$ rpki-client -vvf repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft File: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft (raw, json) Hash identifier: /C9fM+a3oF/pfYvqWAXO3dAWGTYyb+N5eS+twQ3wDuQ= Subject key identifier: 43:E5:88:DE:04:B6:FE:21:9D:74:B7:8F:71:35:F9:A6:EF:33:0F:D3 Authority key identifier: 3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B Certificate issuer: /CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Certificate serial: 04512AB68768F7EBB8334D6D35E97E146E7C3AA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft Manifest number: 0378 Signing time: Mon 03 Nov 2025 07:51:17 +0000 Manifest this update: Mon 03 Nov 2025 07:46:17 +0000 Manifest next update: Thu 06 Nov 2025 09:31:17 +0000 Files and hashes: 1: 3130332e3137312e31382e302f32342d3234203d3e20313336303532.roa (hash: 5h5J8xW62JxvWusBPqO7t7BtPqu0f0FKKCSn5YoWmpk=) 2: 3130332e3137312e31392e302f32342d3234203d3e20313338363038.roa (hash: DS4rfXsOZAd6zyO+PWFbBzflwksjO/ECzvelckHR5dk=) 3: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl (hash: h5O7pcvZDJJk9iDmu8+BJtDNK4uCD9MJDZjtdaAUqnI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 09:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:51:2a:b6:87:68:f7:eb:b8:33:4d:6d:35:e9:7e:14:6e:7c:3a:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Validity Not Before: Nov 3 07:46:17 2025 GMT Not After : Nov 6 09:31:17 2025 GMT Subject: CN=43E588DE04B6FE219D74B78F7135F9A6EF330FD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ac:52:b1:44:33:2d:e4:08:f1:77:df:73:a5: c6:79:08:f8:13:aa:1c:0f:a4:18:ff:58:e6:a8:2d: ae:62:98:c8:f5:57:68:c0:fc:a9:7e:5e:ef:00:6b: 23:82:20:2c:d9:d4:ba:6e:c7:ef:a2:43:27:17:2a: 91:c9:13:45:67:44:73:09:15:00:43:f1:16:2d:f4: ea:6c:ac:92:db:3e:4a:89:88:e2:93:7b:2a:b5:b7: 02:da:00:91:d2:95:a4:bb:f2:20:ca:de:df:07:69: 06:09:b9:4b:f2:ef:fc:32:27:a0:3f:1f:e5:1a:81: e9:0f:2f:e9:81:da:9d:19:70:11:af:79:3e:86:94: da:2e:df:0b:af:0f:02:e5:36:35:ce:bd:95:17:49: b8:14:b8:f4:60:4a:61:d9:ce:50:4a:51:2d:32:a8: 7e:b0:90:1a:40:b1:a9:52:ae:59:a4:18:df:6e:d5: e2:54:d7:05:c6:8f:2b:cc:51:7d:34:1e:38:db:b3: c4:db:6d:b8:5d:34:77:b5:e2:fa:a3:ed:a2:fc:f3: bb:f6:34:b7:c7:23:99:ad:0b:7c:e1:96:de:ec:82: 7c:31:6b:29:85:3e:4e:b4:4b:08:5c:f3:ea:db:fb: cf:80:c3:86:92:a9:cc:0a:89:57:35:e8:3a:c1:68: fa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E5:88:DE:04:B6:FE:21:9D:74:B7:8F:71:35:F9:A6:EF:33:0F:D3 X509v3 Authority Key Identifier: