$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft File: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft (raw, json) Hash identifier: U57PZoKVEm5soUBaXn7zcOjsx8AkwUT5EwdYh13URUk= Subject key identifier: 24:F6:0C:12:EA:CF:08:66:DF:9B:04:C0:84:4D:E5:86:B8:C0:13:B9 Authority key identifier: C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0 Certificate issuer: /CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0 Certificate serial: 3BF56658B17FCD8F18D5C0073D44865A1D253A41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft Manifest number: 052F Signing time: Tue 04 Nov 2025 10:03:08 +0000 Manifest this update: Tue 04 Nov 2025 09:58:08 +0000 Manifest next update: Fri 07 Nov 2025 20:53:08 +0000 Files and hashes: 1: 323430343a343863303a3a2f33322d3332203d3e20313338313334.roa (hash: /uE3RoNjstpZuWvkeLBYaDpbs3/pa2JGUNOwerwb9Qk=) 2: 3130332e3133332e36302e302f32322d3232203d3e20313338313334.roa (hash: 1FGJd6AqSTK9oY+Kf0u0bGP0qcgnLzetRfPl9A2Bh4w=) 3: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl (hash: 2HJbEto4pyIxae3wyjvft3VNClV/1iUIZLqxSpVLsOc=) 4: 3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa (hash: M4zMEE4gM9B2z9mzotuldgSgaCKFtNvfP7tGSiFjQks=) 5: 3130332e3133332e36322e302f32342d3234203d3e20313338313334.roa (hash: hXWJa8fVoj0vzNayNv76Qv76zEys5r5KfZWHwpWNqSA=) 6: 3130332e3133332e36312e302f32342d3234203d3e20313338313334.roa (hash: fEqrWk5yzRrIfC/NwZzR4O5o8YjE++0relBMS0Qsam4=) 7: 3130332e3133332e36302e302f32342d3234203d3e20313338313334.roa (hash: amdqV6lzMAC4zxO9RwYxm18VuzSqbFKiq2hPtX/elIw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 20:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f5:66:58:b1:7f:cd:8f:18:d5:c0:07:3d:44:86:5a:1d:25:3a:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0 Validity Not Before: Nov 4 09:58:08 2025 GMT Not After : Nov 7 20:53:08 2025 GMT Subject: CN=24F60C12EACF0866DF9B04C0844DE586B8C013B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9d:7c:cb:ab:75:0f:d7:06:e5:32:44:47:e2: 22:1f:64:29:22:b6:fd:6d:f3:3d:3c:2d:28:be:2c: ce:b2:76:73:26:49:24:dc:3a:d9:04:98:89:32:7c: 44:0f:7f:45:e8:bb:f9:0b:64:5b:c9:70:ce:47:73: 9b:a1:fd:2a:f3:6b:fb:47:d1:58:61:ae:9a:f6:90: 9f:1d:c3:96:07:e7:2e:10:94:e1:37:09:6b:ec:65: 32:05:a6:4f:e5:35:c4:e4:81:d7:55:3e:6e:9c:88: db:af:70:52:c2:7f:29:a9:70:8b:bd:26:76:cd:4d: 95:75:9b:d6:88:eb:95:fc:e4:b5:5f:d2:e6:51:37: b6:78:3d:3b:c5:c8:12:10:22:a2:a3:27:af:08:c9: e9:11:a5:3e:d4:27:55:2b:7f:68:d1:29:50:ec:c1: fb:13:e1:64:78:b1:06:d5:26:a1:4d:2c:5e:88:92: 59:57:de:9e:8c:bf:d6:d2:3c:fe:45:f0:e3:4f:d8: 56:e5:f5:85:f4:5a:87:77:f4:2b:51:e8:4e:dc:bc: 41:d0:ef:c4:de:56:f2:9e:95:fc:b0:87:0a:d0:84: f0:9b:fb:aa:d8:82:e3:70:95:07:8c:6f:dc:05:d2: 