$ rpki-client -vvf repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft File: 3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft (raw, json) Hash identifier: b2VcDu0wlw+K+braWOSFGmxuGPeKw60LQ8Uiz8KHahk= Subject key identifier: 39:E0:20:17:C1:4C:0E:32:72:00:EC:32:01:CE:DD:3E:89:AF:22:B0 Authority key identifier: 3B:76:4E:CE:3D:B3:0D:E5:7C:60:36:DC:CB:AE:95:8B:ED:34:9A:E0 Certificate issuer: /CN=3B764ECE3DB30DE57C6036DCCBAE958BED349AE0 Certificate serial: 26E3E06427740C038CF7930A56332C4ADF5CF173 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft Manifest number: 01D3 Signing time: Mon 20 Oct 2025 23:21:23 +0000 Manifest this update: Mon 20 Oct 2025 23:16:23 +0000 Manifest next update: Fri 24 Oct 2025 05:29:23 +0000 Files and hashes: 1: 3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl (hash: sSNMItsjyzVe71HxarZG+F2RtjSWTKw2KCIhXE8N8ko=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 05:29:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:e3:e0:64:27:74:0c:03:8c:f7:93:0a:56:33:2c:4a:df:5c:f1:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B764ECE3DB30DE57C6036DCCBAE958BED349AE0 Validity Not Before: Oct 20 23:16:23 2025 GMT Not After : Oct 24 05:29:23 2025 GMT Subject: CN=39E02017C14C0E327200EC3201CEDD3E89AF22B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:88:0e:9f:cd:71:5d:6f:9d:82:67:b2:18:cf: 3d:02:67:11:d1:df:8e:04:2c:f8:86:2d:4b:ac:bc: 79:a3:1d:6d:92:ed:42:19:d1:de:b4:2e:ed:7b:f3: 08:ec:be:50:bb:93:6c:20:41:9a:24:79:f0:28:77: 3e:75:8f:80:b4:8a:7b:17:69:c3:fd:51:56:b5:4e: d8:9e:18:07:5f:bd:fb:3a:e5:e8:81:93:8e:2b:56: 51:61:3c:3b:ff:fd:a7:83:e5:6a:8e:c2:4a:0d:f0: fa:8b:cc:ba:05:c7:27:52:50:98:e7:8b:51:2d:49: 02:68:e7:66:1e:4e:f4:ea:92:ff:9b:22:5f:90:56: 14:24:b3:33:98:6e:d2:01:75:32:5a:55:d6:af:77: 19:3c:9f:b4:d0:94:5b:ce:2a:6e:0e:83:db:56:c5: 4b:e2:24:cd:71:c2:b5:ea:cd:ed:77:f5:e4:7f:b7: 19:12:7b:0a:fe:e3:ac:24:0b:a1:58:53:86:6c:eb: 7e:e6:9c:fd:a5:6c:eb:e1:dc:3b:ea:dc:73:9d:cf: b8:99:fd:eb:2c:bf:f5:5b:b5:cb:7e:33:c0:80:30: c0:86:92:e8:a5:d0:ea:84:b6:aa:9b:97:a0:19:ef: 0d:e5:27:ea:80:62:25:40:d8:7a:a4:5c:9e:04:c0: 13:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E0:20:17:C1:4C:0E:32:72:00:EC:32:01:CE:DD:3E:89:AF:22:B0 X509v3 Authority Key Identifier: keyid:3B:76:4E:CE:3D:B3:0D:E5:7C:60:36:DC:CB:AE:95:8B:ED:34:9A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:48:3e:3d:1d:3f:8f:09:76:0a:2f:d6:2a:ff:59:61:65:80: d8:62:c7:21:79:fe:a4:2a:70:30:1c:0d:1f:03:c1:6f:b4:9d: d3:8c:a7:a4:3c:d1:94:b8:84:56:ea:d5:b2:3d:bc:21:49:eb: 50:04:48:2c:1c:7d:4e:16:79:d3:b9:67:d0:f8:26:eb:c7:6d: 1c:2b:29:e2:38:6c:df:7f:4b:ae:3d:94:8e:52:a6:44:2f:ee: a5:e6:d5:1c:70:e8:dd:33:ed:33:26:ab:a6:b7:c9:7c:9a:79: 96:45:3d:3f:e1:aa:2a:2d:97:ac:eb:10:8a:c0:e6:9b:29:8d: d3:9e:7f:29:24:4c:0d:e0:f6:47:ef:72:9c:3f:75:6b:de:7c: 2d:a8:11:8d:3d:38:2b:89:fa:17:10:26:b9:4e:45:d9:b6:67: fa:b2:22:58:3c:38:2c:c8:c7:0f:b2:e4:48:8a:a1:57:41:17: 1e:c3:4b:cc:95:55:ec:6f:b1:02:90:82:dd:6f:f7:42:82:d7: 54:87:47:13:8f:02:82:7c:57:86:61:65:70:94:8c:51:e7:40: 08:f8:e7:f3:e5:e3:62:e2:44:f9:3c:7a:aa:f9:27:13:74:0b: 55:5f:89:31:6f:f0:8a:72:aa:41:dc:4c:5b:03:c9:ba:e0:0c: f7:78:f0:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJuPgZCd0DAOM95MKVjMsSt9c8XMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1OEJF RDM0OUFFMDAeFw0yNTEwMjAyMzE2MjNaFw0yNTEwMjQwNTI5MjNaMDMxMTAvBgNV BAMTKDM5RTAyMDE3QzE0QzBFMzI3MjAwRUMzMjAxQ0VERDNFODlBRjIyQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDViA6fzXFdb52CZ7IYzz0CZxHR 344ELPiGLUusvHmjHW2S7UIZ0d60Lu178wjsvlC7k2wgQZokefAodz51j4C0insX acP9UVa1TtieGAdfvfs65eiBk44rVlFhPDv//aeD5WqOwkoN8PqLzLoFxydSUJjn i1EtSQJo52YeTvTqkv+bIl+QVhQkszOYbtIBdTJaVdavdxk8n7TQlFvOKm4Og9tW xUviJM1xwrXqze139eR/txkSewr+46wkC6FYU4Zs637mnP2lbOvh3Dvq3HOdz7iZ /essv/Vbtct+M8CAMMCGkuil0OqEtqqbl6AZ7w3lJ+qAYiVA2HqkXJ4EwBMvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOeAgF8FMDjJyAOwyAc7dPomvIrAwHwYDVR0j BBgwFoAUO3ZOzj2zDeV8YDbcy66Vi+00muAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDAyOWMyMi0yMjE1LTQ4YzEtOWFiNi1iYjEzYzAxYjQzYjEvMC8zQjc2NEVDRTNE QjMwREU1N0M2MDM2RENDQkFFOTU4QkVEMzQ5QUUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1OEJFRDM0 OUFFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQwMjljMjItMjIxNS00OGMxLTlh YjYtYmIxM2MwMWI0M2IxLzAvM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1 OEJFRDM0OUFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFIPj0dP48Jdgov1ir/WWFlgNhixyF5/qQq cDAcDR8DwW+0ndOMp6Q80ZS4hFbq1bI9vCFJ61AESCwcfU4WedO5Z9D4JuvHbRwr KeI4bN9/S649lI5SpkQv7qXm1Rxw6N0z7TMmq6a3yXyaeZZFPT/hqiotl6zrEIrA 5pspjdOefykkTA3g9kfvcpw/dWvefC2oEY09OCuJ+hcQJrlORdm2Z/qyIlg8OCzI xw+y5EiKoVdBFx7DS8yVVexvsQKQgt1v90KC11SHRxOPAoJ8V4ZhZXCUjFHnQAj4 5/Pl42LiRPk8eqr5JxN0C1VfiTFv8IpyqkHcTFsDybrgDPd48GE= -----END CERTIFICATE-----Generated at Tue Oct 21 03:11:37 2025 by rpki-client