$ rpki-client -vvf repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft File: 3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft (raw, json) Hash identifier: OBJsgIvMMG+eo63HLsqtG2iC9EHHJf5eDOdbO868IxU= Subject key identifier: 89:33:C0:A6:1B:BD:1F:E1:2F:FA:66:7B:B3:97:7D:D9:86:08:B5:DC Authority key identifier: 33:66:CD:55:73:BB:4B:11:69:4D:BC:F0:F1:50:2C:E2:B4:6B:FD:51 Certificate issuer: /CN=3366CD5573BB4B11694DBCF0F1502CE2B46BFD51 Certificate serial: 4C82193F249684F96AEE20B0D8D8DCF46F712CD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft Manifest number: 0216 Signing time: Mon 03 Nov 2025 22:10:05 +0000 Manifest this update: Mon 03 Nov 2025 22:05:05 +0000 Manifest next update: Fri 07 Nov 2025 04:19:05 +0000 Files and hashes: 1: 3130332e3132302e3233332e302f32342d3234203d3e20313338303435.roa (hash: wUN0Izu+1jvS2QJEMcI/REBlf+WT4oRYhW3TrlPnH1I=) 2: 3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl (hash: 8fAQjShIpJXN4znGSlbq1OxjZnVh/5dAQ3Y2MK/5wy0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 04:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:82:19:3f:24:96:84:f9:6a:ee:20:b0:d8:d8:dc:f4:6f:71:2c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3366CD5573BB4B11694DBCF0F1502CE2B46BFD51 Validity Not Before: Nov 3 22:05:05 2025 GMT Not After : Nov 7 04:19:05 2025 GMT Subject: CN=8933C0A61BBD1FE12FFA667BB3977DD98608B5DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8a:28:42:98:02:b3:31:4d:91:79:cd:f5:c1: fa:29:ad:12:68:fb:c1:fb:e5:10:69:a0:85:bd:c6: 05:53:66:d6:f8:13:81:74:6e:c8:b7:93:de:9d:aa: 29:43:a7:d9:25:12:a6:df:40:43:d3:b6:20:9e:54: 30:4a:3c:8e:c9:69:3a:0e:af:b2:12:e5:76:51:2b: 8b:6f:d6:60:ee:97:d5:e4:a5:5e:01:d8:e0:23:11: d0:43:a8:bc:61:b8:25:0d:c8:7a:ea:2f:cc:f9:1e: f6:ae:39:72:7b:f4:a2:4d:d5:e5:f9:1f:bf:6f:0d: 7d:9b:6f:3f:58:b8:74:a4:90:7e:29:0c:a0:e0:2a: 4b:ce:8b:cf:54:73:35:7e:7a:6a:91:e3:cd:24:bf: 8b:84:32:2b:95:bf:b7:17:34:e3:41:99:b3:2a:5b: 67:80:34:c5:b1:a9:13:f0:1e:f8:4b:67:df:e6:88: 3b:93:be:78:61:49:5a:d9:3b:0f:63:64:c3:a0:11: d2:74:87:c5:f1:0e:f1:54:65:e1:f4:64:a5:12:f6: ab:e2:1c:0c:ef:10:95:1b:fc:b9:5f:e3:5f:a7:c2: 41:c2:a2:5b:85:86:cf:ec:bb:f9:01:c4:97:bf:bf: ed:d8:fb:18:a0:4b:41:c6:1a:30:cd:08:04:df:ca: 43:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:33:C0:A6:1B:BD:1F:E1:2F:FA:66:7B:B3:97:7D:D9:86:08:B5:DC X509v3 Authority Key Identifier: keyid:33:66:CD:55:73:BB:4B:11:69:4D:BC:F0:F1:50:2C:E2:B4:6B:FD:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:5c:92:86:64:38:fb:cc:33:82:7a:b4:16:20:e1:ad:44:fd: 