keyid:3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:0f:db:d2:6b:aa:4b:59:9e:08:73:39:1a:1a:21:24:76:da: fa:2f:74:cb:30:8c:30:c2:0d:f1:8c:69:9f:a8:20:a7:e6:2f: 91:75:34:7a:d8:bc:ab:a7:07:34:25:80:4a:1e:d7:a4:23:07: fe:f8:93:c9:f0:1e:05:ff:ce:0f:1c:dd:3b:a2:4b:b7:dd:f1: 16:17:ef:d4:97:f9:11:cf:3f:35:2e:1d:94:70:f3:d2:ee:c8: 5f:55:9c:a9:80:fe:1f:a7:40:60:a9:21:43:ec:44:58:24:41: 86:2b:ef:d9:aa:4c:e5:d2:50:f3:14:ff:4e:d2:cf:1e:55:41: ff:84:84:6e:0e:67:6d:74:44:e2:ed:9a:71:7b:cb:ff:6c:70: 39:f6:80:10:2e:8b:10:84:05:85:b7:20:a2:1e:ee:07:fa:ce: 34:02:23:d9:2d:01:59:d9:56:5a:50:e9:3d:aa:77:39:69:de: df:18:42:51:7e:ad:b6:df:c7:2e:5f:ab:0f:eb:2e:c1:37:03: 8b:6b:9b:6b:1a:28:9e:7d:49:15:e2:d4:e8:3b:f1:12:07:e1: 04:38:56:60:a9:c3:c3:ea:ea:09:de:42:63:9b:90:47:22:f0: 99:95:4d:86:74:76:4a:65:40:1b:f0:f7:aa:e2:c1:e2:f1:ba: 40:40:52:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBFEqtodo9+u4M01tNel+FG58OqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZB MENCOUY4QjAeFw0yNTExMDMwNzQ2MTdaFw0yNTExMDYwOTMxMTdaMDMxMTAvBgNV BAMTKDQzRTU4OERFMDRCNkZFMjE5RDc0Qjc4RjcxMzVGOUE2RUYzMzBGRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCarFKxRDMt5Ajxd99zpcZ5CPgT qhwPpBj/WOaoLa5imMj1V2jA/Kl+Xu8AayOCICzZ1Lpux++iQycXKpHJE0VnRHMJ FQBD8RYt9OpsrJLbPkqJiOKTeyq1twLaAJHSlaS78iDK3t8HaQYJuUvy7/wyJ6A/ H+UagekPL+mB2p0ZcBGveT6GlNou3wuvDwLlNjXOvZUXSbgUuPRgSmHZzlBKUS0y qH6wkBpAsalSrlmkGN9u1eJU1wXGjyvMUX00Hjjbs8TbbbhdNHe14vqj7aL887v2 NLfHI5mtC3zhlt7sgnwxaymFPk60Swhc8+rb+8+Aw4aSqcwKiVc16DrBaPq3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ+WI3gS2/iGddLePcTX5pu8zD9MwHwYDVR0j BBgwFoAUPJFI7yevXtNIE0L13vJaJqDLn4swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YThmNjlmNy05MzMyLTRjZDQtYjNlNS1jYzZjNDc3MmNmNzMvMC8zQzkxNDhFRjI3 QUY1RUQzNDgxMzQyRjVERUYyNUEyNkEwQ0I5RjhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZBMENC OUY4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWE4ZjY5ZjctOTMzMi00Y2Q0LWIz ZTUtY2M2YzQ3NzJjZjczLzAvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVB MjZBMENCOUY4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIP29JrqktZnghzORoaISR22vovdMswjDDC DfGMaZ+oIKfmL5F1NHrYvKunBzQlgEoe16QjB/74k8nwHgX/zg8c3TuiS7fd8RYX 79SX+RHPPzUuHZRw89LuyF9VnKmA/h+nQGCpIUPsRFgkQYYr79mqTOXSUPMU/07S zx5VQf+EhG4OZ210ROLtmnF7y/9scDn2gBAuixCEBYW3IKIe7gf6zjQCI9ktAVnZ VlpQ6T2qdzlp3t8YQlF+rbbfxy5fqw/rLsE3A4trm2saKJ59SRXi1Og78RIH4QQ4 VmCpw8Pq6gneQmObkEci8JmVTYZ0dkplQBvw96riweLxukBAUqE= -----END CERTIFICATE-----Generated at Tue Nov 4 19:00:12 2025 by rpki-client