$ rpki-client -vvf repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft File: 3008AF948C4742A525201F3FDA7EFB1800D52D64.mft (raw, json) Hash identifier: empTFh/5wDfOJfAmvBkXw1D98yy/QHztY5QDqP5uCLU= Subject key identifier: 52:1D:06:8E:3E:E4:A4:4F:23:E8:74:CE:05:8F:38:93:6A:8F:1C:1F Authority key identifier: 30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 Certificate issuer: /CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Certificate serial: 4E0207D62244F2513650807E411188328EF86005 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft Manifest number: 011D Signing time: Wed 05 Nov 2025 00:32:00 +0000 Manifest this update: Wed 05 Nov 2025 00:27:00 +0000 Manifest next update: Sat 08 Nov 2025 12:09:00 +0000 Files and hashes: 1: 3135372e31352e34362e302f32342d3234203d3e20313532333936.roa (hash: mMVF2hYAKg0sTXxaBuy+2bvelwvkw1QteJi5RAQF2oo=) 2: 3135372e31352e34362e302f32332d3234203d3e20313532333936.roa (hash: G0a1IDIDp/6OW+B4SPVbcSdJGPsXh5ci397pwO85gSY=) 3: 3135372e31352e34372e302f32342d3234203d3e20313532333936.roa (hash: 2sgMNPvdPKPmSXukXACjrwvtdQ3QHDjRcB3RK3DeklA=) 4: 3008AF948C4742A525201F3FDA7EFB1800D52D64.crl (hash: KW1pS60w0mQgCxyoMV6BgXlLU18yZxpECckiGwbahKE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 08:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:02:07:d6:22:44:f2:51:36:50:80:7e:41:11:88:32:8e:f8:60:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Validity Not Before: Nov 5 00:27:00 2025 GMT Not After : Nov 8 12:09:00 2025 GMT Subject: CN=521D068E3EE4A44F23E874CE058F38936A8F1C1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:db:06:95:5f:5b:bc:b9:fb:9e:0d:10:bf:72: f0:d4:e9:5d:1a:9a:c1:9e:dc:36:ff:b4:01:8a:4c: f6:d1:36:24:fc:96:e3:2b:fe:b5:5c:60:84:a4:a5: d2:94:ff:b2:a0:bf:c6:f4:bc:53:4b:52:ca:5a:4d: b9:da:77:4c:2d:d2:20:87:c5:29:73:c4:b7:a0:2f: dd:26:8b:00:3b:5b:78:78:e4:05:81:51:1b:5c:65: 39:d7:43:ef:66:90:18:5c:05:e5:d6:b8:0a:d6:d4: 45:6e:cb:22:01:eb:0c:35:5b:71:2b:6e:ac:c9:cb: 39:95:21:1c:0a:10:69:af:a5:53:90:cb:8f:24:54: 10:6e:3e:cc:d4:04:0f:94:35:37:59:49:98:13:3d: cd:c2:52:2c:65:ac:16:50:1e:6c:c5:8c:ef:3c:e8: 47:62:30:77:56:7d:a5:1a:99:71:8f:a9:e1:eb:b1: a7:b4:37:ff:e8:66:f3:d2:49:99:85:09:1d:9f:f9: 77:f9:ec:ef:bf:ef:ce:6f:6f:9d:6b:26:af:a3:ae: 61:1b:55:aa:bb:04:01:5f:44:e6:12:75:4e:38:5a: 84:39:fb:5d:a4:b5:66:c2:db:0a:aa:57:12:6f:1c: be:b7:0a:d4:77:6a:14:2b:be:2c:10:3e:b0:1c:c8: 71:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1D:06:8E:3E:E4:A4:4F:23:E8:74:CE:05:8F:38:93:6A:8F:1C:1F X509v3 Authority