$ rpki-client -vvf repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft File: 3308A0FBD29F359AD61CAA389208E1D74CC28164.mft (raw, json) Hash identifier: 8rh8LYE1WCGO/tYmgbSOVcJIyzDZ15fDcPb+HAZjN24= Subject key identifier: 29:8B:68:DE:DF:14:83:7E:E0:B4:B7:25:03:E9:8E:81:C1:09:84:09 Authority key identifier: 33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64 Certificate issuer: /CN=3308A0FBD29F359AD61CAA389208E1D74CC28164 Certificate serial: 424471AE14CB55188C85835B03A31934419CADC2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft Manifest number: FF Signing time: Mon 03 Nov 2025 19:52:20 +0000 Manifest this update: Mon 03 Nov 2025 19:47:20 +0000 Manifest next update: Fri 07 Nov 2025 02:51:20 +0000 Files and hashes: 1: 3308A0FBD29F359AD61CAA389208E1D74CC28164.crl (hash: qlyc+g/Ha8uTS4wXk84CepBn/fHJnXGRJ/ht+a/HHK0=) 2: 3132312e3130312e3138382e302f32342d3234203d3e203338373835.roa (hash: jVBeyFMPWkiATlRCTVFrCw8EykcpuEgYVgn4T3UPT6M=) 3: 3132312e3130312e3138372e302f32342d3234203d3e203338373835.roa (hash: Hv2jdXQUlOnlnToQUuoVlZDHe+biYftXfxb3LM1GOc0=) 4: 3132312e3130312e3138352e302f32342d3234203d3e203338373835.roa (hash: azmIwktH3vpajsF8gQt8znOMbH0C7Vn9MDVUjZva6CY=) 5: 3132312e3130312e3138342e302f32342d3234203d3e203338373835.roa (hash: cpQ+yGOPRMcycDguY5pOMH22P4g6dN/h+7VVRFd0gvs=) 6: 3132312e3130312e3139312e302f32342d3234203d3e203338373835.roa (hash: EV9DFisiiygvSyZKF0tZ0Lxf1X12CCisGawptespLsI=) 7: 3132312e3130312e3138392e302f32342d3234203d3e203338373835.roa (hash: Csz/yUZ7Lzvn/nuu4THB9U+el9Pek+D7VdsMj61HX6w=) 8: 3132312e3130312e3138362e302f32342d3234203d3e203338373835.roa (hash: ldyK2huQ95pUCINHnT0U5z7ALHHC4dFAFsmJktUnRJw=) 9: 3132312e3130312e3139302e302f32342d3234203d3e203338373835.roa (hash: db2ZBDbPQBZ+1fLhUcrVMNSFZdZMKLIQU1qfyXpKY5M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.crl rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 02:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:44:71:ae:14:cb:55:18:8c:85:83:5b:03:a3:19:34:41:9c:ad:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3308A0FBD29F359AD61CAA389208E1D74CC28164 Validity Not Before: Nov 3 19:47:20 2025 GMT Not After : Nov 7 02:51:20 2025 GMT Subject: CN=298B68DEDF14837EE0B4B72503E98E81C1098409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:99:96:20:9b:ca:87:60:c7:f5:a1:57:58:f3: ca:ba:45:d2:d4:60:45:f4:a5:8c:1c:eb:9d:0b:3b: cc:38:0c:71:80:de:5f:ef:af:23:4b:34:dd:bc:ee: 0f:54:a1:46:15:52:5d:ba:33:6a:52:1b:ce:52:94: 2c:b3:e9:8e:b3:28:4a:16:ae:f3:98:9f:59:39:ff: 59:eb:7c:ab:62:83:19:53:7e:d3:22:bb:07:46:58: b5:20:05:45:b2:57:aa:0a:ae:45:1c:da:c6:98:4c: f7:b9:4c:16:82:43:98:85:45:11:ec:d7:6e:fb:f6: 9e:f2:b9:38:f6:f6:49:6d:2d:fb:17:80:e7:84:c3: 6a:a2:18:4e:86:dc:b9:1b:07:5b:94:f3:47:a1:66: 73:d9:fb:5b:76:eb:c7:4f:5d:26:a7:0b:20:43:02: 10:cb:8d:73:94:5d:62:9e:07:f4:b6:19:8d:5e:2c: 