$ rpki-client -vvf repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft File: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft (raw, json) Hash identifier: o9GwY87Q60D9DxQBe3ThyR9gtDubS1X68QxoN0qqeIw= Subject key identifier: AE:E6:37:37:CF:88:27:72:95:75:0C:2A:A9:A4:50:EB:54:D4:11:EC Authority key identifier: 3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30 Certificate issuer: /CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530 Certificate serial: 4A9C5721AA5331DE4D4FA9C82389F5B9219F23DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft Manifest number: 01A8 Signing time: Sun 02 Nov 2025 00:32:17 +0000 Manifest this update: Sun 02 Nov 2025 00:27:17 +0000 Manifest next update: Wed 05 Nov 2025 03:08:17 +0000 Files and hashes: 1: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl (hash: wuYd6Ff601tTWoYyBWrZ/H6zq3tPOf3tBRHL0DKb1yE=) 2: 3130332e3232352e39372e302f32342d3234203d3e20313339343332.roa (hash: rwWXLno549FvBCR7UqrdCi7giNmOD5uuZTisrjvVg1w=) 3: 3130332e35312e3130332e302f32342d3234203d3e20313339343332.roa (hash: pMd2fLZ8G56ZDvxTI0R0016ec0byrXQ6BSiilyfhyHw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 03:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:9c:57:21:aa:53:31:de:4d:4f:a9:c8:23:89:f5:b9:21:9f:23:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530 Validity Not Before: Nov 2 00:27:17 2025 GMT Not After : Nov 5 03:08:17 2025 GMT Subject: CN=AEE63737CF88277295750C2AA9A450EB54D411EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c1:0b:fc:ae:1f:51:00:3a:b6:2c:bd:9e:67: 24:d3:e6:95:de:e1:4b:df:fa:65:fa:6f:12:20:0d: 5b:69:76:80:5a:cf:90:46:88:48:e2:4c:b6:62:ad: a0:fc:3e:ae:5c:97:a8:38:6e:2d:9a:18:d9:72:28: f9:45:3f:1b:5b:9c:33:7e:6e:88:c3:ae:bd:51:5a: a9:99:74:aa:37:f5:8c:c8:6d:37:0e:7c:9e:9d:25: fd:30:9d:a1:0c:91:05:ef:19:a8:10:81:15:6e:b0: 0f:a0:fa:b4:93:79:32:70:60:be:c4:88:0a:89:75: 91:f8:72:6b:d0:28:88:e0:de:dd:3e:8a:7b:53:63: c3:c2:35:68:27:e8:ab:e4:5f:9a:6e:06:84:e2:67: 3d:6d:e7:be:8b:72:98:d9:cd:71:2f:49:af:08:74: bc:ec:d0:64:34:22:1e:7d:e8:2a:14:3e:ac:7e:eb: eb:12:ef:c1:a8:82:f5:52:5c:2a:f9:f0:4a:29:35: e0:b8:df:f6:f8:ea:9f:df:44:bd:5d:4a:7b:0b:ab: 1e:15:4c:fc:fe:cd:ba:cc:e1:ac:21:90:3c:12:c5: a6:c5:b0:7e:d4:a3:6c:91:b7:6a:27:d3:ff:6f:4f: 3c:d4:5a:b2:f3:1e:eb:e5:bf:5a:ee:21:a9:e3:1b: 08:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E6:37:37:CF:88:27:72:95:75:0C:2A:A9:A4:50:EB:54:D4:11:EC X509v3 Authority Key Identifier: keyid:3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:0f:d9:23:5a:41:ad:4f:92:06:aa:59:2a:5c:73:03:1f:bc: 12:c9:94:92:cd:18:d0:a4:6d:5e:6d:85:2c:a9:4a:b8:80:73: 7e:8c:ad:74:c6:bc:32:5f:b4:c3:89:89:cb:5c:15:a7:0e:1f: 65:c2:ec:53:2c:0c:f9:d7:e6:42:39:79:5f:d3:87:73:a8:72: eb:2e:b9:79:53:16:c5:06:cc:1b:77:fb:01:13:89:de:74:51: 65:6c:03:46:5f:22:f8:9e:1d:30:68:47:54:e3:40:a1:1d:fb: 69:48:45:aa:d3:c6:01:ad:75:2f:c1:8e:93:ea:2b:6d:3d:f6: 9c:c9:fa:90:1a:eb:31:11:a5:c9:7a:d5:3c:39:d8:31:65:9c: a0:c9:8c:f4:59:e5:17:70:4c:0c:23:14:81:96:3d:56:8c:9c: 9c:eb:0b:c5:10:cb:a6:4c:e6:07:42:68:29:c5:25:47:eb:0b: b4:70:b0:bf:19:bd:dc:90:79:48:e5:fe:9d:11:06:75:eb:9f: a7:5f:31:f6:95:25:8c:e0:54:eb:09:ff:90:b2:23:69:65:ee: 43:00:52:2a:73:58:34:aa:ad:9a:6d:3c:a9:99:34:3e:24:e9: 4f:5d:12:49:c5:f2:56:e8:be:b4:83:92:e6:6e:62:29:fb:73: 69:a1:84:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSpxXIapTMd5NT6nII4n1uSGfI90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1 MTMwRDUzMDAeFw0yNTExMDIwMDI3MTdaFw0yNTExMDUwMzA4MTdaMDMxMTAvBgNV BAMTKEFFRTYzNzM3Q0Y4ODI3NzI5NTc1MEMyQUE5QTQ1MEVCNTRENDExRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNwQv8rh9RADq2LL2eZyTT5pXe 4Uvf+mX6bxIgDVtpdoBaz5BGiEjiTLZiraD8Pq5cl6g4bi2aGNlyKPlFPxtbnDN+ bojDrr1RWqmZdKo39YzIbTcOfJ6dJf0wnaEMkQXvGagQgRVusA+g+rSTeTJwYL7E iAqJdZH4cmvQKIjg3t0+intTY8PCNWgn6KvkX5puBoTiZz1t576LcpjZzXEvSa8I dLzs0GQ0Ih596CoUPqx+6+sS78GogvVSXCr58EopNeC43/b46p/fRL1dSnsLqx4V TPz+zbrM4awhkDwSxabFsH7Uo2yRt2on0/9vTzzUWrLzHuvlv1ruIanjGwi7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUruY3N8+IJ3KVdQwqqaRQ61TUEewwHwYDVR0j BBgwFoAUP/X5PNqy9ma5Y8QbuD7T41Ew1TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzgzZWQyOC01ODgxLTQ3ZGEtYWU2Ni1lMWRiNjc5NDJlYjEvMC8zRkY1RjkzQ0RB QjJGNjY2Qjk2M0M0MUJCODNFRDNFMzUxMzBENTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1MTMw RDUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc4M2VkMjgtNTg4MS00N2RhLWFl NjYtZTFkYjY3OTQyZWIxLzAvM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQz RTM1MTMwRDUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgP2SNaQa1PkgaqWSpccwMfvBLJlJLNGNCk bV5thSypSriAc36MrXTGvDJftMOJictcFacOH2XC7FMsDPnX5kI5eV/Th3Oocusu uXlTFsUGzBt3+wETid50UWVsA0ZfIvieHTBoR1TjQKEd+2lIRarTxgGtdS/BjpPq K2099pzJ+pAa6zERpcl61Tw52DFlnKDJjPRZ5RdwTAwjFIGWPVaMnJzrC8UQy6ZM 5gdCaCnFJUfrC7RwsL8ZvdyQeUjl/p0RBnXrn6dfMfaVJYzgVOsJ/5CyI2ll7kMA UipzWDSqrZptPKmZND4k6U9dEknF8lbovrSDkuZuYin7c2mhhNM= -----END CERTIFICATE-----Generated at Tue Nov 4 02:08:09 2025 by rpki-client