$ rpki-client -vvf repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft File: 3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft (raw, json) Hash identifier: IxHu9ssxy6grpN3aseggqpT4SbfXHt9mkhJA1xN9Xsw= Subject key identifier: CB:BC:DA:E3:96:ED:37:16:03:ED:7F:DF:E5:9C:D3:36:3B:92:21:4D Authority key identifier: 3B:26:08:37:8F:03:DC:AD:9A:64:B7:DF:68:B5:2F:2C:BC:64:35:25 Certificate issuer: /CN=3B2608378F03DCAD9A64B7DF68B52F2CBC643525 Certificate serial: 5F37D442C6482401BEBB2A13ED0E9BED94C557B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft Manifest number: 03B8 Signing time: Mon 03 Nov 2025 01:31:10 +0000 Manifest this update: Mon 03 Nov 2025 01:26:10 +0000 Manifest next update: Thu 06 Nov 2025 12:26:10 +0000 Files and hashes: 1: 3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa (hash: GKVVkkXboxeT4WcoJCcUdHA/7DHycn3Kvf/vm4KqRk4=) 2: 3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl (hash: 8Pu6JfmmgfukDmEw2qKXyHr4rAL/a7aQ4NVX6vW59Ng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 12:26:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:37:d4:42:c6:48:24:01:be:bb:2a:13:ed:0e:9b:ed:94:c5:57:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B2608378F03DCAD9A64B7DF68B52F2CBC643525 Validity Not Before: Nov 3 01:26:10 2025 GMT Not After : Nov 6 12:26:10 2025 GMT Subject: CN=CBBCDAE396ED371603ED7FDFE59CD3363B92214D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:32:f4:74:2a:f0:47:23:ca:be:cd:54:77:2e: 3f:a0:03:b5:99:a1:cf:09:ef:4c:0a:64:4f:33:7a: 8b:14:d0:d0:9b:8b:c0:41:86:e6:26:42:a6:1d:88: 65:bb:fa:97:59:0e:41:59:63:c1:a1:30:42:f2:1b: b0:ff:e8:66:1f:c6:74:d3:79:b8:65:4b:6a:01:16: 27:27:b3:db:f0:5e:c7:fb:54:be:3f:83:22:d5:a0: 4c:ab:dd:dc:4f:6f:d3:69:51:01:90:6d:9d:37:04: f8:14:ee:b8:31:52:ec:3b:54:a3:64:7f:5e:b2:62: 0f:d0:6d:e2:52:4b:3a:7d:8c:34:f3:69:20:12:65: 5c:e8:ff:ae:5d:64:67:c1:f5:8b:5c:da:6c:2b:d6: e8:78:49:c8:00:50:16:71:04:49:81:cc:6e:cf:f1: 7f:62:bc:ac:eb:a5:ed:3e:bc:5b:4c:40:0c:85:c2: 26:f9:3e:78:fa:b5:c2:25:2b:f5:d5:04:5b:0a:e1: de:7e:ea:4f:79:c6:e5:35:af:7a:6f:7a:d1:13:74: ff:8f:56:0f:53:55:cc:eb:09:c5:fa:94:00:cf:31: 8d:35:af:be:79:b5:b0:7d:ed:cf:8c:a7:ed:46:83: 65:74:b0:b9:24:17:97:f6:4f:47:18:cc:2f:7a:42: 35:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BC:DA:E3:96:ED:37:16:03:ED:7F:DF:E5:9C:D3:36:3B:92:21:4D X509v3 Authority Key Identifier: keyid:3B:26:08:37:8F:03:DC:AD:9A:64:B7:DF:68:B5:2F:2C:BC:64:35:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:69:f4:67:de:f1:ad:58:3b:01:12:02:68:de:2a:45:a2:e8: 