$ rpki-client -vvf repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft File: 3C3C868A5674B425FAE567426BCB238E23AE20AC.mft (raw, json) Hash identifier: HEUscbi6XbTMkxNVYxFxvFHxN80bA0Vtw4Yf18hkrQs= Subject key identifier: 4D:C8:21:8E:70:31:17:5B:97:7C:DE:25:54:B5:40:B1:10:91:15:97 Authority key identifier: 3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC Certificate issuer: /CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Certificate serial: 7FB011DEE6F05495CC01552522D4081125D24C82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft Manifest number: 0228 Signing time: Wed 05 Nov 2025 08:41:55 +0000 Manifest this update: Wed 05 Nov 2025 08:36:55 +0000 Manifest next update: Sat 08 Nov 2025 16:02:55 +0000 Files and hashes: 1: 3130332e3133352e302e302f32342d3234203d3e203338333230.roa (hash: ldrGJsy+/TLnpHhOovohV+mReZwkU+jIEX++pOvvnkI=) 2: 3C3C868A5674B425FAE567426BCB238E23AE20AC.crl (hash: F4gVJQJPA3UvVQjPejNwIp4vMjqzgv4g4xcSxSa6qUQ=) 3: 3130332e3133352e322e302f32342d3234203d3e203338333230.roa (hash: KZ/BrcpNlnq1GeOoeq+ujqu98XEmwwqQMF5ra78kfE0=) 4: 3130332e3133352e312e302f32342d3234203d3e203338333230.roa (hash: jxUYJQpEaP8bPhyLYtacTJc3csgAE9Hd2kaadYQz8QA=) 5: 3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (hash: 85V6qA8RHEszjBxF6yv2LBrZ9dlUnY8/+0ZLxd1aOzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 16:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b0:11:de:e6:f0:54:95:cc:01:55:25:22:d4:08:11:25:d2:4c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Validity Not Before: Nov 5 08:36:55 2025 GMT Not After : Nov 8 16:02:55 2025 GMT Subject: CN=4DC8218E7031175B977CDE2554B540B110911597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d1:8a:f0:4c:76:2b:5d:f5:c5:78:49:b5:2b: cc:6b:c5:3e:a8:d5:7e:47:90:aa:99:2f:34:10:f2: 85:f0:aa:32:67:7b:53:7e:bc:47:c5:5d:54:ed:94: db:0b:b5:bc:73:90:0e:62:cd:93:ff:a9:7c:b5:8c: 8b:2e:45:8c:15:ff:2c:d0:80:da:90:0c:f2:77:c4: f2:d1:bb:c5:5d:67:a9:e4:0c:8d:76:e0:9c:3a:ee: bb:36:2c:49:79:74:04:5d:5d:21:29:17:10:98:e1: 73:8f:10:b4:84:bc:2e:8f:09:7a:40:1e:86:5b:3e: 38:2b:88:fe:f6:aa:09:01:ec:d0:55:a2:75:da:9e: f8:35:21:77:ce:ac:d4:10:7a:45:a4:e6:bf:e6:91: b4:87:21:91:51:9f:da:22:1f:2d:e5:1d:28:5d:99: 47:4a:10:e2:27:b1:52:b0:ea:e0:0d:97:e9:84:fb: a9:9d:8a:f1:90:ef:60:25:61:c7:91:3f:84:92:df: 15:64:4f:d8:5a:fd:56:ef:d8:77:b8:bc:3c:43:a8: d9:0b:30:75:4c:85:3e:2d:8f:62:30:d7:dc:6d:46: 5b:cb:ad:92:b3:41:08:d0:e2:55:9b:64:ed:93:11: c5:b4:9b:cb:42:6c:9a:bb:58:13:02:5b:6d:55:0c: 3c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C8:21:8E:70:31:17:5B:97:7C:DE:25:54:B5:40:B1:10:91:15:97 