$ rpki-client -vvf repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft File: 3CA825E93FE8830376EF386786BF847CB239BE70.mft (raw, json) Hash identifier: 9n6qQXz7YbQ1MU2Qs/OS+fqVkYc3Uxe39CeAzc1xiJo= Subject key identifier: FC:84:D6:E6:9F:80:A6:00:0B:EA:39:A3:31:08:F4:32:EE:70:07:E5 Authority key identifier: 3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 Certificate issuer: /CN=3CA825E93FE8830376EF386786BF847CB239BE70 Certificate serial: 35C04FFC480A7F30FC14813F72E5046332585159 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft Manifest number: 051E Signing time: Mon 03 Nov 2025 01:51:45 +0000 Manifest this update: Mon 03 Nov 2025 01:46:45 +0000 Manifest next update: Thu 06 Nov 2025 13:12:45 +0000 Files and hashes: 1: 3130332e38332e39322e302f32322d3234203d3e20313331313131.roa (hash: 7BaUBkYi576UVLsHbTQQnc27jnKH4uxS8EK0pK4qmYo=) 2: 3CA825E93FE8830376EF386786BF847CB239BE70.crl (hash: nGuJ9Je6rQyGktAZNuyw96aXVeMZJaBAIJJElBKZtCU=) 3: 3131392e38322e3232342e302f32302d3234203d3e203234323133.roa (hash: rMCMSl1s+WWM7uToBUHib02Gf8GW78oaPsE3tZQeKpc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 13:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c0:4f:fc:48:0a:7f:30:fc:14:81:3f:72:e5:04:63:32:58:51:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CA825E93FE8830376EF386786BF847CB239BE70 Validity Not Before: Nov 3 01:46:45 2025 GMT Not After : Nov 6 13:12:45 2025 GMT Subject: CN=FC84D6E69F80A6000BEA39A33108F432EE7007E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:32:a1:ad:9b:b9:dc:b9:63:98:9a:35:bc:79: 4b:de:8b:c4:d0:ea:42:c8:82:8b:76:1c:af:53:5f: 3a:d5:a7:99:20:e9:15:2c:58:f7:1e:1a:fb:29:21: 54:2f:85:97:b4:9c:8d:eb:35:b2:6c:c5:92:13:62: 95:90:32:88:a2:4f:65:e6:c4:11:6c:7b:56:61:35: 61:26:35:c5:b5:ed:48:47:ce:16:28:2d:b8:23:18: b6:a7:31:4c:e5:50:1b:c6:02:a7:53:cc:c1:fc:ab: 84:6e:82:18:a1:f8:a3:58:fd:87:fa:a4:8b:32:70: 1b:1a:73:f0:37:f1:a1:6e:ab:20:c0:2f:4f:5a:ad: b1:c0:d6:48:bf:96:59:b3:5d:61:87:59:55:c8:e6: 8f:6c:bd:1d:c7:29:0f:e7:27:e1:a0:a6:43:78:1b: 6d:32:bb:6b:58:14:20:d2:93:85:e9:27:64:32:7a: 61:9c:34:fb:17:0d:57:f3:b1:81:0c:b9:ec:01:c5: 9b:1d:97:1d:c1:c5:49:3e:13:13:bd:15:c0:5c:1d: 5e:7b:5a:7c:dc:f0:b4:c2:1f:6b:b5:a0:b3:5e:6a: 91:bb:77:a5:db:f8:06:ac:a3:11:96:3a:93:cc:25: 0f:eb:c0:d1:96:39:7c:da:6b:cd:78:2c:9d:55:97: b9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:84:D6:E6:9F:80:A6:00:0B:EA:39:A3:31:08:F4:32:EE:70:07:E5 X509v3 Authority Key Identifier: keyid:3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:7c:fd:47:2d:87:92:fe:06:1b:c0:b3:8a:07:33:dd:b0:47: 0e:9a:3e:3a:fc:e1:b5:b2:1c:a9:c4:e2:75:74:be:cf:af:5c: 7b:e2:af:11:42:32:8e:ac:8c:34:55:20:5d:f1:3c:7e:1e:ea: 07:64:49:79:53:56:12:59:ca:e4:4b:78:38:5f:75:3c:3c:0b: 28:e1:eb:45:69:cf:05:af:a2:18:80:2b:36:52:58:1d:82:52: a0:26:11:e6:ab:17:21:58:61:c2:11:90:16:db:ae:f5:29:34: ba:1a:50:39:75:56:99:c6:c3:c8:d0:ba:68:dd:2f:49:0e:ea: 79:b3:46:1f:a4:6b:76:e4:84:22:da:52:60:32:56:de:1f:bf: e7:bf:c4:a2:f7:ab:aa:db:a3:2e:98:14:3d:4b:f0:d6:53:f9: 27:26:91:a2:aa:5a:ef:64:99:2d:e5:e9:49:e8:26:f4:86:36: b1:ee:99:da:c1:e0:ec:16:e1:f5:58:9d:c1:1a:9a:e6:e6:0f: a7:7b:2d:76:55:e4:7b:52:c2:33:2e:b1:36:ce:93:36:dd:4b: 8f:48:55:0a:21:bc:64:27:d3:17:e3:77:8a:77:19:e8:5e:ce: 5f:ea:76:8a:8c:3c:b6:4e:ff:39:11:65:ae:3f:f1:a0:e0:6f: 3d:e3:15:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNcBP/EgKfzD8FIE/cuUEYzJYUVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NC MjM5QkU3MDAeFw0yNTExMDMwMTQ2NDVaFw0yNTExMDYxMzEyNDVaMDMxMTAvBgNV BAMTKEZDODRENkU2OUY4MEE2MDAwQkVBMzlBMzMxMDhGNDMyRUU3MDA3RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7MqGtm7ncuWOYmjW8eUvei8TQ 6kLIgot2HK9TXzrVp5kg6RUsWPceGvspIVQvhZe0nI3rNbJsxZITYpWQMoiiT2Xm xBFse1ZhNWEmNcW17UhHzhYoLbgjGLanMUzlUBvGAqdTzMH8q4Rughih+KNY/Yf6 pIsycBsac/A38aFuqyDAL09arbHA1ki/llmzXWGHWVXI5o9svR3HKQ/nJ+GgpkN4 G20yu2tYFCDSk4XpJ2QyemGcNPsXDVfzsYEMuewBxZsdlx3BxUk+ExO9FcBcHV57 Wnzc8LTCH2u1oLNeapG7d6Xb+AasoxGWOpPMJQ/rwNGWOXzaa814LJ1Vl7ktAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/ITW5p+ApgAL6jmjMQj0Mu5wB+UwHwYDVR0j BBgwFoAUPKgl6T/ogwN27zhnhr+EfLI5vnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OGI4YzFiNS0zYmU4LTRhYTctYTRjNi0yMWJjYzhmM2ZhNDAvMC8zQ0E4MjVFOTNG RTg4MzAzNzZFRjM4Njc4NkJGODQ3Q0IyMzlCRTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NCMjM5 QkU3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDhiOGMxYjUtM2JlOC00YWE3LWE0 YzYtMjFiY2M4ZjNmYTQwLzAvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0 N0NCMjM5QkU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEN8/Ucth5L+BhvAs4oHM92wRw6aPjr84bWy HKnE4nV0vs+vXHvirxFCMo6sjDRVIF3xPH4e6gdkSXlTVhJZyuRLeDhfdTw8Cyjh 60VpzwWvohiAKzZSWB2CUqAmEearFyFYYcIRkBbbrvUpNLoaUDl1VpnGw8jQumjd L0kO6nmzRh+ka3bkhCLaUmAyVt4fv+e/xKL3q6rboy6YFD1L8NZT+ScmkaKqWu9k mS3l6UnoJvSGNrHumdrB4OwW4fVYncEamubmD6d7LXZV5HtSwjMusTbOkzbdS49I VQohvGQn0xfjd4p3Gehezl/qdoqMPLZO/zkRZa4/8aDgbz3jFX8= -----END CERTIFICATE-----Generated at Tue Nov 4 12:11:21 2025 by rpki-client