$ rpki-client -vvf repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft File: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft (raw, json) Hash identifier: 8C0u+Uwj4JHJIanSe62pN6EZIBzlPgy4CJBC1GDBGxI= Subject key identifier: 78:6C:3C:A2:8C:28:9C:20:35:D8:0D:F1:06:09:E8:2E:D2:06:E1:FC Authority key identifier: 3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 Certificate issuer: /CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Certificate serial: 0FD284E880C5EDC109F217389E0120066D12370C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft Manifest number: 021E Signing time: Mon 03 Nov 2025 16:21:34 +0000 Manifest this update: Mon 03 Nov 2025 16:16:34 +0000 Manifest next update: Fri 07 Nov 2025 01:21:34 +0000 Files and hashes: 1: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl (hash: majns/mi+nhZwChyM6jFcBs3t/kWjmyKOAvlXB24mDA=) 2: 3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa (hash: Zm0hpNa3KzjUY5ugGNSToALOnFgESrmbArm+FZK1Qzs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 01:21:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d2:84:e8:80:c5:ed:c1:09:f2:17:38:9e:01:20:06:6d:12:37:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Validity Not Before: Nov 3 16:16:34 2025 GMT Not After : Nov 7 01:21:34 2025 GMT Subject: CN=786C3CA28C289C2035D80DF10609E82ED206E1FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:75:be:c3:ec:be:53:e2:7a:5c:db:e3:a4:32: e7:2a:3c:59:ee:47:c7:82:d1:96:5d:55:ae:6c:d3: 58:20:12:ab:ea:17:76:fd:8e:43:af:88:b8:58:cd: be:17:4d:ff:b0:f3:16:72:c1:dd:ff:8c:37:34:43: fe:5f:2f:8f:ad:5b:25:86:4e:48:c4:fe:63:e4:b6: 0c:6d:c6:09:48:9e:09:4e:60:32:0a:12:f8:df:2a: a1:c6:82:7b:ec:4f:ae:02:17:9d:b2:9b:70:70:42: 58:12:c5:58:a1:84:8b:82:f4:97:70:a6:2d:7d:0b: 52:42:df:e5:c2:f7:80:b1:a9:6d:ea:a9:81:2b:fa: 30:cf:39:a6:ca:1f:0d:1f:3d:26:c5:43:16:bd:04: a0:84:a9:81:52:55:03:11:d2:ff:80:6d:39:a8:3f: 6a:76:ee:c1:60:32:13:29:df:99:8b:0e:15:8a:9a: 63:3f:65:9d:82:cb:5c:3b:86:94:d2:1b:a4:d2:b0: c2:c5:5e:1b:92:00:62:db:da:97:9a:e7:44:90:a7: 7a:a1:f2:6b:44:a2:eb:df:25:77:60:d7:1c:e8:42: 65:ce:93:6b:1a:28:5d:da:5b:af:3e:f6:f4:13:94: 53:dd:f5:ea:8e:e5:46:5f:ba:88:cb:54:58:e6:42: 45:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6C:3C:A2:8C:28:9C:20:35:D8:0D:F1:06:09:E8:2E:D2:06:E1:FC X509v3 Authority Key Identifier: keyid:3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:7b:91:a6:a6:57:92:46:5e:bf:c5:7c:0b:52:a6:89:2b:72: c6:a2:3b:cf:f5:0f:a4:10:e4:ef:6e:71:c3:3f:fb:88:48:e8: 9d:78:80:4e:d7:59:a9:e3:dd:f2:7c:71:b1:68:d2:e3:4b:a3: b9:97:eb:6d:16:69:3f:f8:e2:4f:ae:3d:62:35:a9:10:90:5d: bf:8a:4c:ef:9b:59:77:2d:e2:39:2b:bb:09:17:c7:80:e8:f0: 53:98:23:eb:fc:eb:52:43:d2:24:f7:ac:77:ae:e4:2d:87:26: bc:97:8f:62:7e:33:be:a7:17:59:75:8e:ae:ff:d2:90:65:d8: 13:4b:c6:7f:7a:8f:44:d8:a7:b2:17:d6:fd:23:69:03:0e:e1: bb:7a:f4:88:11:93:7b:72:7e:4e:40:0c:63:61:b5:9d:0d:c6: f6:1a:23:73:6b:43:b8:39:d1:87:d2:db:27:ff:c5:ac:be:5b: ca:23:72:dd:de:a9:d6:d0:f4:ff:82:45:94:3a:76:92:56:55: c7:0d:60:85:ae:86:c0:4c:2d:24:7e:37:4f:6f:34:a6:89:f0: 92:a1:1b:66:12:43:79:31:18:c4:54:58:d7:aa:bd:de:d1:f5: 6d:da:5d:92:f5:50:05:f4:ad:e6:00:08:22:be:49:39:38:f5: ad:1b:61:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD9KE6IDF7cEJ8hc4ngEgBm0SNwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0 N0IwMzRDMjAeFw0yNTExMDMxNjE2MzRaFw0yNTExMDcwMTIxMzRaMDMxMTAvBgNV BAMTKDc4NkMzQ0EyOEMyODlDMjAzNUQ4MERGMTA2MDlFODJFRDIwNkUxRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcdb7D7L5T4npc2+OkMucqPFnu R8eC0ZZdVa5s01ggEqvqF3b9jkOviLhYzb4XTf+w8xZywd3/jDc0Q/5fL4+tWyWG TkjE/mPktgxtxglInglOYDIKEvjfKqHGgnvsT64CF52ym3BwQlgSxVihhIuC9Jdw pi19C1JC3+XC94CxqW3qqYEr+jDPOabKHw0fPSbFQxa9BKCEqYFSVQMR0v+AbTmo P2p27sFgMhMp35mLDhWKmmM/ZZ2Cy1w7hpTSG6TSsMLFXhuSAGLb2pea50SQp3qh 8mtEouvfJXdg1xzoQmXOk2saKF3aW68+9vQTlFPd9eqO5UZfuojLVFjmQkX/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeGw8oowonCA12A3xBgnoLtIG4fwwHwYDVR0j BBgwFoAUPX6neI4CXhLe/RjusnivbUewNMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzcwZmVlYi0yY2FhLTQ3NmEtYWI0My1mNjUyYTExZmQwOGMvMC8zRDdFQTc3ODhF MDI1RTEyREVGRDE4RUVCMjc4QUY2RDQ3QjAzNEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0N0Iw MzRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3MGZlZWItMmNhYS00NzZhLWFi NDMtZjY1MmExMWZkMDhjLzAvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFG NkQ0N0IwMzRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHt7kaamV5JGXr/FfAtSpokrcsaiO8/1D6QQ 5O9uccM/+4hI6J14gE7XWanj3fJ8cbFo0uNLo7mX620WaT/44k+uPWI1qRCQXb+K TO+bWXct4jkruwkXx4Do8FOYI+v861JD0iT3rHeu5C2HJryXj2J+M76nF1l1jq7/ 0pBl2BNLxn96j0TYp7IX1v0jaQMO4bt69IgRk3tyfk5ADGNhtZ0NxvYaI3NrQ7g5 0YfS2yf/xay+W8ojct3eqdbQ9P+CRZQ6dpJWVccNYIWuhsBMLSR+N09vNKaJ8JKh G2YSQ3kxGMRUWNeqvd7R9W3aXZL1UAX0reYACCK+STk49a0bYaw= -----END CERTIFICATE-----Generated at Wed Nov 5 11:06:19 2025 by rpki-client