X509v3 Authority Key Identifier: keyid:3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:92:a1:ed:39:eb:2d:33:9b:86:24:01:32:57:a3:46:f1:9c: c9:73:39:91:e4:bd:ab:d7:78:db:14:d7:ae:e5:1f:a5:98:cc: d0:84:35:40:9d:c2:fb:3e:b3:df:5c:a3:9e:43:81:44:b4:a0: 65:7e:23:5b:68:ee:cc:b6:7c:d5:ec:6a:3c:b8:04:6a:f6:bf: 3b:7d:fa:09:eb:a8:48:79:64:35:82:70:18:68:73:94:cd:50: 36:e5:d4:96:19:0a:ad:cb:1e:06:46:6c:95:f7:44:f3:47:76: b6:b9:09:f4:a9:8e:ba:be:b8:03:0f:22:38:6c:56:9a:01:ed: 99:a3:13:bd:4a:0f:a5:14:f6:75:f6:d0:a7:58:12:07:79:17: aa:7b:ea:f8:70:69:81:f0:22:da:01:ab:ea:d6:87:ab:4e:49: 73:81:50:96:88:7c:9c:9b:2c:d5:c0:68:6a:c3:31:ec:36:47: 0a:22:bc:78:bd:70:d8:1a:b8:e4:c1:2b:b4:b0:0c:df:4e:e9: ee:b8:fe:73:b2:c8:a7:33:cb:f1:94:b9:ee:8e:d8:02:53:76: b9:3c:c3:3f:cf:69:a6:d8:48:99:a6:b2:14:77:e9:a6:42:40: a2:59:8b:2c:4b:f7:04:c1:5f:2e:26:c9:1c:84:01:cc:a6:ed: 2d:02:70:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf7AR3ubwVJXMAVUlItQIESXSTIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUy M0FFMjBBQzAeFw0yNTExMDUwODM2NTVaFw0yNTExMDgxNjAyNTVaMDMxMTAvBgNV BAMTKDREQzgyMThFNzAzMTE3NUI5NzdDREUyNTU0QjU0MEIxMTA5MTE1OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi0YrwTHYrXfXFeEm1K8xrxT6o 1X5HkKqZLzQQ8oXwqjJne1N+vEfFXVTtlNsLtbxzkA5izZP/qXy1jIsuRYwV/yzQ gNqQDPJ3xPLRu8VdZ6nkDI124Jw67rs2LEl5dARdXSEpFxCY4XOPELSEvC6PCXpA HoZbPjgriP72qgkB7NBVonXanvg1IXfOrNQQekWk5r/mkbSHIZFRn9oiHy3lHShd mUdKEOInsVKw6uANl+mE+6mdivGQ72AlYceRP4SS3xVkT9ha/Vbv2He4vDxDqNkL MHVMhT4tj2Iw19xtRlvLrZKzQQjQ4lWbZO2TEcW0m8tCbJq7WBMCW21VDDwHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTcghjnAxF1uXfN4lVLVAsRCRFZcwHwYDVR0j BBgwFoAUPDyGilZ0tCX65WdCa8sjjiOuIKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Mjk5ZTZmMC1mMjNjLTQxZmYtYjY3Yy00MWFmMDUxMzM5ZDEvMC8zQzNDODY4QTU2 NzRCNDI1RkFFNTY3NDI2QkNCMjM4RTIzQUUyMEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUyM0FF MjBBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5OWU2ZjAtZjIzYy00MWZmLWI2 N2MtNDFhZjA1MTMzOWQxLzAvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIz OEUyM0FFMjBBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKSoe056y0zm4YkATJXo0bxnMlzOZHkvavX eNsU167lH6WYzNCENUCdwvs+s99co55DgUS0oGV+I1to7sy2fNXsajy4BGr2vzt9 +gnrqEh5ZDWCcBhoc5TNUDbl1JYZCq3LHgZGbJX3RPNHdra5CfSpjrq+uAMPIjhs VpoB7ZmjE71KD6UU9nX20KdYEgd5F6p76vhwaYHwItoBq+rWh6tOSXOBUJaIfJyb LNXAaGrDMew2RwoivHi9cNgauOTBK7SwDN9O6e64/nOyyKczy/GUue6O2AJTdrk8 wz/PaabYSJmmshR36aZCQKJZiyxL9wTBXy4myRyEAcym7S0CcL4= -----END CERTIFICATE-----Generated at Thu Nov 6 01:38:48 2025 by rpki-client