$ rpki-client -vvf repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft File: A3969B26389933D7D21F3A8D757CB9C5687740E4.mft (raw, json) Hash identifier: UGwQdQ91CgdrTHG+Rk815f/zbKO4gtYSTnIQHtPxc20= Subject key identifier: 73:EF:89:AB:BC:07:F1:00:C6:8C:E7:2F:A4:B5:D5:5D:A5:E7:8A:F9 Authority key identifier: A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 Certificate issuer: /CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Certificate serial: 0BCC6A9504C33D2BEBCF0EF1BE951D475CCD625C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft Manifest number: 0234 Signing time: Sat 15 Nov 2025 22:50:03 +0000 Manifest this update: Sat 15 Nov 2025 22:45:03 +0000 Manifest next update: Wed 19 Nov 2025 08:17:03 +0000 Files and hashes: 1: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: 4MEAYppP3Kf6rajqc79fnAA8c3MS4YwlbMABho8ytVM=) 2: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: NSGM9TUDBLgn7kcSNJpmMZxpHG9VLSqJuwmSL+bAMEQ=) 3: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: wVefZUkFDr2RBqD4UPWhwrEjzDTX8ZVDe5YAYTdiEdo=) 4: A3969B26389933D7D21F3A8D757CB9C5687740E4.crl (hash: Pp9TQsvnL2Fg6fRsAgzXY4GEMKUbnoFVv8WZ6aUy3Q0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Nov 2025 08:17:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:cc:6a:95:04:c3:3d:2b:eb:cf:0e:f1:be:95:1d:47:5c:cd:62:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Validity Not Before: Nov 15 22:45:03 2025 GMT Not After : Nov 19 08:17:03 2025 GMT Subject: CN=73EF89ABBC07F100C68CE72FA4B5D55DA5E78AF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ce:4f:64:56:b5:7a:ba:ae:b0:5f:c6:e0:2a: 19:a1:c1:2c:11:95:50:22:77:d5:66:6f:e3:57:d3: 38:6d:89:0a:70:84:36:a1:49:47:f1:1d:85:e3:11: 51:2e:b1:7a:0a:ba:9a:d6:08:3b:6e:a2:88:ee:1f: 7a:8b:63:bb:37:1a:01:9c:32:cd:5a:ff:78:67:76: 07:d2:b3:86:ff:af:03:0f:cf:95:43:af:29:09:d0: 53:4a:4b:7b:1b:2c:87:84:20:7c:85:a2:46:ae:a5: 03:dd:ae:a9:c7:1f:76:12:e5:4e:e9:82:49:11:e8: d3:e7:f7:05:ed:32:bd:6c:c2:34:7f:d9:27:4d:f8: 1a:37:29:37:c8:b7:1a:30:61:63:fd:9d:a0:5f:cf: 15:fe:d9:04:b7:a9:2c:56:8f:65:4e:c2:aa:1b:b4: fc:12:50:fb:c5:93:fd:48:16:0a:aa:d3:e7:c0:c3: c4:4e:fc:77:dd:cb:1a:e5:3f:40:60:8a:a1:36:cd: 20:d6:69:07:89:35:03:65:fa:88:e0:47:db:46:6a: b7:fd:27:f5:2d:74:e0:21:ce:14:84:d3:4f:e7:d5: 79:f0:00:90:94:48:6e:bb:24:1b:95:ec:51:86:9b: 08:d9:a6:e4:6b:63:31:94:bc:b6:72:60:3f:40:f7: c6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:EF:89:AB:BC:07:F1:00:C6:8C:E7:2F:A4:B5:D5:5D:A5:E7:8A:F9 X509v3 Authority Key Identifier: