$ rpki-client -vvf repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft File: 3128E543B078826F9B4F23328CA84782DE7AAE6D.mft (raw, json) Hash identifier: ++y4q4zOkVZRou6VFYqMtD8wQwiiPwDodSR/dJn3Y6E= Subject key identifier: CB:BC:32:44:AA:2E:21:88:5A:EA:F5:A7:08:E1:AC:F4:87:6A:2A:13 Authority key identifier: 31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D Certificate issuer: /CN=3128E543B078826F9B4F23328CA84782DE7AAE6D Certificate serial: 6B1242951F811CC7374DD44FB407D0FCE3ACF163 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft Manifest number: 051F Signing time: Sun 02 Nov 2025 02:10:03 +0000 Manifest this update: Sun 02 Nov 2025 02:05:03 +0000 Manifest next update: Wed 05 Nov 2025 11:39:03 +0000 Files and hashes: 1: 3128E543B078826F9B4F23328CA84782DE7AAE6D.crl (hash: 6eckGhsJJmtgHKU2Sxk4IxX8fXtShZq0SJSbkHPS8b0=) 2: 3130332e3132342e3131322e302f32342d3234203d3e20313331313131.roa (hash: xMhopN6RhUrQr0UoQBGVj4pnpruAcIyICHzqvwrwDho=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 09:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:12:42:95:1f:81:1c:c7:37:4d:d4:4f:b4:07:d0:fc:e3:ac:f1:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3128E543B078826F9B4F23328CA84782DE7AAE6D Validity Not Before: Nov 2 02:05:03 2025 GMT Not After : Nov 5 11:39:03 2025 GMT Subject: CN=CBBC3244AA2E21885AEAF5A708E1ACF4876A2A13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8b:b3:d2:d5:3c:a4:c4:32:7b:be:99:37:8d: 2b:62:7f:b4:7e:35:bb:29:f1:7e:fc:c8:f8:90:c1: 7b:18:0b:4a:71:10:62:77:98:9e:9b:e7:2a:1e:3b: 0a:c3:86:82:4d:0f:fd:a6:12:29:2a:ca:f1:fc:82: 1d:2c:28:6c:76:ef:84:ed:8f:32:2e:ae:90:8c:b5: 51:25:43:74:fa:9a:a6:48:9a:e2:cf:fa:21:b9:88: 0d:51:5d:21:54:d2:10:60:4c:28:8e:3d:00:dd:49: a6:58:34:e2:5a:36:53:95:49:06:8b:ca:36:d8:7e: 38:67:b9:dd:26:15:7a:8f:9b:d7:a6:ba:0a:db:2e: 98:61:0b:fc:06:0a:4b:3a:67:58:9f:94:0d:67:65: 25:78:aa:89:5e:df:af:03:c1:18:09:d9:8a:67:1e: 60:66:06:dc:7d:12:6b:ee:b2:ba:4f:8a:ee:f9:73: 63:c8:b9:a0:63:71:8c:5b:98:60:7e:0d:e9:4c:2c: 8f:0f:76:62:46:ee:e9:d1:de:a3:15:0c:d1:ed:97: ad:0d:8d:70:5d:53:6e:19:17:46:8d:30:d3:62:ba: 64:2a:29:c0:cc:fe:14:47:16:b8:02:6d:4c:aa:9b: 03:59:a0:8e:bc:24:cf:b0:1e:74:58:dd:06:d3:bc: ac:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BC:32:44:AA:2E:21:88:5A:EA:F5:A7:08:E1:AC:F4:87:6A:2A:13 X509v3 Authority Key Identifier: keyid:31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:de:5c:87:22:4b:28:6d:c5:e6:19:16:f0:dd:af:7b:ee:de: 