$ rpki-client -vvf repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft File: 3008AF948C4742A525201F3FDA7EFB1800D52D64.mft (raw, json) Hash identifier: YBHKXTZ/1yQQvdjYPfmgx/ZB57xZLEirwCC5ZqUU6Ec= Subject key identifier: 63:87:3C:5E:89:82:F5:9F:1D:C1:F8:7C:74:D1:F6:BD:CE:09:DD:81 Authority key identifier: 30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 Certificate issuer: /CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Certificate serial: 2F45B3878792F1D0CE9DD744A90E58E8986CC062 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft Manifest number: 0115 Signing time: Sat 18 Oct 2025 11:31:59 +0000 Manifest this update: Sat 18 Oct 2025 11:26:59 +0000 Manifest next update: Tue 21 Oct 2025 23:05:59 +0000 Files and hashes: 1: 3008AF948C4742A525201F3FDA7EFB1800D52D64.crl (hash: +VtDcaHS5O9f5Y15urg6cqTNgQ6ApDNauEeV5x+cfFk=) 2: 3135372e31352e34362e302f32332d3234203d3e20313532333936.roa (hash: G0a1IDIDp/6OW+B4SPVbcSdJGPsXh5ci397pwO85gSY=) 3: 3135372e31352e34362e302f32342d3234203d3e20313532333936.roa (hash: mMVF2hYAKg0sTXxaBuy+2bvelwvkw1QteJi5RAQF2oo=) 4: 3135372e31352e34372e302f32342d3234203d3e20313532333936.roa (hash: 2sgMNPvdPKPmSXukXACjrwvtdQ3QHDjRcB3RK3DeklA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 23:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:45:b3:87:87:92:f1:d0:ce:9d:d7:44:a9:0e:58:e8:98:6c:c0:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Validity Not Before: Oct 18 11:26:59 2025 GMT Not After : Oct 21 23:05:59 2025 GMT Subject: CN=63873C5E8982F59F1DC1F87C74D1F6BDCE09DD81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5d:de:5f:21:b0:6b:6a:8f:3b:bc:73:d0:ac: f4:5d:4e:28:03:39:0e:45:7c:e0:42:5f:71:dc:82: 7e:66:49:a8:0c:54:b6:be:ef:fe:98:c0:0b:5c:51: 4a:8c:08:bc:03:35:df:33:d4:8e:1e:e7:b6:ef:84: e5:e5:e1:dc:48:26:a7:19:14:40:b1:f7:50:63:b9: b6:11:f7:1d:84:f3:cc:12:01:d2:9a:ba:ac:bc:0e: 4d:75:35:94:60:5c:00:40:07:c1:b9:a1:c7:45:65: 44:3c:0c:b7:c6:08:df:33:27:e8:22:8c:6a:68:b8: 18:bb:ee:d6:05:8d:c9:71:6d:4b:11:c3:f4:58:e0: 93:1b:8b:c2:37:fb:69:a9:cd:d0:f0:b6:89:10:02: 9d:04:1b:bd:03:1f:1b:44:65:ad:95:72:81:4d:04: 93:7d:7f:ae:22:9c:36:e9:11:80:1c:99:da:4a:b1: df:8d:62:92:7c:3f:bd:f0:b4:e7:f5:4c:3e:fd:e2: 60:b8:dc:77:e2:b5:96:c0:9e:3a:1d:71:4e:30:81: 2c:af:c2:89:02:65:c3:1b:3f:41:a6:1a:b1:2a:96: 7f:d6:fa:d1:e2:2e:b6:6f:bc:a7:61:50:40:af:f6: d0:ed:87:34:30:f0:b0:0f:ce:f8:4f:59:66:5d:81: 9f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:87:3C:5E:89:82:F5:9F:1D:C1:F8:7C:74:D1:F6:BD:CE:09:DD:81 X509v3 Authority Key