$ rpki-client -vvf repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft File: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft (raw, json) Hash identifier: whSkC4zYrxT0FGefNcqyKr2PY1MXj1O9yzJ20G1Jc/0= Subject key identifier: C4:7A:84:DD:FE:67:0E:67:62:D9:87:B3:5B:5C:96:8F:4A:72:9B:8A Authority key identifier: 3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 Certificate issuer: /CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Certificate serial: 44F49299F8BE606A7FF510209CED83BF4321C6E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft Manifest number: 012B Signing time: Sun 02 Nov 2025 22:41:11 +0000 Manifest this update: Sun 02 Nov 2025 22:36:11 +0000 Manifest next update: Thu 06 Nov 2025 08:27:11 +0000 Files and hashes: 1: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl (hash: 3U1su58EBbTdZdv5z3PzvOyneca3GO49aGlX5GKNbbU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 08:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:f4:92:99:f8:be:60:6a:7f:f5:10:20:9c:ed:83:bf:43:21:c6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Validity Not Before: Nov 2 22:36:11 2025 GMT Not After : Nov 6 08:27:11 2025 GMT Subject: CN=C47A84DDFE670E6762D987B35B5C968F4A729B8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4d:4f:86:a2:bc:69:06:a4:f8:4c:fd:09:ce: 0b:97:d7:41:d0:cf:6b:d3:18:de:90:1e:ea:84:f3: f0:f1:b8:49:f8:58:c7:b5:bf:48:3f:c3:4e:fe:b8: 83:b4:32:13:bc:83:24:43:26:2d:45:dc:48:91:60: 74:2c:d7:af:8f:84:dd:7c:62:74:0a:4c:92:f3:a9: 9e:18:7b:e6:94:50:18:b4:ca:db:9c:ed:c0:cb:b9: ff:b1:ff:2a:9f:c5:f7:8f:65:35:97:62:76:a3:1d: ae:f2:37:6f:3f:19:3e:de:73:32:0a:0f:57:f6:30: fa:e1:2f:4d:75:fd:2f:57:32:87:c1:4b:cc:7e:a3: 0d:c2:b1:65:9b:8f:21:dc:b1:ee:0c:3c:e2:a1:a9: ca:a6:82:f0:71:6e:12:14:41:02:9d:c8:ac:7b:0e: 71:91:65:61:87:b5:06:05:17:b5:a5:47:f9:91:e5: 58:82:e0:0c:e0:67:db:3e:f0:3e:57:05:b6:3f:97: 54:98:33:23:db:6b:9f:8f:52:21:bd:27:07:5c:1e: 7a:a4:23:70:25:a1:b0:1d:e0:21:cc:09:bd:a7:61: bc:2d:df:0a:00:df:58:14:d8:85:26:98:19:72:f5: a9:70:ba:17:d2:14:59:a0:ff:d7:4b:57:ea:82:dd: d6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7A:84:DD:FE:67:0E:67:62:D9:87:B3:5B:5C:96:8F:4A:72:9B:8A X509v3 Authority Key Identifier: keyid:3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:43:46:3a:b0:9b:03:65:95:b2:d1:99:5e:dd:64:0c:e4:0a: 7c:b0:b5:30:aa:cf:bf:52:b7:2a:bc:96:fb:56:ca:b1:39:6f: c1:5d:d8:55:9c:91:0e:8b:45:5d:62:ec:68:0f:c2:d1:c8:7f: ff:9d:c2:40:49:97:e2:16:2c:54:89:fd:a5:21:18:8d:c4:d0: f0:d6:de:6b:2b:61:be:09:d7:4f:41:b1:aa:b6:eb:14:61:91: 07:5d:13:76:ad:a2:6e:65:c2:42:40:4b:4e:87:b8:4f:3e:65: 58:cb:09:1b:53:1e:c5:cb:d6:63:bd:a6:6d:f2:66:96:18:ed: 1b:74:9c:11:65:4e:83:1c:c9:b1:14:fb:1c:a0:08:83:41:00: 19:91:81:32:f6:7f:9e:f2:41:c7:6b:5a:52:f9:a7:4c:89:0d: 8a:b1:91:bf:20:51:9f:4c:1e:c1:8b:61:01:c2:3a:6b:a3:c6: 29:47:58:be:79:d8:6f:18:36:ce:42:52:97:5a:12:6b:fa:15: ec:23:2e:b5:9a:0a:0b:45:9c:85:dc:17:f7:a0:5f:b7:96:47: f0:80:20:6d:70:3c:af:7b:30:33:ee:82:a4:f2:7e:8f:91:b8: 76:d1:e4:f7:47:39:a1:dc:37:20:1e:48:af:c1:00:be:31:7e: 56:03:fb:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURPSSmfi+YGp/9RAgnO2Dv0MhxuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0My Rjc4REU4NTAeFw0yNTExMDIyMjM2MTFaFw0yNTExMDYwODI3MTFaMDMxMTAvBgNV BAMTKEM0N0E4NERERkU2NzBFNjc2MkQ5ODdCMzVCNUM5NjhGNEE3MjlCOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFTU+GorxpBqT4TP0JzguX10HQ z2vTGN6QHuqE8/DxuEn4WMe1v0g/w07+uIO0MhO8gyRDJi1F3EiRYHQs16+PhN18 YnQKTJLzqZ4Ye+aUUBi0ytuc7cDLuf+x/yqfxfePZTWXYnajHa7yN28/GT7eczIK D1f2MPrhL011/S9XMofBS8x+ow3CsWWbjyHcse4MPOKhqcqmgvBxbhIUQQKdyKx7 DnGRZWGHtQYFF7WlR/mR5ViC4AzgZ9s+8D5XBbY/l1SYMyPba5+PUiG9JwdcHnqk I3AlobAd4CHMCb2nYbwt3woA31gU2IUmmBly9alwuhfSFFmg/9dLV+qC3dazAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxHqE3f5nDmdi2YezW1yWj0pym4owHwYDVR0j BBgwFoAUPZW3Kf+SPNJEJUm3cCptfC943oUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzhjNDZmYi1iNmMxLTRhNjktODNmYi05MGU3ZDVjMzI2ZGUvMC8zRDk1QjcyOUZG OTIzQ0QyNDQyNTQ5Qjc3MDJBNkQ3QzJGNzhERTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0MyRjc4 REU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M4YzQ2ZmItYjZjMS00YTY5LTgz ZmItOTBlN2Q1YzMyNmRlLzAvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZE N0MyRjc4REU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlDRjqwmwNllbLRmV7dZAzkCnywtTCqz79S tyq8lvtWyrE5b8Fd2FWckQ6LRV1i7GgPwtHIf/+dwkBJl+IWLFSJ/aUhGI3E0PDW 3msrYb4J109Bsaq26xRhkQddE3atom5lwkJAS06HuE8+ZVjLCRtTHsXL1mO9pm3y ZpYY7Rt0nBFlToMcybEU+xygCINBABmRgTL2f57yQcdrWlL5p0yJDYqxkb8gUZ9M HsGLYQHCOmujxilHWL552G8YNs5CUpdaEmv6FewjLrWaCgtFnIXcF/egX7eWR/CA IG1wPK97MDPugqTyfo+RuHbR5PdHOaHcNyAeSK/BAL4xflYD+wg= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:54 2025 by rpki-client