$ rpki-client -vvf repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft File: 3703AC4154F05B1E642F31DEF71A238407E82D59.mft (raw, json) Hash identifier: LXBiqeo1yPdypsEzh/JjQAtzs1cQ/qQ7juDrFm9QwBs= Subject key identifier: C2:34:3E:98:3D:FE:0D:83:38:D6:D1:FC:86:D7:5D:24:E8:50:D0:D7 Authority key identifier: 37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59 Certificate issuer: /CN=3703AC4154F05B1E642F31DEF71A238407E82D59 Certificate serial: 1D2F01B169D4EA09B46BA7EE6DD64DE8D017843B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft Manifest number: 04C6 Signing time: Sun 02 Nov 2025 17:10:51 +0000 Manifest this update: Sun 02 Nov 2025 17:05:51 +0000 Manifest next update: Wed 05 Nov 2025 22:25:51 +0000 Files and hashes: 1: 3130332e3136302e34312e302f32342d3234203d3e20313431353936.roa (hash: hTOnvJY78aaZJU0V/ewFlrDahpGLWlt1kXeTr26Q6jE=) 2: 3703AC4154F05B1E642F31DEF71A238407E82D59.crl (hash: jfghXTabfvuXDzyGpe7Z/lGt1B8G4Fy4YxkWacEJhFY=) 3: 3130332e3136302e34302e302f32342d3234203d3e20313431353936.roa (hash: /26G7paj90BYpA/7obbRkQ0e5IpXJm+V8bRm2IMmu/M=) 4: 3130332e3136302e34302e302f32332d3233203d3e20313431353936.roa (hash: RNQYxKN0Nubn/ygqO8rH37j/P4lI+9FQ1kXn5iYtC0w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 22:25:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:2f:01:b1:69:d4:ea:09:b4:6b:a7:ee:6d:d6:4d:e8:d0:17:84:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3703AC4154F05B1E642F31DEF71A238407E82D59 Validity Not Before: Nov 2 17:05:51 2025 GMT Not After : Nov 5 22:25:51 2025 GMT Subject: CN=C2343E983DFE0D8338D6D1FC86D75D24E850D0D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:84:2c:a8:de:ad:b9:43:b5:26:ca:d8:9e:13: 13:46:64:9c:3e:1f:42:08:94:19:1c:0e:0f:39:39: 4b:f0:d9:73:f0:58:1a:7d:9f:28:12:2a:15:8a:56: fb:f5:00:8e:3b:f5:49:2d:2a:c1:21:18:a8:16:13: 88:d6:6c:d5:71:c5:e6:83:42:f7:27:9f:9b:bb:70: 19:69:e5:fb:f3:e0:5a:ea:5f:81:33:80:ee:14:a7: 8c:37:e1:b8:39:89:70:74:3b:a4:3f:56:ad:2c:b7: 97:2d:84:63:52:30:7d:21:9e:10:d9:c7:1d:92:b7: 0f:d5:80:0d:45:75:a6:02:c1:13:0f:11:d0:21:77: 92:e3:91:47:85:62:38:f0:65:9c:f4:7d:f7:2b:4b: 40:11:97:f5:02:17:52:c3:76:76:48:3b:f2:37:3c: 0b:58:34:6c:07:45:08:d8:5e:bb:bc:ec:8e:88:65: ec:43:d5:27:e4:ec:d2:bd:40:38:9d:e2:df:ea:8f: 8c:77:db:ab:0f:6b:37:29:64:6f:6b:6b:34:26:36: 67:f6:45:73:1c:ef:bb:ef:39:ac:0a:49:59:ed:7f: a2:be:e0:bc:ec:09:88:d0:3b:3c:c9:14:fa:0f:c3: 6f:50:1c:b0:17:78:69:e7:de:ff:b1:63:cf:60:ba: 81:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:34:3E:98:3D:FE:0D:83:38:D6:D1:FC:86:D7:5D:24:E8:50:D0:D7 