$ rpki-client -vvf repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft File: 3E788037924369AA3B8E52A5857804BE5D285FA2.mft (raw, json) Hash identifier: nViOw5Ms6sGvOETSav/fmqlWm0NowhxviHaWgoK0J/c= Subject key identifier: 06:81:FC:5F:CB:CC:34:74:34:96:16:1B:00:6F:E4:65:3B:36:4B:32 Authority key identifier: 3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 Certificate issuer: /CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Certificate serial: 77BC2E09155B5B538A56B46E34A27A2BB2DC613E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft Manifest number: 0290 Signing time: Sun 02 Nov 2025 13:11:51 +0000 Manifest this update: Sun 02 Nov 2025 13:06:51 +0000 Manifest next update: Thu 06 Nov 2025 00:53:51 +0000 Files and hashes: 1: 3E788037924369AA3B8E52A5857804BE5D285FA2.crl (hash: /G5Y+PujufPWgeRQk5qdmw+QmMzlWU+NDUBAv6kLEZ8=) 2: 3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa (hash: T+TvJ8L62bCZqFmpIphffr8c4LXSlLo4atPH9poDMJ0=) 3: 3130332e3137392e3131372e302f32342d3234203d3e20313431363435.roa (hash: ilhPhYMwxjxcNC74Yon3xYNd0uQUNUNF+7YCYR6VBOw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 00:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:bc:2e:09:15:5b:5b:53:8a:56:b4:6e:34:a2:7a:2b:b2:dc:61:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Validity Not Before: Nov 2 13:06:51 2025 GMT Not After : Nov 6 00:53:51 2025 GMT Subject: CN=0681FC5FCBCC34743496161B006FE4653B364B32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a8:5a:6f:3b:40:74:06:83:c3:38:c1:ad:eb: a3:92:f6:e1:7d:c1:54:c8:f6:72:72:cd:d7:41:2d: c4:66:20:4e:fa:0d:78:43:f7:7c:c8:d9:3f:77:d5: e0:19:ef:d0:d1:e2:93:6d:27:83:d0:49:16:77:0f: 34:95:6b:4f:5b:49:42:eb:ea:7a:d6:88:80:a6:66: 00:1f:63:31:1e:e1:37:45:c7:3b:e5:f5:c0:70:d1: 7c:3c:83:41:ba:a4:87:2e:a9:4b:71:cd:b3:5e:ea: ab:e3:64:b1:c6:38:51:89:4e:89:d2:f8:8f:d1:1a: b7:26:61:81:f6:2b:5a:5f:d7:87:60:e6:68:8d:76: 5a:4b:c8:1e:03:68:20:f2:9c:7b:0d:08:5a:e8:6f: aa:73:a6:c1:b5:a9:d4:05:8b:b2:e4:20:cc:d3:8f: f7:cc:36:d2:f7:bd:a2:71:4f:b8:dc:58:cf:2e:d5: 1e:72:af:b8:de:75:a4:94:89:cd:d1:fe:e7:80:b6: cf:9e:e3:6f:67:99:2b:2a:f8:3e:8a:1c:f5:a6:e9: 62:97:c0:f8:cb:04:9a:d7:0b:c9:fc:08:ff:3f:cc: b5:55:57:7c:1c:52:74:60:b9:cf:2e:b4:85:c1:46: a0:fb:7d:f6:cd:db:c1:90:7f:fb:09:d0:c8:97:93: 9b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:81:FC:5F:CB:CC:34:74:34:96:16:1B:00:6F:E4:65:3B:36:4B:32 X509v3 Authority Key Identifier: keyid:3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:e6:45:5c:91:c5:d6:a9:3b:4c:93:b3:36:9a:6b:f0:9d:9e: bb:94:7a:34:4e:15:12:14:1f:33:fb:a4:03:ab:a5:29:ee:ed: 40:0b:57:85:5d:1f:ab:5e:de:8d:f2:f5:ff:8f:77:22:09:e2: 51:91:0b:42:9b:0c:0b:26:d5:2a:36:d4:d2:c1:1b:69:80:1f: 05:ad:bb:5c:e9:70:0c:a0:ce:05:46:5c:7b:f2:58:75:1a:cb: a7:ab:6a:f8:dc:0f:e6:ff:40:c9:1b:78:43:b2:b5:ed:9c:c5: 09:be:b7:fa:20:d5:49:44:f7:04:cb:cb:ab:91:92:da:fc:b0: a0:cf:cb:98:cc:df:61:fa:3f:0a:ca:be:f5:0c:33:ee:e4:7b: 3f:33:d4:0c:40:91:33:22:63:9b:9a:31:67:5d:07:b1:2e:b6: 9c:bd:d2:09:9e:51:5a:83:e2:44:8c:8a:0f:73:44:da:b5:9e: 2d:7c:49:2a:89:3e:cc:aa:d9:5d:a3:3b:f6:4c:e9:22:0a:bc: 0f:f5:ba:83:48:2d:ec:e0:a0:ec:06:56:22:ef:4e:34:fc:b1: 27:b4:13:34:f8:8b:2f:a1:bb:17:68:bf:74:e6:88:92:d1:72: 56:36:1b:ee:d5:0a:6e:d7:c8:32:75:d3:98:1e:e3:ef:5e:ed: a3:89:6c:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd7wuCRVbW1OKVrRuNKJ6K7LcYT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1 RDI4NUZBMjAeFw0yNTExMDIxMzA2NTFaFw0yNTExMDYwMDUzNTFaMDMxMTAvBgNV BAMTKDA2ODFGQzVGQ0JDQzM0NzQzNDk2MTYxQjAwNkZFNDY1M0IzNjRCMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/qFpvO0B0BoPDOMGt66OS9uF9 wVTI9nJyzddBLcRmIE76DXhD93zI2T931eAZ79DR4pNtJ4PQSRZ3DzSVa09bSULr 6nrWiICmZgAfYzEe4TdFxzvl9cBw0Xw8g0G6pIcuqUtxzbNe6qvjZLHGOFGJTonS +I/RGrcmYYH2K1pf14dg5miNdlpLyB4DaCDynHsNCFrob6pzpsG1qdQFi7LkIMzT j/fMNtL3vaJxT7jcWM8u1R5yr7jedaSUic3R/ueAts+e429nmSsq+D6KHPWm6WKX wPjLBJrXC8n8CP8/zLVVV3wcUnRguc8utIXBRqD7ffbN28GQf/sJ0MiXk5sHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBoH8X8vMNHQ0lhYbAG/kZTs2SzIwHwYDVR0j BBgwFoAUPniAN5JDaao7jlKlhXgEvl0oX6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODUzYWZkZC0yZTA5LTQ3NzMtOGJlNC02ZmQwZWU5MGIwNDAvMC8zRTc4ODAzNzky NDM2OUFBM0I4RTUyQTU4NTc4MDRCRTVEMjg1RkEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1RDI4 NUZBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg1M2FmZGQtMmUwOS00NzczLThi ZTQtNmZkMGVlOTBiMDQwLzAvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0 QkU1RDI4NUZBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXmRVyRxdapO0yTszaaa/CdnruUejROFRIU HzP7pAOrpSnu7UALV4VdH6te3o3y9f+PdyIJ4lGRC0KbDAsm1So21NLBG2mAHwWt u1zpcAygzgVGXHvyWHUay6eravjcD+b/QMkbeEOyte2cxQm+t/og1UlE9wTLy6uR ktr8sKDPy5jM32H6PwrKvvUMM+7kez8z1AxAkTMiY5uaMWddB7Eutpy90gmeUVqD 4kSMig9zRNq1ni18SSqJPsyq2V2jO/ZM6SIKvA/1uoNILezgoOwGViLvTjT8sSe0 EzT4iy+huxdov3TmiJLRclY2G+7VCm7XyDJ105ge4+9e7aOJbCw= -----END CERTIFICATE-----Generated at Wed Nov 5 00:53:36 2025 by rpki-client