$ rpki-client -vvf repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft File: 3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft (raw, json) Hash identifier: Ge4PyMRlrU2Zrkemq3u0UrkGGY1FiNU06nfZVvLXypk= Subject key identifier: 3D:20:A1:60:8E:00:47:04:F4:51:C7:D5:11:34:20:73:7C:2D:13:DE Authority key identifier: 3E:DD:CA:40:C3:F0:CF:91:2B:00:3B:B1:9F:9C:03:E4:8B:43:F7:27 Certificate issuer: /CN=3EDDCA40C3F0CF912B003BB19F9C03E48B43F727 Certificate serial: 55AF196967160CC847F2F6F2F5699506601EDA06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft Manifest number: 01EF Signing time: Sun 02 Nov 2025 18:50:04 +0000 Manifest this update: Sun 02 Nov 2025 18:45:04 +0000 Manifest next update: Wed 05 Nov 2025 19:00:04 +0000 Files and hashes: 1: 3130332e31392e3135382e302f32332d3234203d3e20313530323339.roa (hash: 2pmnEjpV6xKfD9pUClZgIAGRZy9Yz1iTckvB+l+9+U4=) 2: 3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl (hash: ejA331TqyWvKfqg5WTBpkZrNQh8BMJB9UhKbO+XGaTE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 19:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:af:19:69:67:16:0c:c8:47:f2:f6:f2:f5:69:95:06:60:1e:da:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EDDCA40C3F0CF912B003BB19F9C03E48B43F727 Validity Not Before: Nov 2 18:45:04 2025 GMT Not After : Nov 5 19:00:04 2025 GMT Subject: CN=3D20A1608E004704F451C7D5113420737C2D13DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9d:20:dc:4e:53:31:4f:7f:d8:75:ef:ce:bb: 2d:77:60:48:d7:fd:21:ed:0c:f0:b4:74:f6:ad:3f: 5f:fb:36:88:dd:96:48:ec:c8:cd:d1:42:1c:a6:58: c2:7d:aa:42:c8:ed:a3:a6:5e:3f:2c:e4:74:92:f4: ce:ca:28:4a:b1:71:6d:4f:93:6c:f8:55:fa:a3:f8: 29:2a:87:ea:f4:1a:3d:8e:a3:db:0c:13:a1:99:63: d0:c9:2d:48:49:c0:d7:35:05:7e:a2:7e:a2:e6:91: e6:28:04:5c:66:96:1c:ae:ee:f5:68:d8:24:46:fe: 87:44:0d:19:e2:57:49:f9:d6:bc:23:b1:b1:63:96: c5:8b:7a:e9:de:ca:c8:74:1f:9e:57:3b:d7:3f:a0: a6:34:ff:cb:61:4a:e7:81:8a:e4:8b:ec:86:6c:51: d5:da:5f:ba:97:83:b2:bb:94:5a:fd:f1:a3:61:49: c9:7f:4d:17:5d:28:79:fc:34:2b:be:c1:88:29:16: de:16:21:19:7e:8f:7b:91:65:90:fb:f4:75:43:a4: 7d:f1:5f:6c:87:47:e5:72:e6:2b:9a:9f:55:c9:59: 0f:15:09:87:62:c1:1b:6c:52:6b:59:0f:1c:64:49: 96:03:d9:ab:c1:0b:05:74:df:38:61:a8:1e:02:36: b6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:20:A1:60:8E:00:47:04:F4:51:C7:D5:11:34:20:73:7C:2D:13:DE X509v3 Authority Key Identifier: keyid:3E:DD:CA:40:C3:F0:CF:91:2B:00:3B:B1:9F:9C:03:E4:8B:43:F7:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:4a:fd:d5:1c:c3:38:af:29:f8:38:a9:1c:fb:68:62:7f:73: 