$ rpki-client -vvf repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft File: 3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft (raw, json) Hash identifier: +YpK0WGkQP62NPS3+F+4covTYHgxXDsmg+eOP2zTuQs= Subject key identifier: 1A:AC:95:28:3B:B7:6F:80:68:27:A6:FA:D9:DD:E9:12:FE:64:EB:8C Authority key identifier: 3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 Certificate issuer: /CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Certificate serial: 73AE5A741EF5B385BAA5C82F5C42B849350E4887 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer Subject info access: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft Manifest number: 023B Signing time: Tue 21 Oct 2025 08:42:03 +0000 Manifest this update: Tue 21 Oct 2025 08:37:03 +0000 Manifest next update: Fri 24 Oct 2025 16:32:03 +0000 Files and hashes: 1: 3132302e32392e3233302e302f32342d3234203d3e203338373634.roa (hash: 8F55uNQoN3zi97DtY0Vq2ak+DmYZUOFPxOyq8OUlCl0=) 2: 3132302e32392e3232382e302f32342d3234203d3e203139393035.roa (hash: qnWaLPQKCclL3KbhPyWf5fv4NRd/K4sQGvE8/3c+X3Y=) 3: 3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl (hash: OKO19EhbwjEe57jMdHUhrf25GLip2/alfEeVZ6pmMhQ=) 4: 3132302e32392e3232392e302f32342d3234203d3e203139393035.roa (hash: VUbT8SHEyKOKmASLTaMwWEhd8ggbwmzz2pEnc4bB2PQ=) 5: 3132302e32392e3232392e302f32342d3234203d3e203338373634.roa (hash: qDCFFlpgV3kLnT4aXYTKC6LV3pb8e9ELxOyK+x211n0=) 6: 3132302e32392e3232362e302f32342d3234203d3e203139393035.roa (hash: 3HF7GKrMWvA2HVJvaEA0TLWlABe/FvvXdYdd308g/bM=) 7: 3132302e32392e3233302e302f32342d3234203d3e203139393035.roa (hash: eJhmyhXXadCdmI4sMr9QqAto/qcSNuimAa2ijC8e73Y=) 8: 3132302e32392e3232382e302f32342d3234203d3e203338373634.roa (hash: RPYaZow5ZwQZRWzcXVmYwaCDDEvxoHSoWyb9lPO3JzQ=) 9: 3132302e32392e3232362e302f32342d3234203d3e203338373634.roa (hash: mysGAJlaNM3q0YL8uE3Xz1GWVqbaXG+zqdMdDsNe4Gc=) 10: 3132302e32392e3233312e302f32342d3234203d3e203338373634.roa (hash: 3zNl9QPxwFV4edQhVMCJxnLjianzmdRSes5SZUBTIJM=) 11: 3132302e32392e3232372e302f32342d3234203d3e203338373634.roa (hash: kizpm5pMXSzgoWrppvdtyhcaCD0lO2EdJCuHJxptLZU=) 12: 3132302e32392e3232352e302f32342d3234203d3e203338373634.roa (hash: iVloZrBIKi8lO+ez3IilhigHeiC4/XBak2SIy/5eYbE=) 13: 3132302e32392e3233312e302f32342d3234203d3e203139393035.roa (hash: r2yKO3KrSmkrfjQ84qnMxwLYCnCinVawrYAR52ueF/A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 08:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ae:5a:74:1e:f5:b3:85:ba:a5:c8:2f:5c:42:b8:49:35:0e:48:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Validity Not Before: Oct 21 08:37:03 2025 GMT Not After : Oct 24 16:32:03 2025 GMT Subject: CN=1AAC95283BB76F806827A6FAD9DDE912FE64EB8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:94:8f:55:e4:c8:6c:12:91:0b:ea:82:3c:c2: 78:db:30:90:24:7d:71:2a:18:47:9f:1b:86:de:8a: 4f:8f:7c:cd:97:3e:54:a8:a3:87:43:56:b6:33:2e: da:e1:6c:4b:14:83:2e:c0:75:e2:0a:58:a8:d1:ab: 7b:d0:60:80:01:0a:ad:71:2b:ef:57:c9:ec:77:a3: 7a:04:6e:dd:ef:e0:d4:d0:15:f6:80:c9:45:13:98: 58:7d:33:e1:9c:2a:c5:3d:d3:fb:29:2e:86:cc:13: 