Identifier: keyid:30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:2e:c4:d0:c3:5a:ec:11:22:6b:9b:f9:b1:ce:ef:6b:f8:5b: 58:26:95:67:fd:6a:23:a9:da:b6:45:1e:c4:0d:c1:24:30:34: 4c:e2:3f:4f:b8:fe:7b:b1:e2:97:13:92:e0:5e:79:b6:64:e9: eb:7e:61:58:f7:86:f3:b6:b9:bd:92:82:5e:d1:f4:ca:d7:9d: 20:5e:20:f4:2d:e7:48:96:51:a2:ed:ce:b2:d2:95:e6:6b:4e: fd:6f:8a:3a:7c:04:ab:1d:8b:3c:d1:71:9e:a1:f4:46:c1:b4: 34:3c:2e:69:e6:aa:69:54:ff:ce:43:54:ff:cf:f4:29:4e:49: 0a:db:4a:94:8e:a9:a1:5c:09:ec:c5:2d:b3:c1:ba:0d:a1:97: 9b:d7:2f:1e:08:17:14:41:b0:ea:6b:69:e3:69:c4:46:8f:47: f2:f2:8a:f0:e5:f8:b1:82:02:1a:1e:41:c6:70:4e:1e:64:2c: 0c:f1:fc:ab:e7:36:f3:2c:09:e6:1c:0a:63:d5:9b:56:61:b6: ea:37:fe:57:6c:26:a5:40:b5:a2:45:8d:77:c8:1a:1f:4b:c0: 62:d6:e7:bc:ec:e3:e5:f5:e3:6a:4c:52:31:a5:57:39:f0:bb: e7:6e:76:3c:8b:9b:56:1e:b8:e8:b7:d9:d7:dd:34:7a:da:4c: 40:a0:52:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL0Wzh4eS8dDOnddEqQ5Y6JhswGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZCMTgw MEQ1MkQ2NDAeFw0yNTEwMTgxMTI2NTlaFw0yNTEwMjEyMzA1NTlaMDMxMTAvBgNV BAMTKDYzODczQzVFODk4MkY1OUYxREMxRjg3Qzc0RDFGNkJEQ0UwOUREODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPXd5fIbBrao87vHPQrPRdTigD OQ5FfOBCX3Hcgn5mSagMVLa+7/6YwAtcUUqMCLwDNd8z1I4e57bvhOXl4dxIJqcZ FECx91BjubYR9x2E88wSAdKauqy8Dk11NZRgXABAB8G5ocdFZUQ8DLfGCN8zJ+gi jGpouBi77tYFjclxbUsRw/RY4JMbi8I3+2mpzdDwtokQAp0EG70DHxtEZa2VcoFN BJN9f64inDbpEYAcmdpKsd+NYpJ8P73wtOf1TD794mC43HfitZbAnjodcU4wgSyv wokCZcMbP0GmGrEqln/W+tHiLrZvvKdhUECv9tDthzQw8LAPzvhPWWZdgZ+5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY4c8XomC9Z8dwfh8dNH2vc4J3YEwHwYDVR0j BBgwFoAUMAivlIxHQqUlIB8/2n77GADVLWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzM0ZWVkOS0xODdlLTRmNDYtYTViYi0wZWE4ZjY2OWFlOTAvMC8zMDA4QUY5NDhD NDc0MkE1MjUyMDFGM0ZEQTdFRkIxODAwRDUyRDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZCMTgwMEQ1 MkQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGMzNGVlZDktMTg3ZS00ZjQ2LWE1 YmItMGVhOGY2NjlhZTkwLzAvMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZC MTgwMEQ1MkQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMuxNDDWuwRImub+bHO72v4W1gmlWf9aiOp 2rZFHsQNwSQwNEziP0+4/nux4pcTkuBeebZk6et+YVj3hvO2ub2Sgl7R9MrXnSBe IPQt50iWUaLtzrLSleZrTv1vijp8BKsdizzRcZ6h9EbBtDQ8LmnmqmlU/85DVP/P 9ClOSQrbSpSOqaFcCezFLbPBug2hl5vXLx4IFxRBsOpraeNpxEaPR/LyivDl+LGC AhoeQcZwTh5kLAzx/KvnNvMsCeYcCmPVm1Zhtuo3/ldsJqVAtaJFjXfIGh9LwGLW 57zs4+X142pMUjGlVznwu+dudjyLm1YeuOi32dfdNHraTECgUow= -----END CERTIFICATE-----Generated at Mon Oct 20 13:54:45 2025 by rpki-client