$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft File: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft (raw, json) Hash identifier: 1EoXAzLKF5vz23JOPZsUH7ARfnu7l9QxNGj70A0oGuc= Subject key identifier: B0:CE:5F:91:BA:08:93:8A:93:E7:31:BF:8D:CE:59:7F:9C:9D:47:10 Authority key identifier: 3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F Certificate issuer: /CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Certificate serial: 237B663B66BDC07F40C762FB1CE008B36C75123E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft Manifest number: 0109 Signing time: Sat 18 Oct 2025 21:32:00 +0000 Manifest this update: Sat 18 Oct 2025 21:27:00 +0000 Manifest next update: Wed 22 Oct 2025 02:13:00 +0000 Files and hashes: 1: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl (hash: FKPlz4BMDDVFNL+gUhcXEv4Rm9hX8fdoZnYp9cVC3bU=) 2: 3232322e3136352e3139322e302f31382d3234203d3e203234323037.roa (hash: Q31WVg0nt9Akn7sHQ0ovSP+rHovoJ3AXQpCRAfyJpn4=) 3: 323430343a663630303a3a2f33322d3438203d3e203234323037.roa (hash: xDimJNI1Twl7hCA1S5QHDj3z6dVO53eSr1zwPr1dzLg=) 4: 3230332e3135332e3131322e302f32312d3234203d3e203234323037.roa (hash: Zks55AdYxfoprGZkiZN/TIj//KiubcvneSX7655/CJQ=) 5: 3230332e3135332e39362e302f32302d3234203d3e203234323037.roa (hash: EDTzr0RnERkDSs2/M4R/0RtE2R+ut3mngAzM50kbtVY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 02:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:7b:66:3b:66:bd:c0:7f:40:c7:62:fb:1c:e0:08:b3:6c:75:12:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Validity Not Before: Oct 18 21:27:00 2025 GMT Not After : Oct 22 02:13:00 2025 GMT Subject: CN=B0CE5F91BA08938A93E731BF8DCE597F9C9D4710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b2:20:8e:b2:e1:71:0b:71:e0:09:d0:0f:66: a6:e7:f4:a6:44:1e:1a:ec:d9:fd:d8:8f:43:8d:c8: 75:82:7a:33:7b:7f:35:9d:f4:37:d5:a8:95:77:e6: d8:56:10:21:a4:90:93:fc:cd:51:0a:51:07:f4:1c: 28:dc:49:ba:36:66:9c:58:77:ce:b1:83:3a:e6:70: 8a:0c:72:37:b5:16:10:b7:36:e0:cd:dd:63:e0:2c: 6c:fe:f4:97:b5:28:c8:b1:13:2c:2d:7e:55:ee:22: ed:a9:10:0d:df:43:8b:49:1f:6a:f5:13:0c:83:50: 52:4b:31:d6:88:14:5f:49:c8:ce:2a:7f:13:12:22: c4:4f:0a:ff:7a:49:d3:ab:78:cf:ba:20:01:f7:55: 98:3d:7c:9f:97:4f:48:58:2f:93:c0:ec:e7:39:70: c8:a1:b8:f1:89:5d:e0:eb:c3:77:52:3c:f1:cf:95: 7c:19:24:a9:a6:af:52:eb:ca:fe:59:5a:07:7f:75: 33:7e:c0:3c:99:95:52:eb:53:d8:18:31:d2:e9:09: 5d:ba:1b:e2:22:90:25:d5:d4:84:9f:d7:7a:e2:b4: ff:bf:f8:5b:f5:d3:39:f3:1c:f6:ec:28:c1:d3:67: 4c:ce:3a:da:e6:5f:51:6d:b6:8a:89:57:c1:aa:f7: ff:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CE:5F:91:BA:08:93:8A:93:E7:31:BF:8D:CE:59:7F:9C:9D:47:10 