$ rpki-client -vvf repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft File: 3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft (raw, json) Hash identifier: dif4ZmVhdtMv6NOuStlPWaawICMOvpGB298slk4ZRuM= Subject key identifier: 98:82:64:A5:FB:38:CD:96:04:6F:9C:03:5B:70:56:F8:6B:E7:0E:F1 Authority key identifier: 3D:20:52:2B:51:AE:AA:41:F5:94:90:E2:D5:5C:36:DE:B6:C2:1C:77 Certificate issuer: /CN=3D20522B51AEAA41F59490E2D55C36DEB6C21C77 Certificate serial: 5F2252EB4F3E4285CAFD2C72DF9C22D2F6521555 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft Manifest number: 01E8 Signing time: Tue 04 Nov 2025 07:01:47 +0000 Manifest this update: Tue 04 Nov 2025 06:56:47 +0000 Manifest next update: Fri 07 Nov 2025 10:16:47 +0000 Files and hashes: 1: 3130332e33302e3139322e302f32342d3234203d3e20313530323537.roa (hash: ZSgY5OMesKAVjFXk2K7xGan10euYjEFEbhi4eeTqUI4=) 2: 3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl (hash: mCJZ/DBKfZnBvr8ATZZ+Cs76pVbAgxo4GxspdHytKx8=) 3: 3130332e33302e3139332e302f32342d3234203d3e20313530323537.roa (hash: GQbGwj8/3pFXSYNr52t6SKb3/O8bij4qIjKoYgJR2e8=) 4: 3130332e33302e3139322e302f32332d3233203d3e20313530323537.roa (hash: c6BbZqskhId1bW3l6aSuRQLjcbQNOmGBaOGbC28FTXg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:22:52:eb:4f:3e:42:85:ca:fd:2c:72:df:9c:22:d2:f6:52:15:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D20522B51AEAA41F59490E2D55C36DEB6C21C77 Validity Not Before: Nov 4 06:56:47 2025 GMT Not After : Nov 7 10:16:47 2025 GMT Subject: CN=988264A5FB38CD96046F9C035B7056F86BE70EF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:93:04:13:db:a2:0b:dd:25:58:7b:64:5b:b2: 9e:2f:49:cf:50:15:fd:d7:52:3b:d6:21:87:51:75: 3f:8b:d8:9e:8f:29:23:d1:d2:78:82:cd:70:06:49: c7:d9:77:71:e8:62:aa:bc:4d:47:4c:a5:00:f2:33: 19:a6:71:a4:62:39:05:82:f1:9b:26:25:61:9d:36: 9c:10:33:65:1c:ff:fe:05:eb:35:03:c8:2f:32:c6: 27:b2:c7:78:92:44:01:24:5d:50:6b:73:41:2e:70: c3:ab:e6:8e:9a:5f:6f:67:c7:b3:34:55:51:14:a6: 43:39:ed:0f:27:30:f0:cc:93:29:20:ef:e2:f7:72: a3:77:92:7c:69:4a:a9:b1:61:75:b7:ff:b7:65:b3: 63:51:d6:3f:ee:27:c8:03:bc:c5:b7:b5:d4:af:04: 19:86:3e:e0:f0:7a:4f:78:38:f0:f6:f8:38:bc:4f: cf:82:50:a0:6e:07:f1:37:1a:56:9d:47:51:c9:dd: e4:b9:36:6e:b1:5f:4d:5f:41:f6:9f:80:60:e4:27: 3f:db:ef:cb:38:ec:d1:04:d2:b1:80:17:6e:d0:d8: 9e:eb:8d:6a:c3:7b:aa:ba:ac:64:ed:ec:d2:e4:41: 99:03:80:f7:eb:af:a2:0b:2c:47:49:03:94:81:06: a8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:82:64:A5:FB:38:CD:96:04:6F:9C:03:5B:70:56:F8:6B:E7:0E:F1 X509v3 Authority Key Identifier: keyid:3D:20:52:2B:51:AE:AA:41:F5:94:90:E2:D5:5C:36:DE:B6:C2:1C:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:6d:81:74:59:be:92:62:d0:5f:77:bc:b0:0d:91:e7:2f:6b: 07:ad:b3:bb:dc:0b:83:60:ff:e1:8a:84:a3:1f:e1:fd:5b:62: bc:43:c7:95:59:6f:8e:7d:4c:39:e2:c9:ac:65:8c:4c:03:c9: 7b:a9:23:5e:b9:7c:9e:60:9d:fd:6a:aa:94:eb:68:9f:c6:0b: 6d:60:84:b2:3c:b7:e6:5e:33:f7:35:ee:ce:69:7c:f9:02:df: 90:b2:d6:50:85:02:80:26:90:eb:47:7f:af:a3:08:d1:79:63: f7:60:ff:95:cf:93:ce:70:74:f7:51:fc:f8:05:fe:10:8a:2a: 6c:3e:9d:24:d1:67:69:cd:4b:39:fa:ff:f3:fc:9b:3e:54:c4: 0a:e5:cf:b1:14:45:7c:a1:94:b4:43:13:e2:bb:16:28:d6:84: 2d:0c:87:89:6c:c4:72:e0:59:bb:15:e2:1c:33:16:9a:9b:74: 77:f8:4c:bb:ed:a5:ab:44:03:12:ef:30:2b:a4:fb:9f:0e:a6: 98:a0:c8:66:bc:99:d9:65:22:9f:22:fe:2a:14:e5:1a:d0:af: e0:76:4a:61:a2:e6:2b:bb:18:34:5a:b9:24:b7:50:f0:cc:62: 17:8a:cd:94:5f:0f:f8:f2:fe:a4:e9:2b:79:9e:b6:1d:40:08: 3a:6c:87:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXyJS608+QoXK/Sxy35wi0vZSFVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QyMDUyMkI1MUFFQUE0MUY1OTQ5MEUyRDU1QzM2REVC NkMyMUM3NzAeFw0yNTExMDQwNjU2NDdaFw0yNTExMDcxMDE2NDdaMDMxMTAvBgNV BAMTKDk4ODI2NEE1RkIzOENEOTYwNDZGOUMwMzVCNzA1NkY4NkJFNzBFRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlkwQT26IL3SVYe2Rbsp4vSc9Q Ff3XUjvWIYdRdT+L2J6PKSPR0niCzXAGScfZd3HoYqq8TUdMpQDyMxmmcaRiOQWC 8ZsmJWGdNpwQM2Uc//4F6zUDyC8yxieyx3iSRAEkXVBrc0EucMOr5o6aX29nx7M0 VVEUpkM57Q8nMPDMkykg7+L3cqN3knxpSqmxYXW3/7dls2NR1j/uJ8gDvMW3tdSv BBmGPuDwek94OPD2+Di8T8+CUKBuB/E3GladR1HJ3eS5Nm6xX01fQfafgGDkJz/b 78s47NEE0rGAF27Q2J7rjWrDe6q6rGTt7NLkQZkDgPfrr6ILLEdJA5SBBqj3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmIJkpfs4zZYEb5wDW3BW+GvnDvEwHwYDVR0j BBgwFoAUPSBSK1GuqkH1lJDi1Vw23rbCHHcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZTYxZTVhZS1lNDVmLTRlZTMtOGY2Yi03Y2I1OWQ2MTc4M2IvMC8zRDIwNTIyQjUx QUVBQTQxRjU5NDkwRTJENTVDMzZERUI2QzIxQzc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0QyMDUyMkI1MUFFQUE0MUY1OTQ5MEUyRDU1QzM2REVCNkMy MUM3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWU2MWU1YWUtZTQ1Zi00ZWUzLThm NmItN2NiNTlkNjE3ODNiLzAvM0QyMDUyMkI1MUFFQUE0MUY1OTQ5MEUyRDU1QzM2 REVCNkMyMUM3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZtgXRZvpJi0F93vLANkecvawets7vcC4Ng /+GKhKMf4f1bYrxDx5VZb459TDniyaxljEwDyXupI165fJ5gnf1qqpTraJ/GC21g hLI8t+ZeM/c17s5pfPkC35Cy1lCFAoAmkOtHf6+jCNF5Y/dg/5XPk85wdPdR/PgF /hCKKmw+nSTRZ2nNSzn6//P8mz5UxArlz7EURXyhlLRDE+K7FijWhC0Mh4lsxHLg WbsV4hwzFpqbdHf4TLvtpatEAxLvMCuk+58OppigyGa8mdllIp8i/ioU5RrQr+B2 SmGi5iu7GDRauSS3UPDMYheKzZRfD/jy/qTpK3meth1ACDpsh/g= -----END CERTIFICATE-----Generated at Tue Nov 4 19:30:10 2025 by rpki-client