$ rpki-client -vvf repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft File: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft (raw, json) Hash identifier: grdp1j6PP4SHqXB0xJtcr8AtjHlV5sD8VTFxFWSQ8hM= Subject key identifier: C7:5E:BC:B0:38:F8:D6:E6:33:EE:F9:9E:B2:23:86:F3:57:FD:AD:64 Authority key identifier: 3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 Certificate issuer: /CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Certificate serial: 178690CAF556606584589904D7B99E10F28A1CB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft Manifest number: 01D6 Signing time: Mon 03 Nov 2025 08:01:53 +0000 Manifest this update: Mon 03 Nov 2025 07:56:53 +0000 Manifest next update: Thu 06 Nov 2025 12:31:53 +0000 Files and hashes: 1: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl (hash: RYHDeieI8NQeHNYxHb5lCB9Bk3kufHvZQG82QJD/gaE=) 2: 3130332e342e37362e302f32332d3234203d3e20313530323136.roa (hash: ncYGXRGoDNxvYIX3PcGqdrJLj1FxUvjJrqOvy1GAKxo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 12:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:86:90:ca:f5:56:60:65:84:58:99:04:d7:b9:9e:10:f2:8a:1c:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Validity Not Before: Nov 3 07:56:53 2025 GMT Not After : Nov 6 12:31:53 2025 GMT Subject: CN=C75EBCB038F8D6E633EEF99EB22386F357FDAD64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:05:a5:6a:88:3f:76:10:bc:ab:ae:16:cb:d3: d0:f6:e8:83:e7:c0:48:29:f8:f1:2f:bb:7f:23:82: 3f:1d:86:fd:2f:28:c3:3d:f1:5e:76:f6:67:e9:24: a6:a6:ca:f9:78:b5:e2:e1:e3:9f:68:81:75:27:00: 13:90:7a:4f:3a:fc:7e:89:0e:ea:3d:f7:5d:14:6d: 2c:7e:c0:f6:9c:5a:17:3f:c6:3f:d2:ba:9a:c4:ff: 83:57:e9:7e:06:5a:59:5b:29:ce:49:bf:5e:84:84: cf:07:4c:a1:c7:5b:c7:0f:c9:bb:b8:56:93:3b:36: db:98:a2:5d:3c:76:ac:3c:03:57:97:07:63:ab:7f: 57:b3:43:b3:98:6a:fb:11:75:74:ee:3c:df:20:93: 3a:85:ee:aa:bf:36:50:18:27:bb:c4:23:fe:89:81: 17:01:48:ad:80:35:11:c1:29:79:3e:6b:db:57:6a: 5a:b4:6e:dc:47:a2:05:54:87:b3:ed:3a:fc:b6:a1: 01:fe:65:e7:1b:99:0a:5b:87:10:2f:4a:56:95:b3: 16:f7:4d:03:59:8f:f8:ff:79:91:2f:ec:36:48:d5: 83:c9:56:72:c9:c0:b1:c2:1c:ea:87:81:7d:00:8c: de:bb:fd:7f:89:e1:65:a1:4c:16:90:63:c6:d4:9d: 47:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5E:BC:B0:38:F8:D6:E6:33:EE:F9:9E:B2:23:86:F3:57:FD:AD:64 X509v3 Authority Key Identifier: keyid:3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:08:64:58:6a:aa:7d:45:9d:17:07:f5:02:5c:13:b1:9e:62: 4d:bd:f9:90:30:93:38:dd:6b:91:44:79:21:4f:40:df:55:d9: f8:1d:74:9a:99:3d:64:d9:29:1d:8c:39:bc:ed:19:fa:00:d0: b5:1a:98:e5:4c:ee:5a:0e:42:a3:0c:d6:17:02:aa:18:f1:3c: 35:09:ea:f2:2d:14:8c:bb:2d:1c:ac:5b:7b:31:79:b5:e2:24: 2a:79:ea:90:ad:05:10:70:a6:26:f8:32:00:df:d7:61:02:9a: 4f:3e:67:d2:44:25:2a:1d:a1:87:0d:7e:26:50:20:d2:86:a9: e6:aa:63:b0:8b:d7:d6:90:7d:5e:d8:c8:a8:c2:58:0a:34:8b: 17:01:36:e8:bb:9f:67:fb:77:52:d1:63:99:c6:f3:af:4a:a9: 88:4d:1a:1d:0c:39:1c:7a:09:0c:8d:0b:56:27:76:21:a3:76: 3a:aa:c8:dd:82:4a:65:c9:bb:ba:3d:a5:a5:7c:74:95:72:aa: d2:95:da:1e:19:54:b6:ee:06:25:6c:d1:14:c0:da:9d:21:83: 94:5f:48:61:f2:af:ef:7b:a7:49:1b:41:12:42:de:0e:46:e0: 57:b3:a7:3a:61:5c:a3:54:1c:c0:b4:3f:3c:ee:b2:76:52:50: 0f:b4:b7:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF4aQyvVWYGWEWJkE17meEPKKHLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRF QTgxNTZEMzAeFw0yNTExMDMwNzU2NTNaFw0yNTExMDYxMjMxNTNaMDMxMTAvBgNV BAMTKEM3NUVCQ0IwMzhGOEQ2RTYzM0VFRjk5RUIyMjM4NkYzNTdGREFENjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWBaVqiD92ELyrrhbL09D26IPn wEgp+PEvu38jgj8dhv0vKMM98V529mfpJKamyvl4teLh459ogXUnABOQek86/H6J Duo9910UbSx+wPacWhc/xj/SuprE/4NX6X4GWllbKc5Jv16EhM8HTKHHW8cPybu4 VpM7NtuYol08dqw8A1eXB2Orf1ezQ7OYavsRdXTuPN8gkzqF7qq/NlAYJ7vEI/6J gRcBSK2ANRHBKXk+a9tXalq0btxHogVUh7PtOvy2oQH+ZecbmQpbhxAvSlaVsxb3 TQNZj/j/eZEv7DZI1YPJVnLJwLHCHOqHgX0AjN67/X+J4WWhTBaQY8bUnUdvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx168sDj41uYz7vmesiOG81f9rWQwHwYDVR0j BBgwFoAUP7/pLVsiDps2s3vNMJHXVOqBVtMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Mjk0MDFkMC0yNmE3LTQ3ODctYjY4YS0xODJiMTUyYTk1MTMvMC8zRkJGRTkyRDVC MjIwRTlCMzZCMzdCQ0QzMDkxRDc1NEVBODE1NkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRFQTgx NTZEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI5NDAxZDAtMjZhNy00Nzg3LWI2 OGEtMTgyYjE1MmE5NTEzLzAvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3 NTRFQTgxNTZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIIZFhqqn1FnRcH9QJcE7GeYk29+ZAwkzjd a5FEeSFPQN9V2fgddJqZPWTZKR2MObztGfoA0LUamOVM7loOQqMM1hcCqhjxPDUJ 6vItFIy7LRysW3sxebXiJCp56pCtBRBwpib4MgDf12ECmk8+Z9JEJSodoYcNfiZQ INKGqeaqY7CL19aQfV7YyKjCWAo0ixcBNui7n2f7d1LRY5nG869KqYhNGh0MORx6 CQyNC1YndiGjdjqqyN2CSmXJu7o9paV8dJVyqtKV2h4ZVLbuBiVs0RTA2p0hg5Rf SGHyr+97p0kbQRJC3g5G4FezpzphXKNUHMC0PzzusnZSUA+0t1s= -----END CERTIFICATE-----Generated at Wed Nov 5 11:45:22 2025 by rpki-client