$ rpki-client -vvf repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft File: 3A594744F1BEA2F04C7437AD77133DD4423F2302.mft (raw, json) Hash identifier: vAr6cfjj6eHod/7ArqFUY+x4HP+vUuqGkak2+VGKrqw= Subject key identifier: B8:6B:28:D9:55:40:3C:2F:48:54:B8:AE:5C:01:37:E8:09:A8:3D:E6 Authority key identifier: 3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 Certificate issuer: /CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Certificate serial: 1E6C42D1EC8D3B23EDCBAF0EDE016B2145F6232F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft Manifest number: 0192 Signing time: Sun 02 Nov 2025 21:51:54 +0000 Manifest this update: Sun 02 Nov 2025 21:46:54 +0000 Manifest next update: Thu 06 Nov 2025 02:55:54 +0000 Files and hashes: 1: 3A594744F1BEA2F04C7437AD77133DD4423F2302.crl (hash: r3GxAI5nQyazkAr04Z6QZBlF+qYx1mLnEE0vtLuZdi4=) 2: 3130332e3134362e3134352e302f32342d3234203d3e20313530313836.roa (hash: wZ4FpNzX3drEBgShz+olo2TjY92RiWtb59UljgCmsAs=) 3: 3130332e3134362e3134342e302f32342d3234203d3e20313530313836.roa (hash: znZGLIjUzURgum/jx4W0HoiMuO981vr9z87dACOch+4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 02:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:6c:42:d1:ec:8d:3b:23:ed:cb:af:0e:de:01:6b:21:45:f6:23:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Validity Not Before: Nov 2 21:46:54 2025 GMT Not After : Nov 6 02:55:54 2025 GMT Subject: CN=B86B28D955403C2F4854B8AE5C0137E809A83DE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:6b:c7:fb:46:b7:15:5e:fb:43:ac:97:32:9e: 8c:0e:37:79:d8:ad:ac:27:73:15:29:ab:26:23:1a: d0:31:af:23:f6:3a:fe:70:cc:75:49:84:28:fd:88: 30:37:f7:e9:3b:d5:05:bb:b3:fb:66:8f:7d:20:60: 72:7e:9c:14:2e:bd:e3:02:9e:ab:95:7d:79:f2:d6: b5:54:ad:00:ec:d0:03:09:cd:71:d2:9a:fb:5d:75: 1e:85:93:43:3e:5c:81:cf:5f:b8:f3:3c:2c:88:2b: cf:a6:43:6f:4e:1c:0a:b7:68:10:34:9e:24:7b:be: 8b:79:05:18:af:db:85:79:c7:6b:1b:65:ce:71:0d: 7f:6a:58:28:98:69:bd:b8:0f:fa:0d:ba:c7:35:41: 4d:6d:d7:07:c8:93:ca:c1:90:68:97:97:72:40:d8: 5c:a5:d3:dc:c3:68:20:5d:d3:bc:ca:6c:b3:fe:fc: 65:93:5c:9e:23:a8:e8:73:84:c0:f7:cb:13:e6:f4: b4:36:68:1d:dc:98:11:95:c8:a9:2f:3f:59:c4:71: d3:e9:32:bd:90:7e:fb:f1:2c:0e:36:4b:e7:73:47: f2:cd:16:aa:6e:dc:36:15:bc:77:f2:a7:6a:79:db: d6:42:d2:42:f6:6d:c7:37:07:54:3a:ce:ce:fb:12: 6d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6B:28:D9:55:40:3C:2F:48:54:B8:AE:5C:01:37:E8:09:A8:3D:E6 X509v3 Authority Key Identifier: keyid:3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:36:b3:f0:69:40:80:f6:c6:d4:71:3a:f2:ac:4b:2f:4c:54: 3b:b2:9c:af:78:68:37:dd:35:ff:6b:79:db:fc:89:82:3c:0f: c1:1b:3a:2d:4c:a9:44:77:26:44:4f:27:97:ac:b6:05:c7:3e: 66:ca:0b:f5:6e:1e:86:2f:b7:96:f6:a0:db:f8:1d:d6:9c:69: f3:60:71:e6:04:1a:9e:28:f0:9e:f6:83:88:14:49:f5:26:9d: b7:d8:b1:dc:52:ff:cc:26:56:11:ba:62:33:87:f8:47:ee:d8: ff:3b:7a:0a:3c:55:06:27:fd:45:8d:cf:94:8e:66:f8:a2:4f: 2d:99:6a:a7:8f:99:1b:07:bc:90:95:e0:69:df:4c:e7:e6:ee: 20:5e:ee:ff:90:05:25:c9:84:92:42:3f:b5:a2:99:22:5a:95: 9c:92:c6:70:26:0c:8c:2a:5f:4f:a1:98:b1:bd:f6:a2:d6:0a: 19:41:9b:ca:c7:85:f3:ee:68:7e:09:46:e3:83:26:c9:1f:f2: 53:5e:54:c3:26:42:00:31:61:c0:f3:51:41:72:ff:bc:40:bd: 4e:78:65:50:a4:78:41:30:1f:d2:a5:9a:e4:07:6b:c2:32:e0: 49:a1:34:fb:65:26:50:ed:56:2f:40:a2:21:ec:9e:52:83:e6: 9e:24:f9:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHmxC0eyNOyPty68O3gFrIUX2Iy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0 MjNGMjMwMjAeFw0yNTExMDIyMTQ2NTRaFw0yNTExMDYwMjU1NTRaMDMxMTAvBgNV BAMTKEI4NkIyOEQ5NTU0MDNDMkY0ODU0QjhBRTVDMDEzN0U4MDlBODNERTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDza8f7RrcVXvtDrJcynowON3nY rawncxUpqyYjGtAxryP2Ov5wzHVJhCj9iDA39+k71QW7s/tmj30gYHJ+nBQuveMC nquVfXny1rVUrQDs0AMJzXHSmvtddR6Fk0M+XIHPX7jzPCyIK8+mQ29OHAq3aBA0 niR7vot5BRiv24V5x2sbZc5xDX9qWCiYab24D/oNusc1QU1t1wfIk8rBkGiXl3JA 2Fyl09zDaCBd07zKbLP+/GWTXJ4jqOhzhMD3yxPm9LQ2aB3cmBGVyKkvP1nEcdPp Mr2QfvvxLA42S+dzR/LNFqpu3DYVvHfyp2p529ZC0kL2bcc3B1Q6zs77Em13AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuGso2VVAPC9IVLiuXAE36AmoPeYwHwYDVR0j BBgwFoAUOllHRPG+ovBMdDetdxM91EI/IwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDYxNDE2My00Y2E0LTQ5MzYtYmY4Yi04NGQ4YzJkMWYwMmQvMC8zQTU5NDc0NEYx QkVBMkYwNEM3NDM3QUQ3NzEzM0RENDQyM0YyMzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0MjNG MjMwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDA2MTQxNjMtNGNhNC00OTM2LWJm OGItODRkOGMyZDFmMDJkLzAvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNE RDQ0MjNGMjMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACg2s/BpQID2xtRxOvKsSy9MVDuynK94aDfd Nf9redv8iYI8D8EbOi1MqUR3JkRPJ5estgXHPmbKC/VuHoYvt5b2oNv4HdacafNg ceYEGp4o8J72g4gUSfUmnbfYsdxS/8wmVhG6YjOH+Efu2P87ego8VQYn/UWNz5SO ZviiTy2ZaqePmRsHvJCV4GnfTOfm7iBe7v+QBSXJhJJCP7WimSJalZySxnAmDIwq X0+hmLG99qLWChlBm8rHhfPuaH4JRuODJskf8lNeVMMmQgAxYcDzUUFy/7xAvU54 ZVCkeEEwH9KlmuQHa8Iy4EmhNPtlJlDtVi9AoiHsnlKD5p4k+Qc= -----END CERTIFICATE-----Generated at Tue Nov 4 16:01:28 2025 by rpki-client