$ rpki-client -vvf repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft File: 3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft (raw, json) Hash identifier: tBvKJkKzKUfT8CjLIVBbi4aXz3w8rQ52wfuWn/LLSpg= Subject key identifier: FC:29:7E:36:9D:E5:1D:54:60:8D:28:AA:6A:92:95:10:6B:00:11:B5 Authority key identifier: 34:48:C8:4D:DF:F9:B9:91:2D:9D:17:49:3F:EB:DB:9F:BA:0B:39:BB Certificate issuer: /CN=3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB Certificate serial: 22D00A4557AA15D7B174D3F8B118C541E940CBAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft Manifest number: 021A Signing time: Tue 04 Nov 2025 15:41:00 +0000 Manifest this update: Tue 04 Nov 2025 15:36:00 +0000 Manifest next update: Fri 07 Nov 2025 16:54:00 +0000 Files and hashes: 1: 3130332e3139312e35362e302f32342d3234203d3e20313331373433.roa (hash: YfWdCVoIH1DQu9Nb8zknsBq3gjAx6STdl7+GflAiVVY=) 2: 3130332e3139312e35372e302f32342d3234203d3e20313331373433.roa (hash: 5ODCvpJsl+XnXZcZjU6a9g5frNriLFm4lEWGxVY15JQ=) 3: 3130332e3139312e35362e302f32332d3233203d3e20313331373433.roa (hash: 6pWVSpFXVKH6EqJrCt3rmPa2Bj+n9pO/wL1SNQ2qvtg=) 4: 3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl (hash: jVbylEimlUesYIOYHFz6NphQJqwVvhmIgF/ypR7S4to=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 16:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:d0:0a:45:57:aa:15:d7:b1:74:d3:f8:b1:18:c5:41:e9:40:cb:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB Validity Not Before: Nov 4 15:36:00 2025 GMT Not After : Nov 7 16:54:00 2025 GMT Subject: CN=FC297E369DE51D54608D28AA6A9295106B0011B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1e:3f:bf:fd:1c:bf:14:90:cd:a2:3f:ce:e5: 92:2c:c8:1c:0b:08:61:0d:b8:39:58:ce:8e:46:25: 23:e1:e6:e7:6a:30:6d:13:c2:ef:4a:c3:39:6e:d1: 08:49:41:16:f9:82:e6:a2:28:52:13:66:3b:c1:1b: df:25:3b:40:2b:70:83:b6:a8:71:c1:64:a8:27:8f: 72:e5:e4:2f:cc:07:42:66:ce:a1:df:d1:8e:d2:15: 5d:94:e6:cc:a1:9c:82:75:5e:00:d0:46:e0:21:39: 14:14:e6:d3:ec:bd:dd:b6:59:98:32:0c:65:89:11: f4:4f:d7:7d:69:8e:37:15:25:01:e5:24:f2:b4:66: 5f:23:e7:c2:1d:c9:19:d7:58:b8:2e:99:f1:f4:2f: 77:3c:f9:61:da:b4:57:f5:cc:a4:3e:51:71:52:a6: 81:85:80:59:30:d5:b1:54:70:a0:6d:76:c3:34:1b: b5:d2:23:4d:70:24:2d:3f:c4:f8:05:9e:6f:19:e0: ca:69:77:8b:4e:0f:00:7f:0c:00:84:50:cd:59:68: ec:7f:4d:06:f7:87:5d:20:77:9e:2a:76:5c:04:f7: 5a:68:47:ea:3d:4c:92:6f:53:3e:98:3f:01:3b:80: 33:33:bf:45:7a:6b:49:71:da:26:c7:d4:70:af:71: 3a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:29:7E:36:9D:E5:1D:54:60:8D:28:AA:6A:92:95:10:6B:00:11:B5 X509v3 Authority Key Identifier: