$ rpki-client -vvf repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft File: 3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft (raw, json) Hash identifier: tJxIUA6vwQCrnpASFPaGQVvpngxqJQDDolkxYQsU+/Q= Subject key identifier: 41:5D:27:14:AE:6C:9A:56:07:5F:8F:C2:2D:A5:E4:FC:0D:56:BA:0D Authority key identifier: 3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB Certificate issuer: /CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB Certificate serial: 44EEDB558FF674ADD3C2FB03AC05DC98906C25A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft Manifest number: 0107 Signing time: Tue 04 Nov 2025 12:50:54 +0000 Manifest this update: Tue 04 Nov 2025 12:45:54 +0000 Manifest next update: Fri 07 Nov 2025 17:12:54 +0000 Files and hashes: 1: 3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl (hash: r6SYmARIy/XVYOdniYVyX/I6gfvK76UuNMbMtLLwZAY=) 2: 3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa (hash: gfWNy9lIc/MVIMgNjSxC32IkW0PrSYj/0GoqdaAmvtI=) 3: 3135372e32302e3135382e302f32332d3233203d3e20313431313230.roa (hash: uyjSRskgL9BJCMKxVifWZ7TJaXQpE36bCbtIhaZsOr4=) 4: 3135372e32302e3135382e302f32342d3234203d3e20313431313230.roa (hash: YasvvxbCzsiYxjm39PQuEFNka/y9AUBvJZG9vLwVOCc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:ee:db:55:8f:f6:74:ad:d3:c2:fb:03:ac:05:dc:98:90:6c:25:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB Validity Not Before: Nov 4 12:45:54 2025 GMT Not After : Nov 7 17:12:54 2025 GMT Subject: CN=415D2714AE6C9A56075F8FC22DA5E4FC0D56BA0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:87:5e:b8:f6:18:34:54:5d:a6:72:f5:8b:7c: f9:6f:63:55:a4:62:d3:0f:6e:d4:ed:b9:06:c1:62: b5:b8:43:5e:c7:ff:71:9a:a7:65:d0:20:56:6f:5f: bb:0e:8f:87:e4:0e:c0:8d:d3:58:26:b7:04:6f:fa: 7c:91:5b:e0:d8:b9:eb:93:49:c8:b3:58:ad:d8:38: 16:45:2f:e7:fc:fb:58:cf:59:d2:90:51:53:b6:f1: ff:de:7a:d3:08:db:ce:23:d6:a0:9e:95:d3:b5:4e: ce:31:8f:1d:00:cb:a0:f4:ec:ca:da:88:cd:e2:74: d7:47:13:0e:18:bf:9b:ab:bf:64:ed:48:ea:ae:d4: 5b:d9:c7:c5:3b:ea:15:b0:27:27:84:a6:43:d4:b3: 7e:7f:36:87:9c:c0:4b:8f:bd:4f:33:db:bb:a7:74: 64:5f:4d:f1:cb:2b:17:1a:7b:85:eb:ae:b2:76:89: 4a:4f:57:11:c5:c3:fe:db:32:ce:b9:d2:3d:b8:a2: 07:33:9c:47:75:8a:47:28:90:e8:d2:cb:92:1f:d6: 0b:5b:dc:ee:e9:aa:9e:6b:e3:e7:82:a6:4c:39:51: 3c:14:6b:80:8e:87:ac:90:9b:a1:4f:dd:8f:f3:74: cd:71:53:8e:77:b4:9c:12:21:17:8d:37:f3:b7:25: 94:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5D:27:14:AE:6C:9A:56:07:5F:8F:C2:2D:A5:E4:FC:0D:56:BA:0D X509v3 Authority Key Identifier: keyid:3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:ec:c4:fa:6d:68:a2:30:a2:b8:94:4d:ba:16:99:4e:3a:b0: 38:34:bd:5d:25:7b:c6:f0:98:4e:27:f2:c3:7f:86:4c:06:ce: 1b:f3:80:ca:86:de:0f:e4:56:4a:58:ba:0f:a3:2e:98:3e:ae: 8d:77:5f:ae:4e:c4:65:32:33:32:11:bf:69:52:a3:d7:d1:d0: f8:90:a0:73:e0:ff:e2:c5:7b:c3:67:b2:da:38:a8:38:e0:54: d8:22:c0:05:a8:b8:84:fb:0b:02:1e:f6:89:fa:92:3a:10:27: 5a:6b:dd:fb:d4:e0:4b:fb:90:77:15:5c:e1:01:e1:05:8d:e9: 54:4b:7f:50:d2:07:5f:a7:3b:e5:8a:30:1b:36:56:75:4f:2f: f3:5c:4e:83:9f:18:00:d4:0d:8d:61:e8:bb:b6:dd:ef:77:85: 08:a1:1d:96:de:14:68:13:e7:d7:f8:03:4a:bd:78:68:13:cb: 4d:d9:96:db:3e:f4:1e:fa:fe:17:a2:e5:0d:b8:2f:27:9a:9c: 24:48:e5:14:25:17:49:65:96:0b:f5:05:c1:40:6f:ac:9a:f4: 80:a6:0f:7e:94:a2:dd:0a:5c:68:cf:89:05:ad:68:d8:e2:de: 4f:91:21:8f:ce:58:f7:ad:5f:43:60:06:b0:8b:96:13:08:83: 00:fe:f4:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURO7bVY/2dK3TwvsDrAXcmJBsJagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNENzBF MzREMjlBQjAeFw0yNTExMDQxMjQ1NTRaFw0yNTExMDcxNzEyNTRaMDMxMTAvBgNV BAMTKDQxNUQyNzE0QUU2QzlBNTYwNzVGOEZDMjJEQTVFNEZDMEQ1NkJBMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoh1649hg0VF2mcvWLfPlvY1Wk YtMPbtTtuQbBYrW4Q17H/3Gap2XQIFZvX7sOj4fkDsCN01gmtwRv+nyRW+DYueuT ScizWK3YOBZFL+f8+1jPWdKQUVO28f/eetMI284j1qCeldO1Ts4xjx0Ay6D07Mra iM3idNdHEw4Yv5urv2TtSOqu1FvZx8U76hWwJyeEpkPUs35/NoecwEuPvU8z27un dGRfTfHLKxcae4XrrrJ2iUpPVxHFw/7bMs650j24ogcznEd1ikcokOjSy5If1gtb 3O7pqp5r4+eCpkw5UTwUa4COh6yQm6FP3Y/zdM1xU453tJwSIReNN/O3JZTpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQV0nFK5smlYHX4/CLaXk/A1Wug0wHwYDVR0j BBgwFoAUPG10hdYa1UImFS5dioE9cONNKaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTU5YTM2Mi05NTBjLTQ1YzItYWVjYy04MmIyMTRiY2U0NzQvMC8zQzZENzQ4NUQ2 MUFENTQyMjYxNTJFNUQ4QTgxM0Q3MEUzNEQyOUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNENzBFMzRE MjlBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE1OWEzNjItOTUwYy00NWMyLWFl Y2MtODJiMjE0YmNlNDc0LzAvM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNE NzBFMzREMjlBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHsxPptaKIworiUTboWmU46sDg0vV0le8bw mE4n8sN/hkwGzhvzgMqG3g/kVkpYug+jLpg+ro13X65OxGUyMzIRv2lSo9fR0PiQ oHPg/+LFe8Nnsto4qDjgVNgiwAWouIT7CwIe9on6kjoQJ1pr3fvU4Ev7kHcVXOEB 4QWN6VRLf1DSB1+nO+WKMBs2VnVPL/NcToOfGADUDY1h6Lu23e93hQihHZbeFGgT 59f4A0q9eGgTy03Zlts+9B76/hei5Q24LyeanCRI5RQlF0lllgv1BcFAb6ya9ICm D36Uot0KXGjPiQWtaNji3k+RIY/OWPetX0NgBrCLlhMIgwD+9HQ= -----END CERTIFICATE-----Generated at Tue Nov 4 18:57:12 2025 by rpki-client