$ rpki-client -vvf repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft File: C380A411E3CE15C60336341BB4B0994B307B920D.mft (raw, json) Hash identifier: E0O0GcJ5ICYqe2DhZ4nWDpFLKDgiYoWanHENz35k1R4= Subject key identifier: 5E:61:A8:3D:F0:36:CB:02:56:DD:21:38:D8:04:7B:D6:46:8A:E3:5B Authority key identifier: C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D Certificate issuer: /CN=C380A411E3CE15C60336341BB4B0994B307B920D Certificate serial: 30F518D2F74FA53A1E65A8AED2FF1EF61C1A9E9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft Manifest number: 040D Signing time: Tue 04 Nov 2025 19:52:04 +0000 Manifest this update: Tue 04 Nov 2025 19:47:04 +0000 Manifest next update: Fri 07 Nov 2025 21:17:04 +0000 Files and hashes: 1: 3130332e3134332e32342e302f32332d3233203d3e203536323432.roa (hash: 6ARHaxkV0HQRmAgHPZ4dlFB+3c6L0ZGJmc/nN2+k+no=) 2: C380A411E3CE15C60336341BB4B0994B307B920D.crl (hash: oLFl8NjBcumm+c02ZI54mr5HDJeJNBy/wPOVj+IdUIU=) 3: 3130332e3134332e32352e302f32342d3234203d3e203536323432.roa (hash: 6KZnCoun2OeRfJhfU31JgFdGtJDoY9NCrchaCehwgfg=) 4: 3130332e3134332e32342e302f32342d3234203d3e203536323432.roa (hash: 8zQK8AXHLSApMmYd7tjNJsIjZnWf3yDUEAsA1LFehWw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.crl rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:f5:18:d2:f7:4f:a5:3a:1e:65:a8:ae:d2:ff:1e:f6:1c:1a:9e:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C380A411E3CE15C60336341BB4B0994B307B920D Validity Not Before: Nov 4 19:47:04 2025 GMT Not After : Nov 7 21:17:04 2025 GMT Subject: CN=5E61A83DF036CB0256DD2138D8047BD6468AE35B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6e:e4:25:dd:c5:38:f0:92:53:4e:f3:d0:56: 3e:e1:54:82:41:cf:97:b2:ae:8e:1c:d5:27:c0:f9: b1:53:ea:2b:64:b3:d1:7d:05:00:ed:78:a8:a7:3a: f2:b6:ee:3e:c5:b0:48:13:1e:32:20:1a:53:d7:1d: e7:00:37:8e:f8:5c:44:13:fd:b6:01:fe:fb:a0:95: f8:7f:b5:cb:8e:9b:bf:04:6f:27:07:ca:84:19:bf: 50:9f:69:57:64:64:07:3d:b2:41:53:e9:db:03:9a: b0:83:6e:a1:f6:0a:a8:99:a1:3a:50:c2:d2:69:35: 3e:e0:7d:54:32:b0:81:03:25:af:8c:d1:cd:a7:a1: 6b:70:c3:55:ab:e4:71:39:d7:f8:fe:76:72:f1:e4: 4d:86:c2:59:7d:b1:b0:1b:d2:63:5f:35:fa:36:b1: 8e:68:42:59:4c:35:7f:57:22:b1:d1:de:4c:c6:04: cc:66:ba:60:f8:6e:08:44:76:60:20:89:7c:77:45: 00:e4:a2:4e:90:8b:8e:58:90:5f:7c:c7:68:b9:54: 35:91:34:e7:d4:41:72:40:af:f8:8c:64:35:08:9a: 38:08:05:ba:81:0f:dc:58:69:8d:c4:b9:4a:03:6a: 68:54:26:e7:18:2d:97:9b:18:53:e6:af:f3:6b:07: dc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:61:A8:3D:F0:36:CB:02:56:DD:21:38:D8:04:7B:D6:46:8A:E3:5B