Key Identifier: keyid:30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d1:6d:a9:a3:ad:e2:dc:42:bd:a6:94:8c:a2:c3:ca:ae:56: a7:55:81:34:93:86:ff:bf:26:c0:93:fd:96:d9:41:84:a9:a6: 09:87:4e:21:28:1e:28:00:f4:84:6e:db:ad:c8:01:de:0f:28: 9f:0b:55:fc:d9:ee:63:46:90:78:39:ac:c9:8c:8a:4c:11:dc: 6a:a6:79:fc:f7:12:c3:b9:5d:5a:bd:8b:53:d2:67:cb:ac:72: 35:20:f4:a5:f4:f6:c5:31:85:4d:6a:56:fe:e4:67:a8:3c:a3: ce:22:e9:c6:f1:1d:aa:21:e3:00:11:d7:3c:e2:d0:1c:98:6f: 2d:c0:29:7c:c9:7d:6c:8a:f7:6d:07:2b:e6:15:99:01:62:7e: 8e:b7:3a:73:91:15:22:2f:2b:27:c7:21:f9:d1:74:03:b4:ec: b5:b6:a7:82:68:a3:79:85:ba:1e:9f:49:5f:f3:47:26:34:3c: fc:d8:05:50:71:ff:78:39:3a:69:2d:cf:c7:79:65:17:ee:8c: 95:d6:4d:d3:65:33:1e:95:97:37:9a:0a:7c:1d:da:b9:c6:54: 1c:07:81:cd:61:ec:e3:76:0f:7c:39:87:75:51:ce:d4:0c:ca: 4c:23:70:22:2a:e9:f8:e0:4d:02:f0:39:53:21:8c:fe:c7:18: ce:c8:e4:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTgIH1iJE8lE2UIB+QRGIMo74YAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZCMTgw MEQ1MkQ2NDAeFw0yNTExMDUwMDI3MDBaFw0yNTExMDgxMjA5MDBaMDMxMTAvBgNV BAMTKDUyMUQwNjhFM0VFNEE0NEYyM0U4NzRDRTA1OEYzODkzNkE4RjFDMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY2waVX1u8ufueDRC/cvDU6V0a msGe3Db/tAGKTPbRNiT8luMr/rVcYISkpdKU/7Kgv8b0vFNLUspaTbnad0wt0iCH xSlzxLegL90miwA7W3h45AWBURtcZTnXQ+9mkBhcBeXWuArW1EVuyyIB6ww1W3Er bqzJyzmVIRwKEGmvpVOQy48kVBBuPszUBA+UNTdZSZgTPc3CUixlrBZQHmzFjO88 6EdiMHdWfaUamXGPqeHrsae0N//oZvPSSZmFCR2f+Xf57O+/785vb51rJq+jrmEb Vaq7BAFfROYSdU44WoQ5+12ktWbC2wqqVxJvHL63CtR3ahQrviwQPrAcyHHvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUh0Gjj7kpE8j6HTOBY84k2qPHB8wHwYDVR0j BBgwFoAUMAivlIxHQqUlIB8/2n77GADVLWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzM0ZWVkOS0xODdlLTRmNDYtYTViYi0wZWE4ZjY2OWFlOTAvMC8zMDA4QUY5NDhD NDc0MkE1MjUyMDFGM0ZEQTdFRkIxODAwRDUyRDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZCMTgwMEQ1 MkQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGMzNGVlZDktMTg3ZS00ZjQ2LWE1 YmItMGVhOGY2NjlhZTkwLzAvMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZC MTgwMEQ1MkQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/RbamjreLcQr2mlIyiw8quVqdVgTSThv+/ JsCT/ZbZQYSppgmHTiEoHigA9IRu263IAd4PKJ8LVfzZ7mNGkHg5rMmMikwR3Gqm efz3EsO5XVq9i1PSZ8uscjUg9KX09sUxhU1qVv7kZ6g8o84i6cbxHaoh4wAR1zzi 0ByYby3AKXzJfWyK920HK+YVmQFifo63OnORFSIvKyfHIfnRdAO07LW2p4Joo3mF uh6fSV/zRyY0PPzYBVBx/3g5Omktz8d5ZRfujJXWTdNlMx6VlzeaCnwd2rnGVBwH gc1h7ON2D3w5h3VRztQMykwjcCIq6fjgTQLwOVMhjP7HGM7I5F8= -----END CERTIFICATE-----Generated at Wed Nov 5 08:58:55 2025 by rpki-client