$ rpki-client -vvf repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft File: 3C3C868A5674B425FAE567426BCB238E23AE20AC.mft (raw, json) Hash identifier: 52RdC50cLeZZ6d+UarV+a8ZimyLaSNBweMGvypn1gv0= Subject key identifier: D7:3F:C5:9A:F9:90:65:09:2A:73:C6:48:79:35:E3:27:3F:9D:56:6A Authority key identifier: 3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC Certificate issuer: /CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Certificate serial: 545C0DF7BE1472D162D61C119F65E2317D11446B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft Manifest number: 0227 Signing time: Mon 03 Nov 2025 06:51:53 +0000 Manifest this update: Mon 03 Nov 2025 06:46:53 +0000 Manifest next update: Thu 06 Nov 2025 08:40:53 +0000 Files and hashes: 1: 3130332e3133352e322e302f32342d3234203d3e203338333230.roa (hash: KZ/BrcpNlnq1GeOoeq+ujqu98XEmwwqQMF5ra78kfE0=) 2: 3130332e3133352e312e302f32342d3234203d3e203338333230.roa (hash: jxUYJQpEaP8bPhyLYtacTJc3csgAE9Hd2kaadYQz8QA=) 3: 3130332e3133352e302e302f32342d3234203d3e203338333230.roa (hash: ldrGJsy+/TLnpHhOovohV+mReZwkU+jIEX++pOvvnkI=) 4: 3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (hash: 85V6qA8RHEszjBxF6yv2LBrZ9dlUnY8/+0ZLxd1aOzQ=) 5: 3C3C868A5674B425FAE567426BCB238E23AE20AC.crl (hash: 8nznuA3+8syVzedEUj2M2NdHCrw7h3vcR8mKRYxVhJM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 08:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:5c:0d:f7:be:14:72:d1:62:d6:1c:11:9f:65:e2:31:7d:11:44:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Validity Not Before: Nov 3 06:46:53 2025 GMT Not After : Nov 6 08:40:53 2025 GMT Subject: CN=D73FC59AF99065092A73C6487935E3273F9D566A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:73:ac:b0:cb:2b:8d:ad:8b:76:1a:36:d8:64: b5:82:78:32:ab:66:44:ec:d4:d0:3a:8f:09:8c:7b: 79:36:ba:23:d1:3e:a8:d2:26:fe:7c:c0:de:fe:fe: c3:be:59:95:a7:0f:0c:6b:07:13:d3:bd:fe:78:60: ad:43:97:7d:14:23:75:b4:04:9d:bb:af:41:74:4a: 46:82:d4:ac:07:58:64:7e:b5:83:f9:2e:8d:f8:c8: fc:7e:4f:28:09:8a:60:d9:09:34:32:ca:54:db:fd: c9:62:af:39:2b:c0:d8:1f:b5:8a:cf:a7:37:75:f9: 62:a4:8f:d2:83:90:61:23:b6:3b:09:21:bf:60:42: 83:aa:7f:31:ca:b5:b4:6a:14:71:03:58:0d:7a:db: c6:b0:d4:4f:74:32:94:20:ac:58:3f:96:ad:dd:e7: 54:10:1f:e5:bf:87:3c:71:0d:a7:08:d3:9b:68:4a: ed:4d:cc:db:a2:94:66:7e:ff:d6:a2:da:ae:1d:a8: f1:fe:91:82:17:bb:f9:b9:b4:06:d6:e2:92:57:52: db:7b:41:98:5a:99:2f:20:a0:f3:68:62:ef:56:27: 74:60:01:57:7a:1b:93:96:af:d4:f0:dc:e0:11:96: 3a:ce:52:f1:fb:3c:8f:4c:7d:c1:e7:73:51:21:ee: 44:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:3F:C5:9A:F9:90:65:09:2A:73:C6:48:79:35:E3:27:3F:9D:56:6A