56:36:8a:f2:56:76:d3:21:63:1f:a4:f5:bf:66:80:cc:5d:5f: 14:d1:30:ee:a0:fb:58:ea:a2:80:5a:61:c3:11:f6:74:97:d4: 4a:91:3b:26:7b:42:fa:d7:fe:42:b6:d9:de:1c:ec:61:30:b9: a6:2d:43:39:93:7f:f2:15:fa:21:4d:42:cd:55:34:99:fa:56: a8:b3:aa:34:f1:67:36:59:91:f1:bb:b9:7a:e9:3f:ad:13:17: 3c:7c:d8:e4:4d:ff:75:fe:b2:6e:3b:e0:03:7a:4c:a1:51:4a: 12:ea:37:1c:08:48:62:0e:de:cd:a4:62:70:ba:bc:53:47:20: 4a:5f:41:f8:53:ad:0d:42:ba:15:bb:9c:e3:08:e8:32:3e:81: c9:a1:d6:87:fa:59:28:3a:22:db:9e:f5:7e:a0:4c:73:ee:79: a7:45:0d:3e:95:a3:7f:6b:22:41:0b:dc:63:0a:bd:8d:39:bd: 73:0d:67:13:96:b4:27:a1:01:b0:0a:89:39:c1:46:70:78:1e: b0:81:68:b5:42:02:62:f6:71:d1:7e:2e:09:65:a0:91:95:3f: 1d:c6:46:99:ef:a5:ae:2d:74:22:dc:92:1f:09:45:8f:d8:0b: 5e:74:cb:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVa8ZaWcWDMhH8vby9WmVBmAe2gYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAzRTQ4 QjQzRjcyNzAeFw0yNTExMDIxODQ1MDRaFw0yNTExMDUxOTAwMDRaMDMxMTAvBgNV BAMTKDNEMjBBMTYwOEUwMDQ3MDRGNDUxQzdENTExMzQyMDczN0MyRDEzREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDInSDcTlMxT3/Yde/Ouy13YEjX /SHtDPC0dPatP1/7NojdlkjsyM3RQhymWMJ9qkLI7aOmXj8s5HSS9M7KKEqxcW1P k2z4Vfqj+Ckqh+r0Gj2Oo9sME6GZY9DJLUhJwNc1BX6ifqLmkeYoBFxmlhyu7vVo 2CRG/odEDRniV0n51rwjsbFjlsWLeuneysh0H55XO9c/oKY0/8thSueBiuSL7IZs UdXaX7qXg7K7lFr98aNhScl/TRddKHn8NCu+wYgpFt4WIRl+j3uRZZD79HVDpH3x X2yHR+Vy5iuan1XJWQ8VCYdiwRtsUmtZDxxkSZYD2avBCwV03zhhqB4CNrb7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPSChYI4ARwT0UcfVETQgc3wtE94wHwYDVR0j BBgwFoAUPt3KQMPwz5ErADuxn5wD5ItD9ycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Y2RlOGVjZS05N2EyLTRiMGQtYTA2NC0xN2NlYTYxZjQ1Y2MvMC8zRUREQ0E0MEMz RjBDRjkxMkIwMDNCQjE5RjlDMDNFNDhCNDNGNzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAzRTQ4QjQz RjcyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWNkZThlY2UtOTdhMi00YjBkLWEw NjQtMTdjZWE2MWY0NWNjLzAvM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAz RTQ4QjQzRjcyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNK/dUcwzivKfg4qRz7aGJ/c1Y2ivJWdtMh Yx+k9b9mgMxdXxTRMO6g+1jqooBaYcMR9nSX1EqROyZ7QvrX/kK22d4c7GEwuaYt QzmTf/IV+iFNQs1VNJn6VqizqjTxZzZZkfG7uXrpP60TFzx82ORN/3X+sm474AN6 TKFRShLqNxwISGIO3s2kYnC6vFNHIEpfQfhTrQ1CuhW7nOMI6DI+gcmh1of6WSg6 Itue9X6gTHPueadFDT6Vo39rIkEL3GMKvY05vXMNZxOWtCehAbAKiTnBRnB4HrCB aLVCAmL2cdF+LglloJGVPx3GRpnvpa4tdCLckh8JRY/YC150y1k= -----END CERTIFICATE-----Generated at Tue Nov 4 18:57:09 2025 by rpki-client