5a:50:3c:c5:43:be:23:84:25:7c:e4:eb:a1:8b:be: 52:a8:3e:4b:1f:de:d3:c5:61:f0:59:48:03:a5:ef: 97:ed:05:63:9a:35:91:05:d7:51:aa:1c:7f:04:9e: f5:c1:7a:82:fe:4f:0d:28:2c:c1:04:94:5e:e5:f7: b1:de:e4:9a:16:ed:d5:f7:d7:e6:1b:22:9c:34:53: 32:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8B:68:DE:DF:14:83:7E:E0:B4:B7:25:03:E9:8E:81:C1:09:84:09 X509v3 Authority Key Identifier: keyid:33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d5:47:a3:77:73:23:1b:af:d3:b8:ee:a1:b9:54:6a:8b:95: 62:70:f7:67:20:54:e0:4a:c7:ff:20:a0:12:e3:b2:90:51:e5: d6:f0:0e:41:61:58:a2:fa:19:f4:83:3d:e7:fa:78:d3:90:ad: d6:b9:03:7b:37:45:1c:36:28:bc:78:f6:77:bd:17:9e:9a:92: 38:f7:d0:06:2c:cb:4e:8b:ec:aa:4c:92:4d:77:4c:b1:50:3f: 37:47:30:da:03:55:b2:83:6e:59:e6:ab:b7:98:a4:3f:ca:e9: ea:57:53:cb:2b:0f:6c:bb:76:fb:97:0d:85:1d:db:f7:72:d6: aa:b9:d1:f5:07:b1:4f:d6:64:95:5b:ff:94:89:05:23:5e:47: 82:ba:11:8c:9a:95:98:37:da:7f:9f:7f:bd:5f:1f:16:59:9b: 9d:f6:26:8f:6d:f2:ac:48:11:53:21:f6:a5:81:7b:f1:ce:40: e3:16:77:8a:57:83:b7:fe:e5:21:0b:6c:41:b5:7b:54:38:56: 68:20:a6:b5:05:dd:32:4f:eb:7c:ae:d9:79:db:ec:ec:11:7e: 53:e6:27:95:40:a8:85:b0:8e:75:23:c8:f8:53:b4:c3:d2:92: c3:24:27:93:c1:a2:92:45:33:f9:ad:23:a9:ac:1b:9c:a7:21: f0:5f:3e:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQkRxrhTLVRiMhYNbA6MZNEGcrcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUxRDc0 Q0MyODE2NDAeFw0yNTExMDMxOTQ3MjBaFw0yNTExMDcwMjUxMjBaMDMxMTAvBgNV BAMTKDI5OEI2OERFREYxNDgzN0VFMEI0QjcyNTAzRTk4RTgxQzEwOTg0MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdmZYgm8qHYMf1oVdY88q6RdLU YEX0pYwc650LO8w4DHGA3l/vryNLNN287g9UoUYVUl26M2pSG85SlCyz6Y6zKEoW rvOYn1k5/1nrfKtigxlTftMiuwdGWLUgBUWyV6oKrkUc2saYTPe5TBaCQ5iFRRHs 12779p7yuTj29kltLfsXgOeEw2qiGE6G3LkbB1uU80ehZnPZ+1t268dPXSanCyBD AhDLjXOUXWKeB/S2GY1eLFpQPMVDviOEJXzk66GLvlKoPksf3tPFYfBZSAOl75ft BWOaNZEF11GqHH8EnvXBeoL+Tw0oLMEElF7l97He5JoW7dX31+YbIpw0UzJJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKYto3t8Ug37gtLclA+mOgcEJhAkwHwYDVR0j BBgwFoAUMwig+9KfNZrWHKo4kgjh10zCgWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTcyZGZiZS00Y2EwLTRhNDYtODAzNy00OTY4ZWQ5N2NhZGMvMC8zMzA4QTBGQkQy OUYzNTlBRDYxQ0FBMzg5MjA4RTFENzRDQzI4MTY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUxRDc0Q0My ODE2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU3MmRmYmUtNGNhMC00YTQ2LTgw MzctNDk2OGVkOTdjYWRjLzAvMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUx RDc0Q0MyODE2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3VR6N3cyMbr9O47qG5VGqLlWJw92cgVOBK x/8goBLjspBR5dbwDkFhWKL6GfSDPef6eNOQrda5A3s3RRw2KLx49ne9F56akjj3 0AYsy06L7KpMkk13TLFQPzdHMNoDVbKDblnmq7eYpD/K6epXU8srD2y7dvuXDYUd 2/dy1qq50fUHsU/WZJVb/5SJBSNeR4K6EYyalZg32n+ff71fHxZZm532Jo9t8qxI EVMh9qWBe/HOQOMWd4pXg7f+5SELbEG1e1Q4VmggprUF3TJP63yu2Xnb7OwRflPm J5VAqIWwjnUjyPhTtMPSksMkJ5PBopJFM/mtI6msG5ynIfBfPgY= -----END CERTIFICATE-----Generated at Tue Nov 4 21:08:26 2025 by rpki-client