbQQRqaQDaTHMIL745pIAYeyUNFb1j+bPinDLC6on82vHRvhF3wKUhU7s H1v2N8wPxHIpVnitX++OUq50JpJPKwNeMxLdlarhETWHjTHZeUMOKADHN0UiD6Og 5zRaEybz84UeoBdYosZUnUYnapJLuef9S222jE8OBpJ/BGPoLT9ZPtW8ref94l+8 QAGwyEhWQUxAPqWlCmTOXJ7jn4qU7Fa0g10nq9fh/X6IpLr64B0= -----END CERTIFICATE-----Generated at Mon Oct 20 15:50:09 2025 by rpki-client