$ rpki-client -vvf repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft File: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft (raw, json) Hash identifier: mn3WCJzP/YPXr34Q/6dmwprvvLsKrfeVBWvT2vcYxco= Subject key identifier: FF:F0:B1:49:77:04:7D:A8:22:39:E1:65:C4:77:97:27:45:0B:63:3C Authority key identifier: 3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A Certificate issuer: /CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A Certificate serial: 5DD5F029240D54E3594DF04638027CB56A4EB8B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft Manifest number: D3 Signing time: Tue 04 Nov 2025 16:22:20 +0000 Manifest this update: Tue 04 Nov 2025 16:17:20 +0000 Manifest next update: Fri 07 Nov 2025 17:52:20 +0000 Files and hashes: 1: 3136302e32322e3233342e302f32342d3234203d3e20313533303631.roa (hash: NaC6OjHEbkMsjBRQmR8Tqmru4zPhSmsJN/hiJNkC18Y=) 2: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl (hash: /3jkx61mLud/UIkG0TEn9HguKO6jPZoBklnbiMM0vXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d5:f0:29:24:0d:54:e3:59:4d:f0:46:38:02:7c:b5:6a:4e:b8:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A Validity Not Before: Nov 4 16:17:20 2025 GMT Not After : Nov 7 17:52:20 2025 GMT Subject: CN=FFF0B14977047DA82239E165C4779727450B633C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:64:72:77:6f:57:2c:fc:93:d8:c2:54:b0:51: ef:c3:d0:aa:a7:28:3a:ae:15:81:14:c9:88:7d:44: 6f:ac:86:25:a5:bc:de:59:af:4b:c3:8d:43:2a:18: b2:f9:a7:1c:ba:2a:12:b9:07:31:dc:8b:43:b0:19: 5b:b1:8a:9d:47:20:f3:0d:e3:af:79:1c:58:68:94: c9:10:6c:94:b3:1e:51:02:15:b3:6d:5a:7c:d1:4e: 08:9e:d4:b5:d0:8f:eb:75:38:ed:90:2d:99:00:77: e8:49:59:d6:29:ed:07:99:f0:38:d1:a6:e4:49:d3: 68:e0:97:19:a1:54:e0:a9:4f:2a:70:84:ad:2c:e1: 92:83:6a:e0:a3:c1:b7:eb:54:e6:f0:f1:4f:8f:ce: 06:0d:01:89:4e:ec:93:84:a5:97:82:92:80:8f:ad: d8:76:1d:8c:06:6c:c3:f5:fe:9a:09:f9:da:15:38: 11:d9:89:1e:fd:df:ed:e6:20:7c:bb:37:ff:53:e8: ef:ad:af:d8:de:c4:42:06:8e:07:32:ed:89:e0:84: 32:e9:df:a1:75:c2:9c:a3:0a:1a:98:94:ea:3f:38: a2:46:c2:63:d2:e0:5e:fe:00:18:83:d9:70:24:48: 00:1e:bc:fd:aa:93:eb:80:6b:96:c8:13:82:b0:85: 19:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F0:B1:49:77:04:7D:A8:22:39:E1:65:C4:77:97:27:45:0B:63:3C X509v3 Authority Key Identifier: keyid:3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:bc:54:ed:d0:cc:74:28:86:d3:c5:eb:37:c9:fa:8e:a6:69: 98:51:0e:7b:12:d1:18:b9:00:38:c1:42:72:e1:f1:62:54:0a: 61:7a:f4:5e:1c:e1:65:0f:48:e9:7e:9c:e2:2f:d8:a0:17:a7: 18:0a:c2:44:c1:8b:8b:d0:f7:94:ed:0f:fe:3b:c0:f3:cd:8a: 68:64:57:a2:00:20:26:f0:05:13:3b:23:ce:31:05:87:09:f5: 6b:82:9e:29:20:f5:75:4a:09:b5:58:04:ab:e1:78:f7:84:3b: 09:98:59:87:ed:f6:20:0c:a2:01:ac:71:3c:bd:be:5c:b7:84: 98:a2:8a:eb:c1:ad:08:5a:38:f6:84:14:64:0b:fd:87:ff:9d: a3:9c:bc:22:de:3d:4f:45:f3:69:9f:36:f4:38:bb:67:b4:6e: fe:43:40:55:b4:34:b0:8d:f5:ee:d8:f3:4b:80:4d:55:90:13: e7:b1:68:f4:84:51:50:24:aa:08:10:21:65:83:f0:fb:92:28: 1c:49:11:a9:5f:f9:0e:3d:c8:17:68:91:e1:ab:a3:a6:ac:2a: f3:eb:07:ca:85:dc:ba:86:5d:87:73:c2:3c:c3:d4:d4:3f:ce: a8:66:1e:c3:f7:fa:37:82:48:63:c7:e8:ce:4a:06:5a:76:aa: 36:0a:19:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXdXwKSQNVONZTfBGOAJ8tWpOuLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRFQzVG ODlCQUI5QTAeFw0yNTExMDQxNjE3MjBaFw0yNTExMDcxNzUyMjBaMDMxMTAvBgNV BAMTKEZGRjBCMTQ5NzcwNDdEQTgyMjM5RTE2NUM0Nzc5NzI3NDUwQjYzM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIZHJ3b1cs/JPYwlSwUe/D0Kqn KDquFYEUyYh9RG+shiWlvN5Zr0vDjUMqGLL5pxy6KhK5BzHci0OwGVuxip1HIPMN 4695HFholMkQbJSzHlECFbNtWnzRTgie1LXQj+t1OO2QLZkAd+hJWdYp7QeZ8DjR puRJ02jglxmhVOCpTypwhK0s4ZKDauCjwbfrVObw8U+PzgYNAYlO7JOEpZeCkoCP rdh2HYwGbMP1/poJ+doVOBHZiR793+3mIHy7N/9T6O+tr9jexEIGjgcy7YnghDLp 36F1wpyjChqYlOo/OKJGwmPS4F7+ABiD2XAkSAAevP2qk+uAa5bIE4KwhRlLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU//CxSXcEfagiOeFlxHeXJ0ULYzwwHwYDVR0j BBgwFoAUPdzEykO0kvQMjLBuSZNOxfibq5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWI1MzQyMC04YzU5LTQ5Y2YtYjNiMi1mNTVlOTg5MGRkY2QvMC8zRERDQzRDQTQz QjQ5MkY0MEM4Q0IwNkU0OTkzNEVDNUY4OUJBQjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRFQzVGODlC QUI5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjliNTM0MjAtOGM1OS00OWNmLWIz YjItZjU1ZTk4OTBkZGNkLzAvM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRF QzVGODlCQUI5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABO8VO3QzHQohtPF6zfJ+o6maZhRDnsS0Ri5 ADjBQnLh8WJUCmF69F4c4WUPSOl+nOIv2KAXpxgKwkTBi4vQ95TtD/47wPPNimhk V6IAICbwBRM7I84xBYcJ9WuCnikg9XVKCbVYBKvhePeEOwmYWYft9iAMogGscTy9 vly3hJiiiuvBrQhaOPaEFGQL/Yf/naOcvCLePU9F82mfNvQ4u2e0bv5DQFW0NLCN 9e7Y80uATVWQE+exaPSEUVAkqggQIWWD8PuSKBxJEalf+Q49yBdokeGro6asKvPr B8qF3LqGXYdzwjzD1NQ/zqhmHsP3+jeCSGPH6M5KBlp2qjYKGXA= -----END CERTIFICATE-----Generated at Tue Nov 4 21:21:39 2025 by rpki-client