$ rpki-client -vvf repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft File: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft (raw, json) Hash identifier: PMreO2NM9LCF02VWqNev4zk4UotynLaA8dhPVSJ10RY= Subject key identifier: 8E:27:02:E9:AA:29:82:A8:59:64:61:CD:22:16:55:BE:38:FF:CD:F8 Authority key identifier: C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 Certificate issuer: /CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Certificate serial: 19B1F0C4A877163613A133BDF9C0580C9EECA30D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft Manifest number: 0114 Signing time: Tue 04 Nov 2025 01:32:05 +0000 Manifest this update: Tue 04 Nov 2025 01:27:05 +0000 Manifest next update: Fri 07 Nov 2025 09:06:05 +0000 Files and hashes: 1: 3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa (hash: Hi9atmKGqBLh80IcI4YfkhZtw64e+ySR+ExhE9rM6A4=) 2: 3231302e37392e3134332e302f32342d3234203d3e20313431363037.roa (hash: jqfTRowotRE9toTW7s6XxuVzWTLvd0wPa0s2vyImrss=) 3: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl (hash: TgDEmi80PHqdVaDxBFSAPMxGosoEYic8AKJgGVZoVME=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:b1:f0:c4:a8:77:16:36:13:a1:33:bd:f9:c0:58:0c:9e:ec:a3:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Validity Not Before: Nov 4 01:27:05 2025 GMT Not After : Nov 7 09:06:05 2025 GMT Subject: CN=8E2702E9AA2982A8596461CD221655BE38FFCDF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2f:45:45:08:64:b8:62:49:f1:c1:9b:60:6b: 43:53:8b:97:81:ed:34:69:e0:a7:a1:9b:d6:0b:a2: 2e:20:3b:22:64:62:43:3c:0c:c9:09:b3:2a:2e:89: 7a:4c:38:be:2b:5e:92:97:33:33:f6:8e:ed:35:e3: 80:16:70:bd:94:05:e8:a0:cd:f7:70:6e:80:cc:ae: ae:de:30:96:d2:57:2a:2d:5c:f4:d6:cf:9d:50:37: 4b:f0:51:00:d7:7d:0a:47:f1:72:77:ec:e9:38:f1: 37:7e:74:a2:06:59:3e:eb:7a:f3:60:33:0c:7a:43: 3e:46:a1:4c:a1:0f:5b:54:b0:26:a1:70:b5:49:7f: 5c:f3:8d:f0:e6:e0:a4:17:d1:1d:49:79:1f:16:15: 58:2d:e6:69:25:08:aa:31:dd:b1:e5:e9:05:1d:b4: 1e:0a:22:23:c6:37:96:0d:89:2e:e1:5d:e9:5b:84: fd:39:18:4f:6a:9a:9d:c0:50:06:b6:b4:64:b7:7d: 9a:2a:e7:e0:f2:f7:f5:8c:21:30:29:9e:31:ca:25: a7:28:56:9e:33:5f:8a:48:28:f4:90:fd:a7:a3:a8: 46:b0:a6:76:da:ea:99:89:54:9b:d6:11:70:39:58: 2c:d6:82:b9:3f:4a:be:f6:ef:70:b3:fe:d2:d8:0d: 1c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:27:02:E9:AA:29:82:A8:59:64:61:CD:22:16:55:BE:38:FF:CD:F8 X509v3 Authority Key Identifier: keyid:C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:67:87:ab:29:82:f7:e8:08:0c:5e:79:5d:ad:5b:c4:16:f4: 