9d:bd:08:f6:bf:02:e5:71:bb:6c:41:29:6e:cf:bc: ed:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F6:0C:12:EA:CF:08:66:DF:9B:04:C0:84:4D:E5:86:B8:C0:13:B9 X509v3 Authority Key Identifier: keyid:C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:d3:e6:fb:df:db:f8:02:16:b9:7b:18:33:35:8a:8f:d2:50: 17:59:4f:f9:dc:99:3a:6c:d7:40:52:cf:3e:78:d8:15:60:d8: ec:dd:32:e0:e9:70:d1:c8:9e:14:1e:fc:bc:2c:68:a8:bf:c0: 49:c9:4c:61:56:92:81:c8:27:75:ab:6b:2a:20:fc:a1:2b:ff: c3:e5:87:c1:df:3c:4e:b2:96:47:37:b8:d3:cb:76:01:71:23: c0:f1:b2:c9:e9:ed:4b:f2:d8:19:b5:1e:73:a2:af:1a:98:b8: 00:56:4a:13:7f:c4:ba:bb:96:f6:d2:5f:e6:c6:77:10:df:85: 32:8a:2f:8e:29:8e:8b:e1:49:95:53:71:04:6f:a8:03:d5:de: f4:35:ee:53:72:0d:1d:00:51:3b:dc:08:39:cd:eb:56:ce:89: ba:92:25:17:e5:bb:6f:06:95:a1:4b:99:3a:ec:63:3a:8c:77: 2e:4c:fd:4d:b1:68:70:8d:79:8d:47:a3:49:26:a4:a6:9f:a4: b5:ec:c5:e9:7f:14:6e:f5:55:1e:38:b8:ff:37:f5:d9:84:b0: ed:8d:d6:de:da:0a:ab:63:fa:92:28:84:3c:06:79:7e:ff:2b: 85:99:1e:9f:b3:47:7c:8f:80:fd:73:16:26:83:a5:24:4d:96: 84:77:fa:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO/VmWLF/zY8Y1cAHPUSGWh0lOkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAyOUZC RkNEREJCMDAeFw0yNTExMDQwOTU4MDhaFw0yNTExMDcyMDUzMDhaMDMxMTAvBgNV BAMTKDI0RjYwQzEyRUFDRjA4NjZERjlCMDRDMDg0NERFNTg2QjhDMDEzQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDnXzLq3UP1wblMkRH4iIfZCki tv1t8z08LSi+LM6ydnMmSSTcOtkEmIkyfEQPf0Xou/kLZFvJcM5Hc5uh/Srza/tH 0Vhhrpr2kJ8dw5YH5y4QlOE3CWvsZTIFpk/lNcTkgddVPm6ciNuvcFLCfympcIu9 JnbNTZV1m9aI65X85LVf0uZRN7Z4PTvFyBIQIqKjJ68IyekRpT7UJ1Urf2jRKVDs wfsT4WR4sQbVJqFNLF6IkllX3p6Mv9bSPP5F8ONP2Fbl9YX0Wod39CtR6E7cvEHQ 78TeVvKelfywhwrQhPCb+6rYguNwlQeMb9wF0p29CPa/AuVxu2xBKW7PvO0lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJPYMEurPCGbfmwTAhE3lhrjAE7kwHwYDVR0j BBgwFoAUw/gKNcHGh3u+SXGbkI0Cn7/N27AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2Y2OGFiYS05NTE1LTRkMTItYWFjMi04Y2VlNWRiMmE0OGYvMC9DM0Y4MEEzNUMx QzY4NzdCQkU0OTcxOUI5MDhEMDI5RkJGQ0REQkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAyOUZCRkNE REJCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NmNjhhYmEtOTUxNS00ZDEyLWFh YzItOGNlZTVkYjJhNDhmLzAvQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAy OUZCRkNEREJCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGXT5vvf2/gCFrl7GDM1io/SUBdZT/ncmTps 10BSzz542BVg2OzdMuDpcNHInhQe/LwsaKi/wEnJTGFWkoHIJ3Wrayog/KEr/8Pl h8HfPE6ylkc3uNPLdgFxI8Dxssnp7Uvy2Bm1HnOirxqYuABWShN/xLq7lvbSX+bG dxDfhTKKL44pjovhSZVTcQRvqAPV3vQ17lNyDR0AUTvcCDnN61bOibqSJRflu28G laFLmTrsYzqMdy5M/U2xaHCNeY1Ho0kmpKafpLXsxel/FG71VR44uP839dmEsO2N 1t7aCqtj+pIohDwGeX7/K4WZHp+zR3yPgP1zFiaDpSRNloR3+jY= -----END CERTIFICATE-----Generated at Wed Nov 5 22:53:08 2025 by rpki-client