$ rpki-client -vvf repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft File: 3B276288FD701E3EC497C2BCC17831BA188BAF79.mft (raw, json) Hash identifier: 4TjVf/7WZSJm1J31PBYU+/RA5LzbXIqAfxDU1bSfzBY= Subject key identifier: E9:9A:83:12:43:67:6E:1C:B6:C7:4A:D3:8A:58:FF:66:15:47:90:41 Authority key identifier: 3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 Certificate issuer: /CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Certificate serial: 16D342A0D1704E6E297475F88F5C31BE5131BEFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft Manifest number: 0225 Signing time: Sun 19 Oct 2025 12:42:08 +0000 Manifest this update: Sun 19 Oct 2025 12:37:08 +0000 Manifest next update: Wed 22 Oct 2025 13:33:08 +0000 Files and hashes: 1: 3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa (hash: 5QwzRSn/R2RoSRGnIXPxq+kbkMjBhYNNiqQ8aVbdQvM=) 2: 3B276288FD701E3EC497C2BCC17831BA188BAF79.crl (hash: gxbAW3o6xepFji+4ZWZ32b9L12083LCJstIxz6xxm0A=) 3: 3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa (hash: GBEQYhTxh1ijshW+PjDdJIixFy8RkYVQoJldthrFVDs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:33:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:d3:42:a0:d1:70:4e:6e:29:74:75:f8:8f:5c:31:be:51:31:be:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Validity Not Before: Oct 19 12:37:08 2025 GMT Not After : Oct 22 13:33:08 2025 GMT Subject: CN=E99A831243676E1CB6C74AD38A58FF6615479041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a4:57:08:82:a3:67:7a:e0:74:81:94:c0:dc: a8:f2:56:c2:34:b9:1e:e1:da:f0:87:28:07:a7:5b: 44:31:22:86:c6:13:af:b9:71:31:d1:25:0a:f2:0b: 52:43:4d:bf:ce:f5:38:1e:78:f5:56:fb:32:f9:d3: a9:2a:3f:08:4e:94:6e:56:f5:4a:5b:90:d1:16:58: 83:27:dd:98:28:e2:24:1a:77:06:ed:f4:33:de:c7: 8b:a7:0d:3f:1e:c6:bf:85:23:a8:a6:40:87:a2:7a: 7a:25:04:61:b4:fe:52:09:44:a1:00:39:57:24:06: e0:93:e4:8f:1f:45:c8:de:eb:87:cf:33:65:8d:13: c9:fc:52:5e:c2:6d:b0:2e:c7:8b:5c:a4:5f:8c:16: b7:5b:43:1c:1d:28:47:93:62:2d:2d:5a:92:1e:5d: b3:80:08:af:bd:6a:93:a1:6a:aa:06:a8:08:58:b7: d2:5e:7d:1c:25:f9:f5:34:52:67:42:58:91:e5:ba: 8a:8e:f7:e5:a5:69:0f:8b:d8:cb:05:97:86:f0:87: 70:c7:b0:a7:0d:21:59:61:13:81:b8:ef:04:a9:c4: ad:5a:5e:23:43:df:e6:62:8f:66:46:e2:27:63:b4: a7:86:15:19:7f:ca:31:7f:d3:8f:e6:b9:e4:b8:b6: a0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9A:83:12:43:67:6E:1C:B6:C7:4A:D3:8A:58:FF:66:15:47:90:41 X509v3 Authority Key Identifier: keyid:3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:68:c9:97:25:93:0b:e9:e6:09:ff:a0:79:c5:43:ea:a0:18: 0a:e2:98:fb:90:23:18:e0:ee:1e:2f:b2:64:ac:a2:e3:09:ea: b6:9f:1c:43:2f:9d:83:6e:28:07:10:da:33:02:c6:7e:9e:6a: 1a:34:08:c6:2d:7b:5f:43:ea:e5:dc:f8:da:b9:9f:e0:40:a3: 1c:83:22:62:1d:ef:30:d1:4e:a3:72:77:52:f9:41:63:55:95: ae:6f:e3:aa:cc:00:9b:71:e3:6a:47:c7:c8:c1:42:5b:0c:19: 3b:95:d8:46:0a:13:b9:b5:15:01:27:7b:9a:fd:20:be:ed:4f: d8:ed:3b:94:29:28:0a:03:c1:e1:84:07:53:39:64:40:f0:10: 9e:d6:76:4e:51:d2:70:2b:7e:9c:6f:cc:b6:67:ed:05:ee:c8: b5:6a:8e:72:6d:1d:cc:85:d9:79:e0:89:48:c7:6d:fb:d4:69: da:58:38:c0:0f:03:48:6c:bc:68:c7:fd:36:94:71:31:d5:e1: 07:5c:b9:28:67:78:ef:ce:0d:f2:fb:8a:af:38:94:a2:5f:70: c6:ee:03:9b:b6:3c:e1:0a:48:83:ea:df:72:cb:0e:3c:7a:37: c9:93:f7:f0:72:6a:b5:1c:14:68:2a:56:03:6a:10:75:82:07: 4b:3f:85:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFtNCoNFwTm4pdHX4j1wxvlExvvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkEx ODhCQUY3OTAeFw0yNTEwMTkxMjM3MDhaFw0yNTEwMjIxMzMzMDhaMDMxMTAvBgNV BAMTKEU5OUE4MzEyNDM2NzZFMUNCNkM3NEFEMzhBNThGRjY2MTU0NzkwNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDopFcIgqNneuB0gZTA3KjyVsI0 uR7h2vCHKAenW0QxIobGE6+5cTHRJQryC1JDTb/O9TgeePVW+zL506kqPwhOlG5W 9UpbkNEWWIMn3Zgo4iQadwbt9DPex4unDT8exr+FI6imQIeienolBGG0/lIJRKEA OVckBuCT5I8fRcje64fPM2WNE8n8Ul7CbbAux4tcpF+MFrdbQxwdKEeTYi0tWpIe XbOACK+9apOhaqoGqAhYt9JefRwl+fU0UmdCWJHluoqO9+WlaQ+L2MsFl4bwh3DH sKcNIVlhE4G47wSpxK1aXiND3+Zij2ZG4idjtKeGFRl/yjF/04/mueS4tqDfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6ZqDEkNnbhy2x0rTilj/ZhVHkEEwHwYDVR0j BBgwFoAUOydiiP1wHj7El8K8wXgxuhiLr3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2ExMTBlOC1iOGMyLTQyNzctYmViMy05MmFhNWIzNjkwZjAvMC8zQjI3NjI4OEZE NzAxRTNFQzQ5N0MyQkNDMTc4MzFCQTE4OEJBRjc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkExODhC QUY3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdhMTEwZTgtYjhjMi00Mjc3LWJl YjMtOTJhYTViMzY5MGYwLzAvM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMx QkExODhCQUY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItoyZclkwvp5gn/oHnFQ+qgGArimPuQIxjg 7h4vsmSsouMJ6rafHEMvnYNuKAcQ2jMCxn6eaho0CMYte19D6uXc+Nq5n+BAoxyD ImId7zDRTqNyd1L5QWNVla5v46rMAJtx42pHx8jBQlsMGTuV2EYKE7m1FQEne5r9 IL7tT9jtO5QpKAoDweGEB1M5ZEDwEJ7Wdk5R0nArfpxvzLZn7QXuyLVqjnJtHcyF 2XngiUjHbfvUadpYOMAPA0hsvGjH/TaUcTHV4QdcuShneO/ODfL7iq84lKJfcMbu A5u2POEKSIPq33LLDjx6N8mT9/ByarUcFGgqVgNqEHWCB0s/he8= -----END CERTIFICATE-----Generated at Mon Oct 20 09:29:16 2025 by rpki-client