X509v3 Authority Key Identifier: keyid:3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:b3:e8:e4:ee:9f:3e:ca:15:bf:a2:8a:75:74:59:e7:ce:07: 40:06:21:82:5f:49:e8:d0:0f:95:74:26:b5:4e:8e:ac:20:89: cd:fe:b3:58:59:9d:4f:54:78:cf:f8:36:a4:3f:48:50:f3:e5: 63:58:a8:40:bc:ce:da:d8:db:4c:ac:6e:1d:82:54:05:1e:df: e1:62:4b:a5:0d:ec:3e:4d:c8:2a:b6:07:30:9c:ce:a9:f0:db: bd:d4:0e:c9:8f:20:29:ac:a4:a5:62:4a:e6:95:b8:c2:3d:bf: 1c:2d:b7:d4:b9:a4:40:b0:db:ce:91:d6:f6:ba:f3:83:d2:bc: 22:81:11:4b:4a:2c:a5:56:e7:f7:3f:68:ab:a7:14:ac:83:54: 85:7c:5b:b2:a6:4e:df:ef:6e:71:2a:89:e1:2e:bf:7d:d8:eb: 26:cf:27:30:40:fd:2d:7d:82:88:84:a7:45:9b:d9:de:27:17: 00:c1:30:9a:a7:5c:db:5a:d9:3b:f0:4b:ff:13:ca:16:6f:c8: 4a:a7:d9:90:50:d6:e1:3b:45:52:bd:83:74:36:3c:ca:ef:51: 73:cf:34:87:ae:21:52:2d:a2:02:93:67:b1:51:45:93:b4:23: da:5d:ce:cd:ea:22:0b:41:06:f4:01:de:1e:b2:98:fc:f1:83: 77:71:8d:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVFwN974UctFi1hwRn2XiMX0RRGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUy M0FFMjBBQzAeFw0yNTExMDMwNjQ2NTNaFw0yNTExMDYwODQwNTNaMDMxMTAvBgNV BAMTKEQ3M0ZDNTlBRjk5MDY1MDkyQTczQzY0ODc5MzVFMzI3M0Y5RDU2NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCc6ywyyuNrYt2GjbYZLWCeDKr ZkTs1NA6jwmMe3k2uiPRPqjSJv58wN7+/sO+WZWnDwxrBxPTvf54YK1Dl30UI3W0 BJ27r0F0SkaC1KwHWGR+tYP5Lo34yPx+TygJimDZCTQyylTb/clirzkrwNgftYrP pzd1+WKkj9KDkGEjtjsJIb9gQoOqfzHKtbRqFHEDWA1628aw1E90MpQgrFg/lq3d 51QQH+W/hzxxDacI05toSu1NzNuilGZ+/9ai2q4dqPH+kYIXu/m5tAbW4pJXUtt7 QZhamS8goPNoYu9WJ3RgAVd6G5OWr9Tw3OARljrOUvH7PI9MfcHnc1Eh7kQzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1z/FmvmQZQkqc8ZIeTXjJz+dVmowHwYDVR0j BBgwFoAUPDyGilZ0tCX65WdCa8sjjiOuIKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Mjk5ZTZmMC1mMjNjLTQxZmYtYjY3Yy00MWFmMDUxMzM5ZDEvMC8zQzNDODY4QTU2 NzRCNDI1RkFFNTY3NDI2QkNCMjM4RTIzQUUyMEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUyM0FF MjBBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5OWU2ZjAtZjIzYy00MWZmLWI2 N2MtNDFhZjA1MTMzOWQxLzAvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIz OEUyM0FFMjBBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGz6OTunz7KFb+iinV0WefOB0AGIYJfSejQ D5V0JrVOjqwgic3+s1hZnU9UeM/4NqQ/SFDz5WNYqEC8ztrY20ysbh2CVAUe3+Fi S6UN7D5NyCq2BzCczqnw273UDsmPICmspKViSuaVuMI9vxwtt9S5pECw286R1va6 84PSvCKBEUtKLKVW5/c/aKunFKyDVIV8W7KmTt/vbnEqieEuv33Y6ybPJzBA/S19 goiEp0Wb2d4nFwDBMJqnXNta2TvwS/8TyhZvyEqn2ZBQ1uE7RVK9g3Q2PMrvUXPP NIeuIVItogKTZ7FRRZO0I9pdzs3qIgtBBvQB3h6ymPzxg3dxjVU= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:52 2025 by rpki-client