$ rpki-client -vvf repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft File: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft (raw, json) Hash identifier: TxRK7Rt1952nvtqQpDJGJ+6WYQgDhyPR6nLGBjN9QpY= Subject key identifier: C7:1F:AC:A0:32:DF:A7:C8:2F:2A:46:D3:E7:B5:CC:82:10:16:49:59 Authority key identifier: 37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 Certificate issuer: /CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Certificate serial: 1F698EB5A262D4B99EEF337CBE8D592B0A71B7BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft Manifest number: 0346 Signing time: Sun 02 Nov 2025 12:31:47 +0000 Manifest this update: Sun 02 Nov 2025 12:26:47 +0000 Manifest next update: Wed 05 Nov 2025 16:06:47 +0000 Files and hashes: 1: 3230322e382e32392e302f32342d3234203d3e203435373234.roa (hash: 07rhNtW/Y5m4M95o6Mh9hHoZo9bTd6uBptdm1OPHIUg=) 2: 3230322e382e32382e302f32342d3234203d3e203435373234.roa (hash: TGxuSO9FhQBkLIc4jzv5QfgoJ8WtxbBE2A0wVyFxCQ8=) 3: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl (hash: 5gxEHikOfFYBTbSf/G93+yx4qiBj0lHlA2BwT+XhmBY=) 4: 3130332e3233312e3131322e302f32322d3234203d3e203435373234.roa (hash: B3IC/AW+40oETvGKZUM7eObcGOyNmLTwTu+s/VISsCU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:06:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:69:8e:b5:a2:62:d4:b9:9e:ef:33:7c:be:8d:59:2b:0a:71:b7:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Validity Not Before: Nov 2 12:26:47 2025 GMT Not After : Nov 5 16:06:47 2025 GMT Subject: CN=C71FACA032DFA7C82F2A46D3E7B5CC8210164959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f0:97:f8:79:e3:c8:12:c6:eb:7e:d1:35:b5: 35:f7:4f:e6:9c:ac:7a:2f:9d:f4:e2:1e:b2:04:6c: 3b:2b:da:f2:ac:95:e7:27:6e:4c:72:c8:5a:4f:76: d2:e2:94:9f:7d:57:a4:7b:65:a9:1b:61:24:49:d3: da:22:08:9d:8c:a9:d0:cd:ea:bc:0d:73:66:bb:66: 52:9f:c7:12:25:49:79:bd:79:1a:bc:15:ae:93:d7: 27:74:33:c2:06:3e:f4:aa:95:b0:39:c6:50:43:8f: 1c:97:04:5b:43:97:f1:3e:39:03:97:fc:91:46:4c: 31:2b:81:6b:12:04:69:e5:68:fa:f2:d7:57:9e:df: b1:fa:69:62:5f:88:04:ab:0c:b1:63:33:cc:4c:ca: 6b:81:00:65:1c:79:92:ed:e6:4f:bf:91:c7:36:99: 4b:f0:18:64:ec:f4:51:5e:38:ed:12:07:9a:43:c3: 73:e1:93:ab:7d:0a:6f:aa:0a:59:80:04:bc:0d:20: 10:df:dd:31:58:fb:f7:da:c5:4b:e2:0f:3b:02:55: 7e:7a:df:79:9a:ce:85:dd:50:12:d4:cb:de:2f:4a: 5f:2e:ef:ec:c9:dd:51:aa:68:90:b3:7d:4a:97:51: c9:43:08:68:92:1c:4f:93:a5:06:80:a7:37:b3:53: 5e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1F:AC:A0:32:DF:A7:C8:2F:2A:46:D3:E7:B5:CC:82:10:16:49:59 X509v3 