$ rpki-client -vvf repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft File: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft (raw, json) Hash identifier: GIKYbNH22mJvDiBJR+c0NEnJfdG3w5GYjQq0keRk0QM= Subject key identifier: EF:EA:47:B4:DE:23:7D:10:74:91:24:9F:6C:E7:D8:76:13:9E:25:73 Authority key identifier: 3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 Certificate issuer: /CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Certificate serial: 70235EB8BADF8683FD3D4599FFDD3F33EC32F699 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft Manifest number: 04F1 Signing time: Tue 04 Nov 2025 03:10:48 +0000 Manifest this update: Tue 04 Nov 2025 03:05:48 +0000 Manifest next update: Fri 07 Nov 2025 11:25:48 +0000 Files and hashes: 1: 3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa (hash: IK+u+i97z9eMvyQxyRqv23SPg6t3j5oWeOL0K/ItAE0=) 2: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl (hash: 7OLp9KuKXJP4R0iloLip5vpDBH4ur+N8C0+B68KpmJM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 11:25:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:23:5e:b8:ba:df:86:83:fd:3d:45:99:ff:dd:3f:33:ec:32:f6:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Validity Not Before: Nov 4 03:05:48 2025 GMT Not After : Nov 7 11:25:48 2025 GMT Subject: CN=EFEA47B4DE237D107491249F6CE7D876139E2573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:11:2a:b9:37:a8:ae:44:d7:82:58:ab:63:32: c6:6e:b7:e1:c9:7d:f4:05:26:82:d0:71:44:61:be: db:07:85:f4:1c:54:bd:86:3e:0d:d6:c1:ef:a0:10: cf:cd:59:2f:6a:3e:86:be:90:af:3f:ca:70:d1:51: 5a:aa:c8:28:b2:7f:07:93:72:3f:06:57:ee:95:9c: 37:8e:2e:a2:5a:9a:82:6e:18:11:69:69:f5:19:ae: 85:6c:95:31:7b:6b:b5:6c:47:f0:97:3e:54:a7:d8: d8:6e:9a:11:4e:72:b8:64:3b:c2:04:f5:ab:b7:89: 3b:29:03:13:f2:61:6d:d6:2a:a0:14:dd:75:bf:8d: e2:f5:a1:31:29:5f:7f:58:37:5c:f4:c0:bb:0d:48: 2e:22:8f:27:f6:89:ec:41:f6:3b:b8:6b:49:2f:85: 54:99:41:76:ed:60:8f:12:f9:e5:f4:45:84:34:a2: 0b:33:b1:e2:07:3d:ff:b6:c6:29:d0:c2:29:ea:4d: 57:1c:4a:c5:53:ba:61:26:86:d4:84:d2:60:3e:3a: 8d:02:8d:6c:cd:50:82:af:38:30:13:65:2a:37:69: e5:ef:28:0b:7f:46:b3:81:f6:6b:b9:66:d0:c9:be: 0a:f8:0c:8b:63:3c:e1:af:3e:45:96:37:28:ef:ee: 7d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:EA:47:B4:DE:23:7D:10:74:91:24:9F:6C:E7:D8:76:13:9E:25:73 X509v3 Authority Key Identifier: keyid:3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:0d:f7:1f:45:5f:ff:4c:f4:3a:5c:1a:cf:1b:d3:5b:44:f2: cd:54:05:ba:9a:75:1c:17:a4:0b:8f:32:62:ad:fa:ff:32:e4: b6:d8:97:5c:21:02:be:a0:c6:c8:e2:0b:92:7d:85:40:1c:11: f4:7f:95:a3:46:e5:f1:37:c4:98:8b:80:86:90:07:d6:3b:b9: d8:a2:1f:27:7b:94:6e:45:68:57:f8:6d:9c:dc:a3:03:aa:9a: 02:13:47:aa:1d:ea:88:d8:5f:48:dc:64:6b:b8:12:2b:86:6d: 2b:ed:d4:24:70:ac:92:f3:55:ce:2d:c3:19:00:10:cb:20:3c: be:98:22:80:26:17:d5:c4:7f:e2:b4:49:4c:f0:b7:e1:96:a1: d5:9c:25:a7:c5:c0:1a:2a:c5:58:ab:75:4f:05:9a:22:94:e6: 67:c0:7c:38:89:cf:d1:f6:b2:5f:e7:0d:fe:9d:64:02:58:b1: 45:ba:b6:7c:99:11:26:c6:bc:e3:bf:6e:9e:60:de:a0:f4:0a: 13:4b:c5:5a:e9:c3:b5:56:b1:2c:12:a0:1f:2f:27:b0:38:0d: e7:93:75:a7:e3:80:2a:9b:58:11:61:0c:10:78:01:ea:8d:4b: 74:36:bb:f0:12:82:18:df:ad:24:00:8a:90:f7:58:9d:1b:bd: 56:d1:46:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcCNeuLrfhoP9PUWZ/90/M+wy9pkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEy QzlBRDRBMjAeFw0yNTExMDQwMzA1NDhaFw0yNTExMDcxMTI1NDhaMDMxMTAvBgNV BAMTKEVGRUE0N0I0REUyMzdEMTA3NDkxMjQ5RjZDRTdEODc2MTM5RTI1NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ESq5N6iuRNeCWKtjMsZut+HJ ffQFJoLQcURhvtsHhfQcVL2GPg3Wwe+gEM/NWS9qPoa+kK8/ynDRUVqqyCiyfweT cj8GV+6VnDeOLqJamoJuGBFpafUZroVslTF7a7VsR/CXPlSn2NhumhFOcrhkO8IE 9au3iTspAxPyYW3WKqAU3XW/jeL1oTEpX39YN1z0wLsNSC4ijyf2iexB9ju4a0kv hVSZQXbtYI8S+eX0RYQ0ogszseIHPf+2xinQwinqTVccSsVTumEmhtSE0mA+Oo0C jWzNUIKvODATZSo3aeXvKAt/RrOB9mu5ZtDJvgr4DItjPOGvPkWWNyjv7n3lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7+pHtN4jfRB0kSSfbOfYdhOeJXMwHwYDVR0j BBgwFoAUOg6iohzkI6JNTQitwQhp8Sya1KIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjYxZmFiYi1kNDZmLTRmOGMtODEwMC03MTRjMjBlN2IzY2EvMC8zQTBFQTJBMjFD RTQyM0EyNEQ0RDA4QURDMTA4NjlGMTJDOUFENEEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEyQzlB RDRBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI2MWZhYmItZDQ2Zi00ZjhjLTgx MDAtNzE0YzIwZTdiM2NhLzAvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5 RjEyQzlBRDRBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcN9x9FX/9M9DpcGs8b01tE8s1UBbqadRwX pAuPMmKt+v8y5LbYl1whAr6gxsjiC5J9hUAcEfR/laNG5fE3xJiLgIaQB9Y7udii Hyd7lG5FaFf4bZzcowOqmgITR6od6ojYX0jcZGu4EiuGbSvt1CRwrJLzVc4twxkA EMsgPL6YIoAmF9XEf+K0SUzwt+GWodWcJafFwBoqxVirdU8FmiKU5mfAfDiJz9H2 sl/nDf6dZAJYsUW6tnyZESbGvOO/bp5g3qD0ChNLxVrpw7VWsSwSoB8vJ7A4DeeT dafjgCqbWBFhDBB4AeqNS3Q2u/ASghjfrSQAipD3WJ0bvVbRRhk= -----END CERTIFICATE-----Generated at Tue Nov 4 20:16:04 2025 by rpki-client