$ rpki-client -vvf repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft File: 3703AC4154F05B1E642F31DEF71A238407E82D59.mft (raw, json) Hash identifier: xbx30EvlDs+yRbPWx0BX5ISigCz941NP5vhcc5lPuyI= Subject key identifier: 4C:BC:7C:30:C3:C5:F3:B2:80:D1:E7:C4:67:01:39:47:47:09:9A:56 Authority key identifier: 37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59 Certificate issuer: /CN=3703AC4154F05B1E642F31DEF71A238407E82D59 Certificate serial: 3012BC575859B776D17A4B1C97A323CD33F99413 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft Manifest number: 04CB Signing time: Thu 13 Nov 2025 17:40:54 +0000 Manifest this update: Thu 13 Nov 2025 17:35:54 +0000 Manifest next update: Sun 16 Nov 2025 18:28:54 +0000 Files and hashes: 1: 3130332e3136302e34312e302f32342d3234203d3e20313431353936.roa (hash: hTOnvJY78aaZJU0V/ewFlrDahpGLWlt1kXeTr26Q6jE=) 2: 3703AC4154F05B1E642F31DEF71A238407E82D59.crl (hash: qJxHB+GE3vyxtfrdMNL/NFyX0meTtx1NdeGZo1uwlAE=) 3: 3130332e3136302e34302e302f32342d3234203d3e20313431353936.roa (hash: /26G7paj90BYpA/7obbRkQ0e5IpXJm+V8bRm2IMmu/M=) 4: 3130332e3136302e34302e302f32332d3233203d3e20313431353936.roa (hash: RNQYxKN0Nubn/ygqO8rH37j/P4lI+9FQ1kXn5iYtC0w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Nov 2025 18:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:12:bc:57:58:59:b7:76:d1:7a:4b:1c:97:a3:23:cd:33:f9:94:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3703AC4154F05B1E642F31DEF71A238407E82D59 Validity Not Before: Nov 13 17:35:54 2025 GMT Not After : Nov 16 18:28:54 2025 GMT Subject: CN=4CBC7C30C3C5F3B280D1E7C46701394747099A56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f0:5c:ba:0e:f9:35:3d:a0:61:e7:32:dc:de: 51:20:3c:e0:70:dd:a0:c7:d6:81:fd:b8:d4:74:54: 18:4d:96:a4:4c:16:87:35:94:1d:31:94:cf:a3:2d: 7b:89:0b:31:7c:51:04:20:02:72:99:d9:7f:ed:d9: 6b:d9:6a:bf:bd:b4:77:8b:a4:da:ec:96:bf:0b:c3: f1:59:4e:9e:aa:8d:44:46:e4:a3:83:ad:8d:d3:4d: fa:9c:ca:30:d0:ab:3c:8f:29:8d:47:38:3e:57:fb: cd:64:f1:d4:84:0e:5a:56:4e:f1:3e:df:ac:52:a7: 55:35:98:d3:81:77:83:40:e1:fb:b7:32:0b:5e:51: db:fd:37:a6:63:8c:0a:15:7e:f4:28:a8:4d:64:ac: 0a:7f:88:33:f9:35:b9:00:65:1a:f4:cf:39:f6:54: c8:9b:af:a0:21:fe:be:6d:46:d0:fc:c8:73:71:3b: cc:5f:9c:e1:bd:db:e3:50:43:1f:52:52:f7:d5:da: ae:8e:8c:9e:de:4b:d4:df:24:09:34:2d:94:82:11: 58:78:6e:a2:d9:a3:db:f9:f1:be:5c:80:b2:a9:8d: 6c:f3:02:bb:28:d0:4c:ec:34:89:d7:4d:46:42:0a: 81:51:c9:82:60:a7:08:95:d1:07:99:29:d9:c2:19: f4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:BC:7C:30:C3:C5:F3:B2:80:D1:E7:C4:67:01:39:47:47:09:9A:56 