$ rpki-client -vvf repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft File: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft (raw, json) Hash identifier: pQf5eh1x5g7TRaoOyYaCSrVaZJgj8setU9xhPUV/yrg= Subject key identifier: 94:48:9A:81:2C:49:A5:24:A4:5C:45:B7:EB:A7:86:F4:CC:F1:FA:F3 Authority key identifier: 3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 Certificate issuer: /CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Certificate serial: 7F20C37CE3EC6699BD154160131A752D77680D95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft Manifest number: 0123 Signing time: Sun 02 Nov 2025 11:50:50 +0000 Manifest this update: Sun 02 Nov 2025 11:45:50 +0000 Manifest next update: Wed 05 Nov 2025 17:35:50 +0000 Files and hashes: 1: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl (hash: 37HNf3kSNxZgV1oyp77tEbVXl1W4QcV/kCGul84mxWs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 17:35:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:20:c3:7c:e3:ec:66:99:bd:15:41:60:13:1a:75:2d:77:68:0d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Validity Not Before: Nov 2 11:45:50 2025 GMT Not After : Nov 5 17:35:50 2025 GMT Subject: CN=94489A812C49A524A45C45B7EBA786F4CCF1FAF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:47:ba:1f:8d:9f:b8:55:f4:1e:fd:dd:58:3a: 9c:93:04:88:59:16:88:bc:5c:bd:77:18:07:45:00: bf:33:bb:86:79:a8:60:49:fa:70:97:7e:bd:7a:e8: b8:8c:f0:ea:ab:f1:4f:b7:79:f9:af:58:d1:49:e7: e6:78:ee:f0:df:1e:95:eb:65:5d:32:56:d3:24:cf: bb:3f:43:e7:3f:d4:1f:72:07:88:8c:66:3e:87:d2: d8:67:43:da:a6:86:df:79:6f:b5:35:d1:85:dc:66: e3:e2:10:51:fe:41:6a:9a:f3:f9:ac:5d:ad:e4:98: 23:df:ed:a9:f2:7b:fb:38:bc:23:e7:ee:c5:23:7a: 15:d3:ca:8c:8d:59:a9:1f:2f:e5:16:ad:57:6e:b1: b3:0c:b8:d4:28:aa:61:35:16:b1:1f:a0:a4:11:77: 6d:cf:bd:4b:c0:2d:53:72:85:c7:7a:ad:f5:12:a4: f7:c5:84:35:5a:62:2e:25:af:8d:31:94:7c:23:6f: 45:4e:61:63:99:2e:63:83:28:83:50:4a:46:01:8f: ea:f2:ba:0f:bd:e6:da:a5:70:d1:9a:2d:bc:ce:76: d5:f6:9f:83:c1:b8:56:16:f6:c1:58:e3:4e:4c:93: 6e:02:29:e9:ad:34:a4:90:f4:ad:1c:4c:aa:b9:06: 59:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:48:9A:81:2C:49:A5:24:A4:5C:45:B7:EB:A7:86:F4:CC:F1:FA:F3 X509v3 Authority Key Identifier: keyid:3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:fd:0a:be:9a:db:57:f0:0d:af:19:91:61:d4:90:5f:ef:44: 02:7c:d2:b2:ec:09:59:2c:b2:eb:eb:3e:9d:fa:b2:3a:94:7e: d7:ef:4f:3f:33:87:71:d6:e8:61:9f:be:3f:f2:22:cd:50:05: 8c:1c:4f:8e:7c:25:7b:1b:a6:42:1c:c2:a2:71:2d:86:21:bf: f7:8f:0f:08:c8:aa:3f:53:e2:70:76:85:41:c4:ab:29:07:d5: 8e:f3:b3:17:87:a9:84:13:84:e9:9b:fc:c2:e4:5c:1e:8b:c4: f9:fe:53:31:f0:48:59:65:78:96:c8:15:97:9c:0a:00:a3:da: a2:52:62:96:fd:46:ed:97:76:f6:5f:f2:43:64:4a:b6:53:d6: c1:f9:d5:a7:52:63:20:dd:06:b1:dc:07:a1:e9:89:f1:af:31: d9:f1:83:f1:0b:72:7e:be:f4:e9:be:56:14:21:da:b8:ef:33: 29:8d:1e:3c:cf:5a:5f:8b:2e:14:aa:79:a4:56:71:0f:3a:44: 8d:aa:e4:d1:c9:7d:6c:bb:11:d8:ca:8d:9f:44:e1:f7:10:a7: bc:53:11:91:6c:62:a4:ad:15:42:b1:fd:59:d7:37:eb:14:72: bb:fc:0b:d9:32:4b:97:7c:4c:a1:77:8e:7e:1b:60:53:e4:bf: 76:fa:2a:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfyDDfOPsZpm9FUFgExp1LXdoDZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMw M0EwREEwMDAeFw0yNTExMDIxMTQ1NTBaFw0yNTExMDUxNzM1NTBaMDMxMTAvBgNV BAMTKDk0NDg5QTgxMkM0OUE1MjRBNDVDNDVCN0VCQTc4NkY0Q0NGMUZBRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSR7ofjZ+4VfQe/d1YOpyTBIhZ Foi8XL13GAdFAL8zu4Z5qGBJ+nCXfr166LiM8Oqr8U+3efmvWNFJ5+Z47vDfHpXr ZV0yVtMkz7s/Q+c/1B9yB4iMZj6H0thnQ9qmht95b7U10YXcZuPiEFH+QWqa8/ms Xa3kmCPf7anye/s4vCPn7sUjehXTyoyNWakfL+UWrVdusbMMuNQoqmE1FrEfoKQR d23PvUvALVNyhcd6rfUSpPfFhDVaYi4lr40xlHwjb0VOYWOZLmODKINQSkYBj+ry ug+95tqlcNGaLbzOdtX2n4PBuFYW9sFY405Mk24CKemtNKSQ9K0cTKq5BlkfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlEiagSxJpSSkXEW366eG9Mzx+vMwHwYDVR0j BBgwFoAUPWt9HnGDliz97RifbDb/8wOg2gAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmJkMGU5NC04NjAzLTQ1N2YtYjUzNy05MjMxMDg0YmM0NTAvMC8zRDZCN0QxRTcx ODM5NjJDRkRFRDE4OUY2QzM2RkZGMzAzQTBEQTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMwM0Ew REEwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJiZDBlOTQtODYwMy00NTdmLWI1 MzctOTIzMTA4NGJjNDUwLzAvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZG RjMwM0EwREEwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAID9Cr6a21fwDa8ZkWHUkF/vRAJ80rLsCVks suvrPp36sjqUftfvTz8zh3HW6GGfvj/yIs1QBYwcT458JXsbpkIcwqJxLYYhv/eP DwjIqj9T4nB2hUHEqykH1Y7zsxeHqYQThOmb/MLkXB6LxPn+UzHwSFlleJbIFZec CgCj2qJSYpb9Ru2XdvZf8kNkSrZT1sH51adSYyDdBrHcB6HpifGvMdnxg/ELcn6+ 9Om+VhQh2rjvMymNHjzPWl+LLhSqeaRWcQ86RI2q5NHJfWy7EdjKjZ9E4fcQp7xT EZFsYqStFUKx/VnXN+sUcrv8C9kyS5d8TKF3jn4bYFPkv3b6Kjs= -----END CERTIFICATE-----Generated at Tue Nov 4 12:38:51 2025 by rpki-client