$ rpki-client -vvf repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft File: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft (raw, json) Hash identifier: wZmvlhRkgER/RpiODuH0u4hC6cP9Odajh7sff0kXGuE= Subject key identifier: A4:7B:63:78:39:65:83:45:F2:49:8F:AC:43:E5:EE:98:5F:39:9F:C1 Authority key identifier: 3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 Certificate issuer: /CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Certificate serial: 215EC85DE84EF69CB92E6DFCF09EC45E05B35AAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft Manifest number: 03C5 Signing time: Sun 19 Oct 2025 14:42:13 +0000 Manifest this update: Sun 19 Oct 2025 14:37:13 +0000 Manifest next update: Wed 22 Oct 2025 18:09:13 +0000 Files and hashes: 1: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl (hash: yW2Ni7/eghDbFBpzku5YfeKSw7w6Wa3ga9OEh+3gNxg=) 2: 3130332e38342e342e302f32322d3234203d3e20313332363431.roa (hash: ei+mi6lm3a64UFetrkni2cRNDguaELmNUyIIIt/btoQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 18:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:5e:c8:5d:e8:4e:f6:9c:b9:2e:6d:fc:f0:9e:c4:5e:05:b3:5a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Validity Not Before: Oct 19 14:37:13 2025 GMT Not After : Oct 22 18:09:13 2025 GMT Subject: CN=A47B637839658345F2498FAC43E5EE985F399FC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a4:72:b9:04:bf:bd:82:46:b9:96:ae:f5:90: 96:fd:23:1b:4d:df:29:96:e6:e2:8b:b9:e7:20:70: df:d2:25:f5:b8:52:c2:f8:fe:fa:9e:71:1a:ff:c2: c4:49:c7:5c:b7:00:7b:86:63:ad:05:ab:28:c1:19: 5f:8c:c9:0e:9c:1e:af:2a:bb:03:63:a6:d0:cf:45: 53:8d:61:53:44:76:da:3a:39:5e:30:8f:cb:f4:dd: b3:8a:72:d5:54:b6:a3:37:4c:d7:75:24:2e:95:cc: eb:77:44:50:9e:af:33:97:08:f5:63:8e:0a:08:85: b3:2f:38:ea:66:82:29:3a:79:ff:b5:a2:f8:ce:25: e0:dc:81:36:80:50:54:bf:4e:6c:c4:d6:52:dc:7e: e3:b5:29:b8:d9:e7:53:05:85:79:29:b4:89:02:1e: 04:de:6b:03:29:be:9c:9f:79:91:b6:b5:69:1f:c7: 76:c0:31:11:00:84:08:7a:9d:be:95:c2:9c:50:db: 9e:b3:6d:85:b7:b3:20:51:11:fe:90:9f:4f:71:28: 0c:4c:2a:28:7c:83:5f:af:da:cd:34:23:66:c9:a7: 64:8c:3f:9d:50:de:e0:99:6f:b7:b7:b5:08:01:db: 91:68:31:cb:82:c0:66:45:97:a8:67:cd:ce:fe:9e: 27:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7B:63:78:39:65:83:45:F2:49:8F:AC:43:E5:EE:98:5F:39:9F:C1 X509v3 Authority Key Identifier: keyid:3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:96:89:c7:bc:fc:4f:74:ca:be:f7:3d:9e:6d:11:c0:f2:cb: db:fe:16:34:e2:f4:63:a4:33:6b:bc:fd:51:ba:9b:d9:f5:22: 99:f3:86:2b:a7:2b:6f:3b:b0:7b:b8:54:b7:a6:b8:0e:19:ed: a9:56:90:92:08:1d:f4:63:9f:0f:df:a6:53:58:e4:46:29:a4: 07:69:8f:4b:8c:b0:6f:33:c3:fd:a6:57:45:69:e9:e7:ab:30: 7c:22:ef:73:d0:57:0c:35:64:fb:52:bd:0e:0c:cc:4d:ee:5a: 01:64:39:ac:9e:f1:cb:0d:63:5e:53:08:30:84:14:8d:e1:a8: 33:ff:07:eb:cc:92:7b:9f:3f:40:32:d6:ed:00:96:5a:2c:c6: 5c:c0:b0:55:da:c8:21:67:0a:c8:be:72:69:2e:57:0d:6e:9b: 2c:5e:52:98:34:5b:7e:9b:6a:99:10:21:7d:4e:2c:c2:d4:16: a1:ac:b3:63:6a:61:ad:76:ba:e6:ad:09:e5:36:6c:00:4f:c7: 87:ef:f8:5d:44:0d:db:53:34:57:34:1b:ad:cf:b8:93:36:bb: 7b:91:df:a1:d0:8d:df:75:3b:92:bb:a8:61:56:0c:dc:b8:9a: b5:00:d3:2b:0e:da:62:84:d2:39:75:26:1f:36:6b:73:15:dc: 6e:e2:72:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIV7IXehO9py5Lm388J7EXgWzWqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0 Q0RENzgzNjAeFw0yNTEwMTkxNDM3MTNaFw0yNTEwMjIxODA5MTNaMDMxMTAvBgNV BAMTKEE0N0I2Mzc4Mzk2NTgzNDVGMjQ5OEZBQzQzRTVFRTk4NUYzOTlGQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOpHK5BL+9gka5lq71kJb9IxtN 3ymW5uKLuecgcN/SJfW4UsL4/vqecRr/wsRJx1y3AHuGY60FqyjBGV+MyQ6cHq8q uwNjptDPRVONYVNEdto6OV4wj8v03bOKctVUtqM3TNd1JC6VzOt3RFCerzOXCPVj jgoIhbMvOOpmgik6ef+1ovjOJeDcgTaAUFS/TmzE1lLcfuO1KbjZ51MFhXkptIkC HgTeawMpvpyfeZG2tWkfx3bAMREAhAh6nb6VwpxQ256zbYW3syBREf6Qn09xKAxM Kih8g1+v2s00I2bJp2SMP51Q3uCZb7e3tQgB25FoMcuCwGZFl6hnzc7+nicJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpHtjeDllg0XySY+sQ+XumF85n8EwHwYDVR0j BBgwFoAUPAPPlReBlwxtCtvo+s/sakzdeDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjE0Y2VlMC01ZGY2LTRiMmItYmIzZC1mNjgzMjEzZTdjMzMvMC8zQzAzQ0Y5NTE3 ODE5NzBDNkQwQURCRThGQUNGRUM2QTRDREQ3ODM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0Q0RE NzgzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjYxNGNlZTAtNWRmNi00YjJiLWJi M2QtZjY4MzIxM2U3YzMzLzAvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVD NkE0Q0RENzgzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEeWice8/E90yr73PZ5tEcDyy9v+FjTi9GOk M2u8/VG6m9n1IpnzhiunK287sHu4VLemuA4Z7alWkJIIHfRjnw/fplNY5EYppAdp j0uMsG8zw/2mV0Vp6eerMHwi73PQVww1ZPtSvQ4MzE3uWgFkOaye8csNY15TCDCE FI3hqDP/B+vMknufP0Ay1u0AllosxlzAsFXayCFnCsi+cmkuVw1umyxeUpg0W36b apkQIX1OLMLUFqGss2NqYa12uuatCeU2bABPx4fv+F1EDdtTNFc0G63PuJM2u3uR 36HQjd91O5K7qGFWDNy4mrUA0ysO2mKE0jl1Jh82a3MV3G7icn8= -----END CERTIFICATE-----Generated at Mon Oct 20 20:53:59 2025 by rpki-client