$ rpki-client -vvf repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft File: 3BA10823C279932D7573B930625CD2884433C744.mft (raw, json) Hash identifier: SF6NqyROqNVVYYOR3lgfLoMoWJzr5eCgLkURLat+aV0= Subject key identifier: FA:00:D2:4C:47:2B:9F:19:AF:77:B5:BF:81:2B:D2:EB:2E:B0:FE:FD Authority key identifier: 3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44 Certificate issuer: /CN=3BA10823C279932D7573B930625CD2884433C744 Certificate serial: 17D99FC0B9F0E8DF69437D89E9BDC78F7C4EE5DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft Manifest number: 01A0 Signing time: Tue 04 Nov 2025 12:41:47 +0000 Manifest this update: Tue 04 Nov 2025 12:36:47 +0000 Manifest next update: Fri 07 Nov 2025 23:18:47 +0000 Files and hashes: 1: 3130332e3137302e39362e302f32332d3233203d3e20313432333638.roa (hash: vxYEkSC9Nhj9Qwmzlp+zXc3eS9PpNRTtM0I668VgpCo=) 2: 3130332e3137302e39362e302f32342d3234203d3e20313432333638.roa (hash: w4V1rEatEsKd8iCkT+5VUEi6gaUfZgI24xqxd5TI3Io=) 3: 3130332e3137302e39372e302f32342d3234203d3e20313432333638.roa (hash: KTRb8AUpIFgW2BgKsFuDBBnaCuIi/vxH3uLO0lAD6oo=) 4: 323030313a6466323a353463303a3a2f34382d3438203d3e20313432333638.roa (hash: ixLzAKntJwguG57KCkj7JdgNgdRNlMJvWELZH5FNYlE=) 5: 3BA10823C279932D7573B930625CD2884433C744.crl (hash: qHEsL+pSD4czBg5Cx2LFVMU5JrunoGaYnKQIJiD99Sw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:d9:9f:c0:b9:f0:e8:df:69:43:7d:89:e9:bd:c7:8f:7c:4e:e5:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA10823C279932D7573B930625CD2884433C744 Validity Not Before: Nov 4 12:36:47 2025 GMT Not After : Nov 7 23:18:47 2025 GMT Subject: CN=FA00D24C472B9F19AF77B5BF812BD2EB2EB0FEFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fd:20:46:00:65:d1:a0:25:67:cf:62:af:48: 03:57:e0:d3:d7:cc:32:7d:fd:23:f9:1f:7b:16:6f: 05:16:ab:f2:f2:a4:d7:14:e8:19:3c:35:f2:96:2d: 80:df:3a:71:5d:f6:c0:c2:b0:c3:c9:1c:6d:37:29: 31:7c:11:50:4e:d2:bb:4d:59:3c:37:54:06:2b:49: 61:dd:be:24:e8:8b:ab:be:e5:72:dc:49:f4:9e:f6: 78:94:f4:7d:b8:2f:6f:72:28:0c:e8:88:10:a7:65: 72:4d:42:47:07:ea:e6:d4:28:aa:8a:1c:83:21:a0: 86:8a:0e:ee:23:92:c0:77:ae:77:cc:2e:e5:06:95: 69:43:b7:8d:aa:44:74:ce:5f:22:92:f0:ec:a3:98: 9d:39:af:c5:6c:81:8b:ab:65:d4:d1:7b:3d:1c:09: 9e:f1:d8:79:6a:ce:27:4c:63:14:af:ad:07:42:fc: ef:ca:89:18:c9:ac:81:ca:84:bd:3f:ce:ca:16:e9: e5:aa:9f:12:b7:a2:e2:a2:dd:c8:43:6d:03:b8:dd: ab:56:5e:7e:1b:00:6b:96:1a:1c:f2:00:b5:fb:e3: f7:a1:91:14:b6:06:58:84:6a:78:22:30:d4:d2:cc: 8e:25:89:85:ad:66:09:89:83:bb:1d:a3:ea:d2:d0: 46:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:00:D2:4C:47:2B:9F:19:AF:77:B5:BF:81:2B:D2:EB:2E:B0:FE:FD X509v3 Authority Key Identifier: keyid:3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:0c:4f:2f:2c:48:ff:cd:8a:99:ff:e7:6b:0b:32:6c:5f:72: 5b:7c:82:1e:e9:a0:59:db:69:52:e8:28:90:44:a4:cc:0f:24: 3e:17:c0:e2:af:03:7b:26:36:cd:a8:39:1e:32:47:9d:0c:8b: c8:16:53:50:cd:dd:0d:95:b1:bb:4c:2e:89:6d:c2:80:0a:c4: 0e:30:ef:46:03:67:b9:06:52:79:88:39:1f:f8:fc:84:78:fd: 1a:94:c7:be:f4:91:c7:a0:49:b3:27:c1:02:d0:eb:77:8f:f9: 2a:40:10:ec:48:68:dd:94:33:70:eb:08:c8:15:3a:8d:ba:80: c3:03:08:a3:1a:e6:35:60:22:51:a2:80:1e:dd:b0:fb:50:35: 20:a8:2f:7e:49:4f:24:a8:64:e7:28:fa:4b:54:b5:2e:8b:58: 32:55:7a:ba:88:c4:a1:44:76:aa:8b:57:de:fa:fb:e1:dd:a0: 36:53:12:b3:9e:a4:dc:7c:aa:e2:35:71:e4:e6:13:db:9f:9c: 0b:de:ac:13:00:2f:58:6e:ac:48:62:31:db:4c:d8:ac:46:be: 13:0e:5c:7d:d0:b8:8e:bb:88:60:a5:b0:53:fe:fb:bd:7e:f3: a7:19:b9:b1:32:72:b3:41:cb:3d:9e:27:00:64:08:3f:fa:56: a7:5a:db:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF9mfwLnw6N9pQ32J6b3Hj3xO5dswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0QyODg0 NDMzQzc0NDAeFw0yNTExMDQxMjM2NDdaFw0yNTExMDcyMzE4NDdaMDMxMTAvBgNV BAMTKEZBMDBEMjRDNDcyQjlGMTlBRjc3QjVCRjgxMkJEMkVCMkVCMEZFRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv/SBGAGXRoCVnz2KvSANX4NPX zDJ9/SP5H3sWbwUWq/LypNcU6Bk8NfKWLYDfOnFd9sDCsMPJHG03KTF8EVBO0rtN WTw3VAYrSWHdviToi6u+5XLcSfSe9niU9H24L29yKAzoiBCnZXJNQkcH6ubUKKqK HIMhoIaKDu4jksB3rnfMLuUGlWlDt42qRHTOXyKS8OyjmJ05r8VsgYurZdTRez0c CZ7x2HlqzidMYxSvrQdC/O/KiRjJrIHKhL0/zsoW6eWqnxK3ouKi3chDbQO43atW Xn4bAGuWGhzyALX74/ehkRS2BliEangiMNTSzI4liYWtZgmJg7sdo+rS0Eb9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+gDSTEcrnxmvd7W/gSvS6y6w/v0wHwYDVR0j BBgwFoAUO6EII8J5ky11c7kwYlzSiEQzx0QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmQ0OTE3OS00ZDhiLTRkMmQtYWJmNC00MzIzMWRlYjViMDEvMC8zQkExMDgyM0My Nzk5MzJENzU3M0I5MzA2MjVDRDI4ODQ0MzNDNzQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0QyODg0NDMz Qzc0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJkNDkxNzktNGQ4Yi00ZDJkLWFi ZjQtNDMyMzFkZWI1YjAxLzAvM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0Qy ODg0NDMzQzc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwMTy8sSP/Nipn/52sLMmxfclt8gh7poFnb aVLoKJBEpMwPJD4XwOKvA3smNs2oOR4yR50Mi8gWU1DN3Q2VsbtMLoltwoAKxA4w 70YDZ7kGUnmIOR/4/IR4/RqUx770kcegSbMnwQLQ63eP+SpAEOxIaN2UM3DrCMgV Oo26gMMDCKMa5jVgIlGigB7dsPtQNSCoL35JTySoZOco+ktUtS6LWDJVerqIxKFE dqqLV976++HdoDZTErOepNx8quI1ceTmE9ufnAverBMAL1hurEhiMdtM2KxGvhMO XH3QuI67iGClsFP++71+86cZubEycrNByz2eJwBkCD/6Vqda2w4= -----END CERTIFICATE-----Generated at Tue Nov 4 16:42:49 2025 by rpki-client