X509v3 Authority Key Identifier: keyid:37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:92:27:5a:a4:64:17:47:8f:d9:38:c3:57:80:19:45:29:2e: 78:51:1e:60:0f:7b:4b:38:46:6a:5a:32:cd:6d:f7:a1:15:13: 81:ab:0e:d5:9f:bf:f4:0a:45:a4:b9:ac:da:fe:49:17:7d:c2: 20:87:65:bb:73:8e:ef:88:29:49:87:d9:d7:75:43:8f:e3:60: 92:af:a6:5d:ef:e9:77:48:b1:7c:86:4d:b4:96:49:6b:c9:a2: ea:ef:71:6e:9e:18:d7:cf:d0:60:11:96:1f:78:6d:bc:d0:4d: 1a:96:3e:84:b5:bd:0a:53:f7:a3:55:dd:87:1e:53:0a:26:b4: d8:0a:7a:02:04:86:48:cf:f1:eb:dd:1d:e3:48:d6:dd:48:8a: 19:b7:a5:0d:4b:e3:46:bf:5a:95:06:23:5d:68:e6:af:7e:f7: bf:75:9f:86:05:65:eb:f4:5f:71:e0:a1:80:bc:f2:04:ec:63: 60:de:e5:10:18:ab:5c:36:92:6c:95:61:a1:e7:54:4c:bd:73: e9:7c:97:2e:c9:d2:4b:88:01:ab:7d:8e:03:81:29:58:c7:dc: b8:05:47:6b:e2:03:38:7a:f1:28:31:28:c1:16:cd:65:b8:e9: 7f:82:3a:5c:e1:b9:ed:82:7c:10:95:db:07:56:14:9b:79:09: 0d:bb:97:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHS8BsWnU6gm0a6fubdZN6NAXhDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIzODQw N0U4MkQ1OTAeFw0yNTExMDIxNzA1NTFaFw0yNTExMDUyMjI1NTFaMDMxMTAvBgNV BAMTKEMyMzQzRTk4M0RGRTBEODMzOEQ2RDFGQzg2RDc1RDI0RTg1MEQwRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/hCyo3q25Q7UmytieExNGZJw+ H0IIlBkcDg85OUvw2XPwWBp9nygSKhWKVvv1AI479UktKsEhGKgWE4jWbNVxxeaD Qvcnn5u7cBlp5fvz4FrqX4EzgO4Up4w34bg5iXB0O6Q/Vq0st5cthGNSMH0hnhDZ xx2Stw/VgA1FdaYCwRMPEdAhd5LjkUeFYjjwZZz0ffcrS0ARl/UCF1LDdnZIO/I3 PAtYNGwHRQjYXru87I6IZexD1Sfk7NK9QDid4t/qj4x326sPazcpZG9razQmNmf2 RXMc77vvOawKSVntf6K+4LzsCYjQOzzJFPoPw29QHLAXeGnn3v+xY89guoEHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwjQ+mD3+DYM41tH8htddJOhQ0NcwHwYDVR0j BBgwFoAUNwOsQVTwWx5kLzHe9xojhAfoLVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTA5OWFkZi03ZTEyLTRlODMtOTVjMi1kZDdmNzc0OTQ3ODgvMC8zNzAzQUM0MTU0 RjA1QjFFNjQyRjMxREVGNzFBMjM4NDA3RTgyRDU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIzODQwN0U4 MkQ1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGEwOTlhZGYtN2UxMi00ZTgzLTk1 YzItZGQ3Zjc3NDk0Nzg4LzAvMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIz ODQwN0U4MkQ1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmSJ1qkZBdHj9k4w1eAGUUpLnhRHmAPe0s4 RmpaMs1t96EVE4GrDtWfv/QKRaS5rNr+SRd9wiCHZbtzju+IKUmH2dd1Q4/jYJKv pl3v6XdIsXyGTbSWSWvJourvcW6eGNfP0GARlh94bbzQTRqWPoS1vQpT96NV3Yce UwomtNgKegIEhkjP8evdHeNI1t1Iihm3pQ1L40a/WpUGI11o5q9+9791n4YFZev0 X3HgoYC88gTsY2De5RAYq1w2kmyVYaHnVEy9c+l8ly7J0kuIAat9jgOBKVjH3LgF R2viAzh68SgxKMEWzWW46X+COlzhue2CfBCV2wdWFJt5CQ27lwI= -----END CERTIFICATE-----Generated at Tue Nov 4 18:53:40 2025 by rpki-client