$ rpki-client -vvf repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft File: 03832B38693F0F23EF49480775A2493B9E3F7FA0.mft (raw, json) Hash identifier: 16J8LSHe5MKWXD08S2a2Osxst7sm3/t4Pk31pmhaOzc= Subject key identifier: BC:83:C5:22:62:72:CB:38:8F:2B:F2:3C:6E:DE:2C:32:C0:4F:A4:DF Authority key identifier: 03:83:2B:38:69:3F:0F:23:EF:49:48:07:75:A2:49:3B:9E:3F:7F:A0 Certificate issuer: /CN=03832B38693F0F23EF49480775A2493B9E3F7FA0 Certificate serial: 193518E0B9EE1C42DF62D4D103668A4A6EF989FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft Manifest number: 0340 Signing time: Mon 03 Nov 2025 00:20:50 +0000 Manifest this update: Mon 03 Nov 2025 00:15:50 +0000 Manifest next update: Thu 06 Nov 2025 03:28:50 +0000 Files and hashes: 1: 03832B38693F0F23EF49480775A2493B9E3F7FA0.crl (hash: Svlc3oZTI25XKM+KBaM9okmXT7DqPFv8dv+TDBW/kdk=) 2: 323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa (hash: pmzgckCGAS5Ljr2SgdcTD9JmH8nize0p1NnNdSRs+P0=) 3: 3130332e3135352e3235302e302f32332d3234203d3e203137383834.roa (hash: C109hu1BJkl1pWWKKoRbk9sf7Lmm7AwONWDQ76EwY1Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.crl rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 03:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:35:18:e0:b9:ee:1c:42:df:62:d4:d1:03:66:8a:4a:6e:f9:89:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03832B38693F0F23EF49480775A2493B9E3F7FA0 Validity Not Before: Nov 3 00:15:50 2025 GMT Not After : Nov 6 03:28:50 2025 GMT Subject: CN=BC83C5226272CB388F2BF23C6EDE2C32C04FA4DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:85:23:86:a8:f3:96:0d:3f:e4:9b:df:19:81: dd:30:42:da:78:97:0c:31:81:41:4e:3c:1a:11:2b: 31:19:15:d4:27:65:0e:c9:63:c6:9e:2b:e2:fc:9c: ec:3e:01:0e:f9:4a:ad:0c:0c:3a:00:f1:29:cc:c4: 2d:f7:63:6c:5d:5b:7b:e2:53:25:19:2f:20:0d:73: 93:ae:ab:c7:b5:62:ab:34:2c:f0:4b:d4:04:03:63: ac:74:6a:ac:21:fd:2c:b4:2a:d1:1c:9c:28:fa:d0: 35:ef:d5:28:19:b8:68:81:1c:31:d3:42:3d:1f:18: 0e:3f:74:79:db:e7:ef:0a:cc:ce:40:ac:76:43:6c: a8:2b:28:e2:72:c0:29:d3:1b:86:ef:bc:b1:34:ab: 8b:4e:cc:0a:6d:99:7a:29:e4:31:95:3e:f6:42:05: ea:5b:90:cb:b6:7b:a9:72:c4:7c:81:9e:f5:f6:23: 3f:a5:1c:c4:66:6d:97:99:35:8c:2b:2e:e0:b1:04: 3b:82:c0:32:e7:4f:ae:57:1a:6d:a1:c1:9d:c6:65: 15:12:01:25:a0:a4:25:03:8a:57:4c:54:27:05:90: 6b:17:fa:55:74:26:23:bb:2c:36:a9:06:61:3e:10: db:10:f0:97:e3:6c:e0:82:a0:c7:61:dd:d6:46:78: b5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:83:C5:22:62:72:CB:38:8F:2B:F2:3C:6E:DE:2C:32:C0:4F:A4:DF X509v3 Authority Key Identifier: keyid:03:83:2B:38:69:3F:0F:23:EF:49:48:07:75:A2:49:3B:9E:3F:7F:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:35:26:0b:53:66:88:b3:d8:3c:84:c0:7a:cc:e8:fa:8f:8a: d1:48:74:1b:40:2a:e4:c9:60:cd:ae:4d:d3:ca:87:b7:52:ba: 50:f9:72:0e:3e:e2:10:a0:20:78:d0:c1:25:e6:53:76:cc:95: 61:05:55:17:ef:ba:8d:d9:7b:29:f5:92:c5:b3:9a:8d:df:1f: 9a:a2:8a:59:45:03:95:e7:00:bd:16:b9:95:9f:32:a5:99:58: 5f:17:3c:ad:0d:26:78:c2:fa:25:21:15:59:6a:a6:e5:40:30: 0c:ba:42:92:af:f0:dd:2f:55:d1:fd:ad:37:b5:c2:e0:37:f5: 2f:86:72:5f:4d:3e:b7:59:0b:fd:38:cf:83:61:03:9e:69:62: 9f:ad:2b:7c:7e:65:df:6f:28:22:14:eb:a6:62:bf:0f:2a:96: d4:fc:e6:81:36:3c:54:7f:e7:fe:05:44:33:e3:f3:78:a2:1d: d9:8e:4f:44:29:b2:04:4a:36:75:84:07:7e:51:8b:22:d5:25: 2f:d4:df:c0:fc:59:2a:b0:db:01:b6:6d:a9:51:3e:78:36:56: de:71:dd:82:bb:cb:16:7c:55:3e:75:42:b6:23:72:f7:4e:94: 93:fd:12:65:5f:1b:49:f9:db:79:f2:a7:02:dd:ac:22:8b:f0: e5:78:4a:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGTUY4LnuHELfYtTRA2aKSm75ifwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5M0I5 RTNGN0ZBMDAeFw0yNTExMDMwMDE1NTBaFw0yNTExMDYwMzI4NTBaMDMxMTAvBgNV BAMTKEJDODNDNTIyNjI3MkNCMzg4RjJCRjIzQzZFREUyQzMyQzA0RkE0REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCphSOGqPOWDT/km98Zgd0wQtp4 lwwxgUFOPBoRKzEZFdQnZQ7JY8aeK+L8nOw+AQ75Sq0MDDoA8SnMxC33Y2xdW3vi UyUZLyANc5Ouq8e1Yqs0LPBL1AQDY6x0aqwh/Sy0KtEcnCj60DXv1SgZuGiBHDHT Qj0fGA4/dHnb5+8KzM5ArHZDbKgrKOJywCnTG4bvvLE0q4tOzAptmXop5DGVPvZC BepbkMu2e6lyxHyBnvX2Iz+lHMRmbZeZNYwrLuCxBDuCwDLnT65XGm2hwZ3GZRUS ASWgpCUDildMVCcFkGsX+lV0JiO7LDapBmE+ENsQ8JfjbOCCoMdh3dZGeLVxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvIPFImJyyziPK/I8bt4sMsBPpN8wHwYDVR0j BBgwFoAUA4MrOGk/DyPvSUgHdaJJO54/f6AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmVkMDU4NC1hYzJkLTQ2NjQtYmMxMS1kMDI2ZGRiZmFmN2MvMC8wMzgzMkIzODY5 M0YwRjIzRUY0OTQ4MDc3NUEyNDkzQjlFM0Y3RkEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5M0I5RTNG N0ZBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZlZDA1ODQtYWMyZC00NjY0LWJj MTEtZDAyNmRkYmZhZjdjLzAvMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5 M0I5RTNGN0ZBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHg1JgtTZoiz2DyEwHrM6PqPitFIdBtAKuTJ YM2uTdPKh7dSulD5cg4+4hCgIHjQwSXmU3bMlWEFVRfvuo3Zeyn1ksWzmo3fH5qi illFA5XnAL0WuZWfMqWZWF8XPK0NJnjC+iUhFVlqpuVAMAy6QpKv8N0vVdH9rTe1 wuA39S+Gcl9NPrdZC/04z4NhA55pYp+tK3x+Zd9vKCIU66Zivw8qltT85oE2PFR/ 5/4FRDPj83iiHdmOT0QpsgRKNnWEB35RiyLVJS/U38D8WSqw2wG2balRPng2Vt5x 3YK7yxZ8VT51QrYjcvdOlJP9EmVfG0n523nypwLdrCKL8OV4Snk= -----END CERTIFICATE-----Generated at Wed Nov 5 02:45:43 2025 by rpki-client