X509v3 Authority Key Identifier: keyid:37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:75:6b:67:d3:c2:7c:55:6f:e0:3e:87:53:f0:d6:a4:07:60: e2:84:e5:84:ee:4c:70:78:72:7b:78:0b:47:35:32:7d:f0:af: 4b:aa:12:84:2b:6e:e7:9f:f8:5f:a3:9d:74:30:7b:ce:17:3b: a9:fa:f2:63:1d:ff:49:56:3d:2e:15:ee:e1:33:81:c8:d8:e7: 5b:a4:29:fa:41:cf:98:f2:5e:aa:ef:dd:e1:59:c9:7a:be:a8: 7b:62:95:6e:61:da:5a:1a:69:c2:3b:57:79:a4:5e:29:a0:e7: d6:3f:3d:4f:f3:f0:ea:f1:90:38:33:ec:d4:5b:d8:f9:99:8f: c3:71:82:ee:33:3d:af:11:4b:c3:57:d1:29:61:39:41:0f:9c: 55:dd:bb:83:8e:0b:c0:b1:04:ec:2f:47:8d:9f:04:19:76:98: 54:04:94:d6:3e:55:be:23:64:aa:cd:f7:f9:44:25:f5:a4:4a: 4e:10:a0:99:19:8d:d1:2f:70:04:ff:e4:8c:42:32:56:a9:f6: 76:43:89:e8:ab:3c:eb:a8:a8:2f:0c:ba:4b:44:d6:2e:e6:b7: e2:a9:e6:5a:7b:27:53:72:e9:32:86:1e:44:2b:d8:71:39:a1: 8d:bc:54:28:84:22:b4:b8:9c:00:8a:bb:55:8b:d7:0b:62:65: 0e:e2:f9:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMBK8V1hZt3bRekscl6MjzTP5lBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIzODQw N0U4MkQ1OTAeFw0yNTExMTMxNzM1NTRaFw0yNTExMTYxODI4NTRaMDMxMTAvBgNV BAMTKDRDQkM3QzMwQzNDNUYzQjI4MEQxRTdDNDY3MDEzOTQ3NDcwOTlBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp8Fy6Dvk1PaBh5zLc3lEgPOBw 3aDH1oH9uNR0VBhNlqRMFoc1lB0xlM+jLXuJCzF8UQQgAnKZ2X/t2WvZar+9tHeL pNrslr8Lw/FZTp6qjURG5KODrY3TTfqcyjDQqzyPKY1HOD5X+81k8dSEDlpWTvE+ 36xSp1U1mNOBd4NA4fu3MgteUdv9N6ZjjAoVfvQoqE1krAp/iDP5NbkAZRr0zzn2 VMibr6Ah/r5tRtD8yHNxO8xfnOG92+NQQx9SUvfV2q6OjJ7eS9TfJAk0LZSCEVh4 bqLZo9v58b5cgLKpjWzzArso0EzsNInXTUZCCoFRyYJgpwiV0QeZKdnCGfQlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTLx8MMPF87KA0efEZwE5R0cJmlYwHwYDVR0j BBgwFoAUNwOsQVTwWx5kLzHe9xojhAfoLVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTA5OWFkZi03ZTEyLTRlODMtOTVjMi1kZDdmNzc0OTQ3ODgvMC8zNzAzQUM0MTU0 RjA1QjFFNjQyRjMxREVGNzFBMjM4NDA3RTgyRDU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIzODQwN0U4 MkQ1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGEwOTlhZGYtN2UxMi00ZTgzLTk1 YzItZGQ3Zjc3NDk0Nzg4LzAvMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIz ODQwN0U4MkQ1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANF1a2fTwnxVb+A+h1Pw1qQHYOKE5YTuTHB4 cnt4C0c1Mn3wr0uqEoQrbuef+F+jnXQwe84XO6n68mMd/0lWPS4V7uEzgcjY51uk KfpBz5jyXqrv3eFZyXq+qHtilW5h2loaacI7V3mkXimg59Y/PU/z8OrxkDgz7NRb 2PmZj8Nxgu4zPa8RS8NX0SlhOUEPnFXdu4OOC8CxBOwvR42fBBl2mFQElNY+Vb4j ZKrN9/lEJfWkSk4QoJkZjdEvcAT/5IxCMlap9nZDieirPOuoqC8MuktE1i7mt+Kp 5lp7J1Ny6TKGHkQr2HE5oY28VCiEIrS4nACKu1WL1wtiZQ7i+TI= -----END CERTIFICATE-----Generated at Sat Nov 15 10:24:47 2025 by rpki-client