63:e7:a2:ab:e1:99:af:c2:56:aa:88:e0:01:a2:eb:30:2f:f5: 85:f0:ac:68:c8:c4:53:11:54:38:45:61:1c:ee:3a:fe:cb:e2: 31:de:96:1a:cd:f8:75:0d:ec:51:b3:31:c9:9e:f0:a4:d5:ca: 85:f0:df:27:cb:18:19:82:c3:f6:08:69:b4:8c:6e:37:d8:6d: 4b:f7:8a:04:a4:28:34:44:10:16:3f:f5:30:80:c1:ba:6e:ee: 31:1d:d8:11:29:31:02:e8:ba:94:d4:a1:33:ba:90:bb:11:ce: 0d:35:3c:a8:9e:bd:ec:77:38:28:df:ba:53:03:ee:2f:a5:6d: 85:94:50:b9:a9:24:7b:70:c7:8a:4c:8f:6e:0f:ce:ea:8c:f0: d6:59:74:2c:e7:78:c0:3f:03:be:a4:88:2a:59:6b:5f:58:e8: 49:66:9f:15:29:68:e5:61:79:2c:15:fe:6e:c7:aa:34:32:f3: 2b:44:a0:0a:aa:c6:ae:a3:70:a7:9f:b9:50:26:63:c3:e5:c2: 4a:7f:14:34:ae:17:11:b9:0a:5b:36:36:54:d5:4e:51:a1:c8: 11:d5:e1:fc:8d:4a:59:0c:48:2b:be:44:ef:e7:ba:28:cb:ce: a9:b1:83:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXzfUQsZIJAG+uyoT7Q6b7ZTFV7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJGMkNC QzY0MzUyNTAeFw0yNTExMDMwMTI2MTBaFw0yNTExMDYxMjI2MTBaMDMxMTAvBgNV BAMTKENCQkNEQUUzOTZFRDM3MTYwM0VEN0ZERkU1OUNEMzM2M0I5MjIxNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8MvR0KvBHI8q+zVR3Lj+gA7WZ oc8J70wKZE8zeosU0NCbi8BBhuYmQqYdiGW7+pdZDkFZY8GhMELyG7D/6GYfxnTT ebhlS2oBFicns9vwXsf7VL4/gyLVoEyr3dxPb9NpUQGQbZ03BPgU7rgxUuw7VKNk f16yYg/QbeJSSzp9jDTzaSASZVzo/65dZGfB9Ytc2mwr1uh4ScgAUBZxBEmBzG7P 8X9ivKzrpe0+vFtMQAyFwib5Pnj6tcIlK/XVBFsK4d5+6k95xuU1r3pvetETdP+P Vg9TVczrCcX6lADPMY01r755tbB97c+Mp+1Gg2V0sLkkF5f2T0cYzC96QjU/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy7za45btNxYD7X/f5ZzTNjuSIU0wHwYDVR0j BBgwFoAUOyYIN48D3K2aZLffaLUvLLxkNSUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Zjc2Yjc3My00MDVmLTQ1OGYtOWI4OC04NTIwOTUxNzNmMTYvMC8zQjI2MDgzNzhG MDNEQ0FEOUE2NEI3REY2OEI1MkYyQ0JDNjQzNTI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJGMkNCQzY0 MzUyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3NmI3NzMtNDA1Zi00NThmLTli ODgtODUyMDk1MTczZjE2LzAvM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJG MkNCQzY0MzUyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL5p9Gfe8a1YOwESAmjeKkWi6GPnoqvhma/C VqqI4AGi6zAv9YXwrGjIxFMRVDhFYRzuOv7L4jHelhrN+HUN7FGzMcme8KTVyoXw 3yfLGBmCw/YIabSMbjfYbUv3igSkKDREEBY/9TCAwbpu7jEd2BEpMQLoupTUoTO6 kLsRzg01PKievex3OCjfulMD7i+lbYWUULmpJHtwx4pMj24PzuqM8NZZdCzneMA/ A76kiCpZa19Y6ElmnxUpaOVheSwV/m7HqjQy8ytEoAqqxq6jcKefuVAmY8Plwkp/ FDSuFxG5Cls2NlTVTlGhyBHV4fyNSlkMSCu+RO/nuijLzqmxg8s= -----END CERTIFICATE-----Generated at Wed Nov 5 10:24:56 2025 by rpki-client