$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft File: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft (raw, json) Hash identifier: KC29O/dGTsdE7i2KaajU5X3OBexF7fXxjahwVdv2xko= Subject key identifier: 67:1C:CB:2C:C1:DA:78:C1:D0:58:53:7A:67:5F:7F:29:84:94:3F:A7 Authority key identifier: 3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 Certificate issuer: /CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Certificate serial: 44F057B05A48F3A5598B62D65E09A4E789F41699 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft Manifest number: 0194 Signing time: Mon 20 Oct 2025 16:32:16 +0000 Manifest this update: Mon 20 Oct 2025 16:27:16 +0000 Manifest next update: Thu 23 Oct 2025 23:34:16 +0000 Files and hashes: 1: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl (hash: pP70uXuu1qPdMxiiokXw3/9bu0snVfMU05YQ83i3kmw=) 2: 3130332e3231302e3232312e302f32342d3234203d3e20313530393433.roa (hash: MpJlquu9LJ3WndZX88XrCsW96PgjuhRStmt6Lgc1shw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 23:34:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:f0:57:b0:5a:48:f3:a5:59:8b:62:d6:5e:09:a4:e7:89:f4:16:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Validity Not Before: Oct 20 16:27:16 2025 GMT Not After : Oct 23 23:34:16 2025 GMT Subject: CN=671CCB2CC1DA78C1D058537A675F7F2984943FA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7d:d3:c2:03:a5:84:fe:27:92:7d:e5:14:d8: 37:21:96:35:32:fb:b2:4d:00:3b:74:5f:bd:fd:b6: 11:8d:7d:12:5d:7e:5d:8a:c7:32:c0:91:0e:f7:cd: dc:74:cf:28:5a:6c:f8:52:d7:18:a5:70:26:9a:e9: 93:3c:bf:9b:78:12:24:ec:60:04:9c:bd:28:75:78: dc:fb:90:e9:8e:a8:1f:db:f9:50:f3:62:52:90:da: 9b:88:09:38:89:99:f6:ce:89:9b:58:60:f4:6c:01: bb:64:58:aa:b0:92:d0:be:f8:d2:86:dc:1a:dc:8e: 56:8b:61:8b:43:41:56:a8:65:f5:aa:cd:9c:1e:00: d4:46:34:f7:94:7c:2a:1d:8c:2a:45:cd:2f:a7:34: 77:22:62:5b:34:0e:af:ff:2f:72:bc:0b:eb:3c:a9: b6:75:37:d4:fe:51:dd:20:da:42:ea:69:e1:5d:80: 30:96:0b:a5:2d:c2:3b:45:93:15:9c:76:ff:d2:42: 31:6b:76:7c:42:95:87:94:f9:4c:26:19:02:20:79: 2a:3d:19:22:11:ba:f8:d5:7e:20:22:d7:65:5b:9a: e1:3f:61:e9:34:4f:84:11:47:75:d6:fa:52:a5:db: a2:fd:c6:e4:02:11:07:51:69:53:37:f2:8b:35:1c: e4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1C:CB:2C:C1:DA:78:C1:D0:58:53:7A:67:5F:7F:29:84:94:3F:A7 X509v3 Authority Key Identifier: keyid:3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:7e:b5:74:fe:20:f5:98:ff:97:0e:ae:ca:13:7d:b7:b5:06: 6b:ba:11:4d:ae:74:64:71:59:08:a1:fd:52:ba:d0:1c:75:9b: c2:99:44:5e:d1:3e:d1:a3:f7:22:c5:dc:2f:1c:be:1f:bd:96: f3:dd:8b:c4:23:a9:b9:35:15:f1:68:9c:0a:bf:80:3c:ae:41: 12:af:8a:70:58:51:21:08:71:0e:e1:78:c9:08:92:95:2b:e1: db:25:91:73:e3:ad:da:eb:23:8e:31:35:a9:32:cb:c6:20:aa: 83:cd:f9:bd:4b:5f:3b:cb:48:b6:1d:f5:03:80:8f:1d:ba:9a: e4:c8:6a:db:bf:da:19:f4:98:dc:c1:41:56:88:01:ff:11:eb: d8:70:7c:d0:51:8e:0b:65:68:dd:41:d9:18:bc:15:82:25:2a: 5b:b1:06:6e:df:6f:1b:60:e2:d6:f7:d7:3b:2d:84:a7:39:f5: 32:11:e7:5c:52:4e:2d:0e:0d:c6:43:06:29:72:60:53:ac:24: 2e:4f:2b:22:ce:04:8b:7d:cb:c6:74:46:d7:01:94:fb:69:f8: 50:24:ec:9e:fb:51:b3:78:e6:db:c9:51:84:f9:93:5f:2d:61: 5f:1c:21:93:e1:26:0b:59:82:f5:e5:51:bc:4b:c6:29:aa:65: 29:a9:40:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURPBXsFpI86VZi2LWXgmk54n0FpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0 NzIxREI0NzAeFw0yNTEwMjAxNjI3MTZaFw0yNTEwMjMyMzM0MTZaMDMxMTAvBgNV BAMTKDY3MUNDQjJDQzFEQTc4QzFEMDU4NTM3QTY3NUY3RjI5ODQ5NDNGQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIfdPCA6WE/ieSfeUU2DchljUy +7JNADt0X739thGNfRJdfl2KxzLAkQ73zdx0zyhabPhS1xilcCaa6ZM8v5t4EiTs YAScvSh1eNz7kOmOqB/b+VDzYlKQ2puICTiJmfbOiZtYYPRsAbtkWKqwktC++NKG 3BrcjlaLYYtDQVaoZfWqzZweANRGNPeUfCodjCpFzS+nNHciYls0Dq//L3K8C+s8 qbZ1N9T+Ud0g2kLqaeFdgDCWC6UtwjtFkxWcdv/SQjFrdnxClYeU+UwmGQIgeSo9 GSIRuvjVfiAi12VbmuE/Yek0T4QRR3XW+lKl26L9xuQCEQdRaVM38os1HORlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZxzLLMHaeMHQWFN6Z19/KYSUP6cwHwYDVR0j BBgwFoAUOgnPMuxPbVxP0sg3oRdO00ch20cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWVlMjA5YS0xMTkzLTRkNmYtOWRiZS04Nzc3YmI4OTgwYWEvMC8zQTA5Q0YzMkVD NEY2RDVDNEZEMkM4MzdBMTE3NEVEMzQ3MjFEQjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0NzIx REI0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDllZTIwOWEtMTE5My00ZDZmLTlk YmUtODc3N2JiODk4MGFhLzAvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRF RDM0NzIxREI0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACB+tXT+IPWY/5cOrsoTfbe1Bmu6EU2udGRx WQih/VK60Bx1m8KZRF7RPtGj9yLF3C8cvh+9lvPdi8Qjqbk1FfFonAq/gDyuQRKv inBYUSEIcQ7heMkIkpUr4dslkXPjrdrrI44xNakyy8YgqoPN+b1LXzvLSLYd9QOA jx26muTIatu/2hn0mNzBQVaIAf8R69hwfNBRjgtlaN1B2Ri8FYIlKluxBm7fbxtg 4tb31zsthKc59TIR51xSTi0ODcZDBilyYFOsJC5PKyLOBIt9y8Z0RtcBlPtp+FAk 7J77UbN45tvJUYT5k18tYV8cIZPhJgtZgvXlUbxLximqZSmpQB8= -----END CERTIFICATE-----Generated at Tue Oct 21 07:04:45 2025 by rpki-client