$ rpki-client -vvf repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft File: 3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft (raw, json) Hash identifier: UxaEK+iV0ZuHBgJ1ABzPV56ZRKws/nyIil+MlGu1an0= Subject key identifier: 27:EE:29:39:9F:08:96:79:71:3B:45:C0:89:BC:27:63:E8:9F:EC:8F Authority key identifier: 3E:0B:95:7B:58:2D:8A:EF:99:A4:9C:64:48:F9:99:3C:72:37:8B:F3 Certificate issuer: /CN=3E0B957B582D8AEF99A49C6448F9993C72378BF3 Certificate serial: 3868D34CDF6CD1830C55058290016C5D2DFB65A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft Manifest number: 0128 Signing time: Sun 02 Nov 2025 23:41:18 +0000 Manifest this update: Sun 02 Nov 2025 23:36:18 +0000 Manifest next update: Thu 06 Nov 2025 00:30:18 +0000 Files and hashes: 1: 3130332e3133322e3233312e302f32342d3234203d3e20313338313237.roa (hash: YbG5Gw9xgbijBTbp7E/AZR+gn02wD0TeW2SCv/sSqKI=) 2: 3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa (hash: SdfVlvgb41TvQfFCAAr6Hvu/iM3n38wFz7a+3vMqJi4=) 3: 3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl (hash: IPj+h4xxfAq8+k4gjV9+rdaf5npb8/rHyTjFZAguOmA=) 4: 3130332e3133322e3233302e302f32332d3234203d3e20313338313237.roa (hash: NjJcmD+G+kiFwmmP8zS7heQcwBVqq18Sis+HXMvM+ZY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 00:30:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:68:d3:4c:df:6c:d1:83:0c:55:05:82:90:01:6c:5d:2d:fb:65:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E0B957B582D8AEF99A49C6448F9993C72378BF3 Validity Not Before: Nov 2 23:36:18 2025 GMT Not After : Nov 6 00:30:18 2025 GMT Subject: CN=27EE29399F089679713B45C089BC2763E89FEC8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:52:7c:19:42:f7:c1:9b:ae:26:9c:00:a1:b4: 6f:41:51:a1:11:21:22:32:12:ee:2b:a3:de:c2:77: 5e:2c:56:c8:33:5a:81:c4:31:d0:c4:d5:90:03:32: 9b:0b:33:10:fb:09:73:66:1f:5e:bf:4a:cf:b2:05: 75:bb:73:fc:6e:16:a6:f8:40:bf:98:7a:8f:ca:e3: 4e:5e:b1:13:e0:df:1f:5c:70:f1:a4:41:a1:d1:f6: 78:9b:87:88:34:c0:37:26:8a:ab:c1:08:07:83:08: 91:6a:82:28:6c:74:31:22:99:e9:c3:ef:a1:da:bc: 7f:e0:63:ad:96:fb:b2:a9:5c:f9:44:22:fd:1a:76: 77:4c:fb:c1:4b:2b:20:6e:c5:16:54:ab:ff:b8:4e: be:15:c7:70:e9:78:24:78:e7:0b:a5:2b:26:50:ca: 68:0d:1e:17:ca:ab:b2:95:fd:2b:46:d2:27:40:85: b0:1a:20:51:e4:2f:2a:24:20:d9:80:ea:b1:41:fd: 32:4a:eb:b7:c1:7a:f7:dd:74:7c:98:ce:2c:8a:da: a1:a1:f7:1f:23:bd:3a:ec:b6:cb:cc:4a:eb:ec:25: ee:15:a0:6a:b8:88:1b:4c:4c:4c:1a:49:f7:e1:e3: 9f:5b:13:fd:e8:84:a7:c9:f8:cc:c3:54:d9:b8:17: f7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:EE:29:39:9F:08:96:79:71:3B:45:C0:89:BC:27:63:E8:9F:EC:8F X509v3 Authority Key Identifier: keyid:3E:0B:95:7B:58:2D:8A:EF:99:A4:9C:64:48:F9:99:3C:72:37:8B:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:f4:f1:f2:97:db:27:3d:87:8f:48:93:7b:a1:73:81:01:20: 5d:6e:40:ff:67:3b:6f:71:ad:50:88:d2:8f:d3:55:b3:cf:87: 1d:6f:c6:cb:01:92:0b:75:b3:dc:18:de:03:23:9f:67:e7:22: 80:b5:0e:92:27:19:b9:25:3c:6f:34:20:38:03:fc:09:0c:d1: c0:c0:9a:06:36:48:a3:9a:8f:64:18:0c:f5:bc:e5:4e:6d:34: c7:78:0c:a9:0f:3d:4e:56:f6:75:01:3b:6a:76:d8:0c:42:52: 15:ae:14:2b:82:c0:9b:e2:40:3f:e3:6c:36:b1:85:10:0e:9b: 99:e2:ae:31:e8:9d:30:06:a5:3f:17:4c:be:0c:44:5c:db:52: c2:d6:5f:5f:23:4c:45:c3:f2:36:50:4d:c3:ff:99:91:38:bb: d1:15:9a:e2:5b:57:95:98:db:fb:7d:83:ce:06:b2:0c:b6:73: de:68:af:89:b1:e5:2b:39:59:99:93:0a:98:c8:c5:50:94:58: 3c:c4:80:c3:73:99:ce:08:1e:22:07:7c:f8:bb:e1:21:65:9d: fc:70:bc:80:8c:06:ba:26:dc:ee:b9:cf:e1:68:52:cb:d4:36: 4f:38:54:6a:09:1c:00:8a:74:11:ce:b4:87:5e:cf:46:b4:81: ac:50:fc:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOGjTTN9s0YMMVQWCkAFsXS37ZaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UwQjk1N0I1ODJEOEFFRjk5QTQ5QzY0NDhGOTk5M0M3 MjM3OEJGMzAeFw0yNTExMDIyMzM2MThaFw0yNTExMDYwMDMwMThaMDMxMTAvBgNV BAMTKDI3RUUyOTM5OUYwODk2Nzk3MTNCNDVDMDg5QkMyNzYzRTg5RkVDOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuUnwZQvfBm64mnAChtG9BUaER ISIyEu4ro97Cd14sVsgzWoHEMdDE1ZADMpsLMxD7CXNmH16/Ss+yBXW7c/xuFqb4 QL+Yeo/K405esRPg3x9ccPGkQaHR9nibh4g0wDcmiqvBCAeDCJFqgihsdDEimenD 76HavH/gY62W+7KpXPlEIv0adndM+8FLKyBuxRZUq/+4Tr4Vx3DpeCR45wulKyZQ ymgNHhfKq7KV/StG0idAhbAaIFHkLyokINmA6rFB/TJK67fBevfddHyYziyK2qGh 9x8jvTrstsvMSuvsJe4VoGq4iBtMTEwaSffh459bE/3ohKfJ+MzDVNm4F/cjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ+4pOZ8IlnlxO0XAibwnY+if7I8wHwYDVR0j BBgwFoAUPguVe1gtiu+ZpJxkSPmZPHI3i/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZWRjOWU0Zi04MTgwLTQxZDYtYjA4ZC04ZWU1YThhNzBhMDUvMC8zRTBCOTU3QjU4 MkQ4QUVGOTlBNDlDNjQ0OEY5OTkzQzcyMzc4QkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0UwQjk1N0I1ODJEOEFFRjk5QTQ5QzY0NDhGOTk5M0M3MjM3 OEJGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGVkYzllNGYtODE4MC00MWQ2LWIw OGQtOGVlNWE4YTcwYTA1LzAvM0UwQjk1N0I1ODJEOEFFRjk5QTQ5QzY0NDhGOTk5 M0M3MjM3OEJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADv08fKX2yc9h49Ik3uhc4EBIF1uQP9nO29x rVCI0o/TVbPPhx1vxssBkgt1s9wY3gMjn2fnIoC1DpInGbklPG80IDgD/AkM0cDA mgY2SKOaj2QYDPW85U5tNMd4DKkPPU5W9nUBO2p22AxCUhWuFCuCwJviQD/jbDax hRAOm5nirjHonTAGpT8XTL4MRFzbUsLWX18jTEXD8jZQTcP/mZE4u9EVmuJbV5WY 2/t9g84Gsgy2c95or4mx5Ss5WZmTCpjIxVCUWDzEgMNzmc4IHiIHfPi74SFlnfxw vICMBrom3O65z+FoUsvUNk84VGoJHACKdBHOtIdez0a0gaxQ/NQ= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:38 2025 by rpki-client