Authority Key Identifier: keyid:37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:47:19:22:f5:82:6d:50:7d:af:2d:91:35:5b:94:56:a2:b5: 33:79:1d:eb:26:db:cc:fa:cc:4a:e0:44:d5:fb:db:3a:d1:00: 29:13:0c:d6:b3:d5:a5:33:75:d3:26:83:ff:2e:2a:d6:d4:88: fc:de:8c:54:56:28:bd:df:0d:e2:4d:3d:f4:e2:38:51:64:85: 6c:d3:ba:bb:69:ee:80:7c:f0:89:03:fb:5e:ba:33:07:96:68: c8:1d:5f:a4:12:eb:20:8d:bc:f2:dc:2f:05:0e:74:11:a6:84: 16:85:46:ae:1f:59:3a:4d:57:c2:a7:38:1f:1d:81:cd:1b:00: 02:9e:5f:0f:d8:f0:a4:9a:d6:78:de:b7:46:ed:1b:fd:e7:cf: ce:00:df:36:4b:46:4e:f8:12:54:95:ae:fc:3c:7c:34:b4:82: 17:7a:b6:8e:6b:d7:92:ca:58:1c:26:85:8a:a7:24:41:36:fb: 14:2e:ef:ef:9e:45:bb:8c:d1:12:ae:c5:48:24:e7:43:80:7e: b5:89:32:a7:0f:c1:71:fe:b7:8c:28:5c:e8:27:71:36:dc:9b: ab:db:d9:66:90:8e:d0:72:d8:1c:19:fa:1d:ba:2c:d6:67:47: cf:3f:f9:9c:60:5e:df:02:63:dc:83:8b:c4:49:0f:17:87:aa: 04:71:b8:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH2mOtaJi1Lme7zN8vo1ZKwpxt7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBD ODhFNEJBOTAeFw0yNTExMDIxMjI2NDdaFw0yNTExMDUxNjA2NDdaMDMxMTAvBgNV BAMTKEM3MUZBQ0EwMzJERkE3QzgyRjJBNDZEM0U3QjVDQzgyMTAxNjQ5NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE8Jf4eePIEsbrftE1tTX3T+ac rHovnfTiHrIEbDsr2vKslecnbkxyyFpPdtLilJ99V6R7ZakbYSRJ09oiCJ2MqdDN 6rwNc2a7ZlKfxxIlSXm9eRq8Fa6T1yd0M8IGPvSqlbA5xlBDjxyXBFtDl/E+OQOX /JFGTDErgWsSBGnlaPry11ee37H6aWJfiASrDLFjM8xMymuBAGUceZLt5k+/kcc2 mUvwGGTs9FFeOO0SB5pDw3Phk6t9Cm+qClmABLwNIBDf3TFY+/faxUviDzsCVX56 33mazoXdUBLUy94vSl8u7+zJ3VGqaJCzfUqXUclDCGiSHE+TpQaApzezU16XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxx+soDLfp8gvKkbT57XMghAWSVkwHwYDVR0j BBgwFoAUNxln370gOi/UToj3htnw8MiOS6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWI4Yjg4OS0zYjNkLTRlZjUtYWQ3MC01YjEwNDVlZmYzOTMvMC8zNzE5NjdERkJE MjAzQTJGRDQ0RTg4Rjc4NkQ5RjBGMEM4OEU0QkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBDODhF NEJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGViOGI4ODktM2IzZC00ZWY1LWFk NzAtNWIxMDQ1ZWZmMzkzLzAvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYw RjBDODhFNEJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVHGSL1gm1Qfa8tkTVblFaitTN5Hesm28z6 zErgRNX72zrRACkTDNaz1aUzddMmg/8uKtbUiPzejFRWKL3fDeJNPfTiOFFkhWzT urtp7oB88IkD+166MweWaMgdX6QS6yCNvPLcLwUOdBGmhBaFRq4fWTpNV8KnOB8d gc0bAAKeXw/Y8KSa1njet0btG/3nz84A3zZLRk74ElSVrvw8fDS0ghd6to5r15LK WBwmhYqnJEE2+xQu7++eRbuM0RKuxUgk50OAfrWJMqcPwXH+t4woXOgncTbcm6vb 2WaQjtBy2BwZ+h26LNZnR88/+ZxgXt8CY9yDi8RJDxeHqgRxuKc= -----END CERTIFICATE-----Generated at Tue Nov 4 16:46:43 2025 by rpki-client