$ rpki-client -vvf repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft File: 3D93688202931D72322A7EE0053964A2DD8EB457.mft (raw, json) Hash identifier: f3D/EjfvQ/rmQfDvzAYlIK7Xt02VXGnrFwUKAsbENlI= Subject key identifier: 8E:17:EE:B0:18:43:C9:EA:C0:6C:FF:B6:A2:CF:37:0B:C8:F7:59:6C Authority key identifier: 3D:93:68:82:02:93:1D:72:32:2A:7E:E0:05:39:64:A2:DD:8E:B4:57 Certificate issuer: /CN=3D93688202931D72322A7EE0053964A2DD8EB457 Certificate serial: 62E9912F7A5EA90734E3AB93A1F327AF7B4F0D49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft Manifest number: 024E Signing time: Mon 03 Nov 2025 22:34:10 +0000 Manifest this update: Mon 03 Nov 2025 22:29:10 +0000 Manifest next update: Fri 07 Nov 2025 08:19:10 +0000 Files and hashes: 1: 3130332e3138342e36342e302f32332d3234203d3e20313439363832.roa (hash: eaULz+kMsRSSqy6h3V303twAaR4RcVJjEt3EXFQ5l2A=) 2: 3130332e3138342e36342e302f32332d3234203d3e203539323738.roa (hash: DkL978cCjpD0PQ0XgknN+Mz9vJLe59QDx419VcnHPIA=) 3: 3D93688202931D72322A7EE0053964A2DD8EB457.crl (hash: eGvPzxxzbOXArRD3l+gsccB8bJzq7UwRQFayDAGujp8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.crl rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:19:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:e9:91:2f:7a:5e:a9:07:34:e3:ab:93:a1:f3:27:af:7b:4f:0d:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D93688202931D72322A7EE0053964A2DD8EB457 Validity Not Before: Nov 3 22:29:10 2025 GMT Not After : Nov 7 08:19:10 2025 GMT Subject: CN=8E17EEB01843C9EAC06CFFB6A2CF370BC8F7596C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c8:c3:24:93:83:fc:03:14:d9:92:19:13:ca: 55:90:c2:07:48:58:3f:ae:c6:13:a0:4c:4f:4b:66: a0:34:a9:de:f1:bb:00:65:86:b6:ff:1f:c1:6a:41: 03:ce:c5:03:1b:a2:4a:68:6c:30:b9:95:22:37:bb: f0:4d:4d:38:2c:34:74:44:a8:44:4a:42:f0:d5:ed: 06:49:9c:5a:ef:58:be:fd:4a:ca:37:a1:63:a6:db: 32:7c:31:5b:a3:3f:b0:d3:0d:1a:11:cd:53:e7:ba: f6:e7:1c:1f:8e:89:ab:62:56:d4:9f:ed:0d:a3:b1: 00:75:69:a0:cc:ca:ce:2d:14:a7:27:d9:5e:b5:30: 7e:3f:1c:1a:f1:99:12:55:ed:4a:5c:45:5f:67:15: 9a:55:e0:49:b0:0d:a7:87:35:83:ff:87:da:11:1f: 00:ff:b9:85:f9:4f:46:a9:ff:54:3f:48:92:93:8b: 3b:cc:ae:6f:78:6f:21:ea:ad:38:99:d3:24:74:e9: 7a:a8:a1:db:2a:77:a0:bc:dc:ba:2b:9e:b5:5e:95: 51:ac:ba:90:78:2f:1a:ea:b8:62:00:f0:12:c2:38: ac:45:5e:0d:8e:71:26:44:f6:ac:a2:eb:29:fc:75: 08:36:3c:49:b1:c5:30:e3:78:d7:3f:73:98:2a:f9: 91:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:17:EE:B0:18:43:C9:EA:C0:6C:FF:B6:A2:CF:37:0B:C8:F7:59:6C X509v3 Authority Key Identifier: keyid:3D:93:68:82:02:93:1D:72:32:2A:7E:E0:05:39:64:A2:DD:8E:B4:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b5:f4:bc:54:dd:06:fe:07:ea:e4:ef:0c:28:b4:f3:a8:dc: a2:0f:46:0a:ec:65:cb:b0:70:1d:d1:9e:39:3f:93:d3:73:b6: 8a:fe:17:7b:f7:93:e8:b8:18:ba:79:da:25:24:d6:6e:00:13: ba:13:9a:00:05:15:9d:f2:1a:b3:bf:24:b9:9c:54:16:e5:6e: 4f:da:27:3c:f8:52:08:8f:d9:a0:8f:74:fa:94:5b:d4:54:78: 5f:cd:52:cc:13:09:42:29:86:1c:b6:6b:52:9c:3a:18:09:d7: 52:47:6d:68:41:4d:36:40:0f:7b:98:15:e5:87:21:5a:03:b3: cf:f3:e3:25:91:f8:38:6a:9d:14:34:43:6b:2e:1d:cb:86:dd: de:54:2a:c7:a1:2d:95:69:ad:9f:b7:a9:4e:95:24:4f:3c:5f: 3d:2d:69:e6:f0:98:31:c2:88:9e:e7:f9:f3:8c:f1:09:74:c1: 2a:a0:6c:08:4f:8c:1d:8d:2f:c7:ff:87:16:76:d0:3e:41:49: d8:6e:b5:82:0c:7f:08:1f:80:12:ba:a5:c0:44:24:70:05:41: ad:89:da:fe:9a:5f:f9:97:5b:fe:4a:60:35:f5:9c:af:e9:1a: fa:98:7e:24:52:3f:a8:ed:c2:09:b0:58:c4:fc:65:e7:33:6a: b0:9a:e1:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYumRL3peqQc046uTofMnr3tPDUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0QTJE RDhFQjQ1NzAeFw0yNTExMDMyMjI5MTBaFw0yNTExMDcwODE5MTBaMDMxMTAvBgNV BAMTKDhFMTdFRUIwMTg0M0M5RUFDMDZDRkZCNkEyQ0YzNzBCQzhGNzU5NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSyMMkk4P8AxTZkhkTylWQwgdI WD+uxhOgTE9LZqA0qd7xuwBlhrb/H8FqQQPOxQMbokpobDC5lSI3u/BNTTgsNHRE qERKQvDV7QZJnFrvWL79Sso3oWOm2zJ8MVujP7DTDRoRzVPnuvbnHB+OiatiVtSf 7Q2jsQB1aaDMys4tFKcn2V61MH4/HBrxmRJV7UpcRV9nFZpV4EmwDaeHNYP/h9oR HwD/uYX5T0ap/1Q/SJKTizvMrm94byHqrTiZ0yR06Xqoodsqd6C83LornrVelVGs upB4LxrquGIA8BLCOKxFXg2OcSZE9qyi6yn8dQg2PEmxxTDjeNc/c5gq+ZH7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjhfusBhDyerAbP+2os83C8j3WWwwHwYDVR0j BBgwFoAUPZNoggKTHXIyKn7gBTlkot2OtFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmQ4ODQ5Ni1iMmJhLTRkMTMtOTgyNS1hZTM4YWZmMWRhMTUvMC8zRDkzNjg4MjAy OTMxRDcyMzIyQTdFRTAwNTM5NjRBMkREOEVCNDU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0QTJERDhF QjQ1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZkODg0OTYtYjJiYS00ZDEzLTk4 MjUtYWUzOGFmZjFkYTE1LzAvM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0 QTJERDhFQjQ1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+19LxU3Qb+B+rk7wwotPOo3KIPRgrsZcuw cB3Rnjk/k9Nztor+F3v3k+i4GLp52iUk1m4AE7oTmgAFFZ3yGrO/JLmcVBblbk/a Jzz4UgiP2aCPdPqUW9RUeF/NUswTCUIphhy2a1KcOhgJ11JHbWhBTTZAD3uYFeWH IVoDs8/z4yWR+DhqnRQ0Q2suHcuG3d5UKsehLZVprZ+3qU6VJE88Xz0taebwmDHC iJ7n+fOM8Ql0wSqgbAhPjB2NL8f/hxZ20D5BSdhutYIMfwgfgBK6pcBEJHAFQa2J 2v6aX/mXW/5KYDX1nK/pGvqYfiRSP6jtwgmwWMT8ZeczarCa4ck= -----END CERTIFICATE-----Generated at Wed Nov 5 01:26:19 2025 by rpki-client