$ rpki-client -vvf repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft File: 3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft (raw, json) Hash identifier: DrTPpQrdr7Rceholn/dIbG+O2prb5YQdcarHkBDqpoc= Subject key identifier: 64:84:B2:9B:D0:31:16:CD:13:DF:80:02:CF:74:63:AA:1C:6F:CC:A5 Authority key identifier: 3E:CE:7D:2E:9C:2F:F3:D5:D3:0D:29:4D:74:92:C3:FE:F6:51:BA:AA Certificate issuer: /CN=3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA Certificate serial: 3AB5C1B7F8D40FEE0526D9F30F3AFE716750402A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft Manifest number: 0364 Signing time: Sun 19 Oct 2025 09:21:55 +0000 Manifest this update: Sun 19 Oct 2025 09:16:55 +0000 Manifest next update: Wed 22 Oct 2025 16:49:55 +0000 Files and hashes: 1: 3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl (hash: J1S+uc0lhEl0Lcu50jhaeWoRvglS6tLUNzqbs9EEU00=) 2: 3130332e3137312e3138322e302f32342d3234203d3e20313432333735.roa (hash: YYGVRYPBp9IPNMR5VwzW826x/acetE+4Oj6LGMt7tPU=) 3: 3130332e3137312e3138332e302f32342d3234203d3e20313432333735.roa (hash: DCgYEPaVukPuYmvO5a2cczC4OgprkfQ5HG76ulQS39Q=) 4: 3130332e3137312e3138322e302f32332d3233203d3e20313432333735.roa (hash: aihSJuIZjlYbfPjvBLdvafMIwZ5NASIBmOuqn4SEmM0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 16:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b5:c1:b7:f8:d4:0f:ee:05:26:d9:f3:0f:3a:fe:71:67:50:40:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA Validity Not Before: Oct 19 09:16:55 2025 GMT Not After : Oct 22 16:49:55 2025 GMT Subject: CN=6484B29BD03116CD13DF8002CF7463AA1C6FCCA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:0d:5a:06:4a:7f:ea:f6:ef:99:ae:93:d3:d8: 07:76:2d:f2:3c:31:6b:08:2a:ba:e5:1e:12:5e:c8: 37:8c:c8:ef:3a:da:98:45:2b:77:2c:f8:d9:a1:71: 5e:dc:31:9d:56:5e:92:d5:87:94:7d:46:37:e9:6c: e7:12:1d:11:d1:7f:1a:6b:e2:12:f4:5b:69:29:f1: 59:ee:7e:d6:fa:41:4c:7a:c7:20:f0:b5:2b:13:29: 40:55:b0:64:da:6c:1a:af:2b:22:f9:0e:6e:5a:ae: 20:21:5b:c3:23:ff:98:e7:d2:31:dd:9f:c2:c7:2f: 1b:84:4b:99:db:c8:7f:16:42:ca:31:77:22:87:2f: 4d:b2:cb:e9:75:d0:5e:ef:d9:a6:43:2a:81:fd:31: 5d:6a:64:db:94:54:da:c1:a4:1c:1c:a7:d1:b8:8e: 6e:c3:6e:b0:a2:50:11:8e:5f:b2:1d:58:73:c5:8d: 74:20:25:5d:95:84:d0:29:2f:b4:2d:6c:11:02:ca: ab:73:89:65:11:19:6c:10:46:f1:5b:08:86:a7:04: e2:fc:be:1f:a3:41:aa:ba:34:7d:4b:92:0f:77:2c: 5e:26:7d:31:77:8e:d1:e1:f7:a2:69:1c:c6:27:3e: 07:20:1b:ad:86:be:cb:4c:08:9c:7c:a7:65:95:5e: 3a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:84:B2:9B:D0:31:16:CD:13:DF:80:02:CF:74:63:AA:1C:6F:CC:A5 X509v3 Authority Key Identifier: keyid:3E:CE:7D:2E:9C:2F:F3:D5:D3:0D:29:4D:74:92:C3:FE:F6:51:BA:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:34:e1:ce:e6:62:d4:e8:f2:ca:28:96:50:46:a0:ea:95:6d: 1a:9e:0b:66:41:36:b5:48:c1:80:0f:58:7f:ab:2c:11:5d:bf: a5:e6:bd:b4:d8:b4:31:0b:7c:93:44:15:e9:16:9f:5b:e3:12: b1:d8:76:0e:b2:57:41:ef:97:d3:68:5f:b1:40:c7:8e:0a:78: 7d:1a:fc:c8:5f:95:92:08:dd:a1:d4:fd:ee:61:5c:b1:9c:da: c1:16:c2:29:1f:2a:68:b9:1a:c5:77:d1:7a:37:89:b3:ab:4c: 2f:e7:7d:28:9f:a9:bb:d8:33:2a:ed:22:55:7e:b1:96:16:ff: 7f:fc:e3:68:02:26:e2:e8:77:a9:39:68:43:9f:b0:e5:49:23: 0d:bf:56:97:74:c8:78:16:ff:ec:1f:7d:89:c0:17:01:b9:8f: 99:68:56:8d:89:e8:25:49:82:1a:3c:e6:ec:1a:b5:34:e8:ff: 3c:f0:1e:bf:13:05:79:bb:43:01:f6:f6:88:91:20:86:9f:eb: 35:6b:fb:1d:76:6f:5c:96:68:b3:0f:f7:f3:57:cd:2b:1b:b2: f7:45:36:a3:29:d5:d0:09:f8:00:39:65:cd:cd:d8:2e:a0:3b: 4e:72:43:7a:a3:1d:81:4c:e7:31:56:95:fc:a6:3a:4d:f9:81: ff:b3:5a:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOrXBt/jUD+4FJtnzDzr+cWdQQCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDRTdEMkU5QzJGRjNENUQzMEQyOTRENzQ5MkMzRkVG NjUxQkFBQTAeFw0yNTEwMTkwOTE2NTVaFw0yNTEwMjIxNjQ5NTVaMDMxMTAvBgNV BAMTKDY0ODRCMjlCRDAzMTE2Q0QxM0RGODAwMkNGNzQ2M0FBMUM2RkNDQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5DVoGSn/q9u+ZrpPT2Ad2LfI8 MWsIKrrlHhJeyDeMyO862phFK3cs+NmhcV7cMZ1WXpLVh5R9RjfpbOcSHRHRfxpr 4hL0W2kp8Vnuftb6QUx6xyDwtSsTKUBVsGTabBqvKyL5Dm5ariAhW8Mj/5jn0jHd n8LHLxuES5nbyH8WQsoxdyKHL02yy+l10F7v2aZDKoH9MV1qZNuUVNrBpBwcp9G4 jm7DbrCiUBGOX7IdWHPFjXQgJV2VhNApL7QtbBECyqtziWURGWwQRvFbCIanBOL8 vh+jQaq6NH1Lkg93LF4mfTF3jtHh96JpHMYnPgcgG62GvstMCJx8p2WVXjrfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZISym9AxFs0T34ACz3RjqhxvzKUwHwYDVR0j BBgwFoAUPs59Lpwv89XTDSlNdJLD/vZRuqowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzUwNWNiMy1iNTVlLTQwZTQtYWM3OS02MzY1NjA2ZjRlZjkvMC8zRUNFN0QyRTlD MkZGM0Q1RDMwRDI5NEQ3NDkyQzNGRUY2NTFCQUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VDRTdEMkU5QzJGRjNENUQzMEQyOTRENzQ5MkMzRkVGNjUx QkFBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM1MDVjYjMtYjU1ZS00MGU0LWFj NzktNjM2NTYwNmY0ZWY5LzAvM0VDRTdEMkU5QzJGRjNENUQzMEQyOTRENzQ5MkMz RkVGNjUxQkFBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJI04c7mYtTo8soollBGoOqVbRqeC2ZBNrVI wYAPWH+rLBFdv6XmvbTYtDELfJNEFekWn1vjErHYdg6yV0Hvl9NoX7FAx44KeH0a /MhflZII3aHU/e5hXLGc2sEWwikfKmi5GsV30Xo3ibOrTC/nfSifqbvYMyrtIlV+ sZYW/3/842gCJuLod6k5aEOfsOVJIw2/Vpd0yHgW/+wffYnAFwG5j5loVo2J6CVJ gho85uwatTTo/zzwHr8TBXm7QwH29oiRIIaf6zVr+x12b1yWaLMP9/NXzSsbsvdF NqMp1dAJ+AA5Zc3N2C6gO05yQ3qjHYFM5zFWlfymOk35gf+zWsY= -----END CERTIFICATE-----Generated at Mon Oct 20 09:28:49 2025 by rpki-client