71:e1:de:4a:2f:33:62:ad:5d:b7:5b:2e:a5:98:ba:f0:7a:93: 91:93:15:02:b3:0c:35:6e:53:8b:ac:76:71:ce:45:34:27:1e: 8a:53:a1:b0:fb:ae:d6:63:fc:41:75:f4:d8:84:94:63:64:5b: 97:9b:f1:88:5e:c6:0a:48:ad:8a:17:2a:85:6e:1d:df:c7:5f: 26:e8:c2:aa:00:97:f9:ba:20:4d:d6:55:30:e6:de:70:1e:37: d0:74:44:08:ae:56:60:88:24:92:b6:00:b6:b3:d1:f0:ad:9f: 37:d3:4d:33:62:23:55:71:27:bd:48:7d:d4:93:ad:b4:a6:a1: db:88:a8:4a:ec:b8:18:0c:59:d4:b7:7f:1b:e5:3a:7f:9a:28: d7:77:58:6c:56:99:fd:43:d2:0a:79:99:ef:b6:85:98:74:76: 86:89:36:1a:17:e6:f3:7c:2b:d9:c8:f0:f4:61:d5:d1:a4:99: 12:00:ea:c9:06:61:ff:4e:fc:ad:ca:8c:b0:83:9c:2b:e4:ef: 74:83:f9:17:ec:0a:18:8f:45:c9:be:6a:f4:b6:60:56:22:ab: d1:c6:b4:31:f7:e1:e9:02:40:6f:d3:e5:c3:e0:d0:78:d9:df: e7:5c:21:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGbHwxKh3FjYToTO9+cBYDJ7sow0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQx NUE5OTMxMzAeFw0yNTExMDQwMTI3MDVaFw0yNTExMDcwOTA2MDVaMDMxMTAvBgNV BAMTKDhFMjcwMkU5QUEyOTgyQTg1OTY0NjFDRDIyMTY1NUJFMzhGRkNERjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKL0VFCGS4YknxwZtga0NTi5eB 7TRp4Kehm9YLoi4gOyJkYkM8DMkJsyouiXpMOL4rXpKXMzP2ju0144AWcL2UBeig zfdwboDMrq7eMJbSVyotXPTWz51QN0vwUQDXfQpH8XJ37Ok48Td+dKIGWT7revNg Mwx6Qz5GoUyhD1tUsCahcLVJf1zzjfDm4KQX0R1JeR8WFVgt5mklCKox3bHl6QUd tB4KIiPGN5YNiS7hXelbhP05GE9qmp3AUAa2tGS3fZoq5+Dy9/WMITApnjHKJaco Vp4zX4pIKPSQ/aejqEawpnba6pmJVJvWEXA5WCzWgrk/Sr7273Cz/tLYDRxHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjicC6aopgqhZZGHNIhZVvjj/zfgwHwYDVR0j BBgwFoAUwzWb6/DBXJ1HOc6Iv7IULRWpkxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDM4ZjZhYS1mMjdkLTQ5MDYtOTUxZS1mMDJkODkxYmYxZWQvMC9DMzM1OUJFQkYw QzE1QzlENDczOUNFODhCRkIyMTQyRDE1QTk5MzEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQxNUE5 OTMxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQzOGY2YWEtZjI3ZC00OTA2LTk1 MWUtZjAyZDg5MWJmMWVkLzAvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0 MkQxNUE5OTMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxnh6spgvfoCAxeeV2tW8QW9HHh3kovM2Kt XbdbLqWYuvB6k5GTFQKzDDVuU4usdnHORTQnHopTobD7rtZj/EF19NiElGNkW5eb 8YhexgpIrYoXKoVuHd/HXybowqoAl/m6IE3WVTDm3nAeN9B0RAiuVmCIJJK2ALaz 0fCtnzfTTTNiI1VxJ71IfdSTrbSmoduIqErsuBgMWdS3fxvlOn+aKNd3WGxWmf1D 0gp5me+2hZh0doaJNhoX5vN8K9nI8PRh1dGkmRIA6skGYf9O/K3KjLCDnCvk73SD +RfsChiPRcm+avS2YFYiq9HGtDH34ekCQG/T5cPg0HjZ3+dcIZI= -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:45 2025 by rpki-client