keyid:A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:2f:57:63:18:a0:f3:f1:23:bb:c4:e9:40:bb:be:82:b8:89: f2:3a:08:c4:7a:1a:9b:8e:10:90:be:2a:4d:57:0c:76:46:fb: b2:43:83:a9:54:16:89:fa:7b:69:ad:50:c4:47:61:ea:63:d8: 60:2d:28:2a:cb:21:55:cb:e5:dc:1a:65:f5:6a:72:0b:88:16: c8:5e:79:22:4d:f3:d9:12:30:64:f0:b3:ce:d7:cb:66:19:5c: 7a:9e:84:72:d0:a6:33:67:57:e7:3e:62:fe:47:23:3d:67:41: 56:f2:0c:0d:9e:b0:2b:14:2a:de:54:0b:fd:eb:82:9b:0e:49: f9:b5:e8:35:24:9d:87:27:20:e1:6e:98:da:3d:f2:a9:62:15: ce:29:25:5a:6e:11:a1:45:90:20:bf:69:06:e4:04:82:f3:2a: 4f:fb:bd:9d:c5:bc:e7:af:24:c0:d0:20:b3:9e:79:ba:83:27: 18:c4:92:d5:a7:21:41:8e:13:37:47:b2:1d:f1:b5:69:38:88: 7c:ef:e1:4d:54:b4:65:b1:c3:3b:93:c5:a5:24:ed:c0:19:3a: 69:d6:36:70:ae:31:92:11:ec:b0:1d:d3:74:b0:d1:45:f2:a7: a7:4a:2a:5c:79:89:cb:1b:53:9d:43:91:11:16:ac:c9:3a:12: 1b:fb:10:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC8xqlQTDPSvrzw7xvpUdR1zNYlwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2 ODc3NDBFNDAeFw0yNTExMTUyMjQ1MDNaFw0yNTExMTkwODE3MDNaMDMxMTAvBgNV BAMTKDczRUY4OUFCQkMwN0YxMDBDNjhDRTcyRkE0QjVENTVEQTVFNzhBRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxzk9kVrV6uq6wX8bgKhmhwSwR lVAid9Vmb+NX0zhtiQpwhDahSUfxHYXjEVEusXoKuprWCDtuoojuH3qLY7s3GgGc Ms1a/3hndgfSs4b/rwMPz5VDrykJ0FNKS3sbLIeEIHyFokaupQPdrqnHH3YS5U7p gkkR6NPn9wXtMr1swjR/2SdN+Bo3KTfItxowYWP9naBfzxX+2QS3qSxWj2VOwqob tPwSUPvFk/1IFgqq0+fAw8RO/HfdyxrlP0BgiqE2zSDWaQeJNQNl+ojgR9tGarf9 J/UtdOAhzhSE00/n1XnwAJCUSG67JBuV7FGGmwjZpuRrYzGUvLZyYD9A98abAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc++Jq7wH8QDGjOcvpLXVXaXnivkwHwYDVR0j BBgwFoAUo5abJjiZM9fSHzqNdXy5xWh3QOQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDMzMzZmOC1lNTQ2LTQ2MmMtODQxMC1iNzczMmI2YzgwMTUvMC9BMzk2OUIyNjM4 OTkzM0Q3RDIxRjNBOEQ3NTdDQjlDNTY4Nzc0MEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2ODc3 NDBFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzMzM2ZjgtZTU0Ni00NjJjLTg0 MTAtYjc3MzJiNmM4MDE1LzAvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5 QzU2ODc3NDBFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMvV2MYoPPxI7vE6UC7voK4ifI6CMR6GpuO EJC+Kk1XDHZG+7JDg6lUFon6e2mtUMRHYepj2GAtKCrLIVXL5dwaZfVqcguIFshe eSJN89kSMGTws87Xy2YZXHqehHLQpjNnV+c+Yv5HIz1nQVbyDA2esCsUKt5UC/3r gpsOSfm16DUknYcnIOFumNo98qliFc4pJVpuEaFFkCC/aQbkBILzKk/7vZ3FvOev JMDQILOeebqDJxjEktWnIUGOEzdHsh3xtWk4iHzv4U1UtGWxwzuTxaUk7cAZOmnW NnCuMZIR7LAd03Sw0UXyp6dKKlx5icsbU51DkREWrMk6Ehv7EBY= -----END CERTIFICATE-----Generated at Mon Nov 17 12:01:51 2025 by rpki-client