$ rpki-client -vvf repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft File: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft (raw, json) Hash identifier: DdRlgeaXSxXr3DgxTEe9upDRlUagegUOHRmWMVvOoag= Subject key identifier: A9:22:D9:2A:F8:65:3A:EE:CE:00:A6:D7:8E:29:BB:22:EA:C9:5C:1F Authority key identifier: 3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 Certificate issuer: /CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Certificate serial: 06DDBE4F60FCD9A541207D680D7D8B611365D606 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft Manifest number: 03CB Signing time: Sat 01 Nov 2025 22:22:13 +0000 Manifest this update: Sat 01 Nov 2025 22:17:13 +0000 Manifest next update: Wed 05 Nov 2025 04:14:13 +0000 Files and hashes: 1: 3130332e38342e342e302f32322d3234203d3e20313332363431.roa (hash: ei+mi6lm3a64UFetrkni2cRNDguaELmNUyIIIt/btoQ=) 2: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl (hash: wMzpgfnW2i9Yvo4i9GdtMalKcaeoxFjEEsV7Kcq4gzg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 04:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:dd:be:4f:60:fc:d9:a5:41:20:7d:68:0d:7d:8b:61:13:65:d6:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Validity Not Before: Nov 1 22:17:13 2025 GMT Not After : Nov 5 04:14:13 2025 GMT Subject: CN=A922D92AF8653AEECE00A6D78E29BB22EAC95C1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:76:43:8d:c6:82:8f:08:4b:9f:65:39:29:0f: d0:66:d6:9f:31:81:9c:a6:2d:9d:bb:33:af:77:6e: a3:b3:26:0a:22:96:7c:78:b2:40:ac:6c:ee:16:ef: 5e:35:21:f3:71:3e:fc:55:f7:38:81:bb:05:e7:6e: a8:08:14:73:5e:be:29:df:8d:f1:ee:6d:3d:d5:27: 6e:3d:f5:d0:aa:58:9d:6e:6a:70:fd:a2:04:81:3f: 4f:b6:fa:fa:89:ec:6d:ad:a3:04:84:1e:fc:11:3a: 83:07:d7:d1:8d:59:0e:8f:0b:72:0e:35:05:82:56: ab:91:7b:05:55:10:0c:c0:68:da:ed:48:43:b1:4a: ad:d7:1c:51:d5:69:b3:9e:93:b8:47:98:c1:ff:67: 3b:29:a2:8f:42:15:9b:ff:23:f6:60:e2:b8:7a:a9: 45:40:4b:b2:e6:d2:36:19:0d:91:95:ac:c7:f7:9b: ac:c7:cc:94:13:a0:50:62:c6:98:0f:84:6c:8b:73: 48:f1:57:f3:7c:58:ce:b3:1b:a9:e6:d2:b9:36:cb: 2c:38:10:9b:ee:82:e4:9e:5a:c1:13:85:83:6c:55: e7:66:22:b5:7b:58:b2:a7:9b:80:35:a2:e0:2d:8d: df:ff:7d:eb:46:17:5a:05:9c:32:34:0b:f7:e7:4c: a9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:22:D9:2A:F8:65:3A:EE:CE:00:A6:D7:8E:29:BB:22:EA:C9:5C:1F X509v3 Authority Key Identifier: keyid:3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:01:dc:10:05:1c:e3:0b:f9:94:92:fd:c4:09:0d:9a:f4:15: ad:99:dc:c3:20:01:38:16:67:02:2e:70:67:4f:ba:d7:92:f7: 01:f2:76:8a:12:b6:3a:e2:5d:23:a4:cf:22:56:8c:26:c3:66: b7:59:82:23:0a:ce:56:19:db:f5:87:55:2c:13:54:1c:bc:d1: ee:8f:f3:ae:e1:98:a2:35:d1:51:0f:49:d5:48:d9:fd:22:46: 44:9c:9f:64:d3:d2:3c:cc:35:11:84:c8:51:21:90:bd:06:9e: ef:c7:4f:2b:7d:36:7a:d0:1b:7a:0d:8c:ae:03:73:ee:18:5b: 71:ed:01:c5:22:e0:4b:e8:08:7f:8c:33:0e:71:cc:56:47:b9: 16:4b:86:ce:f5:cc:fc:25:fa:67:9b:00:07:a3:b8:11:ef:0f: 74:bc:a8:a9:ff:7d:8f:71:13:f6:10:ed:2d:1a:4a:f2:7c:7d: 77:c8:2e:96:f1:52:77:03:48:c5:aa:0e:1b:2e:9b:79:09:7a: 7d:83:f8:cf:b6:18:2c:db:f7:17:fc:2b:bc:be:6b:f7:2a:38: 96:b5:bd:b3:0c:a7:0b:52:91:51:f7:a7:8a:6e:1b:fc:cd:e5: 86:89:58:5c:9a:84:83:50:e2:ec:47:3c:72:b1:67:2a:7b:8e: c1:cb:37:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBt2+T2D82aVBIH1oDX2LYRNl1gYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0 Q0RENzgzNjAeFw0yNTExMDEyMjE3MTNaFw0yNTExMDUwNDE0MTNaMDMxMTAvBgNV BAMTKEE5MjJEOTJBRjg2NTNBRUVDRTAwQTZENzhFMjlCQjIyRUFDOTVDMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfdkONxoKPCEufZTkpD9Bm1p8x gZymLZ27M693bqOzJgoilnx4skCsbO4W7141IfNxPvxV9ziBuwXnbqgIFHNevinf jfHubT3VJ2499dCqWJ1uanD9ogSBP0+2+vqJ7G2towSEHvwROoMH19GNWQ6PC3IO NQWCVquRewVVEAzAaNrtSEOxSq3XHFHVabOek7hHmMH/Zzspoo9CFZv/I/Zg4rh6 qUVAS7Lm0jYZDZGVrMf3m6zHzJQToFBixpgPhGyLc0jxV/N8WM6zG6nm0rk2yyw4 EJvuguSeWsEThYNsVedmIrV7WLKnm4A1ouAtjd//fetGF1oFnDI0C/fnTKmlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqSLZKvhlOu7OAKbXjim7IurJXB8wHwYDVR0j BBgwFoAUPAPPlReBlwxtCtvo+s/sakzdeDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjE0Y2VlMC01ZGY2LTRiMmItYmIzZC1mNjgzMjEzZTdjMzMvMC8zQzAzQ0Y5NTE3 ODE5NzBDNkQwQURCRThGQUNGRUM2QTRDREQ3ODM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0Q0RE NzgzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjYxNGNlZTAtNWRmNi00YjJiLWJi M2QtZjY4MzIxM2U3YzMzLzAvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVD NkE0Q0RENzgzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoB3BAFHOML+ZSS/cQJDZr0Fa2Z3MMgATgW ZwIucGdPuteS9wHydooStjriXSOkzyJWjCbDZrdZgiMKzlYZ2/WHVSwTVBy80e6P 867hmKI10VEPSdVI2f0iRkScn2TT0jzMNRGEyFEhkL0Gnu/HTyt9NnrQG3oNjK4D c+4YW3HtAcUi4EvoCH+MMw5xzFZHuRZLhs71zPwl+mebAAejuBHvD3S8qKn/fY9x E/YQ7S0aSvJ8fXfILpbxUncDSMWqDhsum3kJen2D+M+2GCzb9xf8K7y+a/cqOJa1 vbMMpwtSkVH3p4puG/zN5YaJWFyahINQ4uxHPHKxZyp7jsHLN/0= -----END CERTIFICATE-----Generated at Tue Nov 4 01:58:36 2025 by rpki-client