X509v3 Authority Key Identifier: keyid:3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:4b:41:d8:99:d9:87:f7:91:77:24:37:bf:aa:e2:ca:d7:1d: 50:da:d9:24:de:bc:ff:de:1f:fc:a9:e3:b4:57:f7:8c:4a:97: b0:e3:94:c2:c7:21:c6:ac:e2:85:a8:84:0f:a3:ba:6d:4b:b1: 31:26:75:d4:7b:12:40:3c:4e:97:67:0f:c1:b9:94:2d:15:4f: 2e:4d:8a:10:89:ad:95:02:38:60:37:cb:33:9b:5e:db:3c:fa: dc:c3:a3:f8:bf:f7:87:da:6f:ab:cb:3b:ee:d3:a6:49:65:d4: 7b:e8:22:be:56:22:9a:4b:0b:d7:f6:99:4e:ae:af:ae:1c:34: 93:f3:77:db:fb:e6:b0:6f:71:68:33:d8:54:4e:76:a6:31:dd: 5f:73:de:58:f0:3e:ee:a5:8c:ce:bf:79:cd:ef:d7:72:6b:0e: 4f:42:a7:62:6c:4e:d7:f7:39:22:98:79:3d:9a:42:93:69:f6: 7f:4c:5e:a8:b3:55:32:dc:53:4c:32:81:9a:2c:f2:4a:5a:58: 74:03:fa:fb:4b:e7:14:00:90:50:b1:e8:08:ba:ea:be:46:b4: 8c:e2:d2:8d:52:78:f2:c0:7f:e3:90:68:9f:04:2c:ef:fd:3d: 1d:64:84:0b:6e:54:12:7c:23:32:96:a3:40:f6:0f:3b:2c:d2: 01:0a:ac:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI3tmO2a9wH9Ax2L7HOAIs2x1Ej4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVC RjBBRkIwRjAeFw0yNTEwMTgyMTI3MDBaFw0yNTEwMjIwMjEzMDBaMDMxMTAvBgNV BAMTKEIwQ0U1RjkxQkEwODkzOEE5M0U3MzFCRjhEQ0U1OTdGOUM5RDQ3MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDasiCOsuFxC3HgCdAPZqbn9KZE Hhrs2f3Yj0ONyHWCejN7fzWd9DfVqJV35thWECGkkJP8zVEKUQf0HCjcSbo2ZpxY d86xgzrmcIoMcje1FhC3NuDN3WPgLGz+9Je1KMixEywtflXuIu2pEA3fQ4tJH2r1 EwyDUFJLMdaIFF9JyM4qfxMSIsRPCv96SdOreM+6IAH3VZg9fJ+XT0hYL5PA7Oc5 cMihuPGJXeDrw3dSPPHPlXwZJKmmr1Lryv5ZWgd/dTN+wDyZlVLrU9gYMdLpCV26 G+IikCXV1ISf13ritP+/+Fv10znzHPbsKMHTZ0zOOtrmX1FttoqJV8Gq9/9jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsM5fkboIk4qT5zG/jc5Zf5ydRxAwHwYDVR0j BBgwFoAUPHkP5KuCosFQF9JlcUsSRb8K+w8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzdlODA4MS02M2FmLTQ5ZTctOTY0Ni03NmMyNWE1ZTk3Y2EvMC8zQzc5MEZFNEFC ODJBMkMxNTAxN0QyNjU3MTRCMTI0NUJGMEFGQjBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVCRjBB RkIwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM3ZTgwODEtNjNhZi00OWU3LTk2 NDYtNzZjMjVhNWU5N2NhLzAvM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEy NDVCRjBBRkIwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFlLQdiZ2Yf3kXckN7+q4srXHVDa2STevP/e H/yp47RX94xKl7DjlMLHIcas4oWohA+jum1LsTEmddR7EkA8TpdnD8G5lC0VTy5N ihCJrZUCOGA3yzObXts8+tzDo/i/94fab6vLO+7Tpkll1HvoIr5WIppLC9f2mU6u r64cNJPzd9v75rBvcWgz2FROdqYx3V9z3ljwPu6ljM6/ec3v13JrDk9Cp2JsTtf3 OSKYeT2aQpNp9n9MXqizVTLcU0wygZos8kpaWHQD+vtL5xQAkFCx6Ai66r5GtIzi 0o1SePLAf+OQaJ8ELO/9PR1khAtuVBJ8IzKWo0D2Dzss0gEKrNQ= -----END CERTIFICATE-----Generated at Mon Oct 20 12:11:42 2025 by rpki-client