$ rpki-client -vvf repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft File: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft (raw, json) Hash identifier: +oajdSeC1fwvtTFbAgL2BOClx5Vpgop4FUzj3a5Pi6Y= Subject key identifier: C3:E4:20:CE:51:C8:D2:B6:B0:89:97:54:C6:FA:09:4C:AB:25:59:15 Authority key identifier: B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB Certificate issuer: /CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Certificate serial: 66158C9C585FAFE303E381A0E79FCB681AA365E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft Manifest number: 023F Signing time: Sun 02 Nov 2025 18:42:08 +0000 Manifest this update: Sun 02 Nov 2025 18:37:08 +0000 Manifest next update: Thu 06 Nov 2025 02:21:08 +0000 Files and hashes: 1: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl (hash: N39tx2EHuREeAvL2J8hvo5Jr5IXaPMd6UG0jZUhO6Kk=) 2: 3130332e31302e3137302e302f32342d3234203d3e203536323535.roa (hash: oyYL/ZrPIXcKrR/gCu+KLuQHBsbf7zO4u+0wSABNiSw=) 3: 3130332e31302e3137312e302f32342d3234203d3e203536323535.roa (hash: AIOs31+uc6Pf39KqIrmoIMFECvqIwvPghHjhEcSTbxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 02:21:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:15:8c:9c:58:5f:af:e3:03:e3:81:a0:e7:9f:cb:68:1a:a3:65:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Validity Not Before: Nov 2 18:37:08 2025 GMT Not After : Nov 6 02:21:08 2025 GMT Subject: CN=C3E420CE51C8D2B6B0899754C6FA094CAB255915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ff:1c:3d:88:70:0d:19:aa:e3:85:54:7b:51: fb:d4:8f:47:72:e7:96:26:7b:4b:15:4d:92:5e:17: 16:c1:89:54:25:a7:53:cc:52:04:ce:54:42:17:20: db:75:6a:7a:2f:ee:63:95:c6:59:ac:2c:e5:0a:95: 29:1f:b7:6f:3f:4c:ff:85:28:b1:8b:67:10:05:7b: 8f:dc:0b:44:16:2a:bc:7b:bf:54:b0:9f:dd:29:fe: 6f:40:0e:ae:71:12:90:3b:40:1a:28:4c:f5:30:9b: b8:4e:cb:7a:92:59:70:3d:cd:5a:b8:cd:42:2d:55: be:c0:b2:25:21:f9:63:75:5f:01:0b:9d:73:d4:be: 7a:4a:e1:b7:a4:69:a9:d0:2d:d5:63:3f:59:45:72: 93:8d:54:74:64:5c:24:c5:fa:57:05:09:1d:9f:49: cf:5b:50:9d:57:6b:28:00:06:3c:f7:6c:cf:18:5a: df:46:e7:85:ec:c8:58:b8:57:27:45:52:56:1e:d7: 52:e9:96:f8:00:ce:e1:1f:e8:c9:b3:5f:0a:58:7a: ec:e8:7f:cc:08:6b:19:0e:28:8d:ab:58:a9:a3:7b: 1c:22:73:4b:00:60:59:73:15:29:22:42:23:45:e7: e9:dd:20:35:84:fc:47:a0:1a:83:06:f9:11:2c:ef: 85:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E4:20:CE:51:C8:D2:B6:B0:89:97:54:C6:FA:09:4C:AB:25:59:15 X509v3 Authority Key Identifier: keyid:B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b8:7b:0a:7d:c0:c7:ea:66:f3:7a:4c:0b:c0:d4:96:79:94: 83:78:9c:68:13:97:27:e3:67:89:87:00:64:5d:ac:ba:c2:66: 92:5d:76:b2:a7:4d:2e:bf:05:8b:ef:1a:d8:1e:e6:94:bb:30: b4:54:fb:eb:1f:3b:7e:72:12:e6:b7:34:f9:d9:0f:46:19:4e: b8:3c:30:50:e8:84:8f:bd:3b:9d:e8:b4:ab:a0:6b:6b:5b:42: 32:8e:d1:9a:0b:72:37:50:30:4e:ca:ea:ab:2d:70:c4:be:f1: e9:e6:6d:c6:3b:58:96:f7:e1:1c:f1:30:51:7d:fb:b5:c4:5d: c5:9a:94:23:e4:6e:e8:5e:a2:6e:62:3b:61:fb:77:87:1a:4e: 41:72:ef:c4:71:fc:7f:84:d9:93:8e:bc:ca:15:c4:96:aa:a9: 3c:86:6c:cb:67:9f:c0:9f:90:31:90:22:f4:ae:5f:0e:58:c4: 6a:28:8e:8c:af:64:b3:a9:01:94:d8:34:61:7a:00:cb:a7:09: 7d:b4:c6:49:21:f8:d1:30:4a:d3:48:d7:5d:03:38:bd:29:f5: e2:95:1e:d9:59:ec:dd:e0:d9:dc:21:ee:9a:12:77:95:08:aa: e5:2d:71:42:ae:9d:f4:f3:7f:32:f4:d0:09:a7:7d:ba:54:f4: 7b:9d:4a:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZhWMnFhfr+MD44Gg55/LaBqjZeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZC RDFDOTFCQjAeFw0yNTExMDIxODM3MDhaFw0yNTExMDYwMjIxMDhaMDMxMTAvBgNV BAMTKEMzRTQyMENFNTFDOEQyQjZCMDg5OTc1NEM2RkEwOTRDQUIyNTU5MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx/xw9iHANGarjhVR7UfvUj0dy 55Yme0sVTZJeFxbBiVQlp1PMUgTOVEIXINt1anov7mOVxlmsLOUKlSkft28/TP+F KLGLZxAFe4/cC0QWKrx7v1Swn90p/m9ADq5xEpA7QBooTPUwm7hOy3qSWXA9zVq4 zUItVb7AsiUh+WN1XwELnXPUvnpK4bekaanQLdVjP1lFcpONVHRkXCTF+lcFCR2f Sc9bUJ1XaygABjz3bM8YWt9G54XsyFi4VydFUlYe11LplvgAzuEf6MmzXwpYeuzo f8wIaxkOKI2rWKmjexwic0sAYFlzFSkiQiNF5+ndIDWE/EegGoMG+REs74VHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw+QgzlHI0rawiZdUxvoJTKslWRUwHwYDVR0j BBgwFoAUswMghLEhG7tSLgGrVuyUv70ckbswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTYzMWQ3Ny1mODA1LTQzOWMtOThmNC1iMGRhNjBmZThkZDEvMC9CMzAzMjA4NEIx MjExQkJCNTIyRTAxQUI1NkVDOTRCRkJEMUM5MUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZCRDFD OTFCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E2MzFkNzctZjgwNS00MzljLTk4 ZjQtYjBkYTYwZmU4ZGQxLzAvQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0 QkZCRDFDOTFCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABu4ewp9wMfqZvN6TAvA1JZ5lIN4nGgTlyfj Z4mHAGRdrLrCZpJddrKnTS6/BYvvGtge5pS7MLRU++sfO35yEua3NPnZD0YZTrg8 MFDohI+9O53otKuga2tbQjKO0ZoLcjdQME7K6qstcMS+8enmbcY7WJb34RzxMFF9 +7XEXcWalCPkbuheom5iO2H7d4caTkFy78Rx/H+E2ZOOvMoVxJaqqTyGbMtnn8Cf kDGQIvSuXw5YxGoojoyvZLOpAZTYNGF6AMunCX20xkkh+NEwStNI110DOL0p9eKV HtlZ7N3g2dwh7poSd5UIquUtcUKunfTzfzL00AmnfbpU9HudSgE= -----END CERTIFICATE-----Generated at Wed Nov 5 00:39:03 2025 by rpki-client