$ rpki-client -vvf repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft File: 3A594744F1BEA2F04C7437AD77133DD4423F2302.mft (raw, json) Hash identifier: UZ9M8oGdZIaxRbzj4T3exESjceDmDUHF/rlq2lv+Kh0= Subject key identifier: 7D:DE:3B:E1:1C:7D:AC:72:9D:0D:55:BC:41:C5:0D:CE:73:A7:A0:70 Authority key identifier: 3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 Certificate issuer: /CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Certificate serial: 0FE89FFDA4EE1700B0B1CB2A0406B7373E908C7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft Manifest number: 0193 Signing time: Wed 05 Nov 2025 03:01:55 +0000 Manifest this update: Wed 05 Nov 2025 02:56:55 +0000 Manifest next update: Sat 08 Nov 2025 10:52:55 +0000 Files and hashes: 1: 3130332e3134362e3134352e302f32342d3234203d3e20313530313836.roa (hash: wZ4FpNzX3drEBgShz+olo2TjY92RiWtb59UljgCmsAs=) 2: 3130332e3134362e3134342e302f32342d3234203d3e20313530313836.roa (hash: znZGLIjUzURgum/jx4W0HoiMuO981vr9z87dACOch+4=) 3: 3A594744F1BEA2F04C7437AD77133DD4423F2302.crl (hash: b7xtvxdB3pPl98ucGMuRXycZ35Kq5FuQbtePBuvFbiY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 10:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e8:9f:fd:a4:ee:17:00:b0:b1:cb:2a:04:06:b7:37:3e:90:8c:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Validity Not Before: Nov 5 02:56:55 2025 GMT Not After : Nov 8 10:52:55 2025 GMT Subject: CN=7DDE3BE11C7DAC729D0D55BC41C50DCE73A7A070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b9:81:4d:be:ec:46:db:8b:f6:99:bf:64:47: b2:8b:e2:ae:79:ff:88:a1:f6:be:45:85:c1:f1:7b: ee:aa:01:72:8c:ef:b8:a6:f9:37:36:ca:8e:bf:c8: 94:0e:c8:3a:4d:41:a9:34:c6:3d:60:e9:d1:e1:2f: fe:b2:b9:b9:b8:55:fa:9f:12:c0:98:04:69:ef:e5: eb:5b:f3:2c:22:bb:fd:22:0b:0f:78:22:02:40:87: d0:de:67:f4:a2:cc:bf:ce:df:a9:0e:6b:1a:3a:ee: 0f:fe:b4:c0:9e:8e:a5:ad:91:74:91:0d:1b:22:0e: d3:2b:d1:33:ec:21:d6:fe:11:ea:01:d1:20:c3:7d: cf:fc:ea:fc:bc:f6:9d:e8:75:5c:11:85:4f:fa:7f: c0:cf:19:0f:92:bc:3f:65:ad:3f:33:76:2f:4a:f8: 0c:99:46:15:12:4b:e7:49:93:18:7c:df:b8:10:7b: a5:11:d5:c8:7b:db:fb:bf:db:a6:a0:09:ce:1f:fd: 33:d3:6c:c5:63:35:c2:80:32:c5:6d:39:c4:b6:5f: 2e:05:98:e2:dd:dd:ac:2e:09:f5:ad:47:19:2f:fe: a9:61:9b:e7:ab:d4:75:05:d4:12:47:35:3a:44:88: 8b:69:16:bf:85:e0:6f:d0:4e:97:75:11:8e:4c:4e: 45:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DE:3B:E1:1C:7D:AC:72:9D:0D:55:BC:41:C5:0D:CE:73:A7:A0:70 X509v3 Authority Key Identifier: keyid:3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:20:9c:79:1e:d5:a1:db:ae:99:67:2e:ff:90:7c:49:68:f9: d5:aa:50:bb:66:e2:f6:c5:66:25:31:69:4d:70:82:63:d6:92: 1d:be:06:dd:6f:ee:e6:cf:92:b6:b4:9b:2a:bf:8f:0a:15:c6: a5:db:e3:9f:21:ba:59:5f:75:1b:2b:e4:ba:c9:ed:de:ce:52: 97:9d:86:6c:71:81:61:cd:00:a9:0d:d0:f7:4c:9b:d7:b2:63: e1:28:3a:68:09:06:82:7d:c2:3b:b1:20:f0:22:b9:91:dd:92: 39:9a:43:20:8e:25:ed:61:fe:64:7c:3b:0b:79:be:0e:5b:80: 18:ce:ea:f9:60:c6:0b:39:7b:d1:f3:97:b8:d8:af:31:cb:6b: e8:dc:23:1a:fc:7f:7a:8e:55:aa:b1:19:58:f6:70:1d:28:fa: 14:29:c8:f4:ba:09:a2:1e:29:cf:44:e7:c9:9a:a7:71:fc:6e: e5:5c:a6:3b:b1:a2:48:73:0b:83:14:42:a4:12:24:5b:ab:07: 02:35:02:12:fe:c4:ee:d5:fe:9b:9f:b8:b9:6a:ed:e4:f1:1a: 43:af:82:69:7a:e5:ab:a7:29:17:3e:5d:e5:e6:9d:17:78:68: 63:7c:f4:f1:bf:7f:ac:00:52:2f:60:e5:ab:1f:19:be:a4:3c: 13:37:ae:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD+if/aTuFwCwscsqBAa3Nz6QjHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0 MjNGMjMwMjAeFw0yNTExMDUwMjU2NTVaFw0yNTExMDgxMDUyNTVaMDMxMTAvBgNV BAMTKDdEREUzQkUxMUM3REFDNzI5RDBENTVCQzQxQzUwRENFNzNBN0EwNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYuYFNvuxG24v2mb9kR7KL4q55 /4ih9r5FhcHxe+6qAXKM77im+Tc2yo6/yJQOyDpNQak0xj1g6dHhL/6yubm4Vfqf EsCYBGnv5etb8ywiu/0iCw94IgJAh9DeZ/SizL/O36kOaxo67g/+tMCejqWtkXSR DRsiDtMr0TPsIdb+EeoB0SDDfc/86vy89p3odVwRhU/6f8DPGQ+SvD9lrT8zdi9K +AyZRhUSS+dJkxh837gQe6UR1ch72/u/26agCc4f/TPTbMVjNcKAMsVtOcS2Xy4F mOLd3awuCfWtRxkv/qlhm+er1HUF1BJHNTpEiItpFr+F4G/QTpd1EY5MTkUPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfd474Rx9rHKdDVW8QcUNznOnoHAwHwYDVR0j BBgwFoAUOllHRPG+ovBMdDetdxM91EI/IwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDYxNDE2My00Y2E0LTQ5MzYtYmY4Yi04NGQ4YzJkMWYwMmQvMC8zQTU5NDc0NEYx QkVBMkYwNEM3NDM3QUQ3NzEzM0RENDQyM0YyMzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0MjNG MjMwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDA2MTQxNjMtNGNhNC00OTM2LWJm OGItODRkOGMyZDFmMDJkLzAvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNE RDQ0MjNGMjMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcgnHke1aHbrplnLv+QfElo+dWqULtm4vbF ZiUxaU1wgmPWkh2+Bt1v7ubPkra0myq/jwoVxqXb458hullfdRsr5LrJ7d7OUped hmxxgWHNAKkN0PdMm9eyY+EoOmgJBoJ9wjuxIPAiuZHdkjmaQyCOJe1h/mR8Owt5 vg5bgBjO6vlgxgs5e9Hzl7jYrzHLa+jcIxr8f3qOVaqxGVj2cB0o+hQpyPS6CaIe Kc9E58map3H8buVcpjuxokhzC4MUQqQSJFurBwI1AhL+xO7V/pufuLlq7eTxGkOv gml65aunKRc+XeXmnRd4aGN89PG/f6wAUi9g5asfGb6kPBM3riw= -----END CERTIFICATE-----Generated at Wed Nov 5 16:22:25 2025 by rpki-client