$ rpki-client -vvf repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft File: 3E0D060F214DF8E6493243033EBD30ABD627ED36.mft (raw, json) Hash identifier: vgO/bokGKTOjo4WgK8TfhAm8hqQ/xOc8aguR1bGTiuQ= Subject key identifier: 0D:59:A1:EF:A2:6B:E5:89:2D:4A:83:6E:EE:2B:D9:B3:70:2C:E0:6D Authority key identifier: 3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36 Certificate issuer: /CN=3E0D060F214DF8E6493243033EBD30ABD627ED36 Certificate serial: 17478A71E2D0A20436529DC5AE792B7E0548045D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft Manifest number: 036A Signing time: Mon 03 Nov 2025 02:21:21 +0000 Manifest this update: Mon 03 Nov 2025 02:16:21 +0000 Manifest next update: Thu 06 Nov 2025 12:49:21 +0000 Files and hashes: 1: 3130332e36362e34372e302f32342d3234203d3e203233363934.roa (hash: jx7v0Idpebq1Ou6PCUn6oQ0kEGw/RyRx4sL+jxJLcZU=) 2: 3130332e36362e34342e302f32332d3233203d3e203233363934.roa (hash: JWZBNDnWrENdctaqQmnbVevM+3EqtVlewochx0EfS+s=) 3: 3E0D060F214DF8E6493243033EBD30ABD627ED36.crl (hash: 2VljXkScxHDmdX65N3EmPDmAvbSHn42OLF3Xncz1I6E=) 4: 3130332e36362e34362e302f32332d3233203d3e203233363934.roa (hash: Ez6QIdOXrwH3cf8oEyXk+iBGNJ8xFXIz0jGNdzgCm5M=) 5: 3130332e36362e34342e302f32322d3232203d3e203233363934.roa (hash: fOY5dkAcQph8EWJTLprRbPuleZdE/MLjzsb7GZ9f9kI=) 6: 3130332e36362e34352e302f32342d3234203d3e203233363934.roa (hash: 3D9vuP9WnybAIy/tjpIyzYKT6Y/ASbbbLJ7Kn+x1z7Q=) 7: 3130332e36362e34362e302f32342d3234203d3e203233363934.roa (hash: xxFYLgnOs6wDgHlT3HJi54CQjUA2KWj+T7DvpjE3DPU=) 8: 3130332e36362e34342e302f32342d3234203d3e203233363934.roa (hash: weBnxCBwkaeNxkdjFOdohMOR+sXn3+vCk0UPpAqaQI8=) 9: 323030313a6466323a623230303a3a2f34382d3438203d3e203233363934.roa (hash: CbVKZtVYvVOggDO1uOKPHPfiUdMOnMjVJFDe5xCk8Yw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 12:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:47:8a:71:e2:d0:a2:04:36:52:9d:c5:ae:79:2b:7e:05:48:04:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E0D060F214DF8E6493243033EBD30ABD627ED36 Validity Not Before: Nov 3 02:16:21 2025 GMT Not After : Nov 6 12:49:21 2025 GMT Subject: CN=0D59A1EFA26BE5892D4A836EEE2BD9B3702CE06D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:22:28:53:8c:29:dd:76:e3:16:13:f0:57:2a: c7:0c:4b:68:7c:35:53:04:ff:65:51:c9:be:11:13: f6:29:77:71:21:b6:90:74:fd:49:ac:ae:02:dd:31: 5d:0d:b2:bb:fd:37:8d:da:77:3a:40:33:ef:8c:41: b5:3e:1b:e6:fd:29:9e:3a:58:b7:da:f8:06:8d:10: 2a:f2:bd:de:97:4c:2f:ae:5f:a3:d7:f5:00:f1:b9: 05:bd:b4:e4:d1:c8:0d:1b:b4:7b:fd:84:9c:42:9c: 26:95:c3:93:52:b7:7e:12:1c:0e:1c:06:e5:48:e0: 7f:6f:f9:e8:dc:c2:52:c6:80:b7:62:31:4d:99:7b: ba:a3:d2:f7:bf:95:b5:cd:85:aa:b8:b4:2d:98:91: 3c:e3:1a:d3:8b:8a:1b:b6:07:2f:6c:3b:93:b6:4e: a1:c7:02:97:e5:88:88:1d:4b:93:51:ac:0f:f6:de: ba:1b:67:19:47:76:3c:2e:71:20:c0:f6:0b:3a:5a: de:49:60:d0:45:46:d9:ea:2a:29:43:a5:74:15:a5: fd:49:bb:58:1c:66:c1:1a:6a:4c:3d:6c:47:e3:7b: 65:55:b5:ac:b8:d0:cc:e7:f9:c5:f6:b6:93:0d:13: 91:79:35:65:d1:f3:b4:82:55:9e:be:13:d7:1e:93: 7c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:59:A1:EF:A2:6B:E5:89:2D:4A:83:6E:EE:2B:D9:B3:70:2C:E0:6D X509v3 Authority Key Identifier: keyid:3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:cc:95:55:34:67:03:c4:a9:b8:06:64:ed:ce:7c:20:67:0f: bb:eb:dd:15:ac:96:84:4b:fa:7c:7b:24:8e:34:8b:3e:72:30: 52:f8:6a:87:30:b5:8e:bf:51:81:bc:65:cb:bd:01:b0:ee:b6: 50:c1:18:88:aa:0d:62:59:59:ea:32:c0:02:5b:d4:bc:c0:d5: 88:47:17:d1:33:76:9f:40:0d:51:29:07:97:9a:00:2d:13:35: ba:96:55:18:7a:78:3d:cb:32:28:a7:31:dc:5c:75:33:68:fc: 07:ca:b9:81:f6:a5:5a:45:e7:03:ba:c0:48:5e:12:da:18:c3: d7:4d:f7:61:43:0d:a9:dd:93:50:cd:93:b2:f5:17:84:ab:3b: 93:f5:37:21:ec:b5:54:a2:79:9c:e0:29:06:63:6e:ea:a1:ea: a2:93:20:ed:49:21:57:db:7b:02:72:34:88:0f:f5:2b:3a:c9: e2:8f:52:3b:fa:8f:b9:6b:7b:15:d0:53:8f:0b:49:41:53:3a: a1:36:f1:cc:b7:3d:30:5a:ca:65:e7:c4:ed:a4:d5:b1:84:08: 9c:f7:29:15:3d:8d:8e:40:c3:26:25:c3:47:76:ce:e9:8d:72: c4:7b:e1:9f:ba:90:c3:ed:53:d5:93:65:bb:fe:aa:46:2f:12: fc:2e:d8:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF0eKceLQogQ2Up3FrnkrfgVIBF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UwRDA2MEYyMTRERjhFNjQ5MzI0MzAzM0VCRDMwQUJE NjI3RUQzNjAeFw0yNTExMDMwMjE2MjFaFw0yNTExMDYxMjQ5MjFaMDMxMTAvBgNV BAMTKDBENTlBMUVGQTI2QkU1ODkyRDRBODM2RUVFMkJEOUIzNzAyQ0UwNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLIihTjCndduMWE/BXKscMS2h8 NVME/2VRyb4RE/Ypd3EhtpB0/UmsrgLdMV0Nsrv9N43adzpAM++MQbU+G+b9KZ46 WLfa+AaNECryvd6XTC+uX6PX9QDxuQW9tOTRyA0btHv9hJxCnCaVw5NSt34SHA4c BuVI4H9v+ejcwlLGgLdiMU2Ze7qj0ve/lbXNhaq4tC2YkTzjGtOLihu2By9sO5O2 TqHHApfliIgdS5NRrA/23robZxlHdjwucSDA9gs6Wt5JYNBFRtnqKilDpXQVpf1J u1gcZsEaakw9bEfje2VVtay40Mzn+cX2tpMNE5F5NWXR87SCVZ6+E9cek3xrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDVmh76Jr5YktSoNu7ivZs3As4G0wHwYDVR0j BBgwFoAUPg0GDyFN+OZJMkMDPr0wq9Yn7TYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjRmODUxMS0wN2IzLTRhNjEtYmQwNC0yZTY2NWM5Mjc4ZmMvMC8zRTBEMDYwRjIx NERGOEU2NDkzMjQzMDMzRUJEMzBBQkQ2MjdFRDM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0UwRDA2MEYyMTRERjhFNjQ5MzI0MzAzM0VCRDMwQUJENjI3 RUQzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGI0Zjg1MTEtMDdiMy00YTYxLWJk MDQtMmU2NjVjOTI3OGZjLzAvM0UwRDA2MEYyMTRERjhFNjQ5MzI0MzAzM0VCRDMw QUJENjI3RUQzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOHMlVU0ZwPEqbgGZO3OfCBnD7vr3RWsloRL +nx7JI40iz5yMFL4aocwtY6/UYG8Zcu9AbDutlDBGIiqDWJZWeoywAJb1LzA1YhH F9Ezdp9ADVEpB5eaAC0TNbqWVRh6eD3LMiinMdxcdTNo/AfKuYH2pVpF5wO6wEhe EtoYw9dN92FDDandk1DNk7L1F4SrO5P1NyHstVSieZzgKQZjbuqh6qKTIO1JIVfb ewJyNIgP9Ss6yeKPUjv6j7lrexXQU48LSUFTOqE28cy3PTBaymXnxO2k1bGECJz3 KRU9jY5AwyYlw0d2zumNcsR74Z+6kMPtU9WTZbv+qkYvEvwu2HM= -----END CERTIFICATE-----Generated at Tue Nov 4 08:06:55 2025 by rpki-client