$ rpki-client -vvf repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft File: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft (raw, json) Hash identifier: yqgcX1M8xbKUFnzeY4A7ljwnT271W5FaJzVbUlhxyGk= Subject key identifier: 0A:87:74:1E:68:24:D7:16:78:75:5C:03:01:FB:E3:77:2E:78:27:E1 Authority key identifier: 3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4 Certificate issuer: /CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4 Certificate serial: 7FF35A8DD3F51C80FFB14AFEEECF6EB4A071997E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft Manifest number: A6 Signing time: Mon 03 Nov 2025 05:20:54 +0000 Manifest this update: Mon 03 Nov 2025 05:15:54 +0000 Manifest next update: Thu 06 Nov 2025 12:37:54 +0000 Files and hashes: 1: 33362e35302e34342e302f32332d3234203d3e20313532303130.roa (hash: homg5w1o8Ac7RkByH0/Fbb96kiXTeJPDkxjgg7Q4x1k=) 2: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl (hash: PqPKKjBrx+4h+P6WIPuTsHzrotxVUDlEyvKfU/qpQAc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 12:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:f3:5a:8d:d3:f5:1c:80:ff:b1:4a:fe:ee:cf:6e:b4:a0:71:99:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4 Validity Not Before: Nov 3 05:15:54 2025 GMT Not After : Nov 6 12:37:54 2025 GMT Subject: CN=0A87741E6824D71678755C0301FBE3772E7827E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ed:6c:df:62:2a:bd:89:cf:c8:c2:7b:ef:9e: 52:cb:46:e6:55:f6:dc:d1:a0:c7:56:81:e0:24:fc: 6d:45:e4:48:75:f3:da:3c:2b:96:f6:78:85:60:7c: 96:e6:a6:e2:0f:88:3f:04:70:d6:30:1b:5b:b0:ce: c3:0f:4d:8e:e6:b4:2d:4a:57:8b:b1:bc:71:51:d1: 7f:01:70:a3:b8:48:07:16:80:4b:99:9f:fb:c5:f3: 94:25:50:f9:8f:f4:bd:fc:30:83:dd:95:85:70:1f: 37:76:1c:f4:fe:75:04:90:15:08:37:4b:ae:65:1a: 69:45:b1:5c:f8:45:6d:69:49:0b:59:5f:a3:ba:9b: 68:c7:57:d9:f3:90:a7:58:3d:65:b6:2d:9f:2b:cd: 1a:f1:f7:74:6c:ae:c2:63:e0:7c:ae:c3:4e:e4:ca: dc:e4:03:ba:fc:2d:3d:28:e9:34:6d:70:6a:46:34: 87:a1:c9:f8:94:61:c0:ab:b4:3a:cc:bb:a0:f1:74: d3:7c:0f:ec:87:3f:0e:9c:3c:ba:30:d6:f7:7a:97: 39:5e:55:0a:4f:8d:be:81:47:bf:19:5b:2b:97:10: b4:ec:6f:4f:17:45:7b:29:b7:df:64:98:cc:0d:66: 3f:b6:4f:35:5d:0e:93:5b:dc:a4:a1:d2:ea:c2:0d: 31:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:87:74:1E:68:24:D7:16:78:75:5C:03:01:FB:E3:77:2E:78:27:E1 X509v3 Authority Key Identifier: keyid:3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:ea:2a:a3:4c:1d:28:70:b4:f2:8d:d4:b4:36:b2:eb:e5:b5: bf:e4:da:c7:04:bc:df:e6:5b:57:d0:a2:0e:1d:80:2d:03:78: be:e1:86:21:ab:3a:b2:30:b7:be:e6:81:92:95:0f:ca:c7:7c: b7:3c:38:2d:40:30:8a:fb:af:64:a3:79:e4:f2:e0:00:16:11: e1:04:67:7c:82:b2:28:a9:5b:54:fb:0a:8a:e2:4d:88:0c:fc: 57:7e:d0:ce:14:a0:cc:79:25:9b:8a:a8:34:19:02:b8:b1:07: 3e:dc:f7:47:46:e5:41:b7:12:65:6e:1a:d5:47:b8:56:61:2b: cd:ed:ee:b7:da:50:c7:79:af:35:36:78:bf:67:25:6a:44:cc: 3b:5b:c5:ff:82:c2:39:23:54:e9:23:32:8d:53:b9:5d:3f:ae: 4f:e0:1b:5d:7e:36:c4:78:a6:48:a1:21:ea:ee:dd:1b:7f:ae: d0:1b:dc:66:84:da:b6:78:34:33:38:07:61:a4:b9:4a:45:fd: 30:f1:14:93:80:1b:ef:e8:7c:9c:0f:22:f0:ef:81:4e:90:f9: cd:ac:f3:1b:a6:1a:c7:f4:59:71:29:21:7c:eb:12:c9:b8:d3: c6:0d:f5:6e:c0:de:09:25:02:69:61:9b:65:09:3d:b2:87:71: 3e:01:19:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf/NajdP1HID/sUr+7s9utKBxmX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVF OUUwN0JGNDAeFw0yNTExMDMwNTE1NTRaFw0yNTExMDYxMjM3NTRaMDMxMTAvBgNV BAMTKDBBODc3NDFFNjgyNEQ3MTY3ODc1NUMwMzAxRkJFMzc3MkU3ODI3RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX7WzfYiq9ic/IwnvvnlLLRuZV 9tzRoMdWgeAk/G1F5Eh189o8K5b2eIVgfJbmpuIPiD8EcNYwG1uwzsMPTY7mtC1K V4uxvHFR0X8BcKO4SAcWgEuZn/vF85QlUPmP9L38MIPdlYVwHzd2HPT+dQSQFQg3 S65lGmlFsVz4RW1pSQtZX6O6m2jHV9nzkKdYPWW2LZ8rzRrx93RsrsJj4Hyuw07k ytzkA7r8LT0o6TRtcGpGNIehyfiUYcCrtDrMu6DxdNN8D+yHPw6cPLow1vd6lzle VQpPjb6BR78ZWyuXELTsb08XRXspt99kmMwNZj+2TzVdDpNb3KSh0urCDTEHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCod0Hmgk1xZ4dVwDAfvjdy54J+EwHwYDVR0j BBgwFoAUPOympdKxOPXgXOgV1qnZBenge/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDhlYzVlYi0wMzU0LTRkODctYjJiZS0wOGZmYWQ0YWEwNmEvMC8zQ0VDQTZBNUQy QjEzOEY1RTA1Q0U4MTVENkE5RDkwNUU5RTA3QkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVFOUUw N0JGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ4ZWM1ZWItMDM1NC00ZDg3LWIy YmUtMDhmZmFkNGFhMDZhLzAvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5 MDVFOUUwN0JGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGnqKqNMHShwtPKN1LQ2suvltb/k2scEvN/m W1fQog4dgC0DeL7hhiGrOrIwt77mgZKVD8rHfLc8OC1AMIr7r2SjeeTy4AAWEeEE Z3yCsiipW1T7CoriTYgM/Fd+0M4UoMx5JZuKqDQZArixBz7c90dG5UG3EmVuGtVH uFZhK83t7rfaUMd5rzU2eL9nJWpEzDtbxf+CwjkjVOkjMo1TuV0/rk/gG11+NsR4 pkihIeru3Rt/rtAb3GaE2rZ4NDM4B2GkuUpF/TDxFJOAG+/ofJwPIvDvgU6Q+c2s 8xumGsf0WXEpIXzrEsm408YN9W7A3gklAmlhm2UJPbKHcT4BGaU= -----END CERTIFICATE-----Generated at Tue Nov 4 12:38:42 2025 by rpki-client