$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft File: 3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft (raw, json) Hash identifier: rYB6RirZSiXd+kOUZAIwHiHbM3tYpBcSBNOAbqs6C9g= Subject key identifier: DB:DF:13:DE:1E:49:44:52:1C:7D:A4:51:DF:65:E8:2E:74:1C:85:51 Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C Certificate issuer: /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Certificate serial: 68F254233FC2333E1A1A4254BEC9500616F0D46B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft Manifest number: 0246 Signing time: Mon 03 Nov 2025 09:02:19 +0000 Manifest this update: Mon 03 Nov 2025 08:57:19 +0000 Manifest next update: Thu 06 Nov 2025 11:59:19 +0000 Files and hashes: 1: 3230322e35312e36322e302f32342d3234203d3e20323031333431.roa (hash: gQMVqNF5pbofU8fWwfLf24IOx5Rve68FRF/gYFgAFMM=) 2: 3230322e35312e36322e302f32332d3233203d3e20323031333431.roa (hash: FzI5GbnAo75yoelWpGp51ySqxG4wQ2wlQL4r6iiASgc=) 3: 3230322e35312e36312e302f32342d3234203d3e20323031333431.roa (hash: iGn1V/gq7zu3cpw0mI8Bqv3oMJsgKj/I69u4ba5O7zE=) 4: 3230322e35312e35382e302f32342d3234203d3e203330383630.roa (hash: OXb58XdJvFeTkl1pb8qqXtG1NjsRZSztJ+uUatv4+8w=) 5: 3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl (hash: YGJ5vTQXjPBkdPWgbq3SgiE1XHrqZ7NYMryFpVt47nk=) 6: 3230322e35312e35382e302f32332d3233203d3e203330383630.roa (hash: fmU/gB/7itVGB2sFtyfrKlK+5/0j2F7s2JNU9ipGEtI=) 7: 3230322e35312e36332e302f32342d3234203d3e20323031333431.roa (hash: E7Xvq+98P7calV+Tra/HI6VBncPkJLZ2WfRUwzVpBzQ=) 8: 3230322e35312e35392e302f32342d3234203d3e203330383630.roa (hash: aZ1nkOt0ZwL5bWsxMWDTHMMRjscg2q9LS9hs3Z383Ew=) 9: 3230322e35312e35372e302f32342d3234203d3e203330383630.roa (hash: lQ+fQzdjr0S1DLs1lSSCMj5N6c3fuO+jsggHmQtAADw=) 10: 3230322e35312e36302e302f32342d3234203d3e20323031333431.roa (hash: YHuUg4uxFrthFFepE05C4PM9gH2UZAw5dOg3ZxdbMHs=) 11: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (hash: tqVbqJyQTApYbizYu59I5NZoSysKTPKf9ZllM4I7v64=) 12: 3230322e35312e36302e302f32332d3233203d3e20323031333431.roa (hash: 74adhrSbVzuFjVRQo3T/YKEFIp0ssVu9vw6ZXWstTjg=) 13: 3230322e35312e35362e302f32342d3234203d3e203338353039.roa (hash: VDmzAE5nsSn3VcTtdUYB+JjYbBbEx+qEZDLzkKkFw30=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 11:59:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:f2:54:23:3f:c2:33:3e:1a:1a:42:54:be:c9:50:06:16:f0:d4:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Validity Not Before: Nov 3 08:57:19 2025 GMT Not After : Nov 6 11:59:19 2025 GMT Subject: CN=DBDF13DE1E4944521C7DA451DF65E82E741C8551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b8:39:6a:79:90:48:cb:1d:d2:9e:a8:d8:52: 67:36:f9:ab:0b:2f:3e:17:bf:70:b6:40:f5:c0:88: 7e:c5:a7:e8:03:f2:32:5a:30:76:f9:df:61:77:21: 87:c9:ef:ab:f9:60:a0:7c:76:97:5e:33:02:2e:80: c9:c1:d9:22:a7:d7:90:a0:c5:53:8c:f5:34:e1:66: 42:f2:46:9a:a3:9d:fd:9c:9a:b5:64:a1:8c:e1:a1: 54:c3:a9:7f:a1:ee:2e:3b:0b:48:81:6d:c4:b1:49: d1:79:62:c0:bb:62:60:81:06:15:20:62:d9:c7:41: 9f:1c:d6:00:08:33:9c:de:bc:97:90:5a:c9:96:bf: 