X509v3 Authority Key Identifier: keyid:C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:e3:0a:b5:6c:47:85:59:8b:57:fe:c6:29:99:b4:d5:3f:86: cb:e3:e3:51:51:fa:20:b4:29:28:dd:76:b3:2a:56:77:36:68: 44:b1:8c:a1:3d:e0:b4:53:5b:11:db:b4:33:8e:3a:89:44:48: e4:2e:8f:a7:fa:93:45:fb:8d:3a:a8:91:a1:14:69:70:fc:8e: 28:09:72:3d:0d:5e:18:d1:c3:38:87:6f:71:f9:34:4b:bd:08: 59:71:6f:a9:63:88:4a:c6:fc:f9:79:b8:3a:44:9b:7e:9a:2f: ad:57:b6:35:3e:b4:1e:9b:11:c8:ea:40:2a:70:36:29:43:89: c9:80:ec:6c:c1:9d:b6:96:32:75:7a:32:25:4f:ce:c8:a8:71: a3:19:a7:4d:2c:f9:09:37:e1:d0:24:f9:43:58:f1:7c:83:aa: b3:48:09:d4:3c:57:e1:65:5a:26:88:5a:ff:ea:4c:db:ce:05: a9:2f:9a:2a:90:30:85:f8:9d:ee:9c:37:df:63:4a:8a:92:55: 6b:a4:ed:47:41:e4:e1:e9:84:dd:c9:5b:55:73:f5:d0:b4:53: fe:62:15:82:a4:ac:48:8f:3e:9c:5f:6f:27:6d:38:5d:72:3b: f5:f0:fa:c4:49:23:37:70:38:1e:ce:ab:75:ce:5d:d7:9d:e7: f8:45:fd:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMPUY0vdPpToeZaiu0v8e9hwanpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5NEIz MDdCOTIwRDAeFw0yNTExMDQxOTQ3MDRaFw0yNTExMDcyMTE3MDRaMDMxMTAvBgNV BAMTKDVFNjFBODNERjAzNkNCMDI1NkREMjEzOEQ4MDQ3QkQ2NDY4QUUzNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDibuQl3cU48JJTTvPQVj7hVIJB z5eyro4c1SfA+bFT6itks9F9BQDteKinOvK27j7FsEgTHjIgGlPXHecAN474XEQT /bYB/vuglfh/tcuOm78EbycHyoQZv1CfaVdkZAc9skFT6dsDmrCDbqH2CqiZoTpQ wtJpNT7gfVQysIEDJa+M0c2noWtww1Wr5HE51/j+dnLx5E2Gwll9sbAb0mNfNfo2 sY5oQllMNX9XIrHR3kzGBMxmumD4bghEdmAgiXx3RQDkok6Qi45YkF98x2i5VDWR NOfUQXJAr/iMZDUImjgIBbqBD9xYaY3EuUoDamhUJucYLZebGFPmr/NrB9yNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXmGoPfA2ywJW3SE42AR71kaK41swHwYDVR0j BBgwFoAUw4CkEePOFcYDNjQbtLCZSzB7kg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWM0MDBkMS05YmJkLTRlMmItOGQ1OC02Zjc0OWRiYzM5MmQvMC9DMzgwQTQxMUUz Q0UxNUM2MDMzNjM0MUJCNEIwOTk0QjMwN0I5MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5NEIzMDdC OTIwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVjNDAwZDEtOWJiZC00ZTJiLThk NTgtNmY3NDlkYmMzOTJkLzAvQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5 NEIzMDdCOTIwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPjCrVsR4VZi1f+ximZtNU/hsvj41FR+iC0 KSjddrMqVnc2aESxjKE94LRTWxHbtDOOOolESOQuj6f6k0X7jTqokaEUaXD8jigJ cj0NXhjRwziHb3H5NEu9CFlxb6ljiErG/Pl5uDpEm36aL61XtjU+tB6bEcjqQCpw NilDicmA7GzBnbaWMnV6MiVPzsiocaMZp00s+Qk34dAk+UNY8XyDqrNICdQ8V+Fl WiaIWv/qTNvOBakvmiqQMIX4ne6cN99jSoqSVWuk7UdB5OHphN3JW1Vz9dC0U/5i FYKkrEiPPpxfbydtOF1yO/Xw+sRJIzdwOB7Oq3XOXded5/hF/Qk= -----END CERTIFICATE-----Generated at Tue Nov 4 21:08:56 2025 by rpki-client