$ rpki-client -vvf repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft File: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft (raw, json) Hash identifier: STFb8ZmitmMduQ/L0fXAYH/+g2vK9pk+4IPxArTU/N0= Subject key identifier: 78:09:69:19:FE:69:5C:89:B1:D3:D3:25:EB:AA:2B:E8:62:E4:03:81 Authority key identifier: CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D Certificate issuer: /CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Certificate serial: 4FD9380FB834EC36172CACFF491B04B5963F67E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft Manifest number: 02CB Signing time: Sat 01 Nov 2025 18:51:19 +0000 Manifest this update: Sat 01 Nov 2025 18:46:19 +0000 Manifest next update: Wed 05 Nov 2025 01:56:19 +0000 Files and hashes: 1: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl (hash: nL0za4oIZbxvfiWgMa4Et95sq6QyX82/qyOtEZ54Tis=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 01:56:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:d9:38:0f:b8:34:ec:36:17:2c:ac:ff:49:1b:04:b5:96:3f:67:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Validity Not Before: Nov 1 18:46:19 2025 GMT Not After : Nov 5 01:56:19 2025 GMT Subject: CN=78096919FE695C89B1D3D325EBAA2BE862E40381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f3:7d:ac:1f:be:37:f2:ac:f2:d9:de:57:45: 9e:66:ee:4a:f1:a2:36:b5:8b:b2:13:17:af:3f:c6: f0:b9:75:0e:ee:af:f7:86:5c:b5:5f:0a:d4:2d:4a: 64:80:11:ae:b4:57:71:5b:99:81:57:d2:f6:0f:64: ae:c0:ee:fb:52:46:d9:2c:bc:23:75:a8:34:2b:ff: c3:d3:b4:b3:8b:91:6f:51:ca:6e:16:9f:36:ba:dd: f9:33:b8:9f:37:78:48:27:b7:8e:f8:c9:1d:c2:b0: d1:ee:e8:55:e0:f0:73:4b:b3:24:25:33:9d:0b:5d: 9d:36:b0:4f:96:a8:91:1e:50:8d:91:af:30:c5:47: 5e:4e:39:67:43:2a:3a:41:a7:58:5b:d9:27:5e:47: 82:c8:6c:d1:74:0c:98:4a:22:f9:31:06:82:87:23: 59:2f:17:13:6e:8a:02:90:0f:d1:e7:27:db:78:8c: 3f:fa:21:a8:66:67:64:e4:58:66:1f:f3:a3:62:c8: 5a:4c:be:f8:2c:14:97:29:50:49:6a:aa:1f:1b:32: 5e:97:1a:cf:96:80:2e:00:98:4b:f5:f1:77:cd:9a: 85:f3:a7:79:e8:bc:1a:3f:37:c2:78:2c:c9:70:4a: 36:fc:4c:f4:0d:bd:9f:ae:bc:dd:d9:10:0a:5b:1f: a6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:09:69:19:FE:69:5C:89:B1:D3:D3:25:EB:AA:2B:E8:62:E4:03:81 X509v3 Authority Key Identifier: keyid:CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:4a:d6:42:f5:89:de:ed:d2:16:ea:f1:ed:33:94:b9:47:11: 33:99:2d:ca:bb:c5:ce:bd:d8:7a:13:7e:08:2c:f7:9e:d0:92: 24:2f:61:c1:a7:59:31:90:ca:69:2e:3e:41:8f:d2:33:a3:33: 4a:e8:51:a9:52:ef:9e:6a:d0:ec:6f:97:0e:1a:e0:8a:17:0a: 93:2a:3f:c1:f5:61:12:34:72:9f:47:8a:aa:dd:ec:de:56:cb: 7b:e9:24:a4:08:04:f4:07:a9:b5:f6:df:15:2b:db:8a:9d:e1: c7:bc:6c:92:96:a5:51:72:e8:ae:fe:b4:c1:36:60:4a:cb:1a: 92:00:6d:c3:cf:ae:7b:49:a9:1b:65:26:fb:6c:62:3e:8f:da: 05:f0:7a:2b:9d:14:08:43:84:8c:f6:a5:e0:d5:6d:c1:75:9f: be:8b:43:92:ca:52:8e:a5:78:8b:22:bb:25:7d:a9:7a:db:8b: ed:d0:a1:7f:cf:48:fc:8b:56:ec:b9:2f:5c:d9:c5:22:67:80: 52:71:06:80:fb:6c:5b:d2:a7:25:a2:14:f6:b7:76:43:c1:d2: b3:c6:ea:53:22:57:bb:39:a5:90:c6:4d:08:0b:8e:23:73:d4: ab:42:8b:5b:90:0a:50:c8:06:92:54:cc:34:f2:0e:8d:d9:ae: ec:63:da:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT9k4D7g07DYXLKz/SRsEtZY/Z+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdC RThDNzkwRDAeFw0yNTExMDExODQ2MTlaFw0yNTExMDUwMTU2MTlaMDMxMTAvBgNV BAMTKDc4MDk2OTE5RkU2OTVDODlCMUQzRDMyNUVCQUEyQkU4NjJFNDAzODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV832sH7438qzy2d5XRZ5m7krx oja1i7ITF68/xvC5dQ7ur/eGXLVfCtQtSmSAEa60V3FbmYFX0vYPZK7A7vtSRtks vCN1qDQr/8PTtLOLkW9Rym4Wnza63fkzuJ83eEgnt474yR3CsNHu6FXg8HNLsyQl M50LXZ02sE+WqJEeUI2RrzDFR15OOWdDKjpBp1hb2SdeR4LIbNF0DJhKIvkxBoKH I1kvFxNuigKQD9HnJ9t4jD/6IahmZ2TkWGYf86NiyFpMvvgsFJcpUElqqh8bMl6X Gs+WgC4AmEv18XfNmoXzp3novBo/N8J4LMlwSjb8TPQNvZ+uvN3ZEApbH6Z5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeAlpGf5pXImx09Ml66or6GLkA4EwHwYDVR0j BBgwFoAUyjw1qTsUwN9su8JGgfW/l76MeQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGMyODI5My1iNmZiLTRmZjQtOWNlMi0wNjY2M2NiZTY4MTkvMC9DQTNDMzVBOTNC MTRDMERGNkNCQkMyNDY4MUY1QkY5N0JFOEM3OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdCRThD NzkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjMjgyOTMtYjZmYi00ZmY0LTlj ZTItMDY2NjNjYmU2ODE5LzAvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJG OTdCRThDNzkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAERK1kL1id7t0hbq8e0zlLlHETOZLcq7xc69 2HoTfggs957QkiQvYcGnWTGQymkuPkGP0jOjM0roUalS755q0Oxvlw4a4IoXCpMq P8H1YRI0cp9Hiqrd7N5Wy3vpJKQIBPQHqbX23xUr24qd4ce8bJKWpVFy6K7+tME2 YErLGpIAbcPPrntJqRtlJvtsYj6P2gXweiudFAhDhIz2peDVbcF1n76LQ5LKUo6l eIsiuyV9qXrbi+3QoX/PSPyLVuy5L1zZxSJngFJxBoD7bFvSpyWiFPa3dkPB0rPG 6lMiV7s5pZDGTQgLjiNz1KtCi1uQClDIBpJUzDTyDo3Zruxj2qA= -----END CERTIFICATE-----Generated at Tue Nov 4 01:57:27 2025 by rpki-client