88:7d:8c:ea:20:00:bf:d6:e0:24:af:b8:e3:40:a0: ca:55:24:23:55:bf:da:29:3a:64:52:72:96:d2:bb: 56:78:f0:03:f4:8f:10:cb:ed:30:66:ab:3d:59:0f: ef:84:1e:bf:04:a1:8e:0b:9f:2e:e8:32:f8:0d:72: 84:2d:53:96:54:b2:c3:f1:a8:09:6b:aa:be:ac:ab: f8:21:04:40:d7:67:91:a5:66:f7:81:43:1d:e0:2f: f3:1a:02:6b:95:a7:a3:c9:b0:ac:7d:c3:60:8d:90: 46:f5:1c:39:f2:e4:b5:2b:c0:72:c9:44:23:a9:eb: 9b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:DF:13:DE:1E:49:44:52:1C:7D:A4:51:DF:65:E8:2E:74:1C:85:51 X509v3 Authority Key Identifier: keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:49:57:9e:98:ad:fb:93:68:a9:a9:e6:d9:1f:96:c9:8e:ed: 53:f5:80:3a:46:24:e8:5c:e2:03:69:35:19:7d:21:21:63:9e: 17:e0:5f:e2:10:7f:d9:0c:f2:b9:9d:03:27:df:fb:e7:b3:b3: ac:d0:bd:a3:37:81:fc:16:78:79:64:4a:14:5e:e9:83:f1:d9: a1:ff:60:6a:29:c6:4f:09:5a:27:62:16:fb:7e:4d:86:90:54: f2:e6:4b:07:27:f7:ff:a9:12:20:60:64:7f:fb:be:bf:14:e1: b7:e7:e9:72:8b:7d:50:ea:95:7c:ee:3d:98:c1:64:17:6e:1b: c5:87:9a:c1:1a:a7:69:e0:0e:f9:33:66:a1:f2:1d:59:0e:f2: b5:d0:98:22:c2:c4:04:7f:e1:a2:b4:88:ff:72:f0:ab:94:c8: f6:eb:c8:02:40:3e:fb:75:de:9a:34:cb:87:9e:ec:e6:ea:5d: cf:24:6c:6d:27:c9:7a:67:6b:2d:94:08:25:32:31:32:df:6f: 39:4f:b3:26:14:57:bb:e3:b0:c2:8f:1b:75:7e:2e:7a:8c:71: ed:c6:80:0d:d0:a7:30:76:58:2e:8a:8d:2a:ef:a4:fb:b0:1f: dc:c4:9b:a8:7c:3d:85:d0:0d:f4:b1:f9:a3:37:cb:55:7f:e5: ff:9f:8c:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaPJUIz/CMz4aGkJUvslQBhbw1GswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3 QUM2NkE4QzAeFw0yNTExMDMwODU3MTlaFw0yNTExMDYxMTU5MTlaMDMxMTAvBgNV BAMTKERCREYxM0RFMUU0OTQ0NTIxQzdEQTQ1MURGNjVFODJFNzQxQzg1NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuuDlqeZBIyx3SnqjYUmc2+asL Lz4Xv3C2QPXAiH7Fp+gD8jJaMHb532F3IYfJ76v5YKB8dpdeMwIugMnB2SKn15Cg xVOM9TThZkLyRpqjnf2cmrVkoYzhoVTDqX+h7i47C0iBbcSxSdF5YsC7YmCBBhUg YtnHQZ8c1gAIM5zevJeQWsmWv4h9jOogAL/W4CSvuONAoMpVJCNVv9opOmRScpbS u1Z48AP0jxDL7TBmqz1ZD++EHr8EoY4Lny7oMvgNcoQtU5ZUssPxqAlrqr6sq/gh BEDXZ5GlZveBQx3gL/MaAmuVp6PJsKx9w2CNkEb1HDny5LUrwHLJRCOp65tjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU298T3h5JRFIcfaRR32XoLnQchVEwHwYDVR0j BBgwFoAUPmta8jH9gJ+8jlmSFbFNNXrGaowwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTU0MDE2NC0zZDQ2LTQ3OTQtYmY1NS1iNmIxMzRkOWFiMTMvMC8zRTZCNUFGMjMx RkQ4MDlGQkM4RTU5OTIxNUIxNEQzNTdBQzY2QThDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3QUM2 NkE4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU1NDAxNjQtM2Q0Ni00Nzk0LWJm NTUtYjZiMTM0ZDlhYjEzLzAvM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTRE MzU3QUM2NkE4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ5JV56YrfuTaKmp5tkflsmO7VP1gDpGJOhc 4gNpNRl9ISFjnhfgX+IQf9kM8rmdAyff++ezs6zQvaM3gfwWeHlkShRe6YPx2aH/ YGopxk8JWidiFvt+TYaQVPLmSwcn9/+pEiBgZH/7vr8U4bfn6XKLfVDqlXzuPZjB ZBduG8WHmsEap2ngDvkzZqHyHVkO8rXQmCLCxAR/4aK0iP9y8KuUyPbryAJAPvt1 3po0y4ee7ObqXc8kbG0nyXpnay2UCCUyMTLfbzlPsyYUV7vjsMKPG3V+LnqMce3G gA3QpzB2WC6KjSrvpPuwH9zEm6h8PYXQDfSx+aM3y1V/5f+fjL8= -----END CERTIFICATE-----Generated at Tue Nov 4 12:53:09 2025 by rpki-client