$ rpki-client -vvf repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft File: 3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft (raw, json) Hash identifier: j3B0vWTwPkALsxXSw70NkHB+60mki73aO36L1PWIO5k= Subject key identifier: 12:52:9E:63:41:37:50:50:2C:BA:55:0C:66:9C:49:B5:C0:47:AF:0B Authority key identifier: 3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB Certificate issuer: /CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB Certificate serial: 3BCA74F65FCE5B2FD815F6DBF0FF84EE18D7FE97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft Manifest number: 0100 Signing time: Sun 19 Oct 2025 21:30:54 +0000 Manifest this update: Sun 19 Oct 2025 21:25:54 +0000 Manifest next update: Wed 22 Oct 2025 21:38:54 +0000 Files and hashes: 1: 3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa (hash: gfWNy9lIc/MVIMgNjSxC32IkW0PrSYj/0GoqdaAmvtI=) 2: 3135372e32302e3135382e302f32342d3234203d3e20313431313230.roa (hash: YasvvxbCzsiYxjm39PQuEFNka/y9AUBvJZG9vLwVOCc=) 3: 3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl (hash: btrXBgjbqjvLaS/2rMNrADxIIF4Babe93VfJUjJRHt8=) 4: 3135372e32302e3135382e302f32332d3233203d3e20313431313230.roa (hash: uyjSRskgL9BJCMKxVifWZ7TJaXQpE36bCbtIhaZsOr4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ca:74:f6:5f:ce:5b:2f:d8:15:f6:db:f0:ff:84:ee:18:d7:fe:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB Validity Not Before: Oct 19 21:25:54 2025 GMT Not After : Oct 22 21:38:54 2025 GMT Subject: CN=12529E63413750502CBA550C669C49B5C047AF0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1e:52:0f:c6:ac:55:b5:e5:83:7c:6f:cb:e2: b5:1b:65:7f:a2:c8:55:1f:ee:8a:07:8b:77:b4:92: 14:03:86:a3:4e:b7:63:82:5b:7c:0d:99:7b:5c:c7: 0c:3d:e8:36:49:ec:35:3c:ab:c2:07:93:1a:87:fe: db:f8:26:bb:12:d9:ed:41:60:59:53:2c:fd:bc:a9: 4c:89:2e:3f:82:b8:49:3a:a8:2a:7a:f7:c7:ea:02: f0:67:a6:fe:e8:9a:87:56:94:33:1d:b3:d5:5f:2e: f8:80:45:84:04:14:b7:0b:d1:9d:5a:54:d3:4a:a9: aa:be:5b:80:79:fc:13:69:47:65:84:63:ef:53:6d: 63:d4:44:5c:9a:dc:32:f7:8e:91:5e:f1:5d:04:d6: 89:06:eb:e0:56:b5:5b:a1:bc:f0:3e:76:a2:cd:77: 03:16:d2:71:61:d3:bb:94:45:51:73:a3:88:43:50: 18:e8:e1:67:4e:44:67:e9:24:d9:09:c3:a9:68:f8: 92:d5:3b:c3:a3:03:5e:52:27:f4:b7:5c:3a:3a:b6: 54:21:11:bc:cb:2f:db:75:22:a9:cd:b2:64:d1:5c: 51:73:46:31:43:6f:5b:00:ac:e6:7d:a6:2c:88:69: 0d:da:79:95:07:c8:91:f5:7a:e0:10:b7:1e:18:b1: 5c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:52:9E:63:41:37:50:50:2C:BA:55:0C:66:9C:49:B5:C0:47:AF:0B X509v3 Authority Key Identifier: keyid:3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:28:fa:ff:70:84:ea:ba:19:2e:0a:61:0f:ee:31:2e:06:9c: ac:c0:a0:a2:dd:c3:65:49:a8:21:7d:a4:c4:a7:a1:fd:0e:2e: 30:e2:b4:03:0f:1e:72:c0:eb:92:2d:44:e6:62:05:39:f3:7f: f3:c9:f4:d5:dc:f4:f8:c0:dd:cc:74:0d:51:8a:47:29:5b:bf: 38:65:a2:d8:7d:9f:44:ce:07:34:6e:51:c9:c9:6d:f8:22:f1: f0:65:ef:b9:5e:ea:0a:4b:0f:b8:37:33:de:97:f0:6a:41:e5: 5c:68:f3:8e:3f:45:e8:f3:dd:93:b0:48:e5:1a:e5:2e:aa:27: 26:16:13:12:08:80:23:d8:26:20:d6:bc:e1:c3:d0:ea:9d:4c: 28:0b:3f:1f:55:47:39:02:9e:33:29:0e:11:aa:31:f5:4f:b9: ca:88:f1:37:9b:90:e0:1b:9c:92:0b:dc:6a:b6:cb:77:73:e7: 3a:dc:22:0c:9f:0f:98:a8:e7:3f:4d:c7:f3:39:fc:07:78:21: 4b:4d:0c:3d:76:33:9c:b9:3e:81:65:36:b3:bf:92:b1:97:30: a2:2a:f2:16:e9:be:6b:ae:05:fd:2e:fc:91:bc:2a:fd:10:5a: 9b:9b:63:63:52:cf:80:ba:8f:14:da:70:b6:42:e7:26:57:2a: d0:73:c5:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO8p09l/OWy/YFfbb8P+E7hjX/pcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNENzBF MzREMjlBQjAeFw0yNTEwMTkyMTI1NTRaFw0yNTEwMjIyMTM4NTRaMDMxMTAvBgNV BAMTKDEyNTI5RTYzNDEzNzUwNTAyQ0JBNTUwQzY2OUM0OUI1QzA0N0FGMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbHlIPxqxVteWDfG/L4rUbZX+i yFUf7ooHi3e0khQDhqNOt2OCW3wNmXtcxww96DZJ7DU8q8IHkxqH/tv4JrsS2e1B YFlTLP28qUyJLj+CuEk6qCp698fqAvBnpv7omodWlDMds9VfLviARYQEFLcL0Z1a VNNKqaq+W4B5/BNpR2WEY+9TbWPURFya3DL3jpFe8V0E1okG6+BWtVuhvPA+dqLN dwMW0nFh07uURVFzo4hDUBjo4WdORGfpJNkJw6lo+JLVO8OjA15SJ/S3XDo6tlQh EbzLL9t1IqnNsmTRXFFzRjFDb1sArOZ9piyIaQ3aeZUHyJH1euAQtx4YsVxtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUElKeY0E3UFAsulUMZpxJtcBHrwswHwYDVR0j BBgwFoAUPG10hdYa1UImFS5dioE9cONNKaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTU5YTM2Mi05NTBjLTQ1YzItYWVjYy04MmIyMTRiY2U0NzQvMC8zQzZENzQ4NUQ2 MUFENTQyMjYxNTJFNUQ4QTgxM0Q3MEUzNEQyOUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNENzBFMzRE MjlBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE1OWEzNjItOTUwYy00NWMyLWFl Y2MtODJiMjE0YmNlNDc0LzAvM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNE NzBFMzREMjlBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0o+v9whOq6GS4KYQ/uMS4GnKzAoKLdw2VJ qCF9pMSnof0OLjDitAMPHnLA65ItROZiBTnzf/PJ9NXc9PjA3cx0DVGKRylbvzhl oth9n0TOBzRuUcnJbfgi8fBl77le6gpLD7g3M96X8GpB5Vxo844/Rejz3ZOwSOUa 5S6qJyYWExIIgCPYJiDWvOHD0OqdTCgLPx9VRzkCnjMpDhGqMfVPucqI8TebkOAb nJIL3Gq2y3dz5zrcIgyfD5io5z9Nx/M5/Ad4IUtNDD12M5y5PoFlNrO/krGXMKIq 8hbpvmuuBf0u/JG8Kv0QWpubY2NSz4C6jxTacLZC5yZXKtBzxcI= -----END CERTIFICATE-----Generated at Mon Oct 20 23:32:44 2025 by rpki-client