5a:f4:5f:6f:03:81:22:c9:75:c7:e7:42:e4:d6:40:00:51:3a: 36:5b:09:4f:33:63:c5:10:cb:b9:08:6e:ad:6d:97:40:f0:b4: d4:bb:cd:5f:70:97:d5:27:09:b5:b3:14:d9:ef:c9:59:af:c5: a1:98:2d:2b:80:4b:0c:1a:00:f9:ab:a8:7e:ff:45:fb:ad:90: 33:d6:d4:8e:8b:14:c9:61:3a:33:6a:35:73:fb:97:d7:24:e4: 40:a0:e8:b8:f9:04:d3:c6:de:75:2f:c3:b3:3d:6d:08:80:08: 29:9c:c2:b9:59:78:9a:fa:96:88:46:39:3d:30:83:e8:3a:99: f8:49:52:93:d1:7b:c2:f8:d9:7c:18:f8:83:dd:c3:1d:63:3f: e4:37:b6:bf:8c:f5:8b:3b:fe:98:1e:ac:e8:0d:88:71:39:4f: 29:00:95:94:5e:b8:cb:2c:62:f3:f2:36:94:ee:bd:0d:85:fb: e7:62:c5:3e:f0:ea:f3:60:46:2d:28:01:a2:3b:e1:f2:96:e0: e7:28:92:90:c7:8b:97:79:95:59:4b:9d:78:ed:bd:19:65:2a: 1f:bf:7b:f8:36:b3:c8:6f:9c:27:88:0a:33:ba:60:96:27:01: 16:37:b0:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaxJClR+BHMc3TdRPtAfQ/OOs8WMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3ODJE RTdBQUU2RDAeFw0yNTExMDIwMjA1MDNaFw0yNTExMDUxMTM5MDNaMDMxMTAvBgNV BAMTKENCQkMzMjQ0QUEyRTIxODg1QUVBRjVBNzA4RTFBQ0Y0ODc2QTJBMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxi7PS1TykxDJ7vpk3jStif7R+ Nbsp8X78yPiQwXsYC0pxEGJ3mJ6b5yoeOwrDhoJND/2mEikqyvH8gh0sKGx274Tt jzIurpCMtVElQ3T6mqZImuLP+iG5iA1RXSFU0hBgTCiOPQDdSaZYNOJaNlOVSQaL yjbYfjhnud0mFXqPm9emugrbLphhC/wGCks6Z1iflA1nZSV4qole368DwRgJ2Ypn HmBmBtx9EmvusrpPiu75c2PIuaBjcYxbmGB+DelMLI8PdmJG7unR3qMVDNHtl60N jXBdU24ZF0aNMNNiumQqKcDM/hRHFrgCbUyqmwNZoI68JM+wHnRY3QbTvKwRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy7wyRKouIYha6vWnCOGs9IdqKhMwHwYDVR0j BBgwFoAUMSjlQ7B4gm+bTyMyjKhHgt56rm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDdmOGY0NC0yNzdkLTQ1ZTEtYjIxMy0wNTExN2ZkZTNjYjAvMC8zMTI4RTU0M0Iw Nzg4MjZGOUI0RjIzMzI4Q0E4NDc4MkRFN0FBRTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3ODJERTdB QUU2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ3ZjhmNDQtMjc3ZC00NWUxLWIy MTMtMDUxMTdmZGUzY2IwLzAvMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3 ODJERTdBQUU2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLeXIciSyhtxeYZFvDdr3vu3lr0X28DgSLJ dcfnQuTWQABROjZbCU8zY8UQy7kIbq1tl0DwtNS7zV9wl9UnCbWzFNnvyVmvxaGY LSuASwwaAPmrqH7/RfutkDPW1I6LFMlhOjNqNXP7l9ck5ECg6Lj5BNPG3nUvw7M9 bQiACCmcwrlZeJr6lohGOT0wg+g6mfhJUpPRe8L42XwY+IPdwx1jP+Q3tr+M9Ys7 /pgerOgNiHE5TykAlZReuMssYvPyNpTuvQ2F++dixT7w6vNgRi0oAaI74fKW4Oco kpDHi5d5lVlLnXjtvRllKh+/e/g2s8hvnCeICjO6YJYnARY3sDQ= -----END CERTIFICATE-----Generated at Sun Nov 2 04:56:49 2025 by rpki-client