$ rpki-client -vvf repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft File: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft (raw, json) Hash identifier: mn0gZOCYFANsZCYrz53hps4os9g44fhcvZ1LYpn40Qo= Subject key identifier: D3:45:31:A2:C8:4B:8C:66:87:D6:77:74:2E:4F:C5:38:21:A3:72:B7 Authority key identifier: 32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA Certificate issuer: /CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Certificate serial: 320038AE8CFE514B20E4356E0600888ED70C61F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft Manifest number: 0113 Signing time: Mon 03 Nov 2025 03:21:58 +0000 Manifest this update: Mon 03 Nov 2025 03:16:58 +0000 Manifest next update: Thu 06 Nov 2025 12:58:58 +0000 Files and hashes: 1: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl (hash: XY5KCKTKWIvQyEehbi0i4HYztvS0vcAx4LK5V8ek8Jw=) 2: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: BKEcpM9Kg8YYx8TIl17vcpfRH/iW4wyrIws7bh1p6GE=) 3: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: OPMqecBKKIwGMsBY4Yx/lNhDxmjNFnVBd5dNPmXkTCQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 12:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:00:38:ae:8c:fe:51:4b:20:e4:35:6e:06:00:88:8e:d7:0c:61:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Validity Not Before: Nov 3 03:16:58 2025 GMT Not After : Nov 6 12:58:58 2025 GMT Subject: CN=D34531A2C84B8C6687D677742E4FC53821A372B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:08:f9:13:39:bc:b8:95:e1:71:20:d3:0b:7b: 26:b9:3c:2d:98:48:55:b9:89:c4:03:35:c0:86:24: 95:f1:7d:e4:b7:35:97:51:08:ee:ae:6d:40:b7:65: ff:2a:90:52:e3:eb:0e:3a:a0:49:32:c8:b5:21:ae: c2:64:4f:df:f9:d9:c1:a2:7b:19:f1:c1:05:0d:3b: 43:c9:0d:af:9b:e0:b2:64:a2:e8:70:d1:02:c5:9c: bf:0b:4f:4d:cd:23:1d:f4:03:4a:40:8d:62:c4:9f: e5:75:07:6a:e7:a1:61:d1:16:c9:9b:1e:85:67:a4: 5c:e6:85:02:c6:be:0c:a8:c6:07:60:72:18:d4:58: 31:61:f1:ee:b6:24:d0:18:25:6b:d5:d0:81:91:48: d3:1b:56:a0:39:b8:da:c1:e5:ee:4e:8e:26:07:f2: 67:b8:1e:a1:da:18:b0:1c:10:4d:5c:02:5d:83:fa: 62:6f:d9:bd:35:7a:b9:5a:6e:f1:f8:f0:2e:5c:0d: ce:b3:bc:cb:5d:3e:4a:8a:a6:e3:2e:1f:bf:67:f4: 45:94:99:1b:99:da:16:2c:fb:35:70:f0:17:8f:35: 3f:ff:40:b0:6d:e4:7b:41:d1:a5:e9:66:25:25:76: 9f:f7:bb:c7:6f:77:a9:60:9c:b8:82:cf:39:9f:4b: ca:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:45:31:A2:C8:4B:8C:66:87:D6:77:74:2E:4F:C5:38:21:A3:72:B7 X509v3 Authority Key Identifier: keyid:32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f7:fb:5e:a4:66:1a:76:9c:28:a3:4c:59:9b:33:a3:fb:5f: 2b:9e:8b:ae:41:1d:84:9a:63:39:36:3d:58:94:f5:66:08:0c: fb:3c:83:07:56:c5:51:ce:1c:b5:76:61:e1:62:1d:58:50:66: 86:25:5b:3e:1a:75:ca:56:e9:51:d6:de:54:c3:9e:3d:4a:50: cf:f3:90:a7:aa:3a:17:0a:5e:a5:a1:1e:07:8f:9b:17:ac:e4: 44:4c:c9:06:00:b9:30:11:73:4b:07:18:8c:30:00:22:4f:23: ff:88:6e:e6:9e:a0:f2:2d:f6:60:eb:d6:33:fa:bb:2d:2a:37: 05:18:c5:48:d3:69:5b:cb:54:29:1d:e1:b7:d8:8d:39:b3:81: f7:cf:7e:62:5b:bc:d8:73:c2:9a:74:d5:05:3b:f4:70:37:33: ae:1b:21:50:10:40:7b:a1:aa:91:3e:73:23:5a:c5:34:80:86: f7:4e:f3:a6:ad:59:1a:80:00:aa:ef:ad:c4:95:d2:4d:6f:eb: 24:3d:9f:a3:6b:cd:10:1f:5c:39:b2:ec:c5:91:f6:27:59:a6: 42:f5:7c:d5:52:2a:13:99:f2:48:ab:72:3a:0f:8f:50:9c:f2: 20:c8:b0:d7:a2:dc:ac:a1:70:7f:0c:7b:ff:37:8d:48:14:98: 29:21:c6:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMgA4roz+UUsg5DVuBgCIjtcMYfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0 ODRCM0ZEQTAeFw0yNTExMDMwMzE2NThaFw0yNTExMDYxMjU4NThaMDMxMTAvBgNV BAMTKEQzNDUzMUEyQzg0QjhDNjY4N0Q2Nzc3NDJFNEZDNTM4MjFBMzcyQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiCPkTOby4leFxINMLeya5PC2Y SFW5icQDNcCGJJXxfeS3NZdRCO6ubUC3Zf8qkFLj6w46oEkyyLUhrsJkT9/52cGi exnxwQUNO0PJDa+b4LJkouhw0QLFnL8LT03NIx30A0pAjWLEn+V1B2rnoWHRFsmb HoVnpFzmhQLGvgyoxgdgchjUWDFh8e62JNAYJWvV0IGRSNMbVqA5uNrB5e5OjiYH 8me4HqHaGLAcEE1cAl2D+mJv2b01erlabvH48C5cDc6zvMtdPkqKpuMuH79n9EWU mRuZ2hYs+zVw8BePNT//QLBt5HtB0aXpZiUldp/3u8dvd6lgnLiCzzmfS8qdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU00UxoshLjGaH1nd0Lk/FOCGjcrcwHwYDVR0j BBgwFoAUMkHYk3H/PTr8C6kR4xaoJUhLP9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGMwNzQ0MS1jZDlkLTRkODUtYWFiNC02NWY1ZGQ0ZWQ3ZTAvMC8zMjQxRDg5Mzcx RkYzRDNBRkMwQkE5MTFFMzE2QTgyNTQ4NEIzRkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0ODRC M0ZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhjMDc0NDEtY2Q5ZC00ZDg1LWFh YjQtNjVmNWRkNGVkN2UwLzAvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4 MjU0ODRCM0ZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFz3+16kZhp2nCijTFmbM6P7Xyuei65BHYSa Yzk2PViU9WYIDPs8gwdWxVHOHLV2YeFiHVhQZoYlWz4adcpW6VHW3lTDnj1KUM/z kKeqOhcKXqWhHgePmxes5ERMyQYAuTARc0sHGIwwACJPI/+IbuaeoPIt9mDr1jP6 uy0qNwUYxUjTaVvLVCkd4bfYjTmzgffPfmJbvNhzwpp01QU79HA3M64bIVAQQHuh qpE+cyNaxTSAhvdO86atWRqAAKrvrcSV0k1v6yQ9n6NrzRAfXDmy7MWR9idZpkL1 fNVSKhOZ8kircjoPj1Cc8iDIsNei3KyhcH8Me/83jUgUmCkhxqw= -----END CERTIFICATE-----Generated at Tue Nov 4 04:03:47 2025 by rpki-client