65:50:2c:30:05:e8:a0:99:9c:20:3d:50:ab:33:bd: ba:ac:f6:0d:10:d2:8c:06:f7:c3:64:3b:16:78:89: e0:d7:da:93:2b:1b:05:44:c8:74:ce:a6:52:fa:07: ae:7d:fc:81:eb:77:19:a4:80:c2:c5:83:0d:61:81: c0:7e:ff:e7:46:e5:c7:77:1f:4a:ac:47:6e:1e:9a: c3:fc:89:e5:41:1b:30:ae:0c:f7:74:e4:64:1a:c6: 28:9b:0e:a9:89:50:a4:b0:51:ed:1a:d8:d3:15:16: 3e:0a:75:74:08:b3:20:f6:9c:34:34:40:bb:bd:51: e4:b7:c8:84:17:1a:e6:f2:1c:8b:ae:20:23:14:c6: c2:4f:5e:ab:60:f9:dc:35:91:32:ed:c4:38:a7:4d: 4f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AC:95:28:3B:B7:6F:80:68:27:A6:FA:D9:DD:E9:12:FE:64:EB:8C X509v3 Authority Key Identifier: keyid:3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:29:d4:ae:dc:26:47:17:3d:cd:c8:fd:45:52:cc:21:aa:e1: 58:49:7f:59:77:0b:93:87:3b:6f:91:a0:53:a0:19:9b:c2:b6: 61:cc:c8:ec:bf:26:2b:d5:72:b2:d9:0c:7f:9c:d4:da:e2:75: c0:78:52:d4:4c:c2:7b:27:dd:1c:59:ae:65:e7:43:51:52:27: 72:c9:7f:cc:eb:39:a8:97:43:bd:ea:df:8a:eb:c5:b7:7c:ca: 97:a3:e7:2d:d8:6e:59:e3:aa:f3:c0:80:e6:1d:66:9b:11:a6: 37:34:59:a5:92:6d:da:a2:30:00:55:4f:50:cd:b1:75:e5:c7: a7:86:fc:e0:40:01:b7:42:14:2e:25:43:ba:92:16:b8:f3:e8: 57:b7:7e:3a:1b:93:51:c5:e1:10:49:8b:d6:01:57:c8:24:7b: 9b:14:d0:a1:b4:02:64:a8:6e:2d:9a:d6:97:57:a6:1d:84:b5: 97:2b:f4:82:03:4e:9c:89:47:02:a2:52:2b:e1:79:60:f3:58: 77:df:ca:b0:51:b1:83:29:30:a3:b1:4f:68:b1:90:5b:1d:22: 69:02:69:f4:1b:6c:ce:4b:c6:f8:3b:e2:70:bf:95:4c:e3:9f: b3:57:de:c7:05:7a:f8:eb:22:bd:b1:6d:eb:e0:4e:7f:58:ef: 3d:f7:ff:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc65adB71s4W6pcgvXEK4STUOSIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdB MzVCMDI1MTAeFw0yNTEwMjEwODM3MDNaFw0yNTEwMjQxNjMyMDNaMDMxMTAvBgNV BAMTKDFBQUM5NTI4M0JCNzZGODA2ODI3QTZGQUQ5RERFOTEyRkU2NEVCOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnlI9V5MhsEpEL6oI8wnjbMJAk fXEqGEefG4beik+PfM2XPlSoo4dDVrYzLtrhbEsUgy7AdeIKWKjRq3vQYIABCq1x K+9Xyex3o3oEbt3v4NTQFfaAyUUTmFh9M+GcKsU90/spLobME2VQLDAF6KCZnCA9 UKszvbqs9g0Q0owG98NkOxZ4ieDX2pMrGwVEyHTOplL6B659/IHrdxmkgMLFgw1h gcB+/+dG5cd3H0qsR24emsP8ieVBGzCuDPd05GQaxiibDqmJUKSwUe0a2NMVFj4K dXQIsyD2nDQ0QLu9UeS3yIQXGubyHIuuICMUxsJPXqtg+dw1kTLtxDinTU/TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGqyVKDu3b4BoJ6b62d3pEv5k64wwHwYDVR0j BBgwFoAUPmZijAPKuMbW/N7b4HAFV6NbAlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjFjOWNhZC1jM2I5LTQ1YTAtYmViNi1iY2U0OGUyYjIyNzIvMC8zRTY2NjI4QzAz Q0FCOEM2RDZGQ0RFREJFMDcwMDU1N0EzNUIwMjUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdBMzVC MDI1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjIxYzljYWQtYzNiOS00NWEwLWJl YjYtYmNlNDhlMmIyMjcyLzAvM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1 NTdBMzVCMDI1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsp1K7cJkcXPc3I/UVSzCGq4VhJf1l3C5OH O2+RoFOgGZvCtmHMyOy/JivVcrLZDH+c1NridcB4UtRMwnsn3RxZrmXnQ1FSJ3LJ f8zrOaiXQ73q34rrxbd8ypej5y3YblnjqvPAgOYdZpsRpjc0WaWSbdqiMABVT1DN sXXlx6eG/OBAAbdCFC4lQ7qSFrjz6Fe3fjobk1HF4RBJi9YBV8gke5sU0KG0AmSo bi2a1pdXph2EtZcr9IIDTpyJRwKiUivheWDzWHffyrBRsYMpMKOxT2ixkFsdImkC afQbbM5Lxvg74nC/lUzjn7NX3scFevjrIr2xbevgTn9Y7z33/wo= -----END CERTIFICATE-----Generated at Tue Oct 21 18:29:36 2025 by rpki-client