$ rpki-client -vvf repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft File: 82BBF3364DDD646942F4CAE0579F132D84194FE2.mft (raw, json) Hash identifier: fVCGV0w25ooHEEoXF4d8s8Gm/wQn8Jseo/0EbBLPt0Q= Subject key identifier: 3C:F4:4F:F2:3D:12:DE:D4:9D:C8:28:3C:EE:BC:4A:2C:C3:25:93:8E Authority key identifier: 82:BB:F3:36:4D:DD:64:69:42:F4:CA:E0:57:9F:13:2D:84:19:4F:E2 Certificate issuer: /CN=82BBF3364DDD646942F4CAE0579F132D84194FE2 Certificate serial: 1A44E67F78ED0E31272BEB2609DEED8081C8B441 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft Manifest number: C6 Signing time: Sun 02 Nov 2025 19:40:57 +0000 Manifest this update: Sun 02 Nov 2025 19:35:57 +0000 Manifest next update: Wed 05 Nov 2025 23:34:57 +0000 Files and hashes: 1: 3130332e3134392e32322e302f32342d3234203d3e20313430303235.roa (hash: ANxlrE1JSxdjlT4kZZgX9Az8PSjhsbf6pSdaY8P2LXE=) 2: 82BBF3364DDD646942F4CAE0579F132D84194FE2.crl (hash: nQRM4jzQpdr/jSLgP8pquPJE4f1QK/h6h5fyJo3ViKk=) 3: 323030313a6466333a3738303a3a2f34382d3438203d3e20313430303235.roa (hash: peJ67ixLv6wOxbNwTzpazMnzEKzYxMtdAI8w89zlkC0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.crl rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:44:e6:7f:78:ed:0e:31:27:2b:eb:26:09:de:ed:80:81:c8:b4:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82BBF3364DDD646942F4CAE0579F132D84194FE2 Validity Not Before: Nov 2 19:35:57 2025 GMT Not After : Nov 5 23:34:57 2025 GMT Subject: CN=3CF44FF23D12DED49DC8283CEEBC4A2CC325938E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:79:99:e7:87:2e:b0:b3:56:f0:95:9f:8f:f9: 5b:88:8f:f9:a6:5a:6e:c7:5f:43:b0:83:03:e3:50: 9d:78:2f:b3:ce:a3:4f:d0:59:08:95:a6:49:19:82: 98:e9:2e:ac:94:b4:f4:bb:9d:06:d9:bf:f4:a9:cc: e8:d9:d9:d7:ec:12:1f:49:6b:96:60:f8:f9:fe:16: 03:8b:56:d3:2c:db:b0:fd:cd:8f:34:05:1a:19:48: b7:7b:72:32:69:15:24:79:5d:9d:7b:9e:c0:31:94: 43:f4:60:03:83:e4:08:4a:0b:aa:20:1e:59:8e:bc: 5e:9a:51:93:78:3b:49:79:53:d7:62:5b:43:fd:07: 23:68:72:b0:3f:4b:f0:a9:c4:f9:dd:3c:d5:a3:20: ad:03:07:b9:70:d3:a6:3b:c8:c3:1a:b4:5b:8f:a2: 50:fd:98:35:99:7b:c2:b8:6c:0a:1b:b4:6f:fb:73: 9e:03:21:6c:90:d1:ca:fe:27:79:a7:4c:0e:26:d3: ea:ef:dc:40:8d:dc:68:af:ab:62:f0:ae:bb:fc:58: 10:3b:6d:48:df:0d:78:c4:8d:a2:3f:04:8a:5c:42: d3:a7:22:a5:c7:cf:3c:be:39:07:78:0c:fd:4a:7d: 30:b8:a9:f7:1a:2a:0a:2e:e1:e2:08:c1:2d:a7:bc: ef:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F4:4F:F2:3D:12:DE:D4:9D:C8:28:3C:EE:BC:4A:2C:C3:25:93:8E X509v3 Authority Key Identifier: keyid:82:BB:F3:36:4D:DD:64:69:42:F4:CA:E0:57:9F:13:2D:84:19:4F:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:0a:5d:09:7d:90:ac:ce:79:92:d0:26:66:45:d0:f4:54:93: f0:b6:04:2f:02:bd:99:96:68:66:a4:4c:dc:cc:45:3c:f4:b0: c0:3a:73:30:9f:2b:4a:9b:a8:e1:17:b9:b7:93:b2:4b:40:cc: 26:8f:7b:73:73:00:f4:74:bb:f7:ac:0a:73:86:25:c2:49:aa: 65:15:ff:b8:93:e0:fb:12:33:2c:5d:46:c8:df:40:27:3a:97: e7:12:f5:15:b2:ae:f7:55:89:86:01:91:99:77:ee:15:03:bd: 79:7d:65:fe:7a:2a:9f:44:26:ed:2c:1d:99:40:cb:47:64:b3: 89:6f:5c:d8:e6:73:81:c5:66:90:7e:e3:57:19:15:1d:95:9b: 16:eb:25:e8:1e:e3:db:f5:ec:84:eb:60:e5:9a:01:2a:51:da: 08:db:f0:93:c1:76:5d:b1:03:f9:80:13:20:ba:41:18:3a:b7: 65:32:89:ff:43:3d:55:22:16:de:ed:60:bb:bf:6f:89:96:70: 4b:b6:56:07:df:41:28:d3:d1:41:4c:27:b1:f5:03:9f:b3:7b: c6:d3:9a:80:b5:1f:2f:cc:92:3c:02:14:64:1e:29:0a:c4:ab: 26:24:a5:49:64:e2:1a:cb:69:64:fe:93:59:fa:05:a9:35:ac: 02:83:80:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGkTmf3jtDjEnK+smCd7tgIHItEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJCQkYzMzY0RERENjQ2OTQyRjRDQUUwNTc5RjEzMkQ4 NDE5NEZFMjAeFw0yNTExMDIxOTM1NTdaFw0yNTExMDUyMzM0NTdaMDMxMTAvBgNV BAMTKDNDRjQ0RkYyM0QxMkRFRDQ5REM4MjgzQ0VFQkM0QTJDQzMyNTkzOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1eZnnhy6ws1bwlZ+P+VuIj/mm Wm7HX0OwgwPjUJ14L7POo0/QWQiVpkkZgpjpLqyUtPS7nQbZv/SpzOjZ2dfsEh9J a5Zg+Pn+FgOLVtMs27D9zY80BRoZSLd7cjJpFSR5XZ17nsAxlEP0YAOD5AhKC6og HlmOvF6aUZN4O0l5U9diW0P9ByNocrA/S/CpxPndPNWjIK0DB7lw06Y7yMMatFuP olD9mDWZe8K4bAobtG/7c54DIWyQ0cr+J3mnTA4m0+rv3ECN3Givq2Lwrrv8WBA7 bUjfDXjEjaI/BIpcQtOnIqXHzzy+OQd4DP1KfTC4qfcaKgou4eIIwS2nvO9/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPPRP8j0S3tSdyCg87rxKLMMlk44wHwYDVR0j BBgwFoAUgrvzNk3dZGlC9MrgV58TLYQZT+IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzkzYzI1Yy1jZTU1LTQ4NzAtODE2OS01ZWFlOGQ5ZGZiYzEvMC84MkJCRjMzNjRE REQ2NDY5NDJGNENBRTA1NzlGMTMyRDg0MTk0RkUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODJCQkYzMzY0RERENjQ2OTQyRjRDQUUwNTc5RjEzMkQ4NDE5 NEZFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M5M2MyNWMtY2U1NS00ODcwLTgx NjktNWVhZThkOWRmYmMxLzAvODJCQkYzMzY0RERENjQ2OTQyRjRDQUUwNTc5RjEz MkQ4NDE5NEZFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF8KXQl9kKzOeZLQJmZF0PRUk/C2BC8CvZmW aGakTNzMRTz0sMA6czCfK0qbqOEXubeTsktAzCaPe3NzAPR0u/esCnOGJcJJqmUV /7iT4PsSMyxdRsjfQCc6l+cS9RWyrvdViYYBkZl37hUDvXl9Zf56Kp9EJu0sHZlA y0dks4lvXNjmc4HFZpB+41cZFR2VmxbrJege49v17ITrYOWaASpR2gjb8JPBdl2x A/mAEyC6QRg6t2Uyif9DPVUiFt7tYLu/b4mWcEu2VgffQSjT0UFMJ7H1A5+ze8bT moC1Hy/MkjwCFGQeKQrEqyYkpUlk4hrLaWT+k1n6Bak1rAKDgJc= -----END CERTIFICATE-----Generated at Tue Nov 4 23:02:56 2025 by rpki-client