33:9e:98:e1:82:66:d2:03:1f:5b:8c:da:a7:91:70:20:4e:8c: 4c:54:e9:64:c2:d0:28:51:cd:53:66:f0:1c:33:fd:52:50:0b: ad:a1:a8:43:85:d8:b8:53:78:d6:83:c4:bc:6f:ba:cc:0b:24: 0a:6d:b5:63:5a:af:fa:7e:5e:d9:55:23:bc:e6:00:d4:0c:fe: 84:28:d3:da:f9:33:2d:90:f3:c7:3a:59:d9:02:b8:dd:97:ca: c0:53:d5:b7:8a:d1:63:15:c0:25:ca:6b:be:0d:91:80:12:f1: 83:a9:11:33:cb:44:fc:29:26:a0:cc:60:a2:80:e1:22:3f:9d: bf:5f:f3:e8:c1:99:ac:95:25:2a:19:80:1a:68:5d:c1:ed:86: bb:53:d2:b3:aa:31:6b:74:6f:10:fe:94:fa:d9:d4:e2:e4:29: 91:5b:1b:a7:4a:0e:ed:4c:e9:27:81:76:f8:08:1c:6a:1c:d4: de:09:f5:28:0d:d0:d0:8d:9e:e9:45:81:1f:db:e5:82:ac:33: fc:2c:ee:dc:94:fc:92:79:7b:26:86:e2:0f:fb:4a:a5:20:67: 8e:2d:d9:0c:7c:12:c9:0b:98:6b:fb:21:14:7c:3b:51:1b:01: 99:10:05:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTIIZPySWhPlq7iCw2Njc9G9xLNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJDRTJC NDZCRkQ1MTAeFw0yNTExMDMyMjA1MDVaFw0yNTExMDcwNDE5MDVaMDMxMTAvBgNV BAMTKDg5MzNDMEE2MUJCRDFGRTEyRkZBNjY3QkIzOTc3REQ5ODYwOEI1REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCiihCmAKzMU2Rec31wfoprRJo +8H75RBpoIW9xgVTZtb4E4F0bsi3k96dqilDp9klEqbfQEPTtiCeVDBKPI7JaToO r7IS5XZRK4tv1mDul9XkpV4B2OAjEdBDqLxhuCUNyHrqL8z5HvauOXJ79KJN1eX5 H79vDX2bbz9YuHSkkH4pDKDgKkvOi89UczV+emqR480kv4uEMiuVv7cXNONBmbMq W2eANMWxqRPwHvhLZ9/miDuTvnhhSVrZOw9jZMOgEdJ0h8XxDvFUZeH0ZKUS9qvi HAzvEJUb/Llf41+nwkHColuFhs/su/kBxJe/v+3Y+xigS0HGGjDNCATfykM9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiTPAphu9H+Ev+mZ7s5d92YYItdwwHwYDVR0j BBgwFoAUM2bNVXO7SxFpTbzw8VAs4rRr/VEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h M2EyNmJmYi02NzVmLTQ0NGYtOTBjOS01ZDNhOWIxOGMzNGMvMC8zMzY2Q0Q1NTcz QkI0QjExNjk0REJDRjBGMTUwMkNFMkI0NkJGRDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJDRTJCNDZC RkQ1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTNhMjZiZmItNjc1Zi00NDRmLTkw YzktNWQzYTliMThjMzRjLzAvMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJD RTJCNDZCRkQ1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtckoZkOPvMM4J6tBYg4a1E/TOemOGCZtID H1uM2qeRcCBOjExU6WTC0ChRzVNm8Bwz/VJQC62hqEOF2LhTeNaDxLxvuswLJApt tWNar/p+XtlVI7zmANQM/oQo09r5My2Q88c6WdkCuN2XysBT1beK0WMVwCXKa74N kYAS8YOpETPLRPwpJqDMYKKA4SI/nb9f8+jBmayVJSoZgBpoXcHthrtT0rOqMWt0 bxD+lPrZ1OLkKZFbG6dKDu1M6SeBdvgIHGoc1N4J9SgN0NCNnulFgR/b5YKsM/ws 7tyU/JJ5eyaG4g/7SqUgZ44t2Qx8EskLmGv7IRR8O1EbAZkQBdE= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:35 2025 by rpki-client