$ rpki-client -vvf repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft File: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft (raw, json) Hash identifier: EdwSjBWTABYoQP7tH5F/adhG8lvNsn5gWXi4fnx8ruU= Subject key identifier: 78:7E:AD:92:B2:7E:A8:08:2E:36:8E:C0:51:8A:2E:96:EC:D4:46:0B Authority key identifier: A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 Certificate issuer: /CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Certificate serial: 15F0107D54E573E06919ABBAA3795AF56EDD5FE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft Manifest number: 013C Signing time: Mon 03 Nov 2025 17:51:23 +0000 Manifest this update: Mon 03 Nov 2025 17:46:23 +0000 Manifest next update: Thu 06 Nov 2025 21:52:23 +0000 Files and hashes: 1: 3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa (hash: cossnBP1XdG0zEY8nTnjaUaCSRdcepAuP+Hq1t+V00c=) 2: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl (hash: ExDbYj4iEUTCTLmPVeankxW/GRAgXtUWLqrCqpHLuvs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 21:52:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:f0:10:7d:54:e5:73:e0:69:19:ab:ba:a3:79:5a:f5:6e:dd:5f:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Validity Not Before: Nov 3 17:46:23 2025 GMT Not After : Nov 6 21:52:23 2025 GMT Subject: CN=787EAD92B27EA8082E368EC0518A2E96ECD4460B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:20:bb:24:79:05:d0:92:82:91:68:02:da:49: 5f:eb:29:2c:15:2b:32:89:8e:eb:12:10:75:eb:2f: ab:b6:7f:6f:86:35:30:3c:69:01:57:d0:0d:e5:cb: d4:52:cb:03:17:34:e4:09:83:ca:7e:70:1a:eb:71: 67:17:ee:c4:db:5b:6f:62:03:45:2d:25:3a:b9:1c: 84:c3:75:01:44:d3:91:66:62:76:66:69:c7:73:45: 1b:4d:e3:6a:7a:57:0c:d1:e8:8a:a7:34:77:bd:5d: 9a:1c:be:ba:8b:ae:69:42:db:06:03:46:2c:57:8b: 6b:0d:4d:3b:40:fa:ca:9e:c3:5e:7f:32:2e:80:d3: 29:50:f4:0e:42:e2:25:b1:2c:58:da:fe:5f:5b:75: 2d:ed:45:6b:ef:8e:d3:e5:65:ae:07:f2:c2:55:a2: 16:38:7b:6b:39:ea:0f:bf:88:c1:76:7a:c6:2e:52: c4:9d:4c:fb:13:36:91:ae:60:5c:61:15:77:bd:9b: c1:56:06:7f:e2:fc:eb:93:6c:42:bb:69:9d:7e:fd: 9a:1a:51:2f:69:47:db:5b:07:9b:a0:0b:0d:d3:48: 00:fe:03:49:9b:53:b5:0a:fd:47:29:d3:64:4a:b3: 50:46:db:08:ff:36:9e:b3:99:05:02:b9:81:bc:3c: 1c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:7E:AD:92:B2:7E:A8:08:2E:36:8E:C0:51:8A:2E:96:EC:D4:46:0B X509v3 Authority Key Identifier: keyid:A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:8f:4d:7a:28:39:2f:03:0d:ff:25:8b:b1:26:10:2b:ab:38: 37:d8:30:df:d0:6b:7b:6e:49:30:2f:94:a1:d6:57:32:31:25: dc:29:c2:bc:ff:94:f4:23:80:0e:e1:a6:56:5d:e7:9e:b6:03: 58:fc:a5:15:59:b4:95:37:4a:32:c6:93:21:e4:fb:e6:49:fc: 60:01:da:d7:c7:86:f6:1b:be:9c:17:45:a6:a2:7e:02:a9:19: f5:38:19:8d:f6:9b:04:e3:11:7a:e3:68:2a:83:22:2b:6b:79: c8:b8:76:99:4a:5c:84:c8:67:13:6e:7c:db:69:fc:b6:e8:9a: 79:8f:08:ad:16:42:62:bb:cd:be:e5:03:e9:c0:6a:f5:8d:76: be:31:e5:bd:f5:cf:c4:1f:4c:b7:36:4b:a2:2a:49:94:fd:65: a1:6a:ea:80:f0:c0:2e:85:73:5c:18:c7:14:8c:0e:9c:bd:28: a8:32:49:53:1c:ff:2b:4e:3b:9a:b7:1c:58:dd:81:ad:dd:bb: f5:91:b9:19:ff:78:8a:a3:73:df:fc:2d:df:3b:f4:3c:d5:0b: a8:c9:af:65:97:67:27:85:cf:d2:a8:aa:8a:50:df:e9:be:ea: 6d:9b:e4:a2:13:82:5f:cd:b8:87:25:4e:43:13:ae:97:16:32: 77:a9:b9:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFfAQfVTlc+BpGau6o3la9W7dX+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdC QjVCMTI0NjAeFw0yNTExMDMxNzQ2MjNaFw0yNTExMDYyMTUyMjNaMDMxMTAvBgNV BAMTKDc4N0VBRDkyQjI3RUE4MDgyRTM2OEVDMDUxOEEyRTk2RUNENDQ2MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUILskeQXQkoKRaALaSV/rKSwV KzKJjusSEHXrL6u2f2+GNTA8aQFX0A3ly9RSywMXNOQJg8p+cBrrcWcX7sTbW29i A0UtJTq5HITDdQFE05FmYnZmacdzRRtN42p6VwzR6IqnNHe9XZocvrqLrmlC2wYD RixXi2sNTTtA+sqew15/Mi6A0ylQ9A5C4iWxLFja/l9bdS3tRWvvjtPlZa4H8sJV ohY4e2s56g+/iMF2esYuUsSdTPsTNpGuYFxhFXe9m8FWBn/i/OuTbEK7aZ1+/Zoa US9pR9tbB5ugCw3TSAD+A0mbU7UK/Ucp02RKs1BG2wj/Np6zmQUCuYG8PBzlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeH6tkrJ+qAguNo7AUYouluzURgswHwYDVR0j BBgwFoAUo+/d2tUm76Pygh6ebsbnR7tbEkYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmM1NzBlZi02ZWZkLTRmOTctYmYzMS05NjgxMjZhYjU3YzAvMC9BM0VGREREQUQ1 MjZFRkEzRjI4MjFFOUU2RUM2RTc0N0JCNUIxMjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdCQjVC MTI0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZjNTcwZWYtNmVmZC00Zjk3LWJm MzEtOTY4MTI2YWI1N2MwLzAvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3 NDdCQjVCMTI0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaPTXooOS8DDf8li7EmECurODfYMN/Qa3tu STAvlKHWVzIxJdwpwrz/lPQjgA7hplZd5562A1j8pRVZtJU3SjLGkyHk++ZJ/GAB 2tfHhvYbvpwXRaaifgKpGfU4GY32mwTjEXrjaCqDIitreci4dplKXITIZxNufNtp /LbomnmPCK0WQmK7zb7lA+nAavWNdr4x5b31z8QfTLc2S6IqSZT9ZaFq6oDwwC6F c1wYxxSMDpy9KKgySVMc/ytOO5q3HFjdga3du/WRuRn/eIqjc9/8Ld879DzVC6jJ r2WXZyeFz9KoqopQ3+m+6m2b5KITgl/NuIclTkMTrpcWMnepuVc= -----END CERTIFICATE-----Generated at Tue Nov 4 12:48:21 2025 by rpki-client