$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft File: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft (raw, json) Hash identifier: PGPYA12ywFFcaZU3SvWuzDA7kZaQzetNCYMML/65T4o= Subject key identifier: 78:97:1D:5A:43:27:14:01:B2:77:0C:09:0F:E7:99:EC:9B:4D:F3:4D Authority key identifier: 3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 Certificate issuer: /CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Certificate serial: 2CFDB5DCA9A83988242C379363628DB0E04747C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft Manifest number: DF Signing time: Tue 04 Nov 2025 15:32:18 +0000 Manifest this update: Tue 04 Nov 2025 15:27:18 +0000 Manifest next update: Sat 08 Nov 2025 01:27:18 +0000 Files and hashes: 1: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: Sfdp2ETmAB6FU1WSvmecpTzRs2Nz0Rf6LLcGShnuuzQ=) 2: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl (hash: 1VhjjN1iQ7b4cNI+4PeHOAAkSBh5L+mV9AcM3Ky2sOM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 01:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:fd:b5:dc:a9:a8:39:88:24:2c:37:93:63:62:8d:b0:e0:47:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Validity Not Before: Nov 4 15:27:18 2025 GMT Not After : Nov 8 01:27:18 2025 GMT Subject: CN=78971D5A43271401B2770C090FE799EC9B4DF34D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6c:7f:b2:03:34:4c:a4:d1:56:05:10:9a:26: b8:fa:16:7e:dc:5e:ab:bf:73:95:4e:a7:9d:45:9f: db:36:34:46:f8:16:4a:4b:c7:eb:34:b3:ee:3f:3b: e4:bf:ce:dd:66:69:ad:c1:97:9b:fb:62:ea:73:7e: 76:6a:5b:73:e2:26:f9:ac:d2:6c:cc:01:e1:eb:57: 45:66:88:71:a0:8f:71:b6:48:17:c8:1b:2c:34:9d: 1c:fe:8e:23:72:34:2c:dc:b3:fa:3b:8a:78:fb:b3: 87:19:5a:de:49:ea:c1:da:91:82:b9:29:9c:df:27: a5:60:1f:77:ec:7c:b0:8a:35:7c:25:e0:78:bb:93: f6:57:4b:14:76:26:f2:e6:8c:22:a2:19:a6:1a:39: 95:a6:a1:4f:5a:bd:f0:ae:16:7b:31:2d:97:38:32: a4:31:7d:89:4b:c9:04:ea:e3:cd:c6:57:5d:10:ff: 77:64:66:89:a8:85:11:72:0e:5b:ac:bd:01:fd:77: 97:3a:16:46:47:13:7e:9b:87:b8:ab:87:5b:6f:62: 0c:0a:79:5a:18:66:9c:41:47:73:ea:dc:94:a7:02: 8c:cb:7e:dc:9e:57:d0:e0:6e:69:23:a1:3e:54:85: c8:34:0d:9a:17:b2:85:11:3b:03:15:4d:8f:56:b4: d8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:97:1D:5A:43:27:14:01:B2:77:0C:09:0F:E7:99:EC:9B:4D:F3:4D X509v3 Authority Key Identifier: keyid:3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:de:8c:c9:e5:71:41:09:21:51:18:09:af:48:b8:73:61:d5: 7b:61:23:26:34:45:72:19:47:e6:ab:99:96:b7:2a:87:b2:cb: a3:30:0e:8a:7a:a5:f8:73:fc:66:35:5a:56:2c:f9:eb:a7:13: 97:b5:b5:91:19:01:d6:9b:a7:bd:d2:fe:71:be:f2:81:f3:c2: 20:bc:c5:03:75:e1:da:55:99:d1:8b:56:08:e9:76:a1:48:ec: 88:8c:e8:d1:39:bc:70:46:4a:2a:6e:0e:ed:12:f2:a8:44:c4: e2:10:1c:3f:cf:76:be:34:2e:ce:3b:fc:1c:d6:55:6c:00:46: 86:b6:c9:06:5d:a2:64:7a:7a:5a:9b:e8:62:c8:6e:0e:41:24: 80:94:49:54:4c:d2:f1:c0:f6:e4:e7:78:1b:6d:ae:07:26:06: 69:e6:da:81:77:1c:85:96:e8:76:5a:bf:dc:6a:1a:ea:01:92: b9:2e:e6:44:09:5c:5c:52:32:d5:3a:7a:40:b7:b7:f0:de:02: eb:5b:97:b4:bc:c5:2f:73:f1:c5:db:e6:a4:37:7d:e3:cd:38: 54:10:82:3c:11:b2:fd:e8:57:e7:50:9e:27:66:3e:1b:54:8c: 78:f2:8c:ec:9d:82:d6:6d:3c:6f:d5:c2:5e:42:20:52:dc:75: f7:c0:fc:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULP213KmoOYgkLDeTY2KNsOBHR8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4 RjM4QkFBNjAeFw0yNTExMDQxNTI3MThaFw0yNTExMDgwMTI3MThaMDMxMTAvBgNV BAMTKDc4OTcxRDVBNDMyNzE0MDFCMjc3MEMwOTBGRTc5OUVDOUI0REYzNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjbH+yAzRMpNFWBRCaJrj6Fn7c Xqu/c5VOp51Fn9s2NEb4FkpLx+s0s+4/O+S/zt1maa3Bl5v7YupzfnZqW3PiJvms 0mzMAeHrV0VmiHGgj3G2SBfIGyw0nRz+jiNyNCzcs/o7inj7s4cZWt5J6sHakYK5 KZzfJ6VgH3fsfLCKNXwl4Hi7k/ZXSxR2JvLmjCKiGaYaOZWmoU9avfCuFnsxLZc4 MqQxfYlLyQTq483GV10Q/3dkZomohRFyDlusvQH9d5c6FkZHE36bh7irh1tvYgwK eVoYZpxBR3Pq3JSnAozLftyeV9DgbmkjoT5Uhcg0DZoXsoUROwMVTY9WtNinAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeJcdWkMnFAGydwwJD+eZ7JtN800wHwYDVR0j BBgwFoAUP/3FAukK+OZv3c0KbfMdFo84uqYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMS8zRkZEQzUwMkU5 MEFGOEU2NkZERENEMEE2REYzMUQxNjhGMzhCQUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4RjM4 QkFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzEvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFE MTY4RjM4QkFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjejMnlcUEJIVEYCa9IuHNh1XthIyY0RXIZ R+armZa3Koeyy6MwDop6pfhz/GY1WlYs+eunE5e1tZEZAdabp73S/nG+8oHzwiC8 xQN14dpVmdGLVgjpdqFI7IiM6NE5vHBGSipuDu0S8qhExOIQHD/Pdr40Ls47/BzW VWwARoa2yQZdomR6elqb6GLIbg5BJICUSVRM0vHA9uTneBttrgcmBmnm2oF3HIWW 6HZav9xqGuoBkrku5kQJXFxSMtU6ekC3t/DeAutbl7S8xS9z8cXb5qQ3fePNOFQQ gjwRsv3oV+dQnidmPhtUjHjyjOydgtZtPG/Vwl5CIFLcdffA/Ak= -----END CERTIFICATE-----Generated at Wed Nov 5 09:17:19 2025 by rpki-client