$ rpki-client -vvf repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft File: 3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft (raw, json) Hash identifier: Igjvd5AMAkq02VzWYd5rftFjTdY8wsRm6dIHkrcOWxA= Subject key identifier: 4D:3F:6D:31:5C:A9:58:57:B9:2F:66:C7:7A:4B:32:E8:A4:0F:09:D7 Authority key identifier: 3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14 Certificate issuer: /CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614 Certificate serial: 3F1121B5807A7D1DBAF6483A04A90F6371E16141 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft Manifest number: 030B Signing time: Wed 05 Nov 2025 09:42:07 +0000 Manifest this update: Wed 05 Nov 2025 09:37:07 +0000 Manifest next update: Sat 08 Nov 2025 16:42:07 +0000 Files and hashes: 1: 3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa (hash: KB67q4SCRzcFv43ZUJG/KADzbe2hXV8kny5lP7t0r80=) 2: 3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl (hash: qOyigW+wafg8oTpOftbmqWgj+QgDo1oBxFwtWlyhJI0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 16:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:11:21:b5:80:7a:7d:1d:ba:f6:48:3a:04:a9:0f:63:71:e1:61:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614 Validity Not Before: Nov 5 09:37:07 2025 GMT Not After : Nov 8 16:42:07 2025 GMT Subject: CN=4D3F6D315CA95857B92F66C77A4B32E8A40F09D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9a:69:cf:36:1a:29:ae:c3:ad:97:79:27:a2: a2:e1:d6:cd:13:54:fa:9f:fe:8d:11:48:6f:45:0e: 35:53:eb:55:3e:49:6d:a3:bd:f5:1e:52:2f:5c:39: bf:f2:de:d8:a9:6d:60:f8:8f:13:bd:eb:6f:3d:60: cb:ba:e5:a5:cf:1e:88:67:0b:b9:00:33:8d:78:7c: ad:cb:ee:a0:5c:b5:11:c2:b9:fa:67:24:e9:a1:cc: f4:43:6f:90:29:ba:c1:0d:85:b4:1a:cf:0d:b7:54: eb:6e:d2:9a:2e:99:56:a2:2f:78:ff:fc:ca:ac:72: 98:36:37:7a:80:37:4a:2d:fc:88:c7:72:14:03:09: 0b:e2:53:94:50:e4:fd:d9:e1:36:c6:4d:58:62:a7: 8a:c0:a8:83:56:59:03:25:0a:a8:db:41:ef:2a:a7: b6:db:a7:6f:81:ef:e9:43:30:70:67:b2:ee:81:42: 76:f0:68:60:ab:c0:b2:43:dc:b7:74:4b:e9:70:5e: 31:f1:62:23:23:a2:99:f7:e8:ba:03:a0:02:10:d4: 38:eb:49:02:a2:20:05:23:3d:02:bc:98:a9:88:9b: 2c:9c:14:73:87:3c:ad:fa:90:1e:48:c9:e5:11:b7: 4d:84:53:60:e6:66:7b:b6:f9:33:8a:d2:f3:e8:77: 73:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3F:6D:31:5C:A9:58:57:B9:2F:66:C7:7A:4B:32:E8:A4:0F:09:D7 X509v3 Authority Key Identifier: keyid:3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:ba:5e:21:15:02:84:06:0a:b2:33:d8:e4:67:30:01:45:ee: 2e:89:f1:b7:7a:17:f5:06:4b:a7:30:88:57:5d:64:af:54:a3: 93:fc:f8:e6:96:35:24:1f:d6:a2:72:34:86:f4:70:17:52:d9: 15:a0:f7:47:45:54:0f:35:fa:57:6c:41:fd:03:b5:3e:ce:eb: 53:8c:c9:24:d0:b7:27:c5:6b:7d:77:ec:f8:97:ad:c0:7a:ec: 9b:14:b3:a3:c7:16:4a:77:98:b6:27:91:7c:00:96:be:e8:a1: 2f:94:b6:f0:27:79:ec:56:98:fc:65:10:2f:ff:51:c0:91:64: 28:f8:dc:7a:23:9a:99:f4:52:97:73:8a:d2:6c:83:42:7e:ea: cc:8e:54:6d:99:6a:ae:be:49:5d:e4:07:6c:1f:1d:10:69:bc: fe:f4:8f:e8:40:76:1b:8d:ae:05:8d:98:c3:9f:74:8d:6c:1b: 4a:2a:ab:76:5c:2c:3e:e2:03:10:0f:a2:ef:e1:42:31:c9:f8: 0f:d1:ec:b1:35:02:89:97:65:69:1d:d0:89:08:f6:25:4c:81: 3a:75:04:25:a2:05:dc:df:15:1d:cc:5d:ae:24:bf:71:91:29: 48:db:68:13:8d:cb:59:a9:93:89:db:93:30:55:3d:d2:75:52: 05:4f:83:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPxEhtYB6fR269kg6BKkPY3HhYUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJDQUQ4 NkNFRDYxNDAeFw0yNTExMDUwOTM3MDdaFw0yNTExMDgxNjQyMDdaMDMxMTAvBgNV BAMTKDREM0Y2RDMxNUNBOTU4NTdCOTJGNjZDNzdBNEIzMkU4QTQwRjA5RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFmmnPNhoprsOtl3knoqLh1s0T VPqf/o0RSG9FDjVT61U+SW2jvfUeUi9cOb/y3tipbWD4jxO96289YMu65aXPHohn C7kAM414fK3L7qBctRHCufpnJOmhzPRDb5ApusENhbQazw23VOtu0poumVaiL3j/ /Mqscpg2N3qAN0ot/IjHchQDCQviU5RQ5P3Z4TbGTVhip4rAqINWWQMlCqjbQe8q p7bbp2+B7+lDMHBnsu6BQnbwaGCrwLJD3Ld0S+lwXjHxYiMjopn36LoDoAIQ1Djr SQKiIAUjPQK8mKmImyycFHOHPK36kB5IyeURt02EU2DmZnu2+TOK0vPod3OtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTT9tMVypWFe5L2bHeksy6KQPCdcwHwYDVR0j BBgwFoAUOtfaYeulgAPT7yn3mq+8rYbO1hQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Y2E1NDc4MS05Njc4LTQ3NWMtYWMxYi1jZDRiZmNmNWQwZWEvMC8zQUQ3REE2MUVC QTU4MDAzRDNFRjI5Rjc5QUFGQkNBRDg2Q0VENjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJDQUQ4NkNF RDYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmNhNTQ3ODEtOTY3OC00NzVjLWFj MWItY2Q0YmZjZjVkMGVhLzAvM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJD QUQ4NkNFRDYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGe6XiEVAoQGCrIz2ORnMAFF7i6J8bd6F/UG S6cwiFddZK9Uo5P8+OaWNSQf1qJyNIb0cBdS2RWg90dFVA81+ldsQf0DtT7O61OM ySTQtyfFa3137PiXrcB67JsUs6PHFkp3mLYnkXwAlr7ooS+UtvAneexWmPxlEC// UcCRZCj43Hojmpn0UpdzitJsg0J+6syOVG2Zaq6+SV3kB2wfHRBpvP70j+hAdhuN rgWNmMOfdI1sG0oqq3ZcLD7iAxAPou/hQjHJ+A/R7LE1AomXZWkd0IkI9iVMgTp1 BCWiBdzfFR3MXa4kv3GRKUjbaBONy1mpk4nbkzBVPdJ1UgVPg7o= -----END CERTIFICATE-----Generated at Wed Nov 5 17:42:07 2025 by rpki-client