keyid:34:48:C8:4D:DF:F9:B9:91:2D:9D:17:49:3F:EB:DB:9F:BA:0B:39:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:f3:2f:6f:3a:87:2d:d9:58:5d:d7:97:e9:83:d0:5d:27:96: 72:e5:fd:1e:b9:2d:f9:ac:e3:e1:e7:72:0d:91:e1:09:43:ce: 85:2b:b4:76:29:43:69:f3:20:11:4d:3a:dd:3e:65:4a:59:38: 29:b7:c9:d5:33:8e:68:c8:4e:b4:f0:6b:1c:ad:90:b1:89:a1: 74:4e:83:69:de:59:3c:91:76:6b:c5:03:32:e6:aa:86:db:de: b0:7d:ba:c1:3e:72:3e:54:4e:01:3e:07:2c:d8:49:f6:2f:bc: 34:e0:0f:bc:7e:93:28:48:e0:a4:07:55:4f:1a:cc:57:55:4a: 9d:0d:18:7a:2e:4a:f0:0e:51:b8:92:10:40:02:d1:4c:09:3e: de:57:75:f9:56:6e:53:92:cf:1f:aa:1b:3c:70:20:15:98:5c: bd:bb:41:24:fd:74:ca:d6:fa:8d:05:a3:ce:03:33:95:a2:20: b5:44:be:27:e4:6b:32:d7:02:28:f6:27:57:1c:a0:58:1c:dd: 9b:4a:a1:58:96:31:91:18:53:40:e5:99:fa:84:f9:27:a2:4b: 5b:59:42:2c:a7:ab:39:22:b0:52:7b:69:86:c6:4d:ba:4c:58: f5:0a:19:20:b0:ff:0d:4c:f3:b4:1b:97:db:da:e0:f0:34:99: d5:80:88:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUItAKRVeqFdexdNP4sRjFQelAy68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRCOUZC QTBCMzlCQjAeFw0yNTExMDQxNTM2MDBaFw0yNTExMDcxNjU0MDBaMDMxMTAvBgNV BAMTKEZDMjk3RTM2OURFNTFENTQ2MDhEMjhBQTZBOTI5NTEwNkIwMDExQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcHj+//Ry/FJDNoj/O5ZIsyBwL CGENuDlYzo5GJSPh5udqMG0Twu9Kwzlu0QhJQRb5guaiKFITZjvBG98lO0ArcIO2 qHHBZKgnj3Ll5C/MB0JmzqHf0Y7SFV2U5syhnIJ1XgDQRuAhORQU5tPsvd22WZgy DGWJEfRP131pjjcVJQHlJPK0Zl8j58IdyRnXWLgumfH0L3c8+WHatFf1zKQ+UXFS poGFgFkw1bFUcKBtdsM0G7XSI01wJC0/xPgFnm8Z4Mppd4tODwB/DACEUM1ZaOx/ TQb3h10gd54qdlwE91poR+o9TJJvUz6YPwE7gDMzv0V6a0lx2ibH1HCvcTpdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Cl+Np3lHVRgjSiqapKVEGsAEbUwHwYDVR0j BBgwFoAUNEjITd/5uZEtnRdJP+vbn7oLObswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjI5Y2E1MC1lOTVjLTQ1YmItOWMzMC02M2UxMmFmN2E1ZTEvMC8zNDQ4Qzg0RERG RjlCOTkxMkQ5RDE3NDkzRkVCREI5RkJBMEIzOUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRCOUZCQTBC MzlCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTIyOWNhNTAtZTk1Yy00NWJiLTlj MzAtNjNlMTJhZjdhNWUxLzAvMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRC OUZCQTBCMzlCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPzL286hy3ZWF3Xl+mD0F0nlnLl/R65Lfms 4+Hncg2R4QlDzoUrtHYpQ2nzIBFNOt0+ZUpZOCm3ydUzjmjITrTwaxytkLGJoXRO g2neWTyRdmvFAzLmqobb3rB9usE+cj5UTgE+ByzYSfYvvDTgD7x+kyhI4KQHVU8a zFdVSp0NGHouSvAOUbiSEEAC0UwJPt5XdflWblOSzx+qGzxwIBWYXL27QST9dMrW +o0Fo84DM5WiILVEvifkazLXAij2J1ccoFgc3ZtKoViWMZEYU0DlmfqE+SeiS1tZ QiynqzkisFJ7aYbGTbpMWPUKGSCw/w1M87Qbl9va4PA0mdWAiII= -----END CERTIFICATE-----Generated at Wed